$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json) Hash identifier: +M6PpjNnFVIu0YUw4QAmEqAUW0mvmhELg5K0JRFMoXI= Subject key identifier: B5:D3:35:9A:01:D4:5C:C3:E8:3E:87:E2:D7:B1:A9:AF:D5:06:3B:99 Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Certificate serial: 0BB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft Manifest number: 0B93 Signing time: Thu 24 Apr 2025 18:55:50 +0000 Manifest this update: Thu 24 Apr 2025 18:55:49 +0000 Manifest next update: Thu 01 May 2025 18:55:49 +0000 Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: 2+nq/xvJjMu9Wef5JUEkHa6Ak8fmxZGu9mVIY+ImW1A=) 2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: PsugJWGM5ONkTT/QKBNZcGT+Fx1Ca8/gO0JC72FJj/U=) 3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: DqyU+6nXvs6HOFMKI16Emo+flYs9ktEh2tA31OF4Cw4=) 4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: re/IaJHi711uC7kt/qe355ZQkGdlvPCAcW6M1Vv6a/M=) 5: 4CC6B77C0A9111EEB13EAF44C4F9AE02.roa (hash: PDvCAZx5hVOPcyfQ4LwOi2hSUYUbvW/tgd4X2jQj+2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2999 (0xbb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Validity Not Before: Apr 24 18:55:49 2025 GMT Not After : May 1 18:55:49 2025 GMT Subject: CN=680a8936-5bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:d1:a0:63:d7:64:b6:39:c1:f7:99:b6:b0: 15:42:5d:b9:8e:c8:ed:bb:93:ee:c4:a1:77:64:3c: af:5f:f5:f8:df:95:db:1f:79:5b:2a:42:07:f3:fa: ec:b5:a3:b0:06:d3:b6:03:99:d7:ac:1b:f7:f6:f6: de:89:7f:35:df:c4:23:5e:4b:59:ad:7d:2d:26:92: ea:83:a5:cb:9d:f4:b1:1a:e0:2f:7b:10:93:5c:de: f6:03:29:ad:76:8a:5d:b3:45:d9:1f:cf:86:5c:af: 24:a0:60:e6:cf:08:38:45:4f:2a:16:26:30:d3:be: 8a:b3:f9:7b:e9:0e:ec:de:32:23:e7:c9:c2:79:a7: b9:ea:96:39:54:36:9b:d1:a6:e1:e8:f5:1d:70:c9: 5e:90:8f:df:0c:0d:33:ee:81:8b:08:4c:b6:e4:bb: 3d:79:7b:9f:bc:64:d0:e4:50:02:cb:c9:03:d6:91: a6:db:cb:c6:fa:7e:79:67:85:f7:18:7c:7d:da:66: f6:a5:02:c0:b7:6a:7d:fb:84:30:49:60:57:2b:af: f6:d5:ce:d1:b5:75:11:71:33:3e:38:b5:0c:56:9a: f2:48:32:1f:19:ef:b7:55:16:55:18:df:f0:f9:2a: e9:f3:ee:5c:e2:d8:7f:b6:a6:bf:fe:67:79:a1:53: d0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D3:35:9A:01:D4:5C:C3:E8:3E:87:E2:D7:B1:A9:AF:D5:06:3B:99 X509v3 Authority Key Identifier: keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6b:68:b3:c0:d3:0d:7e:dc:fa:ab:22:54:bd:39:f0:c5:c1: be:5c:01:79:0b:42:52:af:bc:47:c2:5f:42:80:ab:81:99:66: c7:e2:f2:1a:a5:60:d8:56:08:6e:ee:72:d1:2e:83:d1:5b:0c: 38:1f:52:65:73:fb:18:3b:68:87:76:bf:c0:b4:aa:66:45:74: b1:57:32:f1:7b:5e:ce:6e:1a:84:27:e3:2f:34:79:ff:91:36: e1:36:28:94:6d:b9:71:f2:46:6e:bf:ed:a8:b3:52:0f:bb:e3: 0f:b2:13:2d:97:58:7d:03:fe:bc:f0:7a:93:10:77:99:33:a5: d9:9d:42:ad:38:af:65:1d:d0:f0:45:27:81:1a:a3:a0:9a:1d: d2:c7:fd:7a:9c:07:de:45:48:cd:5f:f6:a8:68:f7:1a:4b:1d: 34:f8:42:f4:72:bd:b1:c5:27:49:1f:a0:02:7d:91:1b:96:39: 1a:17:4c:16:97:13:9d:27:37:ea:d0:c2:fa:1d:b2:7c:b3:de: ed:cb:06:7d:43:25:41:9b:1e:1d:0b:91:d4:28:ef:07:7e:c0: 67:b7:d1:18:6f:fe:a6:7e:b2:a8:54:14:7d:fd:59:bf:9a:a3: a6:26:0d:75:ec:be:e4:06:9a:c8:02:05:12:d4:f2:90:3e:60: a3:f9:a3:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD QTE2RDlDRDUwHhcNMjUwNDI0MTg1NTQ5WhcNMjUwNTAxMTg1NTQ5WjAYMRYwFAYD VQQDEw02ODBhODkzNi01YmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MnRoGPXZLY5wfeZtrAVQl25jsjtu5PuxKF3ZDyvX/X435XbH3lbKkIH8/rs taOwBtO2A5nXrBv39vbeiX8138QjXktZrX0tJpLqg6XLnfSxGuAvexCTXN72Aymt dopds0XZH8+GXK8koGDmzwg4RU8qFiYw076Ks/l76Q7s3jIj58nCeae56pY5VDab 0abh6PUdcMlekI/fDA0z7oGLCEy25Ls9eXufvGTQ5FACy8kD1pGm28vG+n55Z4X3 GHx92mb2pQLAt2p9+4QwSWBXK6/21c7RtXURcTM+OLUMVprySDIfGe+3VRZVGN/w +Srp8+5c4th/tqa//md5oVPQNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXTNZoB 1FzD6D6H4texqa/VBjuZMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2 MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs cTAtYjlOcFN0dFhLRnRuTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALa2izwNMNftz6qyJUvTnwxcG+XAF5C0JSr7xHwl9CgKuBmWbH4vIa pWDYVghu7nLRLoPRWww4H1Jlc/sYO2iHdr/AtKpmRXSxVzLxe17ObhqEJ+MvNHn/ kTbhNiiUbblx8kZuv+2os1IPu+MPshMtl1h9A/688HqTEHeZM6XZnUKtOK9lHdDw RSeBGqOgmh3Sx/16nAfeRUjNX/aoaPcaSx00+EL0cr2xxSdJH6ACfZEbljkaF0wW lxOdJzfq0ML6HbJ8s97tywZ9QyVBmx4dC5HUKO8HfsBnt9EYb/6mfrKoVBR9/Vm/ mqOmJg117L7kBprIAgUS1PKQPmCj+aOx -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:30 2025 by rpki-client