$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: YimpoNM6HSYTzKv7BMQnjdCWIdCxQ8C6N2tpiJfgLaI= Subject key identifier: B9:63:C5:BA:C2:98:CB:69:47:01:5A:17:45:0D:03:E3:24:17:98:E0 Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 0981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 0975 Signing time: Thu 24 Apr 2025 17:21:00 +0000 Manifest this update: Thu 24 Apr 2025 17:21:00 +0000 Manifest next update: Thu 01 May 2025 17:21:00 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: QzxnyuRhlb+pmVIpdc9Un8wZRlhItyYCbLT0tJYrfSo=) 2: 0619825C2F2A11ED9F62040DC4F9AE02.roa (hash: kL+XFv+JIBMzJ5k9XXPNiC6YLDiIMa15JQqj4/UV838=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: Apr 24 17:21:00 2025 GMT Not After : May 1 17:21:00 2025 GMT Subject: CN=680a72fc-8976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ce:88:28:38:da:eb:1b:e6:1c:86:13:73:71: 88:b9:29:2e:a1:1d:07:07:60:85:d8:41:7e:9a:e7: 5a:b4:cd:44:eb:4f:4f:0c:7e:97:5a:3f:e6:bf:0d: b4:f8:7d:0c:35:e5:92:fe:20:7e:6f:bb:d5:9a:b6: 85:8a:b0:00:24:79:08:de:ae:2e:da:96:a0:55:f0: 15:28:be:01:01:7c:f0:6a:48:2e:ac:61:88:e6:5f: e5:03:6e:c2:6b:40:a9:ed:44:aa:10:e2:45:fe:8e: b1:26:82:0e:58:73:a1:64:52:65:4c:11:fa:87:2c: cd:e2:ab:5f:53:ae:86:81:b5:98:69:91:cb:1b:3c: 1e:51:38:00:5a:0c:db:25:42:ef:76:34:3b:78:33: e3:8e:e9:8b:2b:eb:68:f5:71:a8:14:ce:5d:70:e0: aa:c0:3e:18:be:af:bb:30:fd:49:80:21:6d:e6:79: 95:66:85:c2:46:a7:59:9d:67:9f:52:5d:7e:b1:84: b4:25:6e:14:6f:d9:eb:a8:c8:7b:bd:48:b1:a6:98: 94:f6:82:19:f6:44:ab:26:ba:ec:2a:e6:42:bb:81: 99:5e:8d:a9:e7:e6:f8:45:af:30:d3:e5:55:57:05: 03:a8:26:c3:32:54:c5:9d:39:37:49:c4:c2:14:32: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:63:C5:BA:C2:98:CB:69:47:01:5A:17:45:0D:03:E3:24:17:98:E0 X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3c:c8:06:bc:b5:a9:da:9e:48:dc:8e:1e:15:2d:d9:d8:87: ec:7a:b1:3a:a2:99:08:d5:44:e9:a9:55:40:c2:78:03:70:10: 9c:1b:ff:bb:a0:65:a1:35:a4:46:49:c8:36:d4:3a:59:3c:f1: d7:7c:9b:ec:ee:b9:0c:7e:1d:7b:3f:31:e4:72:d5:9f:68:80: 05:a8:89:b3:81:90:6c:09:17:87:10:59:62:17:e8:2f:2f:bf: 30:e4:e3:2a:f8:41:5c:0d:0f:dd:83:45:75:ae:ab:f3:df:0d: a8:a5:43:b2:76:09:d3:46:9d:27:b2:42:59:b0:bc:41:14:53: f6:72:eb:e3:7c:58:93:b7:c9:b7:bf:33:bd:a6:7b:ca:a2:46: 72:31:87:35:30:35:c3:a0:43:17:25:24:51:74:98:79:27:3d: 13:45:f6:fa:c4:86:35:46:04:57:f2:0b:be:f8:ad:8f:52:81: f1:40:20:93:e3:35:d5:e3:42:f3:72:f0:31:cf:78:b3:aa:3f: 24:31:13:87:a4:bb:12:77:ee:fd:8d:86:bc:33:5a:9d:b4:80: 22:29:64:78:48:c2:06:0e:7a:b4:36:3d:96:9e:b6:54:01:1e: 40:c6:9d:d3:7e:d0:38:93:3e:da:5d:7b:18:22:00:a7:00:94: 56:d5:9e:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjUwNDI0MTcyMTAwWhcNMjUwNTAxMTcyMTAwWjAYMRYwFAYD VQQDEw02ODBhNzJmYy04OTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3c6IKDja6xvmHIYTc3GIuSkuoR0HB2CF2EF+mudatM1E609PDH6XWj/mvw20 +H0MNeWS/iB+b7vVmraFirAAJHkI3q4u2pagVfAVKL4BAXzwakgurGGI5l/lA27C a0Cp7USqEOJF/o6xJoIOWHOhZFJlTBH6hyzN4qtfU66GgbWYaZHLGzweUTgAWgzb JULvdjQ7eDPjjumLK+to9XGoFM5dcOCqwD4Yvq+7MP1JgCFt5nmVZoXCRqdZnWef Ul1+sYS0JW4Ub9nrqMh7vUixppiU9oIZ9kSrJrrsKuZCu4GZXo2p5+b4Ra8w0+VV VwUDqCbDMlTFnTk3ScTCFDJbSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLljxbrC mMtpRwFaF0UNA+MkF5jgMB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbPMgGvLWp2p5I3I4eFS3Z2IfserE6opkI1UTpqVVAwngDcBCcG/+7 oGWhNaRGScg21DpZPPHXfJvs7rkMfh17PzHkctWfaIAFqImzgZBsCReHEFliF+gv L78w5OMq+EFcDQ/dg0V1rqvz3w2opUOydgnTRp0nskJZsLxBFFP2cuvjfFiTt8m3 vzO9pnvKokZyMYc1MDXDoEMXJSRRdJh5Jz0TRfb6xIY1RgRX8gu++K2PUoHxQCCT 4zXV40LzcvAxz3izqj8kMROHpLsSd+79jYa8M1qdtIAiKWR4SMIGDnq0Nj2WnrZU AR5Axp3TftA4kz7aXXsYIgCnAJRW1Z63 -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:29 2025 by rpki-client