$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: tuOK2QhPb/Zbtc2pMYy9N1//+qAKlwbI+T7xuOuPnTk= Subject key identifier: 69:F5:64:EF:64:1F:49:8E:8D:53:ED:32:B2:9C:06:CF:1B:8C:35:C5 Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 09E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 09D8 Signing time: Thu 24 Apr 2025 19:49:25 +0000 Manifest this update: Thu 24 Apr 2025 19:49:24 +0000 Manifest next update: Thu 01 May 2025 19:49:24 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: PF8H4m4HCg0G7zgjEMV7aGcq66uB5lb+UbTzysTv9DE=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: 72pvQSlnT9rABWVd/v/7K5BYXphu+YLZZNPRawfEZ8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2528 (0x9e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: Apr 24 19:49:24 2025 GMT Not After : May 1 19:49:24 2025 GMT Subject: CN=680a95c4-0df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:58:2f:a0:c3:8a:a7:d3:73:83:a0:4f:e7: 2d:21:db:40:53:57:e8:39:63:94:b8:36:4b:58:6c: 8f:80:a8:2d:56:a3:74:ec:ab:41:2c:64:64:4a:bc: 94:38:f4:a5:9b:61:b4:5c:a9:27:75:96:fa:6f:f8: 2f:ec:74:6c:18:66:08:5b:86:36:d6:5f:58:89:db: 05:3b:4d:9b:9f:1d:ba:11:81:f0:bc:11:19:8b:43: 38:fd:1a:84:51:4a:b5:81:49:f7:c6:ab:f2:47:74: c7:86:dc:ba:f3:ea:50:8d:a1:f8:0b:93:43:bb:e9: 23:8f:09:0e:10:2f:ea:3c:1c:52:d8:bd:a3:e2:7c: a8:cf:3b:32:5d:dd:b4:9e:d3:3e:43:7c:7f:52:fa: 44:e9:6a:7a:e4:d1:01:6a:38:20:b2:12:1b:d4:9d: 48:8e:cb:ea:22:c6:39:8d:25:f6:12:71:2f:f9:a3: 0b:7f:0a:56:80:be:bf:3d:48:15:8f:64:23:17:5d: 02:fd:bc:cf:f6:26:e8:a3:05:df:5c:66:74:5c:ec: c7:26:3c:f9:19:79:7c:c9:2e:8e:0a:a1:3c:bc:98: 78:dd:24:75:9d:f5:90:03:d8:d1:d8:6b:80:9a:f7: 0a:c0:d9:c5:42:37:58:30:9b:e5:8d:24:8e:04:ee: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F5:64:EF:64:1F:49:8E:8D:53:ED:32:B2:9C:06:CF:1B:8C:35:C5 X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f1:7d:4d:ba:bc:0c:ba:6a:d5:5d:7a:57:7d:38:db:38:cd: b8:2a:a6:ae:5c:09:8b:5b:1a:f2:3e:01:70:aa:d6:bc:db:61: 44:ab:c3:56:52:4e:36:55:7d:f4:27:14:45:29:c2:8d:08:a2: cc:95:7d:97:ca:f8:de:35:de:59:9c:c1:f1:ca:e5:f7:15:39: b6:a4:06:e0:5d:a2:5f:58:d5:c0:2f:db:92:be:60:3a:60:fe: 65:59:78:b9:73:52:42:0a:71:ff:14:1c:55:ab:f5:ab:db:e1: 5a:68:c9:a1:40:53:23:71:1d:8d:52:20:20:d8:ed:5a:ed:b3: f9:ce:81:7b:be:84:78:73:1a:1b:3e:52:02:5a:39:d2:39:86: 71:80:15:55:90:f6:42:69:d3:3b:e4:04:e9:61:e2:7f:58:30: f0:0d:ce:18:2d:a0:9b:46:3e:6f:fb:91:0f:f2:f8:ee:f2:da: c1:9d:06:b9:1a:55:25:ff:4f:cf:c8:39:d2:a1:07:73:3d:af: f0:64:e5:db:ac:ed:e3:af:42:4b:fb:48:4a:7a:5d:b4:db:1f: 12:0d:ca:0d:e4:00:73:b7:eb:41:c6:9f:6d:a5:95:1b:73:da: ad:2f:5d:ae:dc:f0:9b:85:e6:32:65:0b:db:ea:d9:37:a6:bd: 83:e9:e3:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjUwNDI0MTk0OTI0WhcNMjUwNTAxMTk0OTI0WjAYMRYwFAYD VQQDEw02ODBhOTVjNC0wZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIFYL6DDiqfTc4OgT+ctIdtAU1foOWOUuDZLWGyPgKgtVqN07KtBLGRkSryU OPSlm2G0XKkndZb6b/gv7HRsGGYIW4Y21l9YidsFO02bnx26EYHwvBEZi0M4/RqE UUq1gUn3xqvyR3THhty68+pQjaH4C5NDu+kjjwkOEC/qPBxS2L2j4nyozzsyXd20 ntM+Q3x/UvpE6Wp65NEBajggshIb1J1IjsvqIsY5jSX2EnEv+aMLfwpWgL6/PUgV j2QjF10C/bzP9iboowXfXGZ0XOzHJjz5GXl8yS6OCqE8vJh43SR1nfWQA9jR2GuA mvcKwNnFQjdYMJvljSSOBO5T5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn1ZO9k H0mOjVPtMrKcBs8bjDXFMB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM8X1NurwMumrVXXpXfTjbOM24KqauXAmLWxryPgFwqta822FEq8NW Uk42VX30JxRFKcKNCKLMlX2XyvjeNd5ZnMHxyuX3FTm2pAbgXaJfWNXAL9uSvmA6 YP5lWXi5c1JCCnH/FBxVq/Wr2+FaaMmhQFMjcR2NUiAg2O1a7bP5zoF7voR4cxob PlICWjnSOYZxgBVVkPZCadM75ATpYeJ/WDDwDc4YLaCbRj5v+5EP8vju8trBnQa5 GlUl/0/PyDnSoQdzPa/wZOXbrO3jr0JL+0hKel202x8SDcoN5ABzt+tBxp9tpZUb c9qtL12u3PCbheYyZQvb6tk3pr2D6eN3 -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:26 2025 by rpki-client