$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft File: bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft (raw, json) Hash identifier: h/HonfuPtddNg3mYlo7d5Xs7S2nOo/EoOydxKKKQAJ0= Subject key identifier: 36:2F:D8:68:50:ED:81:84:E5:47:AB:39:50:AD:04:DD:06:92:98:EB Authority key identifier: 6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 Certificate issuer: /CN=A913DF8A/serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft Manifest number: C5 Signing time: Fri 25 Apr 2025 04:49:55 +0000 Manifest this update: Fri 25 Apr 2025 04:49:55 +0000 Manifest next update: Fri 02 May 2025 04:49:55 +0000 Files and hashes: 1: bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl (hash: e+q5Ul/AiW2A3m8S+ovNU2zlV/8xb5u42ISlwBVr+dw=) 2: EC873B66F37911EEA9FCAF6BC4F9AE02.roa (hash: rsabR21jqtcvoz4XthX1FqvEg0esDGA7DmhhfFQxiEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF8A, serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Validity Not Before: Apr 25 04:49:55 2025 GMT Not After : May 2 04:49:55 2025 GMT Subject: CN=680b1473-9142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cb:19:c2:77:01:32:12:b6:f4:5e:3e:d5:60: 5b:53:13:17:0e:2e:62:3e:d2:0b:23:f1:1a:29:93: b4:87:6d:10:0e:58:38:ba:5f:24:83:99:e3:5e:8a: 26:b0:fd:7e:cc:c4:d4:d5:66:f3:ed:3c:68:ac:1b: 31:98:ab:01:81:4f:ce:b8:4f:74:57:14:5c:b5:1e: 56:8c:9f:52:7e:6c:5c:ff:21:95:32:65:f8:bf:07: 89:34:b8:4d:1a:52:f9:46:a2:0d:6e:fa:67:77:ab: 84:e1:39:ea:33:52:a7:e6:2a:39:c3:eb:5c:85:cd: 02:c6:3b:81:65:01:9f:04:2c:6e:17:29:c9:44:c3: e8:95:0d:81:f3:c5:cc:e3:fe:0d:cb:c9:98:ce:66: 04:93:3d:df:f4:25:28:07:bc:bf:be:51:4b:fc:f3: 3a:d8:4f:55:58:4f:7f:01:06:71:2a:3a:49:53:f7: a3:27:81:b4:e5:f5:9a:45:fb:14:79:18:3e:e4:3c: bb:b7:99:45:bf:eb:e7:12:86:01:90:3c:23:4b:6e: c1:d6:50:e8:fa:18:8d:75:4c:e1:bb:ad:66:c7:43: 40:be:6d:a7:27:38:b0:72:6a:b6:97:04:e3:78:9b: 1d:28:5a:4c:88:62:f9:42:db:d2:f2:e9:ac:0e:21: 42:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2F:D8:68:50:ED:81:84:E5:47:AB:39:50:AD:04:DD:06:92:98:EB X509v3 Authority Key Identifier: keyid:6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:b9:13:31:5f:30:70:be:25:e7:32:9b:e2:98:55:87:79:3b: 34:24:02:e7:b3:7c:30:03:9f:85:26:70:d7:ea:79:72:91:20: e1:e9:89:24:9c:51:59:a5:a8:97:59:12:0c:68:e3:65:38:9a: cd:89:43:2b:14:95:8c:d1:69:23:50:fb:81:96:2e:d2:64:ba: e3:40:08:da:64:6e:d0:da:5b:13:a4:6a:56:7b:37:54:a7:36: 23:ad:5f:4c:b4:cc:41:bf:bb:cb:e2:16:f9:24:8b:15:7d:72: 92:13:b3:e8:3b:57:02:11:77:b5:a9:ee:98:70:ce:4e:9d:b6: 04:b6:15:04:35:fa:e8:a1:17:43:8f:04:54:7a:cb:6a:db:a9: 1a:b4:09:c9:62:fa:f1:06:42:bb:8b:3c:c6:ba:ac:19:72:5f: cd:41:19:4c:d8:b0:75:c1:24:8c:0b:2c:7a:1f:b2:be:a8:c9: 6c:f0:69:ef:ee:84:e8:12:ae:26:bd:98:c8:29:4e:c3:03:08: 54:d3:f8:6d:ac:39:49:43:3d:26:7c:a9:4f:e3:5a:a9:ff:3f: 82:bf:f6:13:dd:dd:d8:26:5f:84:19:f6:ec:3b:2d:ef:c1:6d: f6:20:f1:59:60:86:07:e8:84:7b:bb:b2:c6:6e:14:87:fd:c3: 7a:af:98:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGOEExMTAvBgNVBAUTKDZDOERGQTA0M0MyMkI4QTI3RUFCNjA0NzBBRjQwNjYw MjRBNjg0NDAwHhcNMjUwNDI1MDQ0OTU1WhcNMjUwNTAyMDQ0OTU1WjAYMRYwFAYD VQQDEw02ODBiMTQ3My05MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7MsZwncBMhK29F4+1WBbUxMXDi5iPtILI/EaKZO0h20QDlg4ul8kg5njXoom sP1+zMTU1Wbz7TxorBsxmKsBgU/OuE90VxRctR5WjJ9Sfmxc/yGVMmX4vweJNLhN GlL5RqINbvpnd6uE4TnqM1Kn5io5w+tchc0CxjuBZQGfBCxuFynJRMPolQ2B88XM 4/4Ny8mYzmYEkz3f9CUoB7y/vlFL/PM62E9VWE9/AQZxKjpJU/ejJ4G05fWaRfsU eRg+5Dy7t5lFv+vnEoYBkDwjS27B1lDo+hiNdUzhu61mx0NAvm2nJziwcmq2lwTj eJsdKFpMiGL5QtvS8umsDiFCrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYv2GhQ 7YGE5UerOVCtBN0GkpjrMB8GA1UdIwQYMBaAFGyN+gQ8IriifqtgRwr0BmAkpoRA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREY4QS84RjAxMUM2RUYz NzkxMUVFQjdFOURDNkFDNEY5QUUwMi9iSTM2QkR3aXVLSi1xMkJIQ3ZRR1lDU21o RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JJMzZCRHdpdUtKLXEyQkhDdlFHWUNTbWhFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REY4QS84RjAxMUM2RUYzNzkxMUVFQjdFOURDNkFDNEY5QUUwMi9iSTM2QkR3aXVL Si1xMkJIQ3ZRR1lDU21oRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAouRMxXzBwviXnMpvimFWHeTs0JALns3wwA5+FJnDX6nlykSDh6Ykk nFFZpaiXWRIMaONlOJrNiUMrFJWM0WkjUPuBli7SZLrjQAjaZG7Q2lsTpGpWezdU pzYjrV9MtMxBv7vL4hb5JIsVfXKSE7PoO1cCEXe1qe6YcM5OnbYEthUENfrooRdD jwRUestq26katAnJYvrxBkK7izzGuqwZcl/NQRlM2LB1wSSMCyx6H7K+qMls8Gnv 7oToEq4mvZjIKU7DAwhU0/htrDlJQz0mfKlP41qp/z+Cv/YT3d3YJl+EGfbsOy3v wW32IPFZYIYH6IR7u7LGbhSH/cN6r5iT -----END CERTIFICATE-----Generated at Sat Apr 26 15:20:02 2025 by rpki-client