$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft File: BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft (raw, json) Hash identifier: k8vK2DDy1Mb+XGu5lqVXzmez7kXF+kUiPpMC3Hjx11g= Subject key identifier: 49:30:94:62:99:61:79:E2:92:31:95:F7:94:C8:09:27:22:7A:B5:4D Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft Manifest number: 58 Signing time: Fri 25 Apr 2025 06:11:16 +0000 Manifest this update: Fri 25 Apr 2025 06:11:15 +0000 Manifest next update: Fri 02 May 2025 06:11:15 +0000 Files and hashes: 1: BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl (hash: 0WXK2dt17tX3e5ohSPUubLBrdFtZ+WSUNvEAlUa7dc4=) 2: 1909718EDE4A11EF90C89D39C4F9AE02.roa (hash: /eMiLKYYsNEMi2i4zLS61WcIPXTg0PjTSgCz7Tex+Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Validity Not Before: Apr 25 06:11:15 2025 GMT Not After : May 2 06:11:15 2025 GMT Subject: CN=680b2784-68bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:8b:a0:31:a6:22:50:9c:98:31:a5:18:b1: 01:18:5b:65:04:e6:19:59:2e:aa:89:03:de:52:14: 30:9c:54:4d:d2:79:fa:eb:28:75:9a:29:63:6e:bf: d8:88:38:85:77:29:85:f6:21:18:0b:ef:5e:5f:34: 37:ad:92:0d:c8:fa:ec:e4:e3:ea:ba:09:69:61:dc: c2:7a:da:12:8b:57:2e:9b:b9:fb:81:9f:75:5b:85: 7e:33:3d:29:f3:17:e8:45:81:fc:8e:b0:40:d3:ed: 48:f0:50:98:e2:a8:18:d8:c2:eb:a2:e3:9d:80:86: 05:80:b7:2b:cc:9e:55:97:82:25:2f:23:ab:11:94: 81:d3:e0:1f:18:a3:5f:06:7d:0f:5c:16:e6:98:af: bc:86:e8:69:39:e0:7d:98:6b:93:b1:16:50:42:79: 41:51:ea:74:15:cc:84:a8:f4:31:2f:66:33:fe:c3: 2d:9f:b6:89:cc:b7:cb:1c:fc:24:f4:40:e9:16:ee: 6a:d9:99:82:56:e0:da:b5:8c:3e:2b:a1:df:83:39: ce:fb:43:64:e1:ac:55:e5:4f:a0:c6:50:82:05:cb: a8:7d:b7:ea:40:1a:90:7b:23:77:5b:c7:86:d9:53: 5c:15:06:70:57:83:1d:be:6a:97:22:02:dc:91:9a: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:30:94:62:99:61:79:E2:92:31:95:F7:94:C8:09:27:22:7A:B5:4D X509v3 Authority Key Identifier: keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f9:85:77:ad:dd:2a:0e:ee:61:70:13:ea:80:a7:b2:42:96: 1b:71:38:f9:a5:ed:b8:bd:67:51:9f:9f:43:a5:87:1d:0c:3b: 45:88:6c:ae:80:59:53:eb:f0:1f:9e:2a:52:04:c3:c7:61:4a: 42:2e:f7:51:fe:5b:fb:ae:2f:0b:19:e6:39:0b:2d:92:4e:b5: 3f:59:93:93:19:30:48:52:2c:73:19:5e:39:5a:5a:26:a9:88: bb:75:1f:ba:12:50:1c:a2:62:5f:a4:11:5f:f8:1f:a0:30:6d: bf:60:b5:bc:58:bc:fb:55:de:47:f1:16:e8:d8:15:8d:17:ad: db:80:76:4f:5a:bc:3f:e2:2e:46:5d:f5:4e:6e:92:67:c5:51: 83:94:4b:67:b6:63:3a:7a:5c:ac:cc:74:09:e3:5d:72:67:d5: 2b:14:34:f3:0a:47:15:5d:b5:e1:56:9b:8d:1f:75:f4:aa:48: 9c:6d:cf:a3:d4:87:d3:63:ab:7a:2e:60:97:6a:de:d9:2b:cd: 31:7f:ea:2e:4f:19:2c:98:1a:50:8c:4f:6b:5d:f0:6b:5f:35: c9:39:c5:1d:80:22:7d:49:41:79:89:ea:0b:77:b2:6e:54:40: b6:9d:d3:3c:a5:ee:4f:f8:00:19:14:83:55:65:63:96:94:29: 86:09:e2:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTg3RTExMC8GA1UEBRMoMDRDNzlBNEREMjRGRkEwM0ZBOEY5Mjk2NzY2RjgyQTAz ODVDRTI5MzAeFw0yNTA0MjUwNjExMTVaFw0yNTA1MDIwNjExMTVaMBgxFjAUBgNV BAMTDTY4MGIyNzg0LTY4YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC77ougMaYiUJyYMaUYsQEYW2UE5hlZLqqJA95SFDCcVE3SefrrKHWaKWNuv9iI OIV3KYX2IRgL715fNDetkg3I+uzk4+q6CWlh3MJ62hKLVy6bufuBn3VbhX4zPSnz F+hFgfyOsEDT7UjwUJjiqBjYwuui452AhgWAtyvMnlWXgiUvI6sRlIHT4B8Yo18G fQ9cFuaYr7yG6Gk54H2Ya5OxFlBCeUFR6nQVzISo9DEvZjP+wy2ftonMt8sc/CT0 QOkW7mrZmYJW4Nq1jD4rod+DOc77Q2ThrFXlT6DGUIIFy6h9t+pAGpB7I3dbx4bZ U1wVBnBXgx2+apciAtyRmo0hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSTCUYplh eeKSMZX3lMgJJyJ6tU0wHwYDVR0jBBgwFoAUBMeaTdJP+gP6j5KWdm+CoDhc4pMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFODdFLzdDNkVEQThDQTFD RjExRUY4NzhFNjA2MUM0RjlBRTAyL0JNZWFUZEpQLWdQNmo1S1dkbS1Db0RoYzRw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQk1lYVRkSlAtZ1A2ajVLV2RtLUNvRGhjNHBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF ODdFLzdDNkVEQThDQTFDRjExRUY4NzhFNjA2MUM0RjlBRTAyL0JNZWFUZEpQLWdQ Nmo1S1dkbS1Db0RoYzRwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALn5hXet3SoO7mFwE+qAp7JClhtxOPml7bi9Z1Gfn0Olhx0MO0WIbK6A WVPr8B+eKlIEw8dhSkIu91H+W/uuLwsZ5jkLLZJOtT9Zk5MZMEhSLHMZXjlaWiap iLt1H7oSUByiYl+kEV/4H6Awbb9gtbxYvPtV3kfxFujYFY0XrduAdk9avD/iLkZd 9U5ukmfFUYOUS2e2Yzp6XKzMdAnjXXJn1SsUNPMKRxVdteFWm40fdfSqSJxtz6PU h9Njq3ouYJdq3tkrzTF/6i5PGSyYGlCMT2td8GtfNck5xR2AIn1JQXmJ6gt3sm5U QLad0zyl7k/4ABkUg1VlY5aUKYYJ4qA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:54 2025 by rpki-client