$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: zam7EzWrPnDqMPJnxHPnup30EyaU09FTMtBBwfEoUgc= Subject key identifier: 68:54:E2:E1:B1:F7:06:7A:6E:AB:60:D5:F7:8D:C3:6A:D9:8E:2F:2A Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 22 Signing time: Fri 25 Apr 2025 06:49:22 +0000 Manifest this update: Fri 25 Apr 2025 06:49:21 +0000 Manifest next update: Fri 02 May 2025 06:49:21 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: XAfLVaZnNYBxHBxP22jROVEVDNPKCweJH8AL4yRDaZ8=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Apr 25 06:49:21 2025 GMT Not After : May 2 06:49:21 2025 GMT Subject: CN=680b3072-d953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:20:d3:fc:fe:60:00:58:98:69:49:5b:e0:7f: 20:a3:09:0f:71:fa:e2:6f:71:0a:c0:25:20:77:e6: a4:e2:92:1b:bc:49:c9:6d:ff:ca:07:c5:eb:1f:21: d9:d9:61:8c:b2:64:38:5c:67:3b:a9:63:6d:ed:5f: d1:3b:59:e3:e6:3c:da:ca:99:1e:73:ed:d8:14:19: 0a:95:9f:57:54:db:77:75:9e:46:11:1c:41:41:8a: df:97:78:23:8f:68:57:d5:cd:29:8d:7e:c6:7b:70: 13:e0:e5:73:6f:d6:7e:4b:51:22:1a:33:42:14:ce: 1c:c5:d9:82:e6:bc:90:15:62:a6:10:bf:05:5a:b5: 0d:c0:5f:6b:72:a6:2d:b2:c8:71:b6:8a:90:ff:d7: 27:27:a5:6d:6f:3d:1a:06:fc:ce:98:00:a5:94:97: 2b:02:eb:6c:f7:b6:01:83:ac:c6:7a:51:92:82:f2: ac:d1:1a:ee:b4:01:11:e5:a1:aa:fe:4c:75:ec:f3: 7e:0a:07:f5:f8:64:34:db:8e:56:92:9f:66:b4:1b: a2:a4:75:4d:fa:66:ef:b3:48:35:99:e5:3f:28:10: 56:fa:2e:52:a0:ab:ac:a9:60:15:7e:93:93:82:2c: ba:0a:bd:ff:eb:e7:eb:ac:87:e6:ee:14:29:06:8d: 5d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:54:E2:E1:B1:F7:06:7A:6E:AB:60:D5:F7:8D:C3:6A:D9:8E:2F:2A X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:35:9f:43:ca:91:e0:5b:4f:c2:13:a4:8b:ab:cb:53:0d:06: ae:ed:4e:af:7a:c8:58:b3:ea:57:4d:7f:10:f4:48:b4:19:9b: 7a:a3:4d:90:e0:07:4e:be:57:2a:bc:7d:3d:56:7c:d9:04:38: 00:a8:94:29:bf:cb:57:cb:b7:7a:22:84:50:42:90:95:b2:c3: f2:85:59:e4:aa:80:b0:11:2e:4f:5a:ac:74:cb:c1:4a:0e:8d: dc:0d:6a:a8:e5:6c:6b:f0:7d:64:9a:cc:b1:97:34:b6:72:98: b5:c5:0b:0f:7b:f5:68:3f:38:b6:99:2a:3c:79:4d:80:f1:9c: c4:f6:8b:53:bc:34:74:04:1b:65:55:19:3d:af:16:1e:ab:11: c7:e3:28:f9:c5:75:4e:97:8e:d1:91:25:06:27:bd:3b:03:62: a3:61:64:ba:a5:72:61:02:e5:00:c8:2f:29:23:e0:d1:aa:2e: 8f:be:98:a6:7a:ab:7f:3c:5d:dd:15:3b:79:f8:93:95:35:04: 54:c4:a2:94:f7:47:5b:d7:fb:a4:09:38:c9:ef:2c:61:74:01: d4:36:40:af:ea:3d:40:19:de:6d:69:49:ea:14:ad:58:c3:f1: a5:0b:8e:e4:37:fe:2e:88:6c:db:1f:e2:7c:ae:2d:0d:64:32: c7:7d:16:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkI1RDExMC8GA1UEBRMoMEZFMDYzMjRGMTc4N0M4RjIxNEZCRUFFNjdEODg2RDIy RjgxNjcwMjAeFw0yNTA0MjUwNjQ5MjFaFw0yNTA1MDIwNjQ5MjFaMBgxFjAUBgNV BAMTDTY4MGIzMDcyLWQ5NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvINP8/mAAWJhpSVvgfyCjCQ9x+uJvcQrAJSB35qTikhu8Sclt/8oHxesfIdnZ YYyyZDhcZzupY23tX9E7WePmPNrKmR5z7dgUGQqVn1dU23d1nkYRHEFBit+XeCOP aFfVzSmNfsZ7cBPg5XNv1n5LUSIaM0IUzhzF2YLmvJAVYqYQvwVatQ3AX2typi2y yHG2ipD/1ycnpW1vPRoG/M6YAKWUlysC62z3tgGDrMZ6UZKC8qzRGu60ARHloar+ THXs834KB/X4ZDTbjlaSn2a0G6KkdU36Zu+zSDWZ5T8oEFb6LlKgq6ypYBV+k5OC LLoKvf/r5+ush+buFCkGjV1rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaFTi4bH3 Bnpuq2DV943DatmOLyowHwYDVR0jBBgwFoAUD+BjJPF4fI8hT76uZ9iG0i+BZwIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QjVELzk4RkQxQTQyRjFD MDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRC1CakpQRjRmSThoVDc2dVo5aUcwaS1CWndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QjVELzk4RkQxQTQyRjFDMDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4 aFQ3NnVaOWlHMGktQlp3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFY1n0PKkeBbT8ITpIury1MNBq7tTq96yFiz6ldNfxD0SLQZm3qjTZDg B06+Vyq8fT1WfNkEOAColCm/y1fLt3oihFBCkJWyw/KFWeSqgLARLk9arHTLwUoO jdwNaqjlbGvwfWSazLGXNLZymLXFCw979Wg/OLaZKjx5TYDxnMT2i1O8NHQEG2VV GT2vFh6rEcfjKPnFdU6XjtGRJQYnvTsDYqNhZLqlcmEC5QDILykj4NGqLo++mKZ6 q388Xd0VO3n4k5U1BFTEopT3R1vX+6QJOMnvLGF0AdQ2QK/qPUAZ3m1pSeoUrVjD 8aULjuQ3/i6IbNsf4nyuLQ1kMsd9Fog= -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:41 2025 by rpki-client