$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft File: BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json) Hash identifier: +WpFj9KG/aboPk976rPH7oIy/bSSSUA27oP1ZWiAqDQ= Subject key identifier: EF:97:59:FC:81:09:6A:EC:5E:BE:A4:17:E9:B0:06:20:4B:13:42:E5 Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Certificate serial: 0619 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft Manifest number: 060D Signing time: Thu 24 Apr 2025 22:41:27 +0000 Manifest this update: Thu 24 Apr 2025 22:41:26 +0000 Manifest next update: Thu 01 May 2025 22:41:26 +0000 Files and hashes: 1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: /7osjWsVrY2ylrIvgfcCq/wSA+yL0DFPg80vwo1eZzo=) 2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: NBdHfFLz3DL0xp9ly121d+fttg0f9aauvwFg8/4e9ds=) 3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: LKITiJ4ISd4LnGgW0YqiQuvoGRC1GVrRJfh2GhffjxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1561 (0x619) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Validity Not Before: Apr 24 22:41:26 2025 GMT Not After : May 1 22:41:26 2025 GMT Subject: CN=680abe17-bb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:d6:d6:9f:f9:a3:a9:1d:11:07:9d:1e:2e: 9f:79:72:14:d8:b8:49:c8:24:14:89:c9:ac:7d:28: cf:9d:e8:f2:2d:97:cf:64:00:fc:e9:9d:bf:3d:41: 04:82:32:5b:47:78:4d:90:62:16:a1:36:6b:fb:9a: 15:fd:29:32:00:e4:3e:68:de:a0:0e:1f:a8:b5:eb: 8c:7b:69:eb:7b:36:41:04:af:a5:d2:7c:ea:95:e3: 13:db:e7:27:4b:fb:30:be:2d:2d:f9:6c:89:74:3c: a5:b0:24:44:d0:a3:80:9c:f6:16:28:13:7a:03:11: 38:b3:15:98:5c:b9:94:31:ec:4e:95:58:1c:36:8a: f3:83:c4:e9:ca:3f:1a:ac:eb:61:39:93:16:d3:95: 99:c3:fc:4b:e7:81:a7:97:57:eb:a1:90:d2:10:38: bc:c3:bc:8f:81:77:bb:3b:e0:a7:e8:5f:a8:93:c1: 0e:74:f5:86:7f:70:4b:d4:8d:4c:ec:dd:47:68:a4: 9b:86:5e:cd:e8:aa:c6:03:3e:d8:9c:92:fb:d4:de: 18:12:c0:8b:98:6a:7b:ae:93:75:67:05:c2:97:db: a9:29:26:04:c2:17:36:22:e1:5a:f3:ef:50:73:e9: a3:5c:5e:d8:2d:3b:fb:4f:59:7c:5b:10:8f:26:34: 11:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:97:59:FC:81:09:6A:EC:5E:BE:A4:17:E9:B0:06:20:4B:13:42:E5 X509v3 Authority Key Identifier: keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a8:83:66:32:46:84:bd:4e:46:f0:44:cb:41:c5:d3:0b:fa: 29:d1:1c:fa:53:f9:63:44:b0:75:ce:0d:1c:b1:fb:1e:7e:c4: 81:9a:f3:a9:51:6c:5a:ef:5e:76:7a:b0:6f:a0:0e:f2:84:f5: 11:0b:07:a0:78:c1:11:47:ac:bc:0a:26:2d:2d:88:fe:61:59: 7e:c4:4e:ec:0e:cf:aa:0b:de:3f:5d:c3:f3:24:b8:67:0d:5c: aa:a9:81:8d:77:a2:bf:8e:d6:e7:c7:1f:01:1d:30:24:1c:21: 2e:41:d9:a1:bf:37:d5:2f:d4:20:73:fc:63:9a:8d:22:fd:f5: f9:8d:eb:cb:b2:ff:be:76:98:d6:f2:81:df:42:98:42:c7:1c: b5:99:76:ff:25:80:37:62:6a:2c:e6:87:88:f7:e5:4b:08:d7: f5:43:4c:5f:e1:cb:d2:74:78:2a:14:b1:86:c3:98:7a:5f:6a: 57:29:f6:70:06:01:87:31:b5:fb:16:36:19:7b:f0:59:0f:43: 9c:6e:1f:c0:7c:86:16:d0:11:1b:19:f0:30:18:fd:ad:2e:6f: 9b:c3:9d:c2:c0:bb:83:d8:e3:7d:bc:6a:f7:e1:12:bd:d7:12: 68:53:4c:af:d8:f9:05:81:a0:8d:55:30:d2:3c:32:40:8d:7a: f7:87:7d:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RDMxMTAvBgNVBAUTKDA1QzMyRjVENkZEOTU2N0NCNzAwMDVCMUQ3NEE0MUE4 NUI1QkU3MTIwHhcNMjUwNDI0MjI0MTI2WhcNMjUwNTAxMjI0MTI2WjAYMRYwFAYD VQQDEw02ODBhYmUxNy1iYjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwd3W1p/5o6kdEQedHi6feXIU2LhJyCQUicmsfSjPnejyLZfPZAD86Z2/PUEE gjJbR3hNkGIWoTZr+5oV/SkyAOQ+aN6gDh+oteuMe2nrezZBBK+l0nzqleMT2+cn S/swvi0t+WyJdDylsCRE0KOAnPYWKBN6AxE4sxWYXLmUMexOlVgcNorzg8Tpyj8a rOthOZMW05WZw/xL54Gnl1froZDSEDi8w7yPgXe7O+Cn6F+ok8EOdPWGf3BL1I1M 7N1HaKSbhl7N6KrGAz7YnJL71N4YEsCLmGp7rpN1ZwXCl9upKSYEwhc2IuFa8+9Q c+mjXF7YLTv7T1l8WxCPJjQRPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+XWfyB CWrsXr6kF+mwBiBLE0LlMB8GA1UdIwQYMBaAFAXDL11v2VZ8twAFsddKQahbW+cS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVEMy82Q0E5RDY5MEEx QTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZueTNBQVd4MTBwQnFGdGI1 eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjTXZYV19aVm55M0FBV3gxMHBCcUZ0YjV4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVEMy82Q0E5RDY5MEExQTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZu eTNBQVd4MTBwQnFGdGI1eEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVqINmMkaEvU5G8ETLQcXTC/op0Rz6U/ljRLB1zg0csfsefsSBmvOp UWxa7152erBvoA7yhPURCwegeMERR6y8CiYtLYj+YVl+xE7sDs+qC94/XcPzJLhn DVyqqYGNd6K/jtbnxx8BHTAkHCEuQdmhvzfVL9Qgc/xjmo0i/fX5jevLsv++dpjW 8oHfQphCxxy1mXb/JYA3Ymos5oeI9+VLCNf1Q0xf4cvSdHgqFLGGw5h6X2pXKfZw BgGHMbX7FjYZe/BZD0Ocbh/AfIYW0BEbGfAwGP2tLm+bw53CwLuD2ON9vGr34RK9 1xJoU0yv2PkFgaCNVTDSPDJAjXr3h32v -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:35 2025 by rpki-client