$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: NuUWPDn+YPHOD0SfwJ4BaShwCUOzpPgAhuwmNgn7IJo= Subject key identifier: 86:FA:93:33:18:D5:F4:09:4A:65:33:12:CB:3E:DF:4C:44:97:21:C3 Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: F4 Signing time: Fri 25 Apr 2025 04:20:38 +0000 Manifest this update: Fri 25 Apr 2025 04:20:37 +0000 Manifest next update: Fri 02 May 2025 04:20:37 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: o6uWs/YDcNgjMVyv8dmKDHVevYYkiRUk3S3XQ22SJAc=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: Apr 25 04:20:37 2025 GMT Not After : May 2 04:20:37 2025 GMT Subject: CN=680b0d96-9cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:7a:32:b1:1a:52:fe:cc:c1:22:be:72:27: dc:67:fc:29:1b:68:65:de:d4:d9:d8:37:17:58:09: 41:82:3b:1d:a9:39:e7:4e:20:0f:0f:8e:e2:2b:13: 2c:c9:32:88:02:cb:41:5f:1e:59:7c:57:bf:b5:af: fb:00:9d:d7:7f:ed:c9:99:ca:4b:f6:c6:a1:c8:f5: e2:ee:ea:2f:8f:09:2d:13:df:b6:ff:9c:32:58:dd: 92:2e:f8:07:17:a5:ea:ad:3d:00:1c:53:13:c4:f0: 86:48:a8:40:bb:35:b3:8f:2a:6f:0a:6a:75:a7:b4: 68:f7:4a:9b:8b:c1:ab:42:f5:db:3e:b7:b7:c6:af: 34:fb:96:eb:37:9a:35:b6:f0:1d:08:2e:72:62:3c: 41:50:7e:cc:48:12:9c:0b:29:08:c4:61:46:79:f3: 04:ec:c0:f4:7e:a5:9f:72:e4:4e:fa:d8:e6:c0:9b: a7:bb:4b:19:95:9d:7d:3f:7a:b7:3d:c3:a0:91:bb: b8:85:bc:a6:38:25:c0:80:35:d5:cb:04:64:bf:c7: b1:50:fa:4f:c0:bb:90:ad:cf:5e:cc:a2:a9:09:a0: 62:15:2c:2d:db:43:59:e2:c6:53:8e:63:71:ba:0a: 18:ef:da:1f:46:22:e5:fb:3d:07:a7:27:0c:ed:fa: b9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FA:93:33:18:D5:F4:09:4A:65:33:12:CB:3E:DF:4C:44:97:21:C3 X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b3:23:f7:72:fc:e2:10:bd:2f:bc:2e:89:61:91:d2:26:b3: ec:30:17:d8:e5:a1:fc:ab:bd:9f:c0:c2:55:b0:63:a9:ae:43: 93:c0:9d:84:95:4b:b0:77:2c:3c:96:fe:1f:bd:b5:e9:8d:48: 3a:4a:89:c8:8d:1f:33:55:b7:92:fc:62:74:62:8d:4a:7b:cf: 73:cd:8d:25:c8:6c:45:d4:69:c1:77:49:d7:1a:25:d6:9f:b4: 0b:0a:80:9f:99:11:51:1c:c2:b5:cd:22:7b:3f:7b:1e:24:e8: 00:e6:1b:17:48:b3:d2:51:37:2f:a2:c9:86:62:74:84:72:86: 60:a0:30:3f:f2:98:c0:0c:e1:ae:07:67:04:a0:1c:b5:ee:c6: a3:31:85:7c:b1:27:cd:97:ee:19:86:70:44:fe:71:89:14:cb: 2b:75:8c:c4:e5:82:8f:a5:42:6a:46:c5:63:9c:cc:75:bf:62: 01:fb:ef:ea:52:17:30:17:a6:09:02:64:19:d6:d0:35:87:be: 4a:d8:81:08:96:ac:97:48:4c:24:d6:7e:e1:6f:a0:7b:a4:c6: fd:44:04:c0:b8:b2:7b:83:e1:c2:94:79:f2:a2:21:bf:9a:33: 21:47:b9:25:d0:cb:c8:ac:ba:5d:a7:58:27:cf:69:23:90:3c: 6b:26:3d:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjUwNDI1MDQyMDM3WhcNMjUwNTAyMDQyMDM3WjAYMRYwFAYD VQQDEw02ODBiMGQ5Ni05Y2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpl6MrEaUv7MwSK+cifcZ/wpG2hl3tTZ2DcXWAlBgjsdqTnnTiAPD47iKxMs yTKIAstBXx5ZfFe/ta/7AJ3Xf+3JmcpL9sahyPXi7uovjwktE9+2/5wyWN2SLvgH F6XqrT0AHFMTxPCGSKhAuzWzjypvCmp1p7Ro90qbi8GrQvXbPre3xq80+5brN5o1 tvAdCC5yYjxBUH7MSBKcCykIxGFGefME7MD0fqWfcuRO+tjmwJunu0sZlZ19P3q3 PcOgkbu4hbymOCXAgDXVywRkv8exUPpPwLuQrc9ezKKpCaBiFSwt20NZ4sZTjmNx ugoY79ofRiLl+z0HpycM7fq5lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb6kzMY 1fQJSmUzEss+30xElyHDMB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcsyP3cvziEL0vvC6JYZHSJrPsMBfY5aH8q72fwMJVsGOprkOTwJ2E lUuwdyw8lv4fvbXpjUg6SonIjR8zVbeS/GJ0Yo1Ke89zzY0lyGxF1GnBd0nXGiXW n7QLCoCfmRFRHMK1zSJ7P3seJOgA5hsXSLPSUTcvosmGYnSEcoZgoDA/8pjADOGu B2cEoBy17sajMYV8sSfNl+4ZhnBE/nGJFMsrdYzE5YKPpUJqRsVjnMx1v2IB++/q UhcwF6YJAmQZ1tA1h75K2IEIlqyXSEwk1n7hb6B7pMb9RATAuLJ7g+HClHnyoiG/ mjMhR7kl0MvIrLpdp1gnz2kjkDxrJj3O -----END CERTIFICATE-----Generated at Sat Apr 26 05:00:41 2025 by rpki-client