$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json) Hash identifier: V76B092iF8slGkJAROnhiywX3BUVrkWI9GtMpFfp3mQ= Subject key identifier: 88:AE:39:3F:F9:BD:93:E4:7D:A9:83:8F:88:0A:5C:96:A8:FB:DF:DA Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft Manifest number: 04E3 Signing time: Thu 24 Apr 2025 23:32:35 +0000 Manifest this update: Thu 24 Apr 2025 23:32:35 +0000 Manifest next update: Thu 01 May 2025 23:32:35 +0000 Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: xFFYILWiCQoJXswPI5usF6CQZb8Yhei2x+AjQCipLuo=) 2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: UibVZP54wNfnJM5fmfROJ4sssLQa2oOrL7RimgDBnPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Validity Not Before: Apr 24 23:32:35 2025 GMT Not After : May 1 23:32:35 2025 GMT Subject: CN=680aca13-37a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:be:28:f0:8a:a5:45:91:1f:02:ad:ea:a0: b4:cb:aa:68:d0:cd:8a:b9:4d:cb:6f:7c:34:c4:13: 49:42:48:e2:f3:4a:20:2c:02:c3:fa:36:16:a5:45: 9d:90:35:bf:6d:5e:99:3d:28:1d:66:ba:3b:47:4c: 11:a7:9e:5f:cd:2e:e9:23:12:55:99:22:96:ce:8c: 2f:5f:c5:d3:c8:03:9d:43:24:f2:f7:b0:3b:10:e0: ba:ac:02:d3:e5:45:5c:ee:3f:f4:ba:44:29:35:e4: 9a:14:02:85:5c:4a:8f:e8:c3:81:6f:f7:6c:88:04: 24:eb:43:05:09:e0:f6:08:34:30:c8:1e:1d:24:07: d7:34:12:33:37:7d:5a:72:62:d0:f8:ed:93:57:25: 46:e0:4b:45:e2:f1:ec:77:5a:52:4b:81:27:d2:22: 2a:58:53:e4:47:52:7c:05:3c:80:69:4b:bc:ff:95: 37:ba:01:6b:01:17:5a:aa:f9:01:cf:37:f5:ff:c8: a9:de:3c:ff:2e:19:0a:36:6d:88:2b:82:a0:6f:6f: a1:44:36:ad:96:44:c1:36:7d:12:4c:18:04:d1:29: 0d:cd:76:f3:72:17:3b:c1:b3:ed:c7:0e:c4:91:33: 35:ed:ab:e6:8f:26:bd:dd:8d:9e:f1:59:b0:3c:f1: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AE:39:3F:F9:BD:93:E4:7D:A9:83:8F:88:0A:5C:96:A8:FB:DF:DA X509v3 Authority Key Identifier: keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:79:2b:1b:7e:19:f4:b6:cb:5e:f4:93:1b:a1:e0:f2:aa:97: 50:6e:5a:85:02:a1:bd:e5:70:0c:6a:33:bb:73:0a:2a:14:5a: 4d:c0:4a:c8:5f:1a:47:b5:75:d8:41:5b:dd:76:c5:cc:5c:c8: 67:ec:d3:3f:3d:8c:26:34:3f:0d:d4:08:fe:77:6d:89:8b:d5: 5e:24:e5:42:11:69:6c:28:22:a5:70:8d:f8:d5:23:ba:55:ec: 78:77:56:9e:22:b7:b6:1b:b7:e9:9a:47:89:c5:30:0b:99:90: c7:57:33:cc:f7:72:8c:fb:6f:ca:6e:8d:2b:09:29:2e:08:b4: 43:5e:d9:c0:32:6d:af:08:24:07:08:32:17:fc:8a:19:cb:a0: ec:77:75:8d:d1:54:b4:70:61:3e:b5:24:7d:d4:da:0f:1e:1a: a0:49:e1:14:b5:6e:7f:9d:91:6d:4a:67:b0:96:84:a6:16:ed: d8:f6:8e:ae:87:32:42:43:0d:c8:a3:a6:71:8c:af:de:dc:8f: 08:f7:7a:0c:14:9a:c6:a3:9b:aa:64:fd:83:ef:38:ba:b4:d8: 08:ea:f6:24:6d:f9:86:b5:0c:d2:f2:c7:52:e8:93:32:8c:ce: 49:57:a1:fa:98:57:cf:01:42:76:6a:ff:ab:75:34:87:85:24: 1c:a6:77:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QUIxMTAvBgNVBAUTKDA0QTdFQjA0OUE5MzdGRDlGMkI4NkUxNTlERERGNUQy Qzk5QUQ0MUUwHhcNMjUwNDI0MjMzMjM1WhcNMjUwNTAxMjMzMjM1WjAYMRYwFAYD VQQDEw02ODBhY2ExMy0zN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZm+KPCKpUWRHwKt6qC0y6po0M2KuU3Lb3w0xBNJQkji80ogLALD+jYWpUWd kDW/bV6ZPSgdZro7R0wRp55fzS7pIxJVmSKWzowvX8XTyAOdQyTy97A7EOC6rALT 5UVc7j/0ukQpNeSaFAKFXEqP6MOBb/dsiAQk60MFCeD2CDQwyB4dJAfXNBIzN31a cmLQ+O2TVyVG4EtF4vHsd1pSS4En0iIqWFPkR1J8BTyAaUu8/5U3ugFrARdaqvkB zzf1/8ip3jz/LhkKNm2IK4Kgb2+hRDatlkTBNn0STBgE0SkNzXbzchc7wbPtxw7E kTM17avmjya93Y2e8VmwPPFh9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiuOT/5 vZPkfamDj4gKXJao+9/aMB8GA1UdIwQYMBaAFASn6wSak3/Z8rhuFZ3d9dLJmtQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdBQi85MTZCMDY2NjE0 NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5bnl1RzRWbmQzMTBzbWEx QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLZnJCSnFUZjlueXVHNFZuZDMxMHNtYTFCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdBQi85MTZCMDY2NjE0NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5 bnl1RzRWbmQzMTBzbWExQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIeSsbfhn0tste9JMboeDyqpdQblqFAqG95XAMajO7cwoqFFpNwErI XxpHtXXYQVvddsXMXMhn7NM/PYwmND8N1Aj+d22Ji9VeJOVCEWlsKCKlcI341SO6 Vex4d1aeIre2G7fpmkeJxTALmZDHVzPM93KM+2/Kbo0rCSkuCLRDXtnAMm2vCCQH CDIX/IoZy6Dsd3WN0VS0cGE+tSR91NoPHhqgSeEUtW5/nZFtSmewloSmFu3Y9o6u hzJCQw3Io6ZxjK/e3I8I93oMFJrGo5uqZP2D7zi6tNgI6vYkbfmGtQzS8sdS6JMy jM5JV6H6mFfPAUJ2av+rdTSHhSQcpndM -----END CERTIFICATE-----Generated at Sat Apr 26 14:50:06 2025 by rpki-client