$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json) Hash identifier: B4Owyv05SmiIV5IZ/E7vUJUXxj1qyFkgAFLLuA9Ohf4= Subject key identifier: BB:FF:52:F0:77:26:8D:A3:95:31:5B:09:8C:42:A3:9F:4E:97:D2:42 Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft Manifest number: 0124 Signing time: Fri 25 Apr 2025 03:45:32 +0000 Manifest this update: Fri 25 Apr 2025 03:45:31 +0000 Manifest next update: Fri 02 May 2025 03:45:31 +0000 Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: PcvDo5Vu2Hr0crDMaw3/EW/X7Wn9oQLLpgJ3X4ZV4Kg=) 2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: GWZ2MHtEWnxPiTCBVRb6cUY0T8WOEUXRXli5S8fNKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336 Validity Not Before: Apr 25 03:45:31 2025 GMT Not After : May 2 03:45:31 2025 GMT Subject: CN=680b055b-b8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:91:b5:ba:6f:17:89:90:06:69:4f:6a:dd: 14:2e:58:52:e6:cf:52:22:54:78:18:c1:74:04:ca: 7e:bc:a0:d8:af:92:12:52:a6:f0:a7:56:6a:4e:e3: 32:53:20:1b:1f:7a:a9:5f:b4:a0:85:1d:79:27:9c: 24:ec:0e:5b:2a:51:d4:ea:db:b7:eb:b6:66:2b:a1: 24:6d:5a:19:1e:00:53:16:05:93:14:5d:ee:79:83: 00:d0:fb:3e:6d:08:44:f4:a6:61:7a:3a:50:96:8b: de:0a:76:78:51:66:19:af:ae:00:7b:ad:1e:b4:b7: 6c:da:e8:2e:b3:e5:ae:79:f1:7d:46:2e:30:5f:ef: 25:78:a4:9c:60:b0:04:02:f5:50:d5:11:e1:3e:09: 89:1b:53:61:97:7b:7e:ac:f9:f3:53:76:66:f4:7d: 0f:d0:63:2a:3e:14:f5:ee:b1:08:a9:87:26:01:86: a4:0e:68:f5:02:a8:6b:48:86:03:46:56:c3:20:72: c9:2a:65:3f:9c:c7:41:5b:75:77:a2:13:b2:92:5e: e8:60:6e:0c:ab:0a:10:78:2d:1b:8c:9b:c7:15:af: 6e:bc:c6:27:08:7b:1c:cd:a4:67:90:a5:af:c8:84: 4f:7b:7e:94:01:1d:ff:ba:5c:b4:5e:72:b9:49:00: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FF:52:F0:77:26:8D:A3:95:31:5B:09:8C:42:A3:9F:4E:97:D2:42 X509v3 Authority Key Identifier: keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:62:68:95:97:f1:2d:c4:26:99:45:42:b1:82:e1:4d:46:c3: 63:16:dd:0b:44:3a:e7:58:8a:c1:fc:47:d9:de:af:00:54:16: 9b:9f:55:00:71:d3:28:79:72:9d:6d:f6:4c:46:3c:17:72:81: fa:85:ce:4d:ba:7f:bb:a5:28:19:bf:66:8a:39:75:48:8d:5d: 01:3b:11:d4:b0:d8:0d:51:d4:85:16:ba:66:a6:8f:1d:36:6d: cd:7d:01:33:ff:66:4f:8e:f7:7a:5a:23:de:22:4a:2e:96:73: f2:4c:a0:64:3d:59:a9:58:83:66:c2:da:0a:5f:dc:dd:e5:7b: 21:59:4d:31:b8:1f:e7:65:0d:c9:92:eb:1f:5f:48:fb:0d:98: a3:fd:98:6b:75:98:93:6d:9e:11:d4:97:83:c9:75:36:8b:57: bf:15:f5:07:2a:2a:cf:21:76:20:c9:b2:85:8a:c3:85:07:97: bd:62:5e:d8:75:bb:00:da:68:f4:86:33:fb:72:e2:39:7e:ba: ac:d4:12:a0:7f:2a:4d:b1:f6:d4:38:1a:71:f3:4e:e0:62:82: a5:6f:bd:f0:a1:53:f6:18:0e:a2:50:29:16:4d:7f:03:7b:cf: c6:6a:7f:29:29:cf:f6:e6:f6:5b:60:ab:e4:44:5b:f4:30:e4: d9:9b:0b:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3RUQxMTAvBgNVBAUTKDA3MUY4MTE5MTcxNDQxODAyQkUzMjYxRjE1NjI3REFG Mjg5REIzMzYwHhcNMjUwNDI1MDM0NTMxWhcNMjUwNTAyMDM0NTMxWjAYMRYwFAYD VQQDEw02ODBiMDU1Yi1iOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoGRtbpvF4mQBmlPat0ULlhS5s9SIlR4GMF0BMp+vKDYr5ISUqbwp1ZqTuMy UyAbH3qpX7SghR15J5wk7A5bKlHU6tu367ZmK6EkbVoZHgBTFgWTFF3ueYMA0Ps+ bQhE9KZhejpQloveCnZ4UWYZr64Ae60etLds2ugus+WuefF9Ri4wX+8leKScYLAE AvVQ1RHhPgmJG1Nhl3t+rPnzU3Zm9H0P0GMqPhT17rEIqYcmAYakDmj1AqhrSIYD RlbDIHLJKmU/nMdBW3V3ohOykl7oYG4MqwoQeC0bjJvHFa9uvMYnCHsczaRnkKWv yIRPe36UAR3/uly0XnK5SQA2RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLv/UvB3 Jo2jlTFbCYxCo59Ol9JCMB8GA1UdIwQYMBaAFAcfgRkXFEGAK+MmHxVifa8onbM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdFRC82REI5NTRBMjYy QTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZQXI0eVlmRldKOXJ5aWRz elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4LUJHUmNVUVlBcjR5WWZGV0o5cnlpZHN6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdFRC82REI5NTRBMjYyQTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZ QXI0eVlmRldKOXJ5aWRzelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKYmiVl/EtxCaZRUKxguFNRsNjFt0LRDrnWIrB/EfZ3q8AVBabn1UA cdMoeXKdbfZMRjwXcoH6hc5Nun+7pSgZv2aKOXVIjV0BOxHUsNgNUdSFFrpmpo8d Nm3NfQEz/2ZPjvd6WiPeIkoulnPyTKBkPVmpWINmwtoKX9zd5XshWU0xuB/nZQ3J kusfX0j7DZij/ZhrdZiTbZ4R1JeDyXU2i1e/FfUHKirPIXYgybKFisOFB5e9Yl7Y dbsA2mj0hjP7cuI5frqs1BKgfypNsfbUOBpx807gYoKlb73woVP2GA6iUCkWTX8D e8/Gan8pKc/25vZbYKvkRFv0MOTZmwuj -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:50 2025 by rpki-client