$ rpki-client -vvf rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft File: B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft (raw, json) Hash identifier: RAAornPd4rXL/BlMFvmj/P2Zr2ZbZaM6nd95e/cjpKA= Subject key identifier: 60:3B:B3:FC:0A:22:1A:1C:10:CE:62:50:55:94:53:D5:82:87:60:81 Authority key identifier: 07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3 Certificate issuer: /CN=A91C13E1/serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft Manifest number: BA Signing time: Fri 25 Apr 2025 04:57:09 +0000 Manifest this update: Fri 25 Apr 2025 04:57:08 +0000 Manifest next update: Fri 02 May 2025 04:57:08 +0000 Files and hashes: 1: B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl (hash: bq35taKAwA6nCaHEYVAfjEwEMDndK6zaytDRUHpStbY=) 2: 5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa (hash: OGzJcg7L9PCLCfzbyQJgcKaHiB3UrYwg9svS3wqdzqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C13E1, serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3 Validity Not Before: Apr 25 04:57:08 2025 GMT Not After : May 2 04:57:08 2025 GMT Subject: CN=680b1625-6385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:96:dc:3c:15:18:77:9b:eb:05:78:ab:40: ab:e1:d7:0a:29:0b:79:c5:47:59:d6:13:31:ae:6c: c1:78:c8:b4:6e:96:3a:9b:5e:82:22:ff:3b:51:cb: a5:53:4d:fc:a9:0c:7a:b7:9a:ac:c8:aa:9a:dd:ab: fc:ba:4e:85:d0:b4:06:5b:1e:ed:0e:ed:30:aa:7b: ab:3e:c4:63:c9:18:bf:b7:e0:62:7c:2e:c3:aa:87: 5a:f5:bb:a6:e7:b6:4c:6f:54:aa:9f:0b:32:93:b9: b8:ae:0d:9e:44:dd:ce:3f:85:3e:d5:a0:0a:66:ac: f4:7c:fc:09:89:ed:ad:2f:0f:17:8a:1f:99:c6:12: 5f:33:0a:12:bf:16:d5:b7:a3:50:23:5a:59:39:13: 5a:f2:a5:6f:05:3e:0e:14:e6:40:91:8f:89:7c:20: 92:8e:37:72:e9:10:52:72:57:00:ad:fc:06:69:8e: 0c:0f:54:f0:43:2a:5e:a4:78:12:e3:62:ad:84:5d: 9c:dc:3d:b1:59:84:36:8f:4e:aa:67:b5:e3:68:58: 28:a4:9a:5e:97:19:33:60:22:b8:ed:b0:00:41:a2: 41:62:c7:b6:d2:b5:02:e4:70:2b:af:df:4d:c4:54: c7:1d:eb:df:8b:a5:b8:76:01:4b:e4:9a:cd:f0:49: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3B:B3:FC:0A:22:1A:1C:10:CE:62:50:55:94:53:D5:82:87:60:81 X509v3 Authority Key Identifier: keyid:07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:73:4a:25:af:6c:87:d5:17:7d:87:91:c2:60:14:0d:23:2a: 9e:0a:ee:09:b5:3c:ca:da:34:d9:1e:e2:0e:5a:7b:12:eb:64: af:3b:88:14:05:77:89:13:85:bf:b2:b7:55:c9:90:a4:43:e5: 5b:65:83:5c:9f:7f:ff:39:2a:eb:52:c3:8d:d0:ae:72:10:a9: 8a:69:e7:f2:16:41:27:ea:e9:1e:76:f3:57:de:9c:bb:af:bb: d2:64:ef:e5:bd:ce:e4:45:2f:bd:c7:f7:cd:1e:c3:60:29:f7: bf:49:49:d5:50:22:fa:ec:79:6c:7e:5f:18:59:05:e3:8b:48: cf:6f:96:19:af:00:5c:92:4c:45:d7:82:30:7f:54:9c:9e:a6: 03:1f:43:5a:b3:60:55:be:58:49:f4:88:f3:b2:40:21:c1:75: ab:0a:e4:10:1f:99:29:9e:56:2d:84:79:1c:ad:01:42:14:00: a6:85:1b:bc:ef:67:ff:16:19:67:22:4b:3e:a0:51:6e:cf:a8: ea:38:06:18:97:e0:98:b4:3c:8f:da:ac:2d:59:1a:ef:cb:8f: 78:8e:1c:5c:b1:ad:e5:8a:00:e6:c5:00:1f:3e:69:19:f8:b4: b1:04:0a:46:fc:c7:b7:3f:71:b5:60:85:5f:94:09:10:87:c1: a8:e2:80:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzRTExMTAvBgNVBAUTKDA3N0JFQTlCRkUzMDA2NDYxNjVDMzQzNkM3RDRDQzM4 MzQ2QzZCQTMwHhcNMjUwNDI1MDQ1NzA4WhcNMjUwNTAyMDQ1NzA4WjAYMRYwFAYD VQQDEw02ODBiMTYyNS02Mzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIOW3DwVGHeb6wV4q0Cr4dcKKQt5xUdZ1hMxrmzBeMi0bpY6m16CIv87Ucul U038qQx6t5qsyKqa3av8uk6F0LQGWx7tDu0wqnurPsRjyRi/t+BifC7Dqoda9bum 57ZMb1Sqnwsyk7m4rg2eRN3OP4U+1aAKZqz0fPwJie2tLw8Xih+ZxhJfMwoSvxbV t6NQI1pZORNa8qVvBT4OFOZAkY+JfCCSjjdy6RBSclcArfwGaY4MD1TwQypepHgS 42KthF2c3D2xWYQ2j06qZ7XjaFgopJpelxkzYCK47bAAQaJBYse20rUC5HArr99N xFTHHevfi6W4dgFL5JrN8EnoJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA7s/wK IhocEM5iUFWUU9WCh2CBMB8GA1UdIwQYMBaAFAd76pv+MAZGFlw0NsfUzDg0bGuj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTNFMS84MkZERjkxQTA1 RkMxMUVGOEE1RkMzNjhDNEY5QUUwMi9CM3ZxbV80d0JrWVdYRFEyeDlUTU9EUnNh Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IzdnFtXzR3QmtZV1hEUTJ4OVRNT0RSc2E2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTNFMS84MkZERjkxQTA1RkMxMUVGOEE1RkMzNjhDNEY5QUUwMi9CM3ZxbV80d0Jr WVdYRFEyeDlUTU9EUnNhNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoc0olr2yH1Rd9h5HCYBQNIyqeCu4JtTzK2jTZHuIOWnsS62SvO4gU BXeJE4W/srdVyZCkQ+VbZYNcn3//OSrrUsON0K5yEKmKaefyFkEn6ukedvNX3py7 r7vSZO/lvc7kRS+9x/fNHsNgKfe/SUnVUCL67Hlsfl8YWQXji0jPb5YZrwBckkxF 14Iwf1ScnqYDH0Nas2BVvlhJ9IjzskAhwXWrCuQQH5kpnlYthHkcrQFCFACmhRu8 72f/FhlnIks+oFFuz6jqOAYYl+CYtDyP2qwtWRrvy494jhxcsa3ligDmxQAfPmkZ +LSxBApG/Me3P3G1YIVflAkQh8Go4oAb -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:26 2025 by rpki-client