$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft File: Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json) Hash identifier: vj6CRxtr8yFVmncV2r43lDO1kWflIeqnx5+UIFMJt20= Subject key identifier: 99:AE:63:8B:92:C6:8C:E2:9B:B6:15:31:9A:B2:9F:12:0C:D0:DE:10 Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft Manifest number: 01D3 Signing time: Fri 25 Apr 2025 02:01:58 +0000 Manifest this update: Fri 25 Apr 2025 02:01:58 +0000 Manifest next update: Fri 02 May 2025 02:01:58 +0000 Files and hashes: 1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: tcJ69ptI8ffqj1G+5ysO9NkCnbEE/S1wmCRFSXoGZpI=) 2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: giH1vIhIIPvv5hJDOK02Raj/lgCr3oz3hTTRlbexHIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: Apr 25 02:01:58 2025 GMT Not After : May 2 02:01:58 2025 GMT Subject: CN=680aed16-d1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b4:48:54:aa:58:5b:89:d4:5b:9d:0b:41:85: c9:a6:c8:f7:51:50:19:b2:fa:ef:71:76:2b:98:17: 9e:8f:62:6f:ad:e4:72:57:13:14:e2:90:a8:5a:72: 16:6f:12:a5:1a:c2:33:8b:c2:33:3b:de:42:3f:2b: a0:2d:04:47:ba:a9:24:24:a8:60:a4:6b:00:3d:b0: 42:ca:cb:05:4e:b1:b0:f9:69:fe:fe:f0:c0:9d:f2: 8d:4a:d5:8d:7b:a9:d5:cd:a1:c0:d4:41:cf:ab:9e: b3:ec:af:6e:d8:c8:1a:1f:dd:ec:1f:c9:9b:e3:73: 2d:4f:5b:3f:61:0b:4b:40:25:93:a8:47:06:08:06: d1:2b:45:69:d1:e2:2b:b1:68:f2:e3:08:00:dd:e6: 29:68:25:29:41:0b:b5:2f:50:6b:66:c5:89:a4:f3: b1:2b:0c:e7:c5:ea:0a:b7:28:03:c5:1d:9d:87:4e: 92:1f:8e:4c:c9:4f:29:63:50:69:49:b1:99:0d:b6: df:16:48:2d:81:b7:e4:db:a8:9c:b9:6b:94:b8:d8: 41:28:c8:6a:91:0e:b8:9d:5c:3c:10:1a:0d:a0:29: ed:28:84:5c:ea:98:01:83:02:90:26:90:62:3c:dc: c5:71:e7:08:f5:92:4b:18:00:df:21:fe:9c:e8:2a: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AE:63:8B:92:C6:8C:E2:9B:B6:15:31:9A:B2:9F:12:0C:D0:DE:10 X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:23:9a:3b:7c:8e:2b:f1:0d:3e:5f:e5:8c:e9:23:d1:67:01: ad:e7:a6:e3:d7:8a:bd:8e:4c:b7:50:20:d9:46:2d:05:a4:eb: 36:64:4d:49:27:a3:d5:2c:c8:8e:3e:07:23:51:7b:a3:da:2b: 9e:a1:4f:7e:18:b4:f5:8a:47:e3:27:13:9c:05:f3:45:b5:20: cb:22:51:b7:37:0d:15:bd:06:c9:16:42:29:2e:61:6c:67:ba: 69:25:52:ab:f9:0a:f5:a7:33:3f:04:82:0f:87:72:9f:62:29: 20:5c:19:a9:5e:89:bd:bb:65:03:b7:ae:59:ca:7d:8d:80:1e: 9d:60:69:9a:c8:cd:b6:8c:fa:cb:6f:38:94:02:10:2d:c6:98: 5b:be:90:20:6a:14:86:f7:cf:03:d6:bc:aa:cc:e7:87:77:89: 6c:b7:50:ec:d0:83:da:88:f6:ab:14:02:45:b4:04:47:54:77: bb:a3:5c:91:c7:8a:c7:7e:80:ef:27:8c:0b:15:04:52:71:34: 87:2a:17:2d:08:9c:01:f2:8e:b1:46:80:8a:02:7c:c1:24:c1: 51:e2:71:64:f2:9d:79:02:08:63:cc:10:5b:0c:4d:36:66:17: 3b:67:2e:89:b4:d5:80:57:48:e2:ed:f0:14:db:80:7b:38:ad: 4b:26:76:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjUwNDI1MDIwMTU4WhcNMjUwNTAyMDIwMTU4WjAYMRYwFAYD VQQDEw02ODBhZWQxNi1kMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LRIVKpYW4nUW50LQYXJpsj3UVAZsvrvcXYrmBeej2JvreRyVxMU4pCoWnIW bxKlGsIzi8IzO95CPyugLQRHuqkkJKhgpGsAPbBCyssFTrGw+Wn+/vDAnfKNStWN e6nVzaHA1EHPq56z7K9u2MgaH93sH8mb43MtT1s/YQtLQCWTqEcGCAbRK0Vp0eIr sWjy4wgA3eYpaCUpQQu1L1BrZsWJpPOxKwznxeoKtygDxR2dh06SH45MyU8pY1Bp SbGZDbbfFkgtgbfk26icuWuUuNhBKMhqkQ64nVw8EBoNoCntKIRc6pgBgwKQJpBi PNzFcecI9ZJLGADfIf6c6CrgCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmuY4uS xozim7YVMZqynxIM0N4QMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0M5My80MDIxQTRFNjVGMjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpF N2V5ZHo3MkhtYmpIUGpsd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3I5o7fI4r8Q0+X+WM6SPRZwGt56bj14q9jky3UCDZRi0FpOs2ZE1J J6PVLMiOPgcjUXuj2iueoU9+GLT1ikfjJxOcBfNFtSDLIlG3Nw0VvQbJFkIpLmFs Z7ppJVKr+Qr1pzM/BIIPh3KfYikgXBmpXom9u2UDt65Zyn2NgB6dYGmayM22jPrL bziUAhAtxphbvpAgahSG988D1ryqzOeHd4lst1Ds0IPaiParFAJFtARHVHe7o1yR x4rHfoDvJ4wLFQRScTSHKhctCJwB8o6xRoCKAnzBJMFR4nFk8p15AghjzBBbDE02 Zhc7Zy6JtNWAV0ji7fAU24B7OK1LJnbo -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:13 2025 by rpki-client