$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft File: BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft (raw, json) Hash identifier: +zqsP1cglMOlN8Tm3Cky8bRbuLsok2jNU3Jfty/bSeA= Subject key identifier: 5E:92:DA:85:5A:05:E7:2E:00:E2:27:A1:A2:B5:1C:F7:48:81:86:E3 Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft Manifest number: DE Signing time: Mon 05 May 2025 04:26:30 +0000 Manifest this update: Mon 05 May 2025 04:26:30 +0000 Manifest next update: Mon 12 May 2025 04:26:30 +0000 Files and hashes: 1: BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl (hash: Q2H1n1DjAsu8dsusLiwSYgV5I6o0DfwkB8oowGUp2cg=) 2: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (hash: /wi8tgvE4O56j6aStHMPLW1czedgDux+3mSXV2uL2Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Validity Not Before: May 5 04:26:30 2025 GMT Not After : May 12 04:26:30 2025 GMT Subject: CN=68183df6-3296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ac:d4:55:19:b3:08:2b:6f:50:4d:0d:b6:b9: 05:1c:38:59:8b:fa:38:5e:88:74:d1:8e:a9:3c:ff: b0:c9:2e:b6:ee:5f:61:a4:55:fc:09:a8:56:35:e7: 4d:d5:4e:a4:05:7d:01:42:9a:01:c1:6a:fb:6e:f6: 82:1e:3c:37:24:3c:94:a9:3a:a3:72:91:7d:ab:cf: c0:47:b3:b5:20:4f:cd:bc:96:f7:47:3f:f1:d5:b0: a9:1e:81:ac:16:db:6b:34:ac:8a:5b:f0:24:7e:4c: 94:ba:02:cb:52:7f:4f:c4:79:5d:ac:3f:48:ec:bb: 32:b6:78:e0:bc:07:26:cd:d2:10:ea:23:14:30:9c: 06:88:f4:9c:9d:44:37:c9:91:93:89:e5:35:06:9f: 0f:34:5c:4d:9d:96:02:64:79:c4:1c:92:91:21:23: 63:0c:7d:bb:13:93:77:a9:3e:a5:7e:90:f0:ce:e4: bd:c9:44:18:4a:07:18:43:58:20:89:fd:66:06:38: ca:5a:1a:a7:94:51:f5:3d:fd:db:6b:e7:fb:38:45: 54:b2:71:88:2d:fe:c5:4a:cb:44:58:a6:2c:8c:3a: 19:a1:eb:43:2c:4f:99:ba:fa:2f:66:e0:6d:7c:11: 82:d9:0a:f8:a8:4a:86:b1:2b:4c:ab:92:a4:ca:ab: 72:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:92:DA:85:5A:05:E7:2E:00:E2:27:A1:A2:B5:1C:F7:48:81:86:E3 X509v3 Authority Key Identifier: keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:58:f1:b7:30:c6:77:05:1d:33:22:b6:11:35:79:d1:f1:71: 30:12:3e:f0:fb:81:c3:77:28:76:c2:8a:c8:62:0c:92:26:ce: 46:3b:ef:8c:8f:ab:ba:4a:c6:6c:46:be:91:41:9f:d8:aa:cf: f2:7f:bf:89:cc:48:0d:e0:25:5c:59:c6:31:c5:21:90:99:7e: c0:aa:74:1f:c3:fc:44:06:0d:a0:43:b2:53:02:cf:31:5f:d5: ee:e1:ee:fe:77:64:dc:f8:fc:d7:4b:a2:b0:d0:55:ac:72:50: 96:ca:fc:3c:bf:e3:0c:9c:55:47:6b:c2:12:76:fe:28:09:1a: 01:8c:f7:75:21:c8:67:08:e0:ce:37:82:64:c6:89:a2:3b:01: 81:19:f5:af:6c:e6:81:d0:2e:85:12:cd:fc:21:0d:4c:43:65: f2:cf:11:3a:f7:84:b4:49:8f:a9:d3:87:ec:3f:3f:0d:e9:67: a1:2c:9a:ac:dd:39:99:cf:36:e3:74:41:84:85:79:a9:04:06: 9e:ca:96:fe:3e:47:aa:25:e9:0a:33:6c:47:e5:de:b9:8e:b8: f3:23:b5:9a:38:90:e3:54:74:67:63:8f:73:d6:36:fd:33:1b: 9d:22:b5:df:a7:09:66:61:56:3a:48:6c:dc:b1:fd:5a:94:bb: 11:e9:4b:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhERDExMTAvBgNVBAUTKDA2RDYyQzdBODQwNzZFMUM2NDk0MDQwNjI1ODkxOUQ2 N0QxNUFCRTEwHhcNMjUwNTA1MDQyNjMwWhcNMjUwNTEyMDQyNjMwWjAYMRYwFAYD VQQDEw02ODE4M2RmNi0zMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qzUVRmzCCtvUE0NtrkFHDhZi/o4Xoh00Y6pPP+wyS627l9hpFX8CahWNedN 1U6kBX0BQpoBwWr7bvaCHjw3JDyUqTqjcpF9q8/AR7O1IE/NvJb3Rz/x1bCpHoGs FttrNKyKW/AkfkyUugLLUn9PxHldrD9I7LsytnjgvAcmzdIQ6iMUMJwGiPScnUQ3 yZGTieU1Bp8PNFxNnZYCZHnEHJKRISNjDH27E5N3qT6lfpDwzuS9yUQYSgcYQ1gg if1mBjjKWhqnlFH1Pf3ba+f7OEVUsnGILf7FSstEWKYsjDoZoetDLE+ZuvovZuBt fBGC2Qr4qEqGsStMq5KkyqtyyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6S2oVa BecuAOInoaK1HPdIgYbjMB8GA1UdIwQYMBaAFAbWLHqEB24cZJQEBiWJGdZ9Favh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEREMS8yNURENTlGOEUx QzkxMUVFQkUxRjUwNjhDNEY5QUUwMi9CdFlzZW9RSGJoeGtsQVFHSllrWjFuMFZx LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0WXNlb1FIYmh4a2xBUUdKWWtaMW4wVnEtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEREMS8yNURENTlGOEUxQzkxMUVFQkUxRjUwNjhDNEY5QUUwMi9CdFlzZW9RSGJo eGtsQVFHSllrWjFuMFZxLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0WPG3MMZ3BR0zIrYRNXnR8XEwEj7w+4HDdyh2worIYgySJs5GO++M j6u6SsZsRr6RQZ/Yqs/yf7+JzEgN4CVcWcYxxSGQmX7AqnQfw/xEBg2gQ7JTAs8x X9Xu4e7+d2Tc+PzXS6Kw0FWsclCWyvw8v+MMnFVHa8ISdv4oCRoBjPd1IchnCODO N4JkxomiOwGBGfWvbOaB0C6FEs38IQ1MQ2XyzxE694S0SY+p04fsPz8N6WehLJqs 3TmZzzbjdEGEhXmpBAaeypb+PkeqJekKM2xH5d65jrjzI7WaOJDjVHRnY49z1jb9 MxudIrXfpwlmYVY6SGzcsf1alLsR6Uug -----END CERTIFICATE-----Generated at Mon May 5 23:41:56 2025 by rpki-client