$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: oOF2y7wGpXldKu4h+BwtdcxBu/Zw7u1kuo3RG0L5EW8= Subject key identifier: 07:F3:B4:D3:27:25:69:CF:83:58:73:E3:EC:74:18:15:EB:17:E2:88 Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 0569 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 055A Signing time: Thu 24 Apr 2025 19:35:38 +0000 Manifest this update: Thu 24 Apr 2025 19:35:37 +0000 Manifest next update: Thu 01 May 2025 19:35:37 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: z7TECYa42SOZFNeMOMMg6dLgShmpiq1aIflNpuoL1as=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: 0y1umhcXrzwIQDnq4Cka+2E+MR7Gy+fTGy43hos8bno=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: +5HXeZzaqL8Fd/KKvyuXF2mNME+6yWjEsjlZ9TCANS8=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: k1c7GSyH3WoRbwuja3aZP/eqPGFzjIJTKfDzkLI42LM=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: WDAtZkvVBWCh4sdS393tb7mD2RpYvoRQQWQo7es9q/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Apr 24 19:35:37 2025 GMT Not After : May 1 19:35:37 2025 GMT Subject: CN=680a9289-fa4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:65:59:93:79:f7:9b:81:d7:a2:08:2f:42: 59:c4:61:b6:95:db:9f:d7:e2:60:85:9d:d7:9f:08: 76:da:3b:c5:ea:dc:05:38:6f:08:59:36:29:b1:0b: 30:ab:2f:e0:97:e7:61:a1:30:dd:1b:d5:d7:d9:27: 36:99:9b:19:f5:ad:8c:d1:4c:01:32:d1:9f:a0:d1: 5b:8d:67:19:3b:45:8f:1f:8d:19:cd:5b:92:c0:e1: d6:24:71:e2:8d:c1:d7:c1:2a:87:10:21:e7:db:94: 9e:bd:da:74:3b:b0:44:3d:1f:a3:b4:da:f6:bf:b1: 5e:f6:9f:23:b8:72:59:f5:b2:89:d4:ae:d9:68:05: ed:a3:e0:3f:e7:61:af:69:7f:22:25:e5:73:87:3a: 29:b6:27:7a:81:4e:05:fb:d1:9c:f4:c1:34:a1:63: 27:f6:12:60:b5:bb:f3:e6:54:04:48:8f:48:05:58: fe:4b:ca:28:7b:ad:75:10:fa:f3:12:01:89:1d:bd: 7f:15:9f:30:30:a0:4f:59:e1:e2:95:b8:22:9e:41: ed:ba:3b:c8:aa:85:0a:c9:48:c8:bd:ff:d6:a2:2b: 5a:f1:20:e4:e5:2a:ce:f8:bb:ba:54:7b:5f:58:41: 89:20:b9:93:83:b7:06:84:54:75:61:63:6d:4f:27: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F3:B4:D3:27:25:69:CF:83:58:73:E3:EC:74:18:15:EB:17:E2:88 X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:69:49:c1:ae:d9:5c:d5:70:9f:89:de:13:e0:18:5c:19:da: 38:44:1c:d9:3e:dd:42:3a:65:bf:89:2b:6e:d3:fc:d5:56:73: 77:ee:c1:9e:9c:04:58:ce:ff:19:8f:45:9c:25:2a:33:ff:68: 51:32:38:b9:b3:e8:3e:47:4c:80:f9:0c:ed:a0:96:5e:09:a6: 04:6a:ff:3e:25:65:39:f6:4f:ca:d6:fc:d8:25:0c:23:ea:27: 90:a0:8e:51:71:b1:64:dd:a3:e8:71:db:b1:6d:1a:cf:b8:cf: f3:71:45:4e:9d:51:8a:2f:b9:1d:7c:24:4b:3f:ef:5d:a0:d5: 1f:38:69:1c:44:e1:7f:b1:87:d3:33:d0:9c:2f:1d:65:73:91: 7d:f8:e6:21:8d:cf:ec:b6:8b:06:87:c5:72:6c:d3:a4:5e:06: 42:eb:c6:59:5f:5b:15:fd:6c:a4:f5:a1:ca:13:a0:ca:8f:c2: da:22:7d:eb:60:ba:70:79:55:75:4d:0e:74:6f:95:8a:4c:0d: 8d:80:c7:9a:26:86:0e:de:cc:6e:ee:3f:e2:66:0c:f5:7f:5a: 7f:b5:02:e6:f5:af:2f:45:25:b8:3c:38:ab:0d:38:54:31:5d: 33:06:20:7f:9e:1f:0d:a4:38:44:2c:1c:0f:86:b3:81:a2:41: 06:f9:4b:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUwNDI0MTkzNTM3WhcNMjUwNTAxMTkzNTM3WjAYMRYwFAYD VQQDEw02ODBhOTI4OS1mYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwphlWZN595uB16IIL0JZxGG2lduf1+JghZ3Xnwh22jvF6twFOG8IWTYpsQsw qy/gl+dhoTDdG9XX2Sc2mZsZ9a2M0UwBMtGfoNFbjWcZO0WPH40ZzVuSwOHWJHHi jcHXwSqHECHn25Sevdp0O7BEPR+jtNr2v7Fe9p8juHJZ9bKJ1K7ZaAXto+A/52Gv aX8iJeVzhzoptid6gU4F+9Gc9ME0oWMn9hJgtbvz5lQESI9IBVj+S8ooe611EPrz EgGJHb1/FZ8wMKBPWeHilbginkHtujvIqoUKyUjIvf/Woita8SDk5SrO+Lu6VHtf WEGJILmTg7cGhFR1YWNtTyekMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfztNMn JWnPg1hz4+x0GBXrF+KIMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuaUnBrtlc1XCfid4T4BhcGdo4RBzZPt1COmW/iStu0/zVVnN37sGe nARYzv8Zj0WcJSoz/2hRMji5s+g+R0yA+QztoJZeCaYEav8+JWU59k/K1vzYJQwj 6ieQoI5RcbFk3aPocduxbRrPuM/zcUVOnVGKL7kdfCRLP+9doNUfOGkcROF/sYfT M9CcLx1lc5F9+OYhjc/stosGh8VybNOkXgZC68ZZX1sV/Wyk9aHKE6DKj8LaIn3r YLpweVV1TQ50b5WKTA2NgMeaJoYO3sxu7j/iZgz1f1p/tQLm9a8vRSW4PDirDThU MV0zBiB/nh8NpDhELBwPhrOBokEG+Uvf -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:39 2025 by rpki-client