$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json) Hash identifier: +E2QKOrgMPgaqq+0Q9S1qAm7FgHUMIje0QudBC0DryU= Subject key identifier: 73:F5:0F:FD:5F:CF:3A:58:5A:14:03:02:6E:32:5A:9A:EC:08:53:31 Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Certificate serial: 0BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft Manifest number: 0BAF Signing time: Thu 24 Apr 2025 18:49:00 +0000 Manifest this update: Thu 24 Apr 2025 18:49:00 +0000 Manifest next update: Thu 01 May 2025 18:49:00 +0000 Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: KHPxDGtTgDQs5Z9n05sdELKF2s2acxlEGuH1rSCIkz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2991 (0xbaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Validity Not Before: Apr 24 18:49:00 2025 GMT Not After : May 1 18:49:00 2025 GMT Subject: CN=680a879c-22f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:d3:92:db:17:da:ac:54:da:95:2d:8c:67: 2c:2a:38:35:08:9a:4e:7c:2b:81:fc:65:32:36:4e: fb:30:30:6f:5d:ff:a6:69:3b:b4:dd:6e:aa:86:3b: 96:49:9f:2c:cf:65:3e:b3:5b:ce:54:08:54:26:ff: 52:ea:96:45:69:0a:fb:44:1f:3d:bf:9d:e7:ae:77: 78:27:97:7b:49:6c:03:51:0a:a4:c6:32:d4:70:e7: 27:08:db:c4:e9:ab:1a:bd:9e:a2:9e:b7:dc:94:2b: 07:cc:fd:aa:79:4d:c7:b3:9b:9c:d3:0b:94:03:55: ab:a0:b0:8f:31:6e:58:77:72:f3:42:24:42:1c:7a: a2:eb:d7:17:57:10:3a:7d:d5:ea:36:38:69:96:36: f6:99:dd:88:31:53:cb:e1:ea:ad:73:10:19:12:9e: 71:4c:2d:e0:f2:48:8e:d3:89:31:07:e8:40:d3:29: e5:8f:b6:b7:e7:69:6e:1c:57:be:e5:c6:d4:47:a4: a9:6a:d5:41:45:7e:eb:e7:4b:a1:d4:a6:73:99:89: f1:bb:d6:0f:3d:e4:31:b7:e4:33:fb:6c:75:e5:3a: 91:a6:2d:df:c1:8d:c1:b2:12:8e:4e:e6:1b:2e:99: 04:4a:b4:ae:53:65:33:25:79:73:e9:c2:ee:ec:b1: b7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:0F:FD:5F:CF:3A:58:5A:14:03:02:6E:32:5A:9A:EC:08:53:31 X509v3 Authority Key Identifier: keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d5:2f:a8:9d:0e:82:62:92:d7:c0:7a:d3:d4:72:c9:59:68: f9:6c:5f:ca:00:37:5c:af:1c:e2:c9:51:b8:4d:42:1b:77:cd: 8b:7e:93:44:b4:a1:ab:46:5a:48:ee:07:2c:c3:d0:15:9d:23: 5f:8d:22:17:f0:3f:60:23:54:a1:e5:9e:05:2b:0a:c3:90:c0: 17:7c:e1:4e:28:a5:95:ee:ab:4d:05:a7:d1:1e:fd:63:7c:ca: e4:6f:39:b4:ed:77:45:e2:4f:bd:ce:9c:96:3c:f3:69:9a:2b: 9b:c2:e8:49:43:9f:68:72:40:29:c4:21:83:96:8e:ba:a5:e2: 7f:62:04:bc:10:4c:49:68:f1:ce:10:06:40:8c:5e:f6:02:78: 36:82:86:f9:03:e6:b0:e5:92:61:5b:c1:d7:26:4a:60:94:fd: 90:5d:fc:1a:37:b9:5b:ec:b3:89:60:b2:73:c9:70:3c:d2:ec: a0:8e:4d:b2:61:ff:0a:61:e8:2e:04:d6:5e:3a:9d:29:0a:34: 2f:9c:a2:e4:69:77:f7:49:fa:d5:90:70:09:31:8a:11:f4:32: f8:48:79:b2:1c:49:92:00:b5:ee:8b:34:24:a2:b4:42:f4:80: 9b:ad:2b:0c:2e:5d:62:90:74:a9:15:4f:ae:b8:9e:87:43:de: e5:39:8e:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0NTcxMTAvBgNVBAUTKDA1MEU0NzlCMDk4RDY0QjZCMzg2NUIyQkU0Njg4NTc1 RUEyRDRENTEwHhcNMjUwNDI0MTg0OTAwWhcNMjUwNTAxMTg0OTAwWjAYMRYwFAYD VQQDEw02ODBhODc5Yy0yMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtU/TktsX2qxU2pUtjGcsKjg1CJpOfCuB/GUyNk77MDBvXf+maTu03W6qhjuW SZ8sz2U+s1vOVAhUJv9S6pZFaQr7RB89v53nrnd4J5d7SWwDUQqkxjLUcOcnCNvE 6asavZ6inrfclCsHzP2qeU3Hs5uc0wuUA1WroLCPMW5Yd3LzQiRCHHqi69cXVxA6 fdXqNjhpljb2md2IMVPL4eqtcxAZEp5xTC3g8kiO04kxB+hA0ynlj7a352luHFe+ 5cbUR6SpatVBRX7r50uh1KZzmYnxu9YPPeQxt+Qz+2x15TqRpi3fwY3BshKOTuYb LpkESrSuU2UzJXlz6cLu7LG3cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHP1D/1f zzpYWhQDAm4yWprsCFMxMB8GA1UdIwQYMBaAFAUOR5sJjWS2s4ZbK+RohXXqLU1R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjQ1Ny81QUY2NjEwMjFD OTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpMYXpobHNyNUdpRmRlb3RU VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRNUhtd21OWkxhemhsc3I1R2lGZGVvdFRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjQ1Ny81QUY2NjEwMjFDOTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpM YXpobHNyNUdpRmRlb3RUVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS1S+onQ6CYpLXwHrT1HLJWWj5bF/KADdcrxziyVG4TUIbd82LfpNE tKGrRlpI7gcsw9AVnSNfjSIX8D9gI1Sh5Z4FKwrDkMAXfOFOKKWV7qtNBafRHv1j fMrkbzm07XdF4k+9zpyWPPNpmiubwuhJQ59ockApxCGDlo66peJ/YgS8EExJaPHO EAZAjF72Ang2gob5A+aw5ZJhW8HXJkpglP2QXfwaN7lb7LOJYLJzyXA80uygjk2y Yf8KYeguBNZeOp0pCjQvnKLkaXf3SfrVkHAJMYoR9DL4SHmyHEmSALXuizQkorRC 9ICbrSsMLl1ikHSpFU+uuJ6HQ97lOY6V -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:12 2025 by rpki-client