$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: Zg5khQM4DDIPOXZsTFUE57jr5qJXjWitSHGoKsPHwSg= Subject key identifier: 71:17:CF:AD:4C:F2:18:8F:BF:84:5C:78:B7:1B:D2:46:C6:C2:86:ED Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 03A5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 039C Signing time: Fri 25 Apr 2025 00:32:48 +0000 Manifest this update: Fri 25 Apr 2025 00:32:47 +0000 Manifest next update: Fri 02 May 2025 00:32:47 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: eJxWH0NMSBLI5jAPUy1qvevrm+AMfWYoTvYYTJzUNtY=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: pTLG0WiZ5krYcSGHfWJAPWz+llPAx5qbifmNwzqhPMM=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: /9wYxqntRiGnvgXxlBbc4/94IQMO4HOR9thkiSTkR6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 933 (0x3a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Apr 25 00:32:47 2025 GMT Not After : May 2 00:32:47 2025 GMT Subject: CN=680ad82f-b626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5f:50:1c:72:f8:f4:b0:af:38:58:19:e5:86: a9:4d:cf:fb:dc:2e:2e:97:e3:3c:af:48:14:01:c3: fa:a1:9c:9a:54:80:41:d0:e2:52:66:38:f8:7d:3b: a9:77:60:2b:4d:f9:4c:44:dc:ae:83:1b:9e:a4:cb: 5a:6e:4e:18:7a:f4:16:5f:f0:5b:c0:c0:9e:87:e6: 37:95:b3:12:3e:7f:f9:be:49:c8:fa:ab:80:09:7e: b0:01:63:bb:a7:87:73:41:29:4b:4e:8d:b6:c8:2c: 0a:88:af:c7:f4:00:63:4e:0f:2d:19:f3:62:a9:af: 65:dd:b4:8f:38:7f:1b:05:c5:70:0d:76:db:9f:ad: 2d:96:1c:ee:21:55:fa:43:47:b1:90:47:e8:20:c9: 8d:50:32:d6:bd:d1:26:17:0e:ce:a6:87:69:80:64: 7b:60:19:c6:cf:7d:bd:8f:f4:c9:0c:e8:8a:d5:9e: 83:43:0d:6b:6e:8c:6d:84:65:ed:f1:84:86:92:2f: 6d:b8:e6:5a:29:14:41:bc:a4:d8:93:94:9c:93:9a: 8d:aa:b6:cb:88:7d:f9:4b:90:8f:c4:bc:1a:8f:4f: 07:8e:27:7d:52:0c:1f:8d:98:e0:dd:4c:5a:32:95: a5:99:ff:4e:5a:d3:2b:5d:fb:e9:1f:c0:aa:51:c8: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:17:CF:AD:4C:F2:18:8F:BF:84:5C:78:B7:1B:D2:46:C6:C2:86:ED X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:e2:5c:d8:d1:76:ed:a8:50:e2:7b:a1:a7:7d:60:d0:f4:88: 87:0d:26:e7:c9:2a:89:c9:c6:4d:c9:1a:90:3c:05:fb:08:c2: e3:d6:ad:0e:20:a5:b8:cd:f5:5c:1a:99:4a:3b:bb:39:1d:e8: ff:6d:ad:71:b2:99:09:20:5b:5a:ba:c8:30:4d:6b:a3:d0:ce: f6:01:0a:bb:e5:c2:62:43:f8:c4:61:b6:08:1d:45:ff:d3:1a: 54:4e:39:41:59:c1:00:27:e7:da:6c:5b:46:0b:35:f3:e9:09: 0f:ad:b9:fe:a2:aa:5f:1f:de:00:ef:96:81:bb:a9:c4:ff:a2: 12:e3:6e:00:a4:61:5d:00:ab:8e:57:6b:49:d4:8b:f8:ba:ea: a1:f0:3c:37:18:8a:ad:d0:9b:b8:c2:c1:5c:32:16:06:0d:56: 97:4a:77:0e:a8:13:87:34:f3:2a:48:c2:88:7e:fb:6c:f3:8d: 54:68:9e:bf:1f:fa:97:63:5e:3d:b3:db:c4:2d:72:7b:43:a1: 68:31:26:42:c7:44:6f:ef:c1:c1:c4:0b:fd:2c:bf:e3:a6:65: 30:4e:59:6b:f4:22:fe:12:c8:bd:83:aa:cd:5c:1d:99:84:a2: 5d:47:70:20:9b:26:28:db:c2:72:c2:6b:8c:d6:d4:52:8d:38: 3d:56:92:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjUwNDI1MDAzMjQ3WhcNMjUwNTAyMDAzMjQ3WjAYMRYwFAYD VQQDEw02ODBhZDgyZi1iNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5l9QHHL49LCvOFgZ5YapTc/73C4ul+M8r0gUAcP6oZyaVIBB0OJSZjj4fTup d2ArTflMRNyugxuepMtabk4YevQWX/BbwMCeh+Y3lbMSPn/5vknI+quACX6wAWO7 p4dzQSlLTo22yCwKiK/H9ABjTg8tGfNiqa9l3bSPOH8bBcVwDXbbn60tlhzuIVX6 Q0exkEfoIMmNUDLWvdEmFw7OpodpgGR7YBnGz329j/TJDOiK1Z6DQw1rboxthGXt 8YSGki9tuOZaKRRBvKTYk5Sck5qNqrbLiH35S5CPxLwaj08Hjid9UgwfjZjg3Uxa MpWlmf9OWtMrXfvpH8CqUchX8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEXz61M 8hiPv4RceLcb0kbGwobtMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy4lzY0XbtqFDie6GnfWDQ9IiHDSbnySqJycZNyRqQPAX7CMLj1q0O IKW4zfVcGplKO7s5Hej/ba1xspkJIFtausgwTWuj0M72AQq75cJiQ/jEYbYIHUX/ 0xpUTjlBWcEAJ+fabFtGCzXz6QkPrbn+oqpfH94A75aBu6nE/6IS424ApGFdAKuO V2tJ1Iv4uuqh8Dw3GIqt0Ju4wsFcMhYGDVaXSncOqBOHNPMqSMKIfvts841UaJ6/ H/qXY149s9vELXJ7Q6FoMSZCx0Rv78HBxAv9LL/jpmUwTllr9CL+Esi9g6rNXB2Z hKJdR3AgmyYo28JywmuM1tRSjTg9VpIz -----END CERTIFICATE-----Generated at Sat Apr 26 20:26:21 2025 by rpki-client