$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft File: BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json) Hash identifier: +RO8rZZmKwRK5AKkcBmY/qQxtuoEtM9XX6XDbmlt0eo= Subject key identifier: 18:28:77:A2:5B:CC:C9:14:CD:8F:9F:98:FA:14:C7:9C:85:C4:1C:F1 Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B Certificate issuer: /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft Manifest number: C7 Signing time: Fri 25 Apr 2025 04:48:22 +0000 Manifest this update: Fri 25 Apr 2025 04:48:21 +0000 Manifest next update: Fri 02 May 2025 04:48:21 +0000 Files and hashes: 1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: Hm+1qLwPUY2KrpqvgfhxCBU0XTWJqIp/LW5Kpnltsgo=) 2: 08D1870EF0B411EE962EE784C4F9AE02.roa (hash: nrFzYe2K6I+fVS0WsJAv1h0mXVgQBFKENnTmsnUT3Jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B Validity Not Before: Apr 25 04:48:21 2025 GMT Not After : May 2 04:48:21 2025 GMT Subject: CN=680b1415-d0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ca:28:f4:95:65:6e:b5:e9:b6:e5:ef:67:91: cb:e8:be:1c:19:f1:43:b5:e7:4b:1f:97:bd:9f:59: 3e:57:27:ff:5b:98:f5:dd:b8:0a:ec:05:ef:b5:e2: 32:69:62:db:30:51:cd:29:1d:14:6e:79:07:6b:4a: c4:23:f5:c7:0a:0e:6f:6b:e9:96:18:6d:de:4a:77: 1b:d6:0e:a4:36:82:ed:a7:92:d4:66:2f:17:2b:bc: df:4f:84:ec:a0:4a:66:28:c2:ea:a6:bf:76:11:23: 90:14:ac:02:71:20:7b:d0:a6:fa:19:c4:c9:d0:69: 66:1e:ae:20:fc:ca:4c:3f:6d:a5:a3:5c:2a:b9:87: 73:bd:65:01:85:25:ad:fe:a7:a8:da:1b:5b:c8:25: 15:71:be:80:b1:66:74:b0:9a:72:20:25:65:24:67: 56:bf:8a:84:95:11:8d:65:fc:b1:1e:af:37:78:84: bb:ce:14:07:23:bb:84:85:43:99:50:52:00:39:60: 75:cc:81:cb:91:85:de:63:29:71:0c:e6:ac:7b:72: 15:73:09:c0:73:76:0e:ee:ce:1b:af:7b:1d:ea:ac: 49:bf:d6:38:85:fa:e8:53:71:86:4a:57:22:13:32: 89:8a:50:13:3f:81:51:ec:46:28:f9:be:b1:7f:53: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:28:77:A2:5B:CC:C9:14:CD:8F:9F:98:FA:14:C7:9C:85:C4:1C:F1 X509v3 Authority Key Identifier: keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5c:4c:fa:5e:1d:8a:e4:44:6f:64:44:36:8a:1b:17:a1:d8: 65:98:1d:e9:c4:73:ad:4a:5a:44:f7:a2:e5:5b:f3:99:3a:87: 49:26:53:38:51:ba:f5:9b:3d:41:db:cb:63:c5:51:1d:ad:1e: 1f:2b:3f:bf:ef:3a:44:68:5f:19:f8:e6:56:4c:e2:47:af:38: f8:05:79:28:a5:06:6e:22:91:23:94:13:c9:33:be:73:4f:c1: d9:65:36:eb:e3:c6:b5:ff:1f:2b:80:e5:dd:3a:53:4b:a1:07: e8:d0:d0:4a:ad:0f:ae:ef:bb:10:0d:9a:53:18:b5:90:62:bd: 72:21:c3:87:5f:72:fc:53:e9:16:be:e9:d6:7e:cd:cc:4a:c4: 49:26:ef:f6:9e:de:a7:54:4d:a0:c6:49:38:09:28:d4:e6:01: 8f:32:3b:90:0f:86:c6:bf:33:11:d1:bc:48:58:34:18:70:f5: 5b:2b:59:64:89:cd:c6:bc:0e:8d:0f:29:64:c2:06:4b:45:b2: 18:bb:01:a9:39:26:de:1a:4f:d3:c5:19:f9:69:32:10:cd:50: df:0c:ae:77:9b:56:32:29:bd:c0:93:05:5a:3e:10:9e:af:d5: 26:43:92:42:e5:a3:a6:2b:ea:08:77:1e:8d:54:5b:94:a7:71: e5:ae:4c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4ODIxMTAvBgNVBAUTKDA0RjBEOEE5MzAyQjIyQjYwRTMwRjQ2NTFCODJBRTk5 OUZGNzRDOUIwHhcNMjUwNDI1MDQ0ODIxWhcNMjUwNTAyMDQ0ODIxWjAYMRYwFAYD VQQDEw02ODBiMTQxNS1kMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycoo9JVlbrXptuXvZ5HL6L4cGfFDtedLH5e9n1k+Vyf/W5j13bgK7AXvteIy aWLbMFHNKR0UbnkHa0rEI/XHCg5va+mWGG3eSncb1g6kNoLtp5LUZi8XK7zfT4Ts oEpmKMLqpr92ESOQFKwCcSB70Kb6GcTJ0GlmHq4g/MpMP22lo1wquYdzvWUBhSWt /qeo2htbyCUVcb6AsWZ0sJpyICVlJGdWv4qElRGNZfyxHq83eIS7zhQHI7uEhUOZ UFIAOWB1zIHLkYXeYylxDOase3IVcwnAc3YO7s4br3sd6qxJv9Y4hfroU3GGSlci EzKJilATP4FR7EYo+b6xf1Ot3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgod6Jb zMkUzY+fmPoUx5yFxBzxMB8GA1UdIwQYMBaAFATw2KkwKyK2DjD0ZRuCrpmf90yb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9CMjM4QTE4NEYw QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9CUERZcVRBcklyWU9NUFJsRzRLdW1aXzNU SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQRFlxVEFySXJZT01QUmxHNEt1bVpfM1RKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9CMjM4QTE4NEYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9CUERZcVRBckly WU9NUFJsRzRLdW1aXzNUSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdXEz6Xh2K5ERvZEQ2ihsXodhlmB3pxHOtSlpE96LlW/OZOodJJlM4 Ubr1mz1B28tjxVEdrR4fKz+/7zpEaF8Z+OZWTOJHrzj4BXkopQZuIpEjlBPJM75z T8HZZTbr48a1/x8rgOXdOlNLoQfo0NBKrQ+u77sQDZpTGLWQYr1yIcOHX3L8U+kW vunWfs3MSsRJJu/2nt6nVE2gxkk4CSjU5gGPMjuQD4bGvzMR0bxIWDQYcPVbK1lk ic3GvA6NDylkwgZLRbIYuwGpOSbeGk/TxRn5aTIQzVDfDK53m1YyKb3AkwVaPhCe r9UmQ5JC5aOmK+oIdx6NVFuUp3Hlrkxh -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:21 2025 by rpki-client