$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft File: BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json) Hash identifier: /kgq0OBZdfpcrTb81y1voQP+Yggbkj6K6mZgVpF96vk= Subject key identifier: 64:AA:A3:94:06:4B:14:4E:52:B6:E2:53:72:AE:CD:AD:E2:EE:1F:ED Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE Certificate issuer: /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft Manifest number: 0144 Signing time: Fri 25 Apr 2025 03:26:03 +0000 Manifest this update: Fri 25 Apr 2025 03:26:03 +0000 Manifest next update: Fri 02 May 2025 03:26:03 +0000 Files and hashes: 1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: aHro+lqApajvgIa/BKK+DZrjZWaYCa766MS0Y8TIyAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Validity Not Before: Apr 25 03:26:03 2025 GMT Not After : May 2 03:26:03 2025 GMT Subject: CN=680b00cb-21e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:21:9c:ce:f0:94:c7:0b:1c:ae:4e:56:00: 78:c8:30:42:d7:67:cd:35:98:a6:7a:3f:29:2c:82: a5:f0:3d:6b:ef:78:d5:ab:9a:99:f0:e8:47:68:17: 91:86:e3:45:97:0b:a6:95:17:57:f9:f4:25:6d:71: b5:de:d8:84:27:3a:ff:03:e3:da:cd:19:fd:8d:04: d1:cf:42:71:64:eb:f3:92:b8:c8:10:51:78:2d:28: 81:77:d8:fc:a9:69:f4:44:d9:3d:ed:12:ba:30:ff: 7b:e3:8a:9b:73:d1:fe:23:dd:cc:40:10:fa:20:de: 9c:21:15:48:8d:f4:35:27:b7:bf:1f:58:a7:99:44: 19:c1:e7:26:7c:94:e9:10:50:0c:2a:ff:d0:ef:a0: 96:25:fe:83:9a:cb:ad:54:75:b6:b8:34:36:84:f5: ad:a5:89:91:cc:6a:c0:dd:4f:ac:0b:4f:96:f3:9a: 52:94:be:27:f0:40:cb:6e:eb:70:3d:6c:0c:36:39: 11:f1:c2:09:9b:99:33:d0:16:4d:51:6a:e0:8f:bf: 5c:2b:ea:19:04:d4:c3:66:eb:fe:47:6f:52:1f:f2: 66:86:d4:40:56:4e:b2:f1:09:b7:27:75:4e:5e:6c: 2f:14:2c:f9:7a:c7:c5:77:d9:c2:b0:f3:0b:21:ef: ab:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AA:A3:94:06:4B:14:4E:52:B6:E2:53:72:AE:CD:AD:E2:EE:1F:ED X509v3 Authority Key Identifier: keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:cb:df:34:2d:c4:5a:64:c4:37:f0:7d:a1:df:a7:05:91:7e: f9:ee:11:c2:60:22:ec:b5:a4:6e:72:55:39:68:1e:63:de:bb: ec:47:f8:34:14:76:cb:19:49:ff:ea:78:87:cd:f6:73:9f:62: aa:3a:98:08:41:c0:b7:c4:c0:72:88:19:11:d7:19:fd:b2:ac: 09:f4:2f:7d:bd:9f:30:22:b2:3e:9d:f1:b9:fe:55:f7:ac:b6: 41:a7:1c:1f:02:cb:d5:8e:cf:20:d1:b0:8a:83:ee:c9:a2:4f: 5b:f1:76:24:48:d1:95:7c:74:d9:17:59:77:b8:ca:b2:de:27: c3:24:e1:b7:16:1e:88:3f:a1:31:b2:76:30:5b:07:a6:f8:22: 5b:3c:ec:cb:7a:b6:32:7a:a8:a0:7c:45:b1:1c:29:0a:24:41: 42:bc:8b:d4:23:55:5a:0f:a1:6b:65:83:d4:27:3e:ad:0f:e2: 33:99:47:7d:44:51:e0:b5:5f:0e:ba:cf:2e:21:f0:71:d5:aa: 6b:c5:bb:c4:6c:a9:ff:36:b3:63:4a:82:3d:bc:1e:7b:eb:ce: b6:75:84:7e:80:dc:bc:14:89:df:e4:99:78:e3:75:94:ab:92: 9d:78:f5:69:99:fb:01:5a:a8:90:f1:c5:5c:7c:89:32:9c:4a: 63:6f:c8:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwRjcxMTAvBgNVBAUTKDA2MDIzREI0NjM0RDVDNkUzNTYxODBBODJGQkJDRjgw Qjk0NzhBQkUwHhcNMjUwNDI1MDMyNjAzWhcNMjUwNTAyMDMyNjAzWjAYMRYwFAYD VQQDEw02ODBiMDBjYi0yMWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYQhnM7wlMcLHK5OVgB4yDBC12fNNZimej8pLIKl8D1r73jVq5qZ8OhHaBeR huNFlwumlRdX+fQlbXG13tiEJzr/A+PazRn9jQTRz0JxZOvzkrjIEFF4LSiBd9j8 qWn0RNk97RK6MP9744qbc9H+I93MQBD6IN6cIRVIjfQ1J7e/H1inmUQZwecmfJTp EFAMKv/Q76CWJf6DmsutVHW2uDQ2hPWtpYmRzGrA3U+sC0+W85pSlL4n8EDLbutw PWwMNjkR8cIJm5kz0BZNUWrgj79cK+oZBNTDZuv+R29SH/JmhtRAVk6y8Qm3J3VO XmwvFCz5esfFd9nCsPMLIe+rMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSqo5QG SxROUrbiU3Kuza3i7h/tMB8GA1UdIwQYMBaAFAYCPbRjTVxuNWGAqC+7z4C5R4q+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBGNy9EOEQzQjRGMjM1 QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhHNDFZWUNvTDd2UGdMbEhp cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnSTl0R05OWEc0MVlZQ29MN3ZQZ0xsSGlyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTBGNy9EOEQzQjRGMjM1QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhH NDFZWUNvTDd2UGdMbEhpcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAy980LcRaZMQ38H2h36cFkX757hHCYCLstaRuclU5aB5j3rvsR/g0 FHbLGUn/6niHzfZzn2KqOpgIQcC3xMByiBkR1xn9sqwJ9C99vZ8wIrI+nfG5/lX3 rLZBpxwfAsvVjs8g0bCKg+7Jok9b8XYkSNGVfHTZF1l3uMqy3ifDJOG3Fh6IP6Ex snYwWwem+CJbPOzLerYyeqigfEWxHCkKJEFCvIvUI1VaD6FrZYPUJz6tD+IzmUd9 RFHgtV8Ous8uIfBx1aprxbvEbKn/NrNjSoI9vB576862dYR+gNy8FInf5Jl443WU q5KdePVpmfsBWqiQ8cVcfIkynEpjb8j9 -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:32 2025 by rpki-client