$ rpki-client -vvf rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft File: bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft (raw, json) Hash identifier: qAJk8unud35nZUyMmIJ+tY2N+wosb0lfYArNlTUdmEc= Subject key identifier: 4B:E0:08:57:57:8C:98:8C:60:70:9E:DC:59:C6:D5:C1:75:60:27:65 Authority key identifier: 6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9 Certificate issuer: /CN=A914949E/serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft Manifest number: 011B Signing time: Fri 25 Apr 2025 03:52:05 +0000 Manifest this update: Fri 25 Apr 2025 03:52:05 +0000 Manifest next update: Fri 02 May 2025 03:52:05 +0000 Files and hashes: 1: bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl (hash: /VpLMDj50dhpPFOtrqvM7o3B1SKP7DJoCaX1Cj1Uois=) 2: 52531292718111EEA2596A60C4F9AE02.roa (hash: kQ3J56aH6/4jSon9dbWp2nFY5S9v1Kdt8nNw03MV99U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914949E, serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9 Validity Not Before: Apr 25 03:52:05 2025 GMT Not After : May 2 03:52:05 2025 GMT Subject: CN=680b06e5-ec28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:39:57:00:aa:ba:da:14:f3:ff:9e:40:63: b4:d7:13:45:17:ea:b7:8d:fc:d5:b7:0f:f2:e6:20: 38:00:88:e6:e6:5b:62:f6:dc:b8:5c:c6:15:16:00: 32:b9:c5:0a:60:d7:fb:cd:e1:85:48:90:95:8e:d1: 13:60:a8:ea:89:ab:d0:57:5f:e6:c3:40:da:cf:57: ff:c7:0c:b1:13:6d:bf:11:e9:2b:52:11:33:c7:a8: df:3f:71:9c:c6:05:1c:a5:8a:31:ad:82:e9:8f:26: c2:ac:a8:2b:ea:51:4d:c0:43:df:87:27:a8:5d:d9: 95:05:69:2b:52:b3:d6:eb:99:d9:02:07:40:a7:34: 0a:62:f3:e4:2e:4e:ac:65:79:3e:24:c4:61:25:b7: 8e:b9:d8:c2:28:04:9c:73:eb:4b:00:a9:e5:a6:2f: 37:f8:d3:d3:30:63:6e:8f:e0:1d:75:f8:c5:ce:17: 5b:3c:80:79:ca:d1:43:7b:ea:70:ed:05:4e:59:ed: 4a:ce:26:4d:59:5f:fb:65:ec:b2:81:7b:7a:9f:49: 97:be:51:a4:13:60:e2:13:23:dd:50:a6:7c:b8:ab: 5b:3b:c3:ac:42:c9:af:4c:cd:5d:88:c0:65:d0:55: 37:4f:58:ca:db:a1:c2:f0:04:54:14:a8:46:36:24: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E0:08:57:57:8C:98:8C:60:70:9E:DC:59:C6:D5:C1:75:60:27:65 X509v3 Authority Key Identifier: keyid:6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:fa:cb:99:1f:7a:f5:04:b8:ab:e3:93:bb:8d:47:33:b9:b6: 98:b5:57:d1:36:2e:69:be:42:c7:33:8c:5c:20:15:fb:bc:e4: 39:55:37:4d:95:3d:1a:37:a0:d3:94:12:02:e1:47:9b:ce:8d: cd:55:0d:c4:51:7b:4c:f4:b2:a4:ff:31:15:9b:dc:69:ef:e7: ee:db:22:5a:a7:dd:53:43:ba:6b:d6:a9:fc:4d:62:03:37:15: e8:79:43:21:bb:ec:bf:7d:81:8b:25:04:db:15:cb:60:ab:8d: 04:51:2d:fe:c0:b2:4e:57:24:fb:d8:6d:74:be:61:40:ce:d2: c9:1c:65:18:bc:a9:44:9c:8d:8b:7a:16:56:06:13:4c:7b:94: 24:b3:02:81:3c:f3:0b:64:25:b5:b5:95:68:2d:5f:4b:af:c2: bf:17:04:10:89:ef:c6:04:d9:ca:27:b1:16:72:ff:d6:a9:fd: ca:e1:4f:3d:77:4c:2b:d3:7a:b5:78:0f:85:ac:50:ea:6e:05: 26:76:63:8e:87:90:44:d5:dc:6a:7d:34:7b:4d:a6:72:30:e0: 1e:af:3e:d0:28:55:dd:fa:12:b0:5a:bb:db:61:b2:b3:27:b9: b7:ac:8f:14:20:4e:a0:c4:cb:71:ca:a8:8d:a8:ba:41:da:f1: ab:64:2c:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk0OUUxMTAvBgNVBAUTKDZFMzQ1QzAxNTU2REUzRURBMUQ5MTM0RDRBMkQ3RUE1 MjNBMTQ4RjkwHhcNMjUwNDI1MDM1MjA1WhcNMjUwNTAyMDM1MjA1WjAYMRYwFAYD VQQDEw02ODBiMDZlNS1lYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXs5VwCqutoU8/+eQGO01xNFF+q3jfzVtw/y5iA4AIjm5lti9ty4XMYVFgAy ucUKYNf7zeGFSJCVjtETYKjqiavQV1/mw0Daz1f/xwyxE22/EekrUhEzx6jfP3Gc xgUcpYoxrYLpjybCrKgr6lFNwEPfhyeoXdmVBWkrUrPW65nZAgdApzQKYvPkLk6s ZXk+JMRhJbeOudjCKAScc+tLAKnlpi83+NPTMGNuj+AddfjFzhdbPIB5ytFDe+pw 7QVOWe1KziZNWV/7ZeyygXt6n0mXvlGkE2DiEyPdUKZ8uKtbO8OsQsmvTM1diMBl 0FU3T1jK26HC8ARUFKhGNiTYtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvgCFdX jJiMYHCe3FnG1cF1YCdlMB8GA1UdIwQYMBaAFG40XAFVbePtodkTTUotfqUjoUj5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTQ5RS84MDc4NUY1MDcx NjkxMUVFQjUxQjM4MERDNEY5QUUwMi9ialJjQVZWdDQtMmgyUk5OU2kxLXBTT2hT UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqUmNBVlZ0NC0yaDJSTk5TaTEtcFNPaFNQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTQ5RS84MDc4NUY1MDcxNjkxMUVFQjUxQjM4MERDNEY5QUUwMi9ialJjQVZWdDQt MmgyUk5OU2kxLXBTT2hTUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo+suZH3r1BLir45O7jUczubaYtVfRNi5pvkLHM4xcIBX7vOQ5VTdN lT0aN6DTlBIC4Uebzo3NVQ3EUXtM9LKk/zEVm9xp7+fu2yJap91TQ7pr1qn8TWID NxXoeUMhu+y/fYGLJQTbFctgq40EUS3+wLJOVyT72G10vmFAztLJHGUYvKlEnI2L ehZWBhNMe5QkswKBPPMLZCW1tZVoLV9Lr8K/FwQQie/GBNnKJ7EWcv/Wqf3K4U89 d0wr03q1eA+FrFDqbgUmdmOOh5BE1dxqfTR7TaZyMOAerz7QKFXd+hKwWrvbYbKz J7m3rI8UIE6gxMtxyqiNqLpB2vGrZCyu -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:13 2025 by rpki-client