$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json) Hash identifier: eQ5VL9Z/yrC5rUTSG5cLi/sHJ9urS+UY99BvtNdgB9g= Subject key identifier: C7:F4:FA:46:92:2B:3D:A3:33:88:5A:50:9D:20:FE:15:DE:22:F3:F4 Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Certificate serial: 0FE0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft Manifest number: 0FCC Signing time: Thu 24 Apr 2025 17:30:10 +0000 Manifest this update: Thu 24 Apr 2025 17:30:09 +0000 Manifest next update: Thu 01 May 2025 17:30:09 +0000 Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: DG/Mz0WmzWKzPYfBXQV8xKQBQsT6QXITHmjkFhjOeFg=) 2: 9F883BFCB33811E981BB4E6FC4F9AE02.roa (hash: 6WFoxJSX+AsPXl4iLxcXTCnP5O5xegAvjHGkQo6ULzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4064 (0xfe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Validity Not Before: Apr 24 17:30:09 2025 GMT Not After : May 1 17:30:09 2025 GMT Subject: CN=680a7522-6b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:ac:b2:10:b8:33:b9:d4:36:34:1c:90:17: 22:3c:a6:13:b5:53:f6:57:f0:9d:3f:5b:8d:41:6a: 2a:67:81:ac:05:c2:5d:58:0b:0a:9b:c2:84:f5:4f: fe:74:e2:03:8e:1d:84:28:29:ab:07:54:da:39:bb: 21:2c:e5:ad:ac:80:e4:50:47:67:17:5a:91:9b:ac: 7e:11:b6:ea:02:71:d4:8c:fd:de:78:f5:ab:e2:b0: aa:40:ee:c6:1f:03:43:fc:3e:2f:84:d2:72:76:f2: 73:f6:f6:2d:e0:fd:5e:e4:a8:18:da:3e:ae:50:4c: e5:fa:dd:5d:16:bc:4d:88:51:fa:87:7e:18:d0:23: 80:d5:65:79:e7:e5:74:8f:8d:5e:2a:a4:fd:e1:c9: 32:44:c5:c9:32:f8:a2:82:2a:35:b9:ea:bd:c3:26: 09:e2:8b:df:f0:ed:30:c7:bc:3b:7a:b5:ff:d3:75: 98:be:21:08:d0:e2:c1:9f:61:6c:e8:4d:b5:64:59: 9f:d7:8c:42:26:53:5c:47:e2:b2:25:a9:c1:55:4e: 7c:20:9f:9a:90:72:a7:14:bc:69:2b:84:2f:2b:4b: fa:a3:b5:8a:aa:37:da:87:68:aa:78:64:74:14:31: 00:2d:53:c1:9f:32:73:01:33:45:fb:d7:40:f7:13: d5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F4:FA:46:92:2B:3D:A3:33:88:5A:50:9D:20:FE:15:DE:22:F3:F4 X509v3 Authority Key Identifier: keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e4:54:2e:a7:84:9b:cb:75:bb:cd:88:3c:83:9a:6b:e4:b5: 2f:6d:2a:a4:90:3e:08:61:37:a8:cb:e9:fa:bc:11:a4:78:09: ed:fb:70:e3:25:04:33:98:6b:eb:7a:23:ae:61:0d:1c:47:23: 33:98:a1:38:0b:f1:a2:4a:c0:a6:68:c9:d2:f1:95:e7:83:24: ec:8e:65:8a:89:04:7c:ff:c4:97:60:63:31:3c:22:1f:7e:9c: 80:51:71:9f:9a:5c:9f:44:43:29:d9:bc:0f:93:36:90:bf:cb: d4:1b:7b:0c:eb:fb:3f:5e:2c:aa:99:82:e8:5f:d4:e5:b3:8b: 23:e3:90:c4:df:31:4e:72:0a:8d:97:b8:ea:f3:7b:36:14:22: 06:69:48:a4:b0:bb:e1:37:0d:71:d2:fb:16:d3:6d:9a:fe:54: 34:80:a4:a4:f7:3d:46:0d:43:6b:40:77:ea:13:65:f7:76:0e: 8f:45:fb:ba:0b:2d:37:74:14:ce:f3:9d:08:c9:60:24:5e:8f: 47:b1:6e:46:74:d0:cf:2d:ed:07:95:51:a8:6f:9d:4b:9d:23: 45:f9:c8:4f:3c:2a:38:6c:60:95:46:7e:ba:c9:13:29:98:c4: b6:1d:c4:c0:02:4d:f1:7a:6a:af:3b:1b:47:c0:49:05:96:d7: 42:61:c0:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY5QkIyOUIwQUJFODQ5RTdGRTE4MEUzMzlFNEIxQzI4 MjM2OEM1MjEwHhcNMjUwNDI0MTczMDA5WhcNMjUwNTAxMTczMDA5WjAYMRYwFAYD VQQDEw02ODBhNzUyMi02YjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/OsshC4M7nUNjQckBciPKYTtVP2V/CdP1uNQWoqZ4GsBcJdWAsKm8KE9U/+ dOIDjh2EKCmrB1TaObshLOWtrIDkUEdnF1qRm6x+EbbqAnHUjP3eePWr4rCqQO7G HwND/D4vhNJydvJz9vYt4P1e5KgY2j6uUEzl+t1dFrxNiFH6h34Y0COA1WV55+V0 j41eKqT94ckyRMXJMviigio1ueq9wyYJ4ovf8O0wx7w7erX/03WYviEI0OLBn2Fs 6E21ZFmf14xCJlNcR+KyJanBVU58IJ+akHKnFLxpK4QvK0v6o7WKqjfah2iqeGR0 FDEALVPBnzJzATNF+9dA9xPVhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf0+kaS Kz2jM4haUJ0g/hXeIvP0MB8GA1UdIwQYMBaAFPm7KbCr6Enn/hgOM55LHCgjaMUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8wQTA0RjRFMjU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1NlZi1HQTR6bmtzY0tDTm94 U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ic3BzS3ZvU2VmLUdBNHpua3NjS0NOb3hTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8wQTA0RjRFMjU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1Nl Zi1HQTR6bmtzY0tDTm94U0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC5FQup4Sby3W7zYg8g5pr5LUvbSqkkD4IYTeoy+n6vBGkeAnt+3Dj JQQzmGvreiOuYQ0cRyMzmKE4C/GiSsCmaMnS8ZXngyTsjmWKiQR8/8SXYGMxPCIf fpyAUXGfmlyfREMp2bwPkzaQv8vUG3sM6/s/XiyqmYLoX9Tls4sj45DE3zFOcgqN l7jq83s2FCIGaUiksLvhNw1x0vsW022a/lQ0gKSk9z1GDUNrQHfqE2X3dg6PRfu6 Cy03dBTO850IyWAkXo9HsW5GdNDPLe0HlVGob51LnSNF+chPPCo4bGCVRn66yRMp mMS2HcTAAk3xemqvOxtHwEkFltdCYcCp -----END CERTIFICATE-----Generated at Sat Apr 26 14:28:47 2025 by rpki-client