$ rpki-client -vvf rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft File: B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft (raw, json) Hash identifier: YYSu0zapI/XxUF+af2j8fArqfnBPfIMXQRlFil/h3FU= Subject key identifier: CC:F3:E8:D9:36:0D:3D:75:DF:4C:05:05:AF:A4:E3:6F:7F:D7:35:0A Authority key identifier: 07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74 Certificate issuer: /CN=A91276F9/serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374 Certificate serial: 14BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft Manifest number: 14BB Signing time: Thu 24 Apr 2025 16:51:36 +0000 Manifest this update: Thu 24 Apr 2025 16:51:36 +0000 Manifest next update: Thu 01 May 2025 16:51:36 +0000 Files and hashes: 1: B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl (hash: MrXqdYGXlyUSHmB4BtMyeo22ArGtlUB0ZecZlt4XTOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5308 (0x14bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276F9, serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374 Validity Not Before: Apr 24 16:51:36 2025 GMT Not After : May 1 16:51:36 2025 GMT Subject: CN=680a6c18-6504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:9b:88:30:58:73:93:9b:a0:94:8e:ee:11: 69:06:57:1c:fe:94:46:a0:c8:18:0d:7a:3f:13:d3: fd:bd:e2:da:7e:33:98:71:2f:48:22:82:ca:3d:78: 69:0c:0d:f6:c2:1f:ea:df:8c:02:3d:cc:7b:95:16: 4d:e5:4c:f3:8b:70:3e:f6:bc:dc:f6:d7:21:16:e7: 22:69:a2:38:2c:cf:16:0e:86:97:5f:21:3f:f2:10: 3a:e4:fd:20:44:eb:66:b0:9c:8b:a1:51:65:2e:1b: 59:77:ef:ea:44:e0:d0:7c:a0:26:3f:ad:83:cf:8b: 59:7b:72:c6:8a:1a:7e:64:a8:06:82:27:10:34:98: ef:20:88:ac:3a:dd:5e:cc:f0:9f:ac:e1:dc:b2:3b: 13:66:c7:11:70:6e:71:ba:7a:69:97:d5:1c:41:cf: 0e:91:73:56:5c:ee:8b:11:58:86:2a:42:d4:54:cd: 2e:36:23:92:1c:13:99:31:db:bd:1b:27:95:77:82: f3:96:87:ef:5c:5e:1a:d1:c9:46:d4:3e:bf:2e:04: 68:b6:46:2a:1e:d6:0f:6f:e5:52:dc:c5:83:88:fe: 9a:31:2f:ad:b4:12:76:32:d2:45:99:90:2f:f7:b7: de:e9:79:b9:1f:76:00:ea:39:7d:49:ab:5c:54:90: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F3:E8:D9:36:0D:3D:75:DF:4C:05:05:AF:A4:E3:6F:7F:D7:35:0A X509v3 Authority Key Identifier: keyid:07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d7:74:4c:f7:d5:7e:4d:8a:a3:73:4a:87:9e:fb:fc:fd:c1: e0:5a:c7:9e:7a:58:1d:19:66:01:da:a6:fc:bf:fa:79:da:d0: e3:4e:f7:3f:4f:56:09:cf:9a:a8:c9:32:e3:44:9f:74:2e:04: fd:15:39:e3:6c:8c:80:91:98:9e:09:84:77:51:0d:c3:7e:33: ae:f5:98:88:e2:98:80:1e:b6:f9:f7:84:dd:be:50:bf:ec:2c: e2:c5:b2:3b:fa:1a:89:fd:d8:67:09:1c:f5:da:62:82:00:f1: 43:89:cb:c4:05:65:61:1d:66:63:2e:4b:5e:c8:d0:fd:ea:22: 61:72:15:8a:6c:bc:37:a4:9d:b0:0e:b8:d0:28:f3:89:af:29: c6:c4:5d:f8:38:0c:f0:bd:38:e5:60:95:d0:dd:61:25:c4:28: ca:12:e8:0c:73:74:52:4b:96:0e:75:ab:01:ea:37:47:3a:63: d2:55:ac:a6:ce:78:17:7d:b7:62:12:39:9a:e1:6a:e7:35:ae: ba:a9:d6:37:9d:72:d4:73:ce:df:57:53:95:74:ad:33:30:0c: 41:60:08:72:d2:b3:3c:52:78:30:40:38:ba:50:12:24:5f:0b: 8a:8e:f9:06:59:52:6b:84:a3:18:d0:81:00:41:9c:22:a2:fb: e4:f0:71:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2RjkxMTAvBgNVBAUTKDA3NTNGRTIyRkZFRDZCMDBCNkU2RTNDNUFCMUMzQzg0 MjAyQTYzNzQwHhcNMjUwNDI0MTY1MTM2WhcNMjUwNTAxMTY1MTM2WjAYMRYwFAYD VQQDEw02ODBhNmMxOC02NTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscybiDBYc5OboJSO7hFpBlcc/pRGoMgYDXo/E9P9veLafjOYcS9IIoLKPXhp DA32wh/q34wCPcx7lRZN5Uzzi3A+9rzc9tchFuciaaI4LM8WDoaXXyE/8hA65P0g ROtmsJyLoVFlLhtZd+/qRODQfKAmP62Dz4tZe3LGihp+ZKgGgicQNJjvIIisOt1e zPCfrOHcsjsTZscRcG5xunppl9UcQc8OkXNWXO6LEViGKkLUVM0uNiOSHBOZMdu9 GyeVd4LzlofvXF4a0clG1D6/LgRotkYqHtYPb+VS3MWDiP6aMS+ttBJ2MtJFmZAv 97fe6Xm5H3YA6jl9SatcVJAsuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzz6Nk2 DT1130wFBa+k429/1zUKMB8GA1UdIwQYMBaAFAdT/iL/7WsAtubjxascPIQgKmN0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZGOS9DNTFGMzk0QTU1 OUUxMUU4ODAwNDdFNDhDNEY5QUUwMi9CMVAtSXZfdGF3QzI1dVBGcXh3OGhDQXFZ M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxUC1Jdl90YXdDMjV1UEZxeHc4aENBcVkzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzZGOS9DNTFGMzk0QTU1OUUxMUU4ODAwNDdFNDhDNEY5QUUwMi9CMVAtSXZfdGF3 QzI1dVBGcXh3OGhDQXFZM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA213RM99V+TYqjc0qHnvv8/cHgWseeelgdGWYB2qb8v/p52tDjTvc/ T1YJz5qoyTLjRJ90LgT9FTnjbIyAkZieCYR3UQ3DfjOu9ZiI4piAHrb594TdvlC/ 7CzixbI7+hqJ/dhnCRz12mKCAPFDicvEBWVhHWZjLkteyND96iJhchWKbLw3pJ2w DrjQKPOJrynGxF34OAzwvTjlYJXQ3WElxCjKEugMc3RSS5YOdasB6jdHOmPSVaym zngXfbdiEjma4WrnNa66qdY3nXLUc87fV1OVdK0zMAxBYAhy0rM8UngwQDi6UBIk XwuKjvkGWVJrhKMY0IEAQZwiovvk8HEx -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:03 2025 by rpki-client