$ rpki-client -vvf rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft File: BudciPNpAzH-l_hiEjG2XRR6O20.mft (raw, json) Hash identifier: VMC75wWbMmh2Y/cPBNd7eeB4DMVQeEOtiq/yCyydIew= Subject key identifier: 24:4F:71:F1:1B:E5:40:C7:E3:7D:7E:54:A5:D3:96:F1:FA:D2:F9:D3 Authority key identifier: 06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D Certificate issuer: /CN=A915FEAC/serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft Manifest number: 20 Signing time: Fri 25 Apr 2025 06:50:09 +0000 Manifest this update: Fri 25 Apr 2025 06:50:09 +0000 Manifest next update: Fri 02 May 2025 06:50:09 +0000 Files and hashes: 1: BudciPNpAzH-l_hiEjG2XRR6O20.crl (hash: hot1HrmceqDjvpkUNZD2Nkq0/YSJq083tJ6v3k4NSZk=) 2: 2511401EF40311EFBB6EF777C4F9AE02.roa (hash: tnCDhZMDrHPp0NMpU0cMFqMJ1EvDl+x9yj+eC20nwlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FEAC, serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D Validity Not Before: Apr 25 06:50:09 2025 GMT Not After : May 2 06:50:09 2025 GMT Subject: CN=680b30a1-17e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:ec:15:df:24:63:d9:5f:e6:fb:c0:34:34: 87:88:6a:20:93:2a:57:bb:4f:b2:b0:e4:57:a6:39: 90:7a:96:77:6e:40:1e:53:4c:19:df:16:7f:6d:bd: 6c:fb:71:9f:7d:a9:c9:7e:8d:57:f4:df:cd:16:c1: 1f:d4:10:00:32:09:d8:08:61:0f:7c:b1:7a:a5:e9: fe:e5:53:ed:5e:9e:f7:ab:ec:c5:8c:90:4a:eb:82: 4e:c1:84:6b:f3:56:77:9a:b9:ed:c0:9b:33:b9:64: 54:00:86:9f:c9:10:2a:b6:c8:d4:fa:43:76:6c:fa: 23:56:73:08:24:42:82:32:78:41:be:34:32:7b:18: 5b:13:24:ab:9d:4a:af:74:07:b3:e5:c5:bf:0b:7c: a4:8b:2a:24:92:7b:79:38:06:8f:8a:87:04:81:63: a6:fa:41:a4:3f:79:23:7f:63:f3:c3:d6:f2:33:9e: 26:61:df:e6:ff:55:18:b5:0c:37:5c:ae:32:8f:ee: 8c:97:2c:e0:3b:f4:0f:46:17:6b:16:88:af:2b:e7: 60:dd:5b:5c:cb:b4:02:8c:2a:84:9c:66:aa:a1:18: 18:bc:b4:c0:0b:8b:b0:a9:69:c8:f0:26:05:60:13: e2:4b:cc:d4:79:61:cc:94:48:5c:f6:b4:e3:e8:6f: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4F:71:F1:1B:E5:40:C7:E3:7D:7E:54:A5:D3:96:F1:FA:D2:F9:D3 X509v3 Authority Key Identifier: keyid:06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:c1:5b:e3:fa:55:2a:26:98:98:9a:d6:8a:fd:de:d4:13:9f: 5b:dc:39:65:de:c6:25:1e:74:03:b5:64:5f:4a:b3:ee:91:80: d5:e6:f0:a6:61:ce:c4:14:3b:61:0c:b5:59:19:de:7e:08:bb: 82:d1:f4:cc:4a:ee:d9:23:4c:8e:5b:ce:a2:12:02:a0:46:63: b1:20:f2:b6:8d:c0:f4:1c:cc:99:bf:ac:ab:6f:5e:85:c6:50: 48:55:43:33:27:3c:b0:8b:04:d4:1f:35:41:36:4f:20:8c:29: 30:03:70:9b:0a:e6:2a:ab:b1:ff:28:ab:26:b7:b9:a7:f9:83: d3:5f:b4:cd:14:56:d8:34:ca:65:9d:b1:fc:73:0e:13:23:63: 4a:2c:4b:3a:e8:93:16:1a:c3:16:18:98:91:05:8c:f0:f6:ef: 89:ec:20:86:5d:b5:96:b3:0f:dd:68:32:27:91:33:35:6d:85: 96:66:27:ef:76:dd:97:3d:86:47:5b:1d:65:a2:90:b7:77:55: 3f:1d:00:90:88:c7:75:27:16:b4:c1:f3:c5:89:b0:31:2b:59: 94:6a:12:3a:5d:44:c9:69:ce:d3:e9:f0:53:24:5a:22:53:5e: 21:56:4a:de:db:4d:38:af:bb:36:28:cd:c8:cc:58:35:72:93: 0f:d1:d7:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkVBQzExMC8GA1UEBRMoMDZFNzVDODhGMzY5MDMzMUZFOTdGODYyMTIzMUI2NUQx NDdBM0I2RDAeFw0yNTA0MjUwNjUwMDlaFw0yNTA1MDIwNjUwMDlaMBgxFjAUBgNV BAMTDTY4MGIzMGExLTE3ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfd+wV3yRj2V/m+8A0NIeIaiCTKle7T7Kw5FemOZB6lnduQB5TTBnfFn9tvWz7 cZ99qcl+jVf0380WwR/UEAAyCdgIYQ98sXql6f7lU+1enver7MWMkErrgk7BhGvz Vneaue3AmzO5ZFQAhp/JECq2yNT6Q3Zs+iNWcwgkQoIyeEG+NDJ7GFsTJKudSq90 B7Plxb8LfKSLKiSSe3k4Bo+KhwSBY6b6QaQ/eSN/Y/PD1vIzniZh3+b/VRi1DDdc rjKP7oyXLOA79A9GF2sWiK8r52DdW1zLtAKMKoScZqqhGBi8tMALi7CpacjwJgVg E+JLzNR5YcyUSFz2tOPob7Z9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJE9x8Rvl QMfjfX5UpdOW8frS+dMwHwYDVR0jBBgwFoAUBudciPNpAzH+l/hiEjG2XRR6O20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRUFDLzc5M0E5REY4RjQw MjExRUZCMUEwNkM1OUM0RjlBRTAyL0J1ZGNpUE5wQXpILWxfaGlFakcyWFJSNk8y MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQnVkY2lQTnBBekgtbF9oaUVqRzJYUlI2TzIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG RUFDLzc5M0E5REY4RjQwMjExRUZCMUEwNkM1OUM0RjlBRTAyL0J1ZGNpUE5wQXpI LWxfaGlFakcyWFJSNk8yMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAALBW+P6VSommJia1or93tQTn1vcOWXexiUedAO1ZF9Ks+6RgNXm8KZh zsQUO2EMtVkZ3n4Iu4LR9MxK7tkjTI5bzqISAqBGY7Eg8raNwPQczJm/rKtvXoXG UEhVQzMnPLCLBNQfNUE2TyCMKTADcJsK5iqrsf8oqya3uaf5g9NftM0UVtg0ymWd sfxzDhMjY0osSzrokxYawxYYmJEFjPD274nsIIZdtZazD91oMieRMzVthZZmJ+92 3Zc9hkdbHWWikLd3VT8dAJCIx3UnFrTB88WJsDErWZRqEjpdRMlpztPp8FMkWiJT XiFWSt7bTTivuzYozcjMWDVykw/R15w= -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:17 2025 by rpki-client