$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json) Hash identifier: oEv3Cf9UGiXkuEPzD94gji6slrwKneEEeE7oabCqNNI= Subject key identifier: A3:C4:ED:BC:A5:FA:01:58:C7:9A:9B:98:86:7D:BB:F6:D7:46:47:0F Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Certificate serial: 12DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft Manifest number: 12D4 Signing time: Thu 24 Apr 2025 17:04:44 +0000 Manifest this update: Thu 24 Apr 2025 17:04:43 +0000 Manifest next update: Thu 01 May 2025 17:04:43 +0000 Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: wJwHMUf4+C20svHhY6Tu34eX9GdcsZXPg1LRZG+PYUE=) 2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: rzftRMPtJ5B6XfKei48LV2pqboch+DlK8AP2NtHbsfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4827 (0x12db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Validity Not Before: Apr 24 17:04:43 2025 GMT Not After : May 1 17:04:43 2025 GMT Subject: CN=680a6f2c-4c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:08:71:47:9b:25:32:8a:5a:5c:bd:bf:d2: bd:a4:09:dd:c4:8d:1a:51:1d:e0:af:cd:f2:b3:45: 61:30:31:ac:fe:24:ec:5f:bd:96:10:50:db:92:51: 94:e0:a4:6f:4b:72:dc:1b:72:d8:96:9e:48:58:b4: a2:21:d4:42:ee:bd:7a:ce:7b:84:48:29:dd:e0:11: 2e:65:32:fe:77:a6:ae:f6:7c:9b:41:79:5f:e3:cd: de:7c:99:3a:af:66:98:5f:fb:70:26:67:61:e0:d5: 71:9b:69:9f:cd:6b:ff:d5:a7:b4:bb:f2:09:97:3e: 5b:08:83:6a:e4:93:2f:47:41:72:e0:39:f2:ff:b5: ae:d8:f5:eb:f4:39:d7:b2:86:64:af:6e:78:9a:19: 33:71:30:c9:47:07:fb:2a:a1:7a:e8:50:e9:35:fd: 35:41:4d:d7:fc:e8:28:e8:d8:b3:55:b5:4d:a0:26: 83:5f:ce:93:92:87:1f:f5:3c:bf:b7:ad:62:30:56: 15:54:d8:5c:bd:aa:3e:cb:6d:34:d3:55:da:01:84: c4:ec:84:62:21:b2:50:77:04:a4:55:f5:c4:2f:de: 62:3b:47:25:97:6f:f2:c5:b8:95:7b:e2:e4:9a:98: 8a:8d:12:20:fc:5d:66:0c:7c:43:ca:42:8a:c6:e0: 00:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C4:ED:BC:A5:FA:01:58:C7:9A:9B:98:86:7D:BB:F6:D7:46:47:0F X509v3 Authority Key Identifier: keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:54:5a:65:9f:3d:d1:ee:d5:db:23:13:3f:13:14:37:82:16: e7:24:00:a7:b0:ae:2f:e7:04:ad:ff:ed:38:29:9c:67:e7:b1: 14:56:21:cb:2b:05:f7:a8:4d:b9:7b:63:2f:61:e5:d3:80:60: d8:e3:5a:f0:f4:ec:27:fe:fe:a9:69:4b:b9:32:ad:f8:63:49: d4:75:bc:1e:de:1a:0f:6c:ce:ea:0f:5b:ce:47:06:ef:24:cd: 7f:e2:93:0c:dc:4d:34:51:fd:b2:2a:48:f3:b7:8d:16:97:05: 06:d6:34:00:aa:48:ce:ea:f0:4e:da:30:9d:1c:8d:86:eb:9e: ab:06:93:f0:5c:5e:84:11:fd:8b:da:9e:a3:1b:7d:2b:96:76: 97:31:86:9c:59:66:0d:2f:2f:7e:06:f8:3e:11:90:39:67:da: 00:9b:4b:33:63:7a:4c:8b:67:0c:f6:ac:ad:d3:c2:ba:ea:7c: 93:ed:ed:d8:ae:08:0f:ab:c5:48:a8:f5:11:4e:26:63:e1:79: b3:13:f3:5d:db:55:63:44:79:c9:6d:33:db:ad:21:c8:3c:4e: 7a:82:83:0a:df:fe:c0:1c:7e:34:e1:3c:12:ce:5a:ac:5e:43: c6:bd:21:86:1f:39:de:69:f7:05:33:0b:31:d7:0b:8f:d9:c7: 20:85:81:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC QkJFNzQxQkMwHhcNMjUwNDI0MTcwNDQzWhcNMjUwNTAxMTcwNDQzWjAYMRYwFAYD VQQDEw02ODBhNmYyYy00YzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppEIcUebJTKKWly9v9K9pAndxI0aUR3gr83ys0VhMDGs/iTsX72WEFDbklGU 4KRvS3LcG3LYlp5IWLSiIdRC7r16znuESCnd4BEuZTL+d6au9nybQXlf483efJk6 r2aYX/twJmdh4NVxm2mfzWv/1ae0u/IJlz5bCINq5JMvR0Fy4Dny/7Wu2PXr9DnX soZkr254mhkzcTDJRwf7KqF66FDpNf01QU3X/Ogo6NizVbVNoCaDX86Tkocf9Ty/ t61iMFYVVNhcvao+y20001XaAYTE7IRiIbJQdwSkVfXEL95iO0cll2/yxbiVe+Lk mpiKjRIg/F1mDHxDykKKxuAA2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPE7byl +gFYx5qbmIZ9u/bXRkcPMB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2 NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx anJsbEtsS3p1Yy03dm5RYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8VFplnz3R7tXbIxM/ExQ3ghbnJACnsK4v5wSt/+04KZxn57EUViHL KwX3qE25e2MvYeXTgGDY41rw9Own/v6paUu5Mq34Y0nUdbwe3hoPbM7qD1vORwbv JM1/4pMM3E00Uf2yKkjzt40WlwUG1jQAqkjO6vBO2jCdHI2G656rBpPwXF6EEf2L 2p6jG30rlnaXMYacWWYNLy9+Bvg+EZA5Z9oAm0szY3pMi2cM9qyt08K66nyT7e3Y rggPq8VIqPURTiZj4XmzE/Nd21VjRHnJbTPbrSHIPE56goMK3/7AHH404TwSzlqs XkPGvSGGHzneafcFMwsx1wuP2ccghYHE -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:44 2025 by rpki-client