$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft File: BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json) Hash identifier: bfWdOb8MnHmftbOiGISBjPpqW7xgGBcG+7sYvB8ZuA0= Subject key identifier: 0A:7D:5B:C4:69:1B:96:20:0A:1A:3B:22:A2:0B:A6:9E:AF:FD:93:01 Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD Certificate issuer: /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Certificate serial: 23DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft Manifest number: 23A4 Signing time: Thu 24 Apr 2025 15:50:45 +0000 Manifest this update: Thu 24 Apr 2025 15:50:45 +0000 Manifest next update: Thu 01 May 2025 15:50:45 +0000 Files and hashes: 1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: kIjHfXu60wT087htN64gvp6OTVV/N15lw37L890LSr4=) 2: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 2VqKtLp4I4n3i3xfxJ0a0zauep05yhz4m6vcbsayeiY=) 3: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=) 4: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: fkO78SaWxLHL6UEeOmDkgAwdKa1QD3bVWVMip2dHju0=) 5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: Xr4axXAE5xhZlqvtubxZ2pb3RMbCF82Tss/A5eKchFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9182 (0x23de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Validity Not Before: Apr 24 15:50:45 2025 GMT Not After : May 1 15:50:45 2025 GMT Subject: CN=680a5dd5-dd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:20:e4:dc:3e:c7:1e:34:a8:0c:cf:b1:a2:1e: 0a:bf:a0:20:6c:70:02:48:21:2d:dc:2b:d0:20:18: 9f:30:f7:ee:bd:39:5e:66:8e:c8:10:6f:58:73:38: 69:88:7f:8b:b7:b9:45:07:99:65:f5:9d:32:59:44: e0:5f:19:89:83:c9:4d:5c:9b:b2:6f:db:4d:07:56: 8a:b6:87:83:3b:91:a7:ff:2d:5d:a2:23:46:fa:88: e8:57:6c:db:cc:61:75:0e:46:46:ac:aa:84:cf:a7: ae:21:83:a5:8b:72:e8:58:21:40:26:e2:0d:93:7d: 76:b6:4a:92:6a:f7:55:4b:87:9e:b6:b7:9e:22:6d: 51:c4:f6:0e:f4:4c:0b:dc:8f:2f:a6:f0:c6:52:cd: cc:f0:85:b4:f3:1e:45:4b:65:ef:a9:40:db:30:9d: 56:93:21:43:75:a3:03:2a:2e:51:a2:08:d7:35:26: 18:26:d4:f2:2a:b5:e7:9b:1d:1e:4b:3b:82:f6:86: 38:67:8f:68:29:8d:fe:34:87:12:fe:6b:0a:24:be: f9:3b:25:b9:58:a0:d8:64:6a:bd:7e:81:dd:9d:c4: 5f:24:df:3a:f5:a5:7b:6f:01:4d:7b:3f:04:43:34: ff:24:75:26:bf:ed:1c:f1:b1:7e:11:d7:9b:90:d2: 5b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7D:5B:C4:69:1B:96:20:0A:1A:3B:22:A2:0B:A6:9E:AF:FD:93:01 X509v3 Authority Key Identifier: keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c6:81:d0:47:87:a1:43:71:d2:8b:96:51:37:88:17:86:cb: d6:4b:81:ca:03:eb:07:b5:d1:9d:56:15:5a:b2:b3:52:8b:a1: b6:b3:e5:9b:a1:51:20:e2:ae:42:16:5e:27:8f:3d:4d:63:1a: fa:74:4e:87:75:eb:61:fa:e3:7e:cf:8c:49:35:c8:94:8f:6b: d5:9d:9a:e3:33:f4:62:ff:42:56:f7:9d:ca:b2:9f:9e:b4:f5: 8e:42:9e:0b:30:44:bf:8c:d5:cb:61:94:0e:0f:d7:a4:5e:76: 76:aa:ac:19:e6:d4:2e:ad:ca:67:e4:9d:69:3c:f1:29:2b:29: e4:81:a9:08:43:6f:19:05:22:1b:2d:9e:31:12:96:95:9c:fd: 7b:e7:e7:1f:fb:59:56:5c:49:37:1f:db:c5:0f:5f:5a:d3:72: ad:6d:d3:51:1b:fe:02:94:99:05:0f:fe:9c:63:84:73:5d:61: fc:7a:94:37:d4:ac:e0:62:03:47:e2:1e:eb:4e:7e:3a:0e:79: 1f:b9:22:92:01:3f:ae:c3:dc:e1:a1:62:a5:f3:b8:fe:59:17: b4:bd:fc:38:df:4e:83:cc:57:b5:25:9c:e1:8c:03:0e:71:f7: 0c:39:3d:b3:2d:73:e9:5c:7c:f3:5d:13:67:10:95:89:5b:ea: 87:51:f1:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMkYxMTAvBgNVBAUTKDA0NUI1QzA4NjdERTU4MUQyQjc0ODQyRkVGODA0NUMx QTc3QkU4QkQwHhcNMjUwNDI0MTU1MDQ1WhcNMjUwNTAxMTU1MDQ1WjAYMRYwFAYD VQQDEw02ODBhNWRkNS1kZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyDk3D7HHjSoDM+xoh4Kv6AgbHACSCEt3CvQIBifMPfuvTleZo7IEG9Yczhp iH+Lt7lFB5ll9Z0yWUTgXxmJg8lNXJuyb9tNB1aKtoeDO5Gn/y1doiNG+ojoV2zb zGF1DkZGrKqEz6euIYOli3LoWCFAJuINk312tkqSavdVS4eetreeIm1RxPYO9EwL 3I8vpvDGUs3M8IW08x5FS2XvqUDbMJ1WkyFDdaMDKi5RogjXNSYYJtTyKrXnmx0e SzuC9oY4Z49oKY3+NIcS/msKJL75OyW5WKDYZGq9foHdncRfJN869aV7bwFNez8E QzT/JHUmv+0c8bF+EdebkNJbZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAp9W8Rp G5YgCho7IqILpp6v/ZMBMB8GA1UdIwQYMBaAFARbXAhn3lgdK3SEL++ARcGne+i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyRi9ENDExNDE0QzZE NTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdCMHJkSVF2NzRCRndhZDc2 TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JGdGNDR2ZlV0IwcmRJUXY3NEJGd2FkNzZMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyRi9ENDExNDE0QzZENTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdC MHJkSVF2NzRCRndhZDc2TDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoxoHQR4ehQ3HSi5ZRN4gXhsvWS4HKA+sHtdGdVhVasrNSi6G2s+Wb oVEg4q5CFl4njz1NYxr6dE6Hdeth+uN+z4xJNciUj2vVnZrjM/Ri/0JW953Ksp+e tPWOQp4LMES/jNXLYZQOD9ekXnZ2qqwZ5tQurcpn5J1pPPEpKynkgakIQ28ZBSIb LZ4xEpaVnP175+cf+1lWXEk3H9vFD19a03KtbdNRG/4ClJkFD/6cY4RzXWH8epQ3 1KzgYgNH4h7rTn46DnkfuSKSAT+uw9zhoWKl87j+WRe0vfw4306DzFe1JZzhjAMO cfcMOT2zLXPpXHzzXRNnEJWJW+qHUfFn -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:05 2025 by rpki-client