$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft File: BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft (raw, json) Hash identifier: lwitBe0nphgRoHDIskAEpDlOxqjfh41m7OPn7gi1Mck= Subject key identifier: 09:F7:A0:E8:EB:AC:02:47:95:A8:ED:09:32:48:00:50:BE:D1:D4:F2 Authority key identifier: 06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF Certificate issuer: /CN=A9179F22/serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft Manifest number: 010B Signing time: Fri 25 Apr 2025 04:04:54 +0000 Manifest this update: Fri 25 Apr 2025 04:04:54 +0000 Manifest next update: Fri 02 May 2025 04:04:54 +0000 Files and hashes: 1: BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl (hash: k88sKtK9wRu8kGexz1pbXQhpisDzjtQ5z0govg7Zjvo=) 2: 2CDC448608D811EF8DFDE781C4F9AE02.roa (hash: MTTFGh5YkmdwhwwN1nHMTKtVnxi1AywOBLIUbo7ublw=) 3: 2D7A0C2A08D811EF8DFDE781C4F9AE02.roa (hash: gdMasLbSqNJyfYRq8rjx2FDE2x25ny6/BOPxzTslPtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F22, serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF Validity Not Before: Apr 25 04:04:54 2025 GMT Not After : May 2 04:04:54 2025 GMT Subject: CN=680b09e6-4d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:46:34:29:97:ad:24:5b:da:50:b8:ea:f7: 6e:c7:9a:4f:14:af:9e:42:cc:1b:ad:0b:7b:a0:ab: b1:c4:6d:d3:69:f4:4f:36:62:c5:3f:d9:a8:94:4e: 13:ac:4c:f8:a9:83:43:ef:31:8f:20:9c:43:3c:e8: ad:e0:21:d0:a6:89:4f:47:d9:f4:11:5b:a8:05:17: 79:bd:b8:f1:07:e6:e4:f7:e8:f0:4c:d8:5f:18:7f: 73:3e:a4:a5:a0:04:2b:3f:d4:55:3d:3c:8e:f5:db: 38:d2:bc:e5:d4:83:b6:5d:f2:7a:70:33:f2:0f:9e: 62:5b:07:b5:67:8b:e3:db:2c:ba:b6:57:b3:f9:23: f6:c3:ee:71:d9:1f:0f:9e:9a:a6:97:f1:52:ba:e3: b8:72:2a:19:cb:9f:8b:ea:cc:74:1d:47:ff:42:50: 88:f1:f2:9c:6a:51:44:75:e7:a2:10:7a:cd:8e:08: b4:11:52:ec:6b:1f:18:8d:84:9d:9d:13:4f:34:9c: 01:89:d6:18:85:3d:0e:0b:f9:bb:ae:4d:97:b3:8a: e7:a7:3d:d9:3d:07:4c:47:4b:36:c4:8f:b9:8c:a2: bb:d8:15:73:61:09:f8:54:cb:11:be:7f:ee:5b:bc: 01:c8:ca:4c:ed:43:68:97:2d:c4:99:99:34:b7:41: 19:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F7:A0:E8:EB:AC:02:47:95:A8:ED:09:32:48:00:50:BE:D1:D4:F2 X509v3 Authority Key Identifier: keyid:06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:f2:9e:96:db:2d:20:73:95:af:31:ce:86:7e:2f:a4:c9:e8: 70:ad:1a:13:7d:0f:78:0a:6b:2e:01:ff:97:05:ed:e3:82:59: c8:93:68:09:6f:58:9b:40:1f:09:2e:8e:4a:91:90:c8:78:36: 6e:d2:af:d1:05:30:74:bb:e2:60:f5:62:d7:b3:82:42:ad:e2: 83:13:00:6f:a9:66:97:57:6c:99:14:2e:50:dc:d8:81:4a:16: ff:8a:77:06:6e:e9:b2:8e:48:5c:03:2e:6b:05:42:71:4d:84: ff:59:8d:15:5e:ec:8b:dd:6f:92:6f:cb:d5:ed:ea:7c:d4:ba: ad:cd:91:57:ba:f2:d4:5f:d1:71:f5:e1:c9:da:4f:25:e4:c2: c5:45:93:c5:cb:1c:36:be:88:6f:f2:34:ce:76:59:8a:d8:d1: 77:da:de:25:17:20:9d:76:c6:14:bf:b4:30:10:07:bc:9a:2b: 5c:3b:05:9b:84:6b:63:76:b1:ff:5c:ee:25:e3:93:8f:b8:46: e0:79:3e:98:57:5c:3a:34:e6:a4:3d:55:25:a5:a1:21:02:29: 24:a8:e6:56:33:62:98:fc:67:a2:51:ea:d7:c2:b8:3d:b4:98: 54:c7:60:a6:ff:fd:ab:35:8c:ff:ed:dd:46:76:b9:d4:9d:9d: 45:6e:ea:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGMjIxMTAvBgNVBAUTKDA2M0JBRjNFRDdCNDEwNzFBOTBEOUZBRTQxMEZGNDc4 ODhGMEJFREYwHhcNMjUwNDI1MDQwNDU0WhcNMjUwNTAyMDQwNDU0WjAYMRYwFAYD VQQDEw02ODBiMDllNi00ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXJGNCmXrSRb2lC46vdux5pPFK+eQswbrQt7oKuxxG3TafRPNmLFP9molE4T rEz4qYND7zGPIJxDPOit4CHQpolPR9n0EVuoBRd5vbjxB+bk9+jwTNhfGH9zPqSl oAQrP9RVPTyO9ds40rzl1IO2XfJ6cDPyD55iWwe1Z4vj2yy6tlez+SP2w+5x2R8P npqml/FSuuO4cioZy5+L6sx0HUf/QlCI8fKcalFEdeeiEHrNjgi0EVLsax8YjYSd nRNPNJwBidYYhT0OC/m7rk2Xs4rnpz3ZPQdMR0s2xI+5jKK72BVzYQn4VMsRvn/u W7wByMpM7UNoly3EmZk0t0EZ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAn3oOjr rAJHlajtCTJIAFC+0dTyMB8GA1UdIwQYMBaAFAY7rz7XtBBxqQ2frkEP9HiI8L7f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DNkY1NUZBODhG MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVIR3BEWi11UVFfMGVJand2 dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JqdXZQdGUwRUhHcERaLXVRUV8wZUlqd3Z0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUYyMi9DNkY1NUZBODhGMkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVI R3BEWi11UVFfMGVJand2dDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE8p6W2y0gc5WvMc6Gfi+kyehwrRoTfQ94CmsuAf+XBe3jglnIk2gJ b1ibQB8JLo5KkZDIeDZu0q/RBTB0u+Jg9WLXs4JCreKDEwBvqWaXV2yZFC5Q3NiB Shb/incGbumyjkhcAy5rBUJxTYT/WY0VXuyL3W+Sb8vV7ep81LqtzZFXuvLUX9Fx 9eHJ2k8l5MLFRZPFyxw2vohv8jTOdlmK2NF32t4lFyCddsYUv7QwEAe8mitcOwWb hGtjdrH/XO4l45OPuEbgeT6YV1w6NOakPVUlpaEhAikkqOZWM2KY/GeiUerXwrg9 tJhUx2Cm//2rNYz/7d1GdrnUnZ1FbuqU -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:38 2025 by rpki-client