$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json) Hash identifier: 5mUYyjyH7fdZXuqsW0NO2KvA6ZXbWQ6nRMFcn1Ae1Lo= Subject key identifier: FF:70:18:45:4F:7D:A0:D9:5A:3B:5F:38:C9:C2:E5:C6:16:38:B0:33 Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft Manifest number: 017A Signing time: Fri 25 Apr 2025 02:52:45 +0000 Manifest this update: Fri 25 Apr 2025 02:52:44 +0000 Manifest next update: Fri 02 May 2025 02:52:44 +0000 Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: XtPapESxKNY6rsFF0VVPQ5ENI5ee7Xdc5X+049NCW/U=) 2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: 5VwQvP2fVpjZvZxgLpSBhfWvfSymTIgG5SpcIoI9Jnk=) 3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: OJOp4QsqdIdHyogZJwwwl2CA1RHQVKJeYLhatS2OCss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Validity Not Before: Apr 25 02:52:44 2025 GMT Not After : May 2 02:52:44 2025 GMT Subject: CN=680af8fd-ba61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:94:15:3b:5e:b4:6f:e9:f7:e4:2e:30:5b: 7a:21:25:ed:aa:6a:4b:df:ad:87:d6:e9:e3:62:81: 6d:7e:bf:fa:82:bf:03:85:a3:50:9d:09:b8:12:07: e3:27:79:0b:f3:19:51:a5:39:31:93:cf:a7:f1:7c: c7:dc:2f:2e:e8:3c:57:f1:ac:cd:48:e7:97:01:47: 83:e1:74:dd:75:1b:56:50:7d:e6:45:c9:93:e4:99: c8:26:5b:93:50:db:9d:50:61:bf:a2:4d:0e:2d:d1: 4a:8f:98:55:26:0f:83:21:c7:19:0a:82:b2:48:5b: b2:ba:70:50:c0:22:91:c7:ca:47:b4:79:43:80:07: 8b:1b:01:a5:e9:aa:2e:ce:42:29:cc:36:36:8d:58: 0d:01:5b:20:29:6f:13:f9:16:36:66:4f:d9:c8:19: 89:07:74:52:a2:9e:df:eb:aa:6e:8b:4c:7b:c2:99: 31:6f:bc:11:6b:e8:1f:5b:ff:3a:5e:65:08:30:f8: 42:63:e1:5d:7a:2a:c7:1a:3f:fa:92:88:09:f7:86: e1:a8:74:9e:98:8e:f3:87:53:a6:19:25:47:85:ef: 13:ac:63:b8:53:6a:da:93:36:08:56:f9:c4:2e:1c: b4:84:79:bc:80:a5:8a:62:22:84:3f:8c:94:e6:c2: e5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:70:18:45:4F:7D:A0:D9:5A:3B:5F:38:C9:C2:E5:C6:16:38:B0:33 X509v3 Authority Key Identifier: keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:8f:85:c7:71:8b:cc:40:79:f8:73:fc:fa:8a:66:7b:71:5b: 11:3f:44:3b:4d:d2:9e:fa:f8:dd:9c:1a:b8:df:47:04:7c:9d: 9e:3b:02:07:fd:61:df:b9:29:cb:f7:c3:cd:3f:9f:78:4e:00: bd:b6:34:38:9d:2c:d4:10:11:24:07:23:a0:89:53:91:b8:54: ff:e9:c5:78:bc:38:72:22:20:ea:f6:8d:9b:49:06:9c:4a:5d: 9d:f3:0f:b4:59:1d:28:1e:8c:a8:bb:c2:6e:16:5f:97:26:13: c2:79:6b:1a:bf:b5:d5:3d:c9:6c:c7:dc:1c:8d:e9:92:d8:4f: 90:5f:5f:2f:15:38:4d:92:d2:b7:f0:9a:80:af:0e:d5:e9:02: ce:8b:b5:ba:4a:80:4d:13:08:a6:53:c6:81:2b:53:64:9e:95: 46:02:cb:6f:75:b3:0d:c0:0c:09:91:fa:57:ff:d5:c4:a8:30: fd:a7:b1:af:84:b9:55:92:d2:63:95:10:a6:ae:3f:6f:92:a5: a5:22:93:4b:7d:9c:6a:fe:cf:25:40:c2:61:08:0f:4b:8b:86: 86:0a:03:bc:25:83:ed:87:2e:c3:15:35:a1:bc:da:6c:e1:6f: 20:91:ff:8b:97:b4:89:d0:3e:8d:30:5f:92:ed:48:6f:c3:77: 24:b1:55:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZCN0MxMTAvBgNVBAUTKDA0RjA3NEEwQkE4NzgwNUM1MEZDNzk5M0Q0MDQxMEI4 NEExMUQyRjYwHhcNMjUwNDI1MDI1MjQ0WhcNMjUwNTAyMDI1MjQ0WjAYMRYwFAYD VQQDEw02ODBhZjhmZC1iYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRGUFTtetG/p9+QuMFt6ISXtqmpL362H1unjYoFtfr/6gr8DhaNQnQm4Egfj J3kL8xlRpTkxk8+n8XzH3C8u6DxX8azNSOeXAUeD4XTddRtWUH3mRcmT5JnIJluT UNudUGG/ok0OLdFKj5hVJg+DIccZCoKySFuyunBQwCKRx8pHtHlDgAeLGwGl6aou zkIpzDY2jVgNAVsgKW8T+RY2Zk/ZyBmJB3RSop7f66pui0x7wpkxb7wRa+gfW/86 XmUIMPhCY+FdeirHGj/6kogJ94bhqHSemI7zh1OmGSVHhe8TrGO4U2rakzYIVvnE Lhy0hHm8gKWKYiKEP4yU5sLljQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9wGEVP faDZWjtfOMnC5cYWOLAzMB8GA1UdIwQYMBaAFATwdKC6h4BcUPx5k9QEELhKEdL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkI3Qy81MUE5NDQ1QURG ODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdGeFFfSG1UMUFRUXVFb1Iw dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQQjBvTHFIZ0Z4UV9IbVQxQVFRdUVvUjB2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkI3Qy81MUE5NDQ1QURGODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdG eFFfSG1UMUFRUXVFb1IwdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBj4XHcYvMQHn4c/z6imZ7cVsRP0Q7TdKe+vjdnBq430cEfJ2eOwIH /WHfuSnL98PNP594TgC9tjQ4nSzUEBEkByOgiVORuFT/6cV4vDhyIiDq9o2bSQac Sl2d8w+0WR0oHoyou8JuFl+XJhPCeWsav7XVPclsx9wcjemS2E+QX18vFThNktK3 8JqArw7V6QLOi7W6SoBNEwimU8aBK1NknpVGAstvdbMNwAwJkfpX/9XEqDD9p7Gv hLlVktJjlRCmrj9vkqWlIpNLfZxq/s8lQMJhCA9Li4aGCgO8JYPthy7DFTWhvNps 4W8gkf+Ll7SJ0D6NMF+S7Uhvw3cksVWD -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:26 2025 by rpki-client