$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft File: BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json) Hash identifier: D8XU72OYQQrC0uuC5R93b8L5JpdCEaibyNfbzAWJoyQ= Subject key identifier: 56:D9:D5:11:0C:74:FE:6F:CC:12:27:6B:C7:D9:ED:65:4C:EA:31:71 Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft Manifest number: 038C Signing time: Fri 25 Apr 2025 00:34:57 +0000 Manifest this update: Fri 25 Apr 2025 00:34:56 +0000 Manifest next update: Fri 02 May 2025 00:34:56 +0000 Files and hashes: 1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: ZUp8qshhDtO6sNHnMKDEA8WunkaVoSoDvtLtYAHFji8=) 2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: IDcKfjrcD970kwyhuo4LacbpxchYwfNjnBXBdXrdXbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Validity Not Before: Apr 25 00:34:56 2025 GMT Not After : May 2 00:34:56 2025 GMT Subject: CN=680ad8b0-c442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bb:c0:5f:c1:db:6a:a8:f6:d5:1d:e2:d3:46: 19:32:19:4d:fb:bd:e2:2f:5e:2b:78:fd:40:53:94: 5a:79:b6:ef:81:58:37:df:33:00:ca:15:a2:c8:0a: 87:30:bb:22:47:ab:5e:00:2d:10:d9:0d:ec:b4:7e: bd:b1:4e:2c:ea:2a:b5:18:e3:5f:f4:39:15:21:18: 3c:e6:c1:dc:2c:fe:fa:f7:55:a4:1c:c8:58:c4:e4: 97:f8:78:60:d7:fa:69:2b:23:06:e7:46:42:20:59: 29:df:e4:b8:4b:28:31:23:dc:32:c6:c2:52:82:2d: a4:32:94:0f:07:eb:b7:67:bc:9c:eb:20:9a:28:62: 34:e7:b1:a5:b7:18:17:bf:2d:e1:b9:a9:c9:d5:96: 77:3b:cf:bc:29:83:35:7d:c8:aa:b7:63:2a:b1:77: 1c:ed:d0:1f:1f:12:cb:2d:a5:6b:95:91:86:16:99: b0:63:db:18:82:73:13:c3:4b:a9:83:03:35:a2:21: c2:b0:7c:52:9c:6b:13:56:fc:50:d6:85:f1:f6:32: 66:30:34:cc:d6:40:de:5c:b2:76:54:8f:1b:bb:09: 26:7d:15:45:e5:f4:1d:ea:00:d6:c6:b4:01:99:6a: 96:ec:06:55:ab:f4:de:96:12:54:d5:21:c5:4b:60: a6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D9:D5:11:0C:74:FE:6F:CC:12:27:6B:C7:D9:ED:65:4C:EA:31:71 X509v3 Authority Key Identifier: keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:02:a6:4b:a2:bb:92:24:6a:78:f4:2d:94:e3:43:dc:ff:11: 42:b0:b9:b1:15:48:89:80:a0:34:66:e1:78:aa:7c:8b:20:79: f3:b7:07:f4:9b:f9:6f:08:88:5d:ed:d6:83:09:c3:90:38:7b: cd:fa:b2:1e:22:18:34:e8:46:ae:28:d2:6e:04:8e:7b:97:85: 7c:c6:9a:a5:7c:6c:99:f9:90:f1:5a:58:eb:9c:23:05:9d:6f: da:f9:80:65:22:01:a2:ae:ec:23:8f:59:7a:25:45:28:ae:f3: 9d:c0:bd:db:60:04:be:61:b4:a0:b1:28:a3:16:11:09:a1:e4: 61:19:57:d0:34:ae:b3:bc:7c:e1:97:3b:3c:47:02:a4:61:34: c5:e2:40:e9:da:32:f2:06:05:b3:72:b1:44:e3:75:ed:18:77: c6:49:a5:55:b4:91:96:e0:a6:1f:a5:00:8a:69:78:9b:5c:3b: b3:39:4e:82:41:4b:d4:b1:a8:bd:ce:6b:00:a3:cb:2a:c2:e3: 5b:a5:65:21:a0:8e:dc:f4:21:e1:ae:87:b1:fe:4c:18:76:e1: b2:77:cc:eb:47:a7:8a:84:7c:15:36:68:95:de:ba:87:98:df: e2:51:d8:a5:f9:d1:c0:e3:a3:e1:b5:4e:ef:6f:5a:31:80:7c: e3:1c:5d:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz RTM3RTFCQzEwHhcNMjUwNDI1MDAzNDU2WhcNMjUwNTAyMDAzNDU2WjAYMRYwFAYD VQQDEw02ODBhZDhiMC1jNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bvAX8Hbaqj21R3i00YZMhlN+73iL14reP1AU5RaebbvgVg33zMAyhWiyAqH MLsiR6teAC0Q2Q3stH69sU4s6iq1GONf9DkVIRg85sHcLP7691WkHMhYxOSX+Hhg 1/ppKyMG50ZCIFkp3+S4SygxI9wyxsJSgi2kMpQPB+u3Z7yc6yCaKGI057GltxgX vy3huanJ1ZZ3O8+8KYM1fciqt2MqsXcc7dAfHxLLLaVrlZGGFpmwY9sYgnMTw0up gwM1oiHCsHxSnGsTVvxQ1oXx9jJmMDTM1kDeXLJ2VI8buwkmfRVF5fQd6gDWxrQB mWqW7AZVq/TelhJU1SHFS2CmLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbZ1REM dP5vzBIna8fZ7WVM6jFxMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOAqZLoruSJGp49C2U40Pc/xFCsLmxFUiJgKA0ZuF4qnyLIHnztwf0 m/lvCIhd7daDCcOQOHvN+rIeIhg06EauKNJuBI57l4V8xpqlfGyZ+ZDxWljrnCMF nW/a+YBlIgGiruwjj1l6JUUorvOdwL3bYAS+YbSgsSijFhEJoeRhGVfQNK6zvHzh lzs8RwKkYTTF4kDp2jLyBgWzcrFE43XtGHfGSaVVtJGW4KYfpQCKaXibXDuzOU6C QUvUsai9zmsAo8sqwuNbpWUhoI7c9CHhroex/kwYduGyd8zrR6eKhHwVNmiV3rqH mN/iUdil+dHA46PhtU7vb1oxgHzjHF2v -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:25 2025 by rpki-client