$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: qd20/c8HnQT3Dmm/O23NmCA7ghsb3enG9aXb/7RryZg= Subject key identifier: 7E:9A:44:35:10:8E:D6:F9:E1:BD:8D:0E:13:92:25:D6:5E:A5:A1:47 Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 1261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 124F Signing time: Thu 24 Apr 2025 17:08:00 +0000 Manifest this update: Thu 24 Apr 2025 17:08:00 +0000 Manifest next update: Thu 01 May 2025 17:08:00 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: KpGHTwM9f22x7Tfuxvi9BMmMhWvR1H1PzylF9XyGh+E=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: 0GBU9clR4v/kv/m8Iw+tpC8pBR8oX1ZqIKf4DgtvCco=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: CfO3CZyouhq3VXYxiVm5tnc8saneiKp2zLb93JcMMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4705 (0x1261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Apr 24 17:08:00 2025 GMT Not After : May 1 17:08:00 2025 GMT Subject: CN=680a6ff0-1574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:ec:22:66:55:0b:17:f2:58:d3:b8:3b:f9: 3e:da:8a:1a:91:b3:1b:22:49:9c:23:62:93:ab:d6: 6d:b0:8e:26:f9:80:16:fc:b5:7c:7c:a4:f8:ce:ae: 78:b2:20:82:83:fe:fe:49:6e:3d:75:9c:96:3f:dc: 0a:1d:87:1d:bf:af:3c:b0:2f:3f:5d:ec:e1:00:64: 37:ae:47:1c:f0:36:0e:f6:0d:6c:87:8e:f9:ae:ff: c6:2b:f7:b2:45:92:c8:b4:31:c6:84:8d:02:32:88: 87:c6:05:ba:3b:df:08:14:a2:0a:a3:fa:eb:2d:3f: 76:8b:32:d4:7e:f4:be:97:08:5c:b2:bc:4c:88:e2: 9e:54:b2:90:30:1c:6b:2d:49:33:60:5e:ae:c4:18: 1f:ce:0d:31:7f:ae:bd:fd:90:63:30:cf:08:bb:5f: f9:69:de:14:dc:2e:52:93:77:23:cf:ab:dd:72:07: b0:8f:b1:8b:7b:b6:24:49:68:10:e1:c8:b4:55:db: 28:c2:f3:ee:be:cf:16:82:fb:a2:b6:c1:2d:6a:4a: 7f:ac:0c:91:ed:18:86:21:22:f7:ed:37:ac:68:02: 11:ca:ac:e8:91:5f:82:73:6b:87:10:46:ef:43:98: 1a:48:94:88:a9:63:a0:06:b1:b1:4e:c2:9b:5d:8c: 01:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9A:44:35:10:8E:D6:F9:E1:BD:8D:0E:13:92:25:D6:5E:A5:A1:47 X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:4d:de:96:9e:b0:02:d7:ac:d9:d8:42:a6:5c:af:e3:93:6b: 6a:60:2a:14:78:51:79:10:2c:f4:be:b5:6c:25:d7:e1:8d:44: 15:27:d2:bb:5e:ab:32:21:bc:9a:46:0a:f0:e5:cb:e5:7c:70: a7:91:39:ca:c0:49:87:8a:c3:0e:42:a7:63:38:75:9c:05:83: 21:2a:5e:f4:57:b6:d4:ca:0a:0a:52:78:b5:18:24:b7:fd:90: b0:22:d5:c4:79:dc:15:6b:6e:cd:8b:cc:7a:10:11:f7:2e:87: f2:60:6d:3e:51:4d:95:d7:56:2a:6d:90:9a:28:d7:e9:4e:7f: 24:20:61:2d:4c:c5:0a:26:5e:1b:99:2c:cf:b1:d8:77:ef:fe: 9f:e1:bd:5a:da:68:b7:3f:91:dd:4b:c5:f7:0f:25:b5:34:7b: 20:6e:72:e5:38:18:87:c8:35:7c:d7:59:cb:31:74:2e:53:8a: c8:23:2b:df:c4:17:3a:11:03:71:a2:0e:0f:ef:00:2e:c3:4e: 72:02:3d:43:e6:a7:ab:ed:d6:60:86:2b:46:63:65:cc:a6:45: 08:d7:55:44:14:25:57:82:24:b8:c9:3e:c5:ab:6a:de:16:c9: 40:d6:1e:fc:e5:49:6c:f3:6b:ab:07:d2:15:d8:d1:d2:52:69: 67:1e:c8:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUwNDI0MTcwODAwWhcNMjUwNTAxMTcwODAwWjAYMRYwFAYD VQQDEw02ODBhNmZmMC0xNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi3sImZVCxfyWNO4O/k+2ooakbMbIkmcI2KTq9ZtsI4m+YAW/LV8fKT4zq54 siCCg/7+SW49dZyWP9wKHYcdv688sC8/XezhAGQ3rkcc8DYO9g1sh475rv/GK/ey RZLItDHGhI0CMoiHxgW6O98IFKIKo/rrLT92izLUfvS+lwhcsrxMiOKeVLKQMBxr LUkzYF6uxBgfzg0xf669/ZBjMM8Iu1/5ad4U3C5Sk3cjz6vdcgewj7GLe7YkSWgQ 4ci0VdsowvPuvs8WgvuitsEtakp/rAyR7RiGISL37TesaAIRyqzokV+Cc2uHEEbv Q5gaSJSIqWOgBrGxTsKbXYwBewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6aRDUQ jtb54b2NDhOSJdZepaFHMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVTd6WnrAC16zZ2EKmXK/jk2tqYCoUeFF5ECz0vrVsJdfhjUQVJ9K7 XqsyIbyaRgrw5cvlfHCnkTnKwEmHisMOQqdjOHWcBYMhKl70V7bUygoKUni1GCS3 /ZCwItXEedwVa27Ni8x6EBH3LofyYG0+UU2V11YqbZCaKNfpTn8kIGEtTMUKJl4b mSzPsdh37/6f4b1a2mi3P5HdS8X3DyW1NHsgbnLlOBiHyDV811nLMXQuU4rIIyvf xBc6EQNxog4P7wAuw05yAj1D5qer7dZghitGY2XMpkUI11VEFCVXgiS4yT7Fq2re FslA1h785Uls82urB9IV2NHSUmlnHsjD -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:00 2025 by rpki-client