$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft File: bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json) Hash identifier: /6lR7OUbtRpWyQ6tvhfVPV6wNnVl6W7iJifFbxcX3ZY= Subject key identifier: 31:DA:C3:AA:F2:19:EA:FE:3A:5B:9D:7F:4F:E4:DA:34:CE:53:F5:5D Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 Certificate issuer: /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft Manifest number: 0157 Signing time: Fri 25 Apr 2025 03:14:22 +0000 Manifest this update: Fri 25 Apr 2025 03:14:22 +0000 Manifest next update: Fri 02 May 2025 03:14:22 +0000 Files and hashes: 1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: wss0HldaK6y56eCpYX6We0RL6m7xzNEF8ou46wQQfDM=) 2: 608D76E61A6411EE8DCBF20BC4F9AE02.roa (hash: eyRixM2hnH5hJUhQZ5DNxSyueQ5FxIcVr9e9xZNzn1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Validity Not Before: Apr 25 03:14:22 2025 GMT Not After : May 2 03:14:22 2025 GMT Subject: CN=680afe0e-ab39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:7c:5d:f4:8f:7e:7c:41:6d:cf:e8:96:69: fd:10:09:f3:d4:dc:b5:7e:bc:f2:98:3e:52:20:2d: c7:17:8b:2f:77:47:3e:ce:a1:03:98:cf:1e:4d:db: f3:be:b7:30:09:17:41:68:d2:55:ac:62:8c:bf:45: 84:8a:b4:b4:8b:4d:d8:b6:47:be:6f:b2:9a:2e:55: b5:53:17:7d:32:e6:d4:05:62:4a:a8:e1:7f:cb:3a: dd:86:e9:58:21:bc:a0:1a:9c:58:96:7c:3b:27:3c: 73:ce:74:91:d9:a0:03:b9:4e:ef:94:c9:77:ad:6d: b0:70:2c:68:66:8c:0d:9f:42:90:3b:f1:d9:ac:79: e6:aa:ed:c6:69:bb:b4:c3:11:a8:c5:d0:1a:5c:df: c4:00:d9:99:43:25:77:f0:fc:9b:17:e7:47:78:7d: ea:4a:8a:a9:dd:c3:3b:03:8b:77:e3:47:e8:db:1f: 73:c7:c1:c4:7e:95:f0:1f:87:ba:36:91:58:92:cf: b9:36:42:80:75:80:6a:fb:10:d1:cd:85:f0:22:76: 46:ff:bc:21:a8:31:e3:20:62:79:46:44:ce:42:3e: 59:6e:e5:25:7e:19:f0:f4:07:3e:d5:cd:53:9c:13: 1a:54:51:69:d2:d6:79:3c:aa:f9:11:91:90:4b:4f: f1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DA:C3:AA:F2:19:EA:FE:3A:5B:9D:7F:4F:E4:DA:34:CE:53:F5:5D X509v3 Authority Key Identifier: keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e6:39:e5:63:05:92:01:53:a4:18:15:28:ce:62:20:f3:e9: 47:23:7a:fa:65:d7:77:b5:07:8e:c7:7d:b2:ef:e6:03:52:cf: cc:0f:c1:f7:ef:2a:60:91:1e:75:73:7a:fd:1d:a0:a3:fc:f5: 21:07:d4:f2:90:21:27:f9:bc:cc:97:13:b7:17:89:12:00:9a: 5b:df:3e:91:96:3a:39:38:da:28:c8:a1:d5:39:31:cc:69:5c: 59:9a:17:62:fd:5b:5a:9d:e9:90:25:e0:08:26:25:2c:87:62: 55:54:01:e2:0b:d2:c2:e3:d0:70:10:39:4b:91:45:44:35:b9: 8f:ac:dc:91:33:c3:47:d5:9c:25:1d:dc:c6:16:b4:35:81:eb: 4a:a6:2b:23:54:ba:86:2f:56:5b:d7:75:10:03:53:51:10:a6: 3e:34:65:f7:3f:8b:24:1e:68:a3:dc:f0:84:4d:64:07:31:87: c7:d8:7c:67:90:24:e3:6c:a7:b0:e3:e6:6b:de:e5:a4:c6:1d: 5a:1a:4b:3f:38:3a:ec:f5:f3:50:67:13:77:cb:dc:ba:c0:c0: 90:28:4c:97:e1:a6:5e:61:28:a8:2d:cb:0f:b8:07:34:e6:b6: 67:e7:9d:4e:30:6a:e5:f0:27:0c:ab:24:81:6c:88:84:fd:2a: 04:6d:cf:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGNjkxMTAvBgNVBAUTKDZFOTVBNjg5MjIwOTdFNzZDNERCMTI0N0VFQ0VFMUEz QjExRjhFOTEwHhcNMjUwNDI1MDMxNDIyWhcNMjUwNTAyMDMxNDIyWjAYMRYwFAYD VQQDEw02ODBhZmUwZS1hYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVh8XfSPfnxBbc/olmn9EAnz1Ny1frzymD5SIC3HF4svd0c+zqEDmM8eTdvz vrcwCRdBaNJVrGKMv0WEirS0i03Ytke+b7KaLlW1Uxd9MubUBWJKqOF/yzrdhulY IbygGpxYlnw7JzxzznSR2aADuU7vlMl3rW2wcCxoZowNn0KQO/HZrHnmqu3Gabu0 wxGoxdAaXN/EANmZQyV38PybF+dHeH3qSoqp3cM7A4t340fo2x9zx8HEfpXwH4e6 NpFYks+5NkKAdYBq+xDRzYXwInZG/7whqDHjIGJ5RkTOQj5ZbuUlfhnw9Ac+1c1T nBMaVFFp0tZ5PKr5EZGQS0/xhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHaw6ry Ger+Oludf0/k2jTOU/VdMB8GA1UdIwQYMBaAFG6VpokiCX52xNsSR+7O4aOxH46R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY2OS9EQ0Y1QzNEMjFB NUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZuYkUyeEpIN3M3aG83RWZq cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwV21pU0lKZm5iRTJ4Skg3czdobzdFZmpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEY2OS9EQ0Y1QzNEMjFBNUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZu YkUyeEpIN3M3aG83RWZqcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb5jnlYwWSAVOkGBUozmIg8+lHI3r6Zdd3tQeOx32y7+YDUs/MD8H3 7ypgkR51c3r9HaCj/PUhB9TykCEn+bzMlxO3F4kSAJpb3z6Rljo5ONooyKHVOTHM aVxZmhdi/VtanemQJeAIJiUsh2JVVAHiC9LC49BwEDlLkUVENbmPrNyRM8NH1Zwl HdzGFrQ1getKpisjVLqGL1Zb13UQA1NREKY+NGX3P4skHmij3PCETWQHMYfH2Hxn kCTjbKew4+Zr3uWkxh1aGks/ODrs9fNQZxN3y9y6wMCQKEyX4aZeYSioLcsPuAc0 5rZn551OMGrl8CcMqySBbIiE/SoEbc8P -----END CERTIFICATE-----Generated at Sat Apr 26 04:07:17 2025 by rpki-client