$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: /XN5oddjeXvCEgDhrKKTO4/EZ26Nw2f92CM5CacwBpc= Subject key identifier: 3A:1A:CE:0C:5A:AD:4D:87:2C:57:E2:7E:5E:45:AC:F4:29:B6:E4:03 Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 04D8 Signing time: Thu 24 Apr 2025 23:37:59 +0000 Manifest this update: Thu 24 Apr 2025 23:37:58 +0000 Manifest next update: Thu 01 May 2025 23:37:58 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: WQUjFrxMpWDKnQwzam3wmR/RtEXCKSeXUV8cekESncE=) 2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: bWFskxvhi7CkjX9KQtUg/L6OTceIBUoGJSArRRh8yOc=) 3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: TEWGyyYFx9ktn3pEsyb60J6bTDtXfXp/IzUXg77M9qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Apr 24 23:37:58 2025 GMT Not After : May 1 23:37:58 2025 GMT Subject: CN=680acb56-7f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9f:62:8b:23:74:fb:94:1f:9c:45:c2:ee:6a: 49:42:f3:b9:0b:67:21:7d:49:fc:20:a0:3a:72:e4: fb:b3:4a:42:b0:f9:61:92:5c:08:a3:15:e7:bb:57: 96:c3:91:f6:bc:4e:69:35:a0:57:57:52:5c:6c:61: fd:66:54:ff:42:d3:78:c1:f7:63:6c:80:13:f7:ad: 4f:4c:50:03:a3:8c:59:ff:a7:22:08:f2:da:66:35: 57:cb:ca:cf:f5:52:b2:7f:67:5b:74:94:2b:10:6c: 62:2d:3c:d1:34:fd:84:30:31:20:4c:03:f3:24:9e: 0f:27:c3:86:aa:87:db:24:61:75:c8:94:ee:78:5a: 5a:4b:ae:ec:74:57:16:e4:10:71:77:a1:4d:27:40: 19:59:21:69:a0:bc:69:d8:38:6e:25:f1:0b:aa:a6: 69:8e:9e:95:ed:5f:da:98:24:1d:4d:82:6a:26:f4: b9:a6:1e:c1:7a:cb:a4:ba:9d:3d:d3:93:06:fd:61: 68:1f:d9:17:0e:ee:d4:c6:d7:5f:35:8a:e7:a1:2f: 4c:85:86:d5:e2:6b:84:6b:f8:4a:e6:16:b8:53:8f: 5c:65:e0:1c:70:06:02:20:94:f4:61:ae:84:af:be: 97:83:0f:1e:53:b7:d0:8a:a5:18:ec:71:9c:b3:8d: cd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1A:CE:0C:5A:AD:4D:87:2C:57:E2:7E:5E:45:AC:F4:29:B6:E4:03 X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:84:fc:81:b3:c5:5f:18:9a:ef:ca:e7:41:df:ca:52:8b:16: 0e:a1:34:45:de:d0:e0:eb:57:7b:af:0c:ac:2b:06:a7:5f:d4: fc:94:35:ea:f5:84:ec:61:da:2a:34:50:2b:93:99:07:16:33: a4:80:02:5a:af:54:ef:af:ba:ab:d4:ee:51:4b:a4:f7:dd:12: 15:44:ed:2c:54:5e:03:8b:bf:99:8d:c8:a1:f3:25:3b:7b:67: 57:18:30:42:14:f4:d2:95:67:94:66:89:7c:f7:46:db:5a:17: 64:b5:39:3d:83:66:82:68:87:1d:5d:eb:1f:2e:af:4b:e3:2f: f5:06:2c:8a:14:eb:62:4a:9e:f9:a3:cc:20:09:85:b4:1c:a4: 61:73:54:ff:7b:1f:d0:cc:59:a8:a9:fc:b7:16:d3:f9:79:0d: 90:a8:6c:5d:dd:c6:6e:8e:7b:34:26:b7:c0:5d:2c:61:83:62: a5:58:a7:0c:a6:60:88:39:57:d1:e5:ce:49:da:da:dc:ab:e2: 86:9c:c2:81:0b:41:9f:9b:66:cd:38:a1:c1:2b:43:42:e2:b1: ca:5f:ba:51:36:d1:96:01:01:d9:28:35:3c:7e:6a:08:32:ec: aa:c6:e4:02:d3:a4:f6:65:0b:9c:1f:3f:5b:ed:ec:74:3f:42: 6d:47:34:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUwNDI0MjMzNzU4WhcNMjUwNTAxMjMzNzU4WjAYMRYwFAYD VQQDEw02ODBhY2I1Ni03Zjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA859iiyN0+5QfnEXC7mpJQvO5C2chfUn8IKA6cuT7s0pCsPlhklwIoxXnu1eW w5H2vE5pNaBXV1JcbGH9ZlT/QtN4wfdjbIAT961PTFADo4xZ/6ciCPLaZjVXy8rP 9VKyf2dbdJQrEGxiLTzRNP2EMDEgTAPzJJ4PJ8OGqofbJGF1yJTueFpaS67sdFcW 5BBxd6FNJ0AZWSFpoLxp2DhuJfELqqZpjp6V7V/amCQdTYJqJvS5ph7Besukup09 05MG/WFoH9kXDu7UxtdfNYrnoS9MhYbV4muEa/hK5ha4U49cZeAccAYCIJT0Ya6E r76Xgw8eU7fQiqUY7HGcs43NBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoazgxa rU2HLFfifl5FrPQptuQDMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1hPyBs8VfGJrvyudB38pSixYOoTRF3tDg61d7rwysKwanX9T8lDXq 9YTsYdoqNFArk5kHFjOkgAJar1Tvr7qr1O5RS6T33RIVRO0sVF4Di7+Zjcih8yU7 e2dXGDBCFPTSlWeUZol890bbWhdktTk9g2aCaIcdXesfLq9L4y/1BiyKFOtiSp75 o8wgCYW0HKRhc1T/ex/QzFmoqfy3FtP5eQ2QqGxd3cZujns0JrfAXSxhg2KlWKcM pmCIOVfR5c5J2trcq+KGnMKBC0Gfm2bNOKHBK0NC4rHKX7pRNtGWAQHZKDU8fmoI MuyqxuQC06T2ZQucHz9b7ex0P0JtRzQG -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:02 2025 by rpki-client