$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft File: bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json) Hash identifier: erYAhlU0UA8+LPnu//ZMd1WzmL5BMZ+64CkBsU7jBDQ= Subject key identifier: E1:96:64:6F:DB:01:D7:3B:4A:B2:90:39:C5:1E:1B:A2:77:12:38:04 Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft Manifest number: EA Signing time: Thu 01 May 2025 04:20:48 +0000 Manifest this update: Thu 01 May 2025 04:20:48 +0000 Manifest next update: Thu 08 May 2025 04:20:48 +0000 Files and hashes: 1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: sDj5qC0NN4D6fHngLCRJ42OHINY6qdBI/3+4FBBfD9k=) 2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: pARn59mvC3EFmnc54zsYhH0vh0pFsHJXtSQmvirMetQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 04:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Validity Not Before: May 1 04:20:48 2025 GMT Not After : May 8 04:20:48 2025 GMT Subject: CN=6812f6a0-bbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c0:88:4e:d0:f3:8b:7f:46:58:09:a3:ad:34: c8:d3:76:78:6e:fd:5b:5e:98:5e:11:09:ac:2b:ae: 45:67:81:23:ad:68:e7:a6:6c:9b:f6:00:ac:ce:fe: c3:ee:84:a2:b0:44:fd:46:7b:4d:ca:07:72:d5:97: 2c:07:21:e9:3d:9c:75:1b:6b:ef:0a:ec:54:e1:91: 34:2f:b5:a6:c8:67:42:cb:20:eb:04:74:cf:19:e4: 4c:33:7e:0b:82:80:f8:dc:7a:fb:b4:9e:69:fb:99: 22:bd:d2:df:e6:1a:2a:4c:87:f8:d5:ee:5c:7c:26: 83:49:f6:34:69:84:0e:8b:28:48:cf:a3:02:02:03: 27:1e:05:6d:a2:5b:2b:c5:d6:1e:e5:cd:d7:9a:1f: 97:fc:09:f9:31:77:3c:8f:5e:68:69:4b:99:33:06: ea:37:18:97:ea:c6:4f:9c:3e:28:b4:04:23:3b:52: 38:f9:d1:cf:85:69:8c:72:55:39:8c:f0:f7:60:3f: db:dd:2e:2d:0c:d5:b4:f2:bd:ca:6d:04:6e:6b:b3: 2b:43:ff:cd:05:12:95:c7:7c:d5:3e:ba:0d:74:d9: 34:f3:5f:d7:23:78:fc:ab:02:91:87:30:61:93:01: cd:ab:fb:c8:55:31:de:89:d1:4a:39:9a:89:99:a6: 4f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:96:64:6F:DB:01:D7:3B:4A:B2:90:39:C5:1E:1B:A2:77:12:38:04 X509v3 Authority Key Identifier: keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5a:9a:de:ea:2f:91:12:a3:6a:55:89:e7:dc:a6:1d:9f:7a: 42:58:b5:31:89:84:66:8b:3e:27:0e:10:6c:30:c1:dd:69:31: 96:94:19:0b:a2:62:f5:be:13:59:1d:09:73:1c:e5:62:df:d9: 66:fa:e6:ce:cd:2c:9e:43:12:97:28:b2:12:12:9a:11:ed:89: 7f:e5:20:b8:73:ba:59:da:70:54:73:02:b8:8f:f6:f8:95:aa: 8d:c1:d0:84:dc:a5:1b:08:a9:41:db:a9:72:53:25:ba:7d:1d: 57:8a:48:50:57:ce:35:b5:a0:f4:6c:19:35:26:5d:fe:84:4a: 9a:1b:5c:d5:ee:c6:2a:9b:81:48:3e:14:9f:99:52:b2:0b:e5: 01:54:fb:c1:89:b0:57:29:4e:e7:b5:3f:15:28:a8:21:de:7a: 97:cf:c2:86:8e:38:6c:cf:32:1e:21:2e:2e:ed:22:d3:c2:f0: a5:9e:d9:2f:57:a9:7a:f6:36:58:bf:b7:60:6f:a7:aa:9b:4d: 05:e3:bc:e2:b8:20:0f:75:bd:63:78:a8:85:08:7d:ab:f2:86: fa:d3:c9:25:83:9e:5f:1b:c3:78:da:b9:44:90:b4:a1:56:60: 88:89:ca:da:f9:71:80:48:fc:75:cd:53:32:31:9d:b6:56:ac: b3:21:a7:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKDZDODAzMDUyQkY5NkMyQUI0QUJBQTlFRDI2QTNBOUI0 NjM5NjA1QTMwHhcNMjUwNTAxMDQyMDQ4WhcNMjUwNTA4MDQyMDQ4WjAYMRYwFAYD VQQDEw02ODEyZjZhMC1iYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsCITtDzi39GWAmjrTTI03Z4bv1bXpheEQmsK65FZ4EjrWjnpmyb9gCszv7D 7oSisET9RntNygdy1ZcsByHpPZx1G2vvCuxU4ZE0L7WmyGdCyyDrBHTPGeRMM34L goD43Hr7tJ5p+5kivdLf5hoqTIf41e5cfCaDSfY0aYQOiyhIz6MCAgMnHgVtolsr xdYe5c3Xmh+X/An5MXc8j15oaUuZMwbqNxiX6sZPnD4otAQjO1I4+dHPhWmMclU5 jPD3YD/b3S4tDNW08r3KbQRua7MrQ//NBRKVx3zVProNdNk081/XI3j8qwKRhzBh kwHNq/vIVTHeidFKOZqJmaZPbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGWZG/b Adc7SrKQOcUeG6J3EjgEMB8GA1UdIwQYMBaAFGyAMFK/lsKrSrqp7SajqbRjlgWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CQ0JBRTBDRUM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dxdEt1cW50SnFPcHRHT1dC YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JJQXdVci1Xd3F0S3VxbnRKcU9wdEdPV0JhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CQ0JBRTBDRUM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dx dEt1cW50SnFPcHRHT1dCYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKWpre6i+REqNqVYnn3KYdn3pCWLUxiYRmiz4nDhBsMMHdaTGWlBkL omL1vhNZHQlzHOVi39lm+ubOzSyeQxKXKLISEpoR7Yl/5SC4c7pZ2nBUcwK4j/b4 laqNwdCE3KUbCKlB26lyUyW6fR1XikhQV841taD0bBk1Jl3+hEqaG1zV7sYqm4FI PhSfmVKyC+UBVPvBibBXKU7ntT8VKKgh3nqXz8KGjjhszzIeIS4u7SLTwvClntkv V6l69jZYv7dgb6eqm00F47ziuCAPdb1jeKiFCH2r8ob608klg55fG8N42rlEkLSh VmCIicra+XGASPx1zVMyMZ22VqyzIact -----END CERTIFICATE-----Generated at Fri May 2 11:25:17 2025 by rpki-client