$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft File: BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft (raw, json) Hash identifier: HrKH6vo89kBrCtFTCh/0PY05ddAkwPMbjGc3ULZNn7E= Subject key identifier: C5:D4:1D:0E:EE:43:57:5C:A1:5E:CF:A9:7A:59:D6:08:7B:9E:C2:15 Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB Certificate issuer: /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB Certificate serial: 6C43F3A61E07CC5F67F1C2E30CD51FD48B40DC8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft Manifest number: 04D9 Signing time: Fri 25 Apr 2025 12:09:53 +0000 Manifest this update: Fri 25 Apr 2025 12:04:53 +0000 Manifest next update: Sat 26 Apr 2025 15:50:53 +0000 Files and hashes: 1: BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl (hash: PPyjtWjNbIT1/dEu96JefW7YR2+cOBD196zcc3LqSNI=) 2: 3130332e3137352e32372e302f32342d3234203d3e20383334.roa (hash: Lk+SsdtbrANWV2nijvQOlAUdOOBaDgz1FwOw4ZRQW0w=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:43:f3:a6:1e:07:cc:5f:67:f1:c2:e3:0c:d5:1f:d4:8b:40:dc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D70000, serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB Validity Not Before: Apr 25 12:04:53 2025 GMT Not After : Apr 26 15:50:53 2025 GMT Subject: CN=C5D41D0EEE43575CA15ECFA97A59D6087B9EC215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:ba:35:9f:b6:d1:ec:90:10:d3:09:65:da: 81:3c:2f:1b:d6:a7:9d:51:6c:6e:84:c8:84:d8:63: a0:f6:60:fd:2b:4a:b7:0c:cb:fe:ce:84:40:44:77: 96:7e:a4:ba:f5:ab:bc:c5:0f:4d:3f:eb:d1:f8:f2: ac:0d:01:d4:ae:9f:92:f5:77:74:92:f0:26:d9:05: 83:8f:03:95:f8:f2:55:1c:b0:54:28:05:f7:f7:83: bf:40:9e:96:45:53:df:ad:5e:e8:55:72:2d:9a:ba: ca:63:db:67:72:d2:20:61:34:10:56:79:6c:27:c4: b6:cc:d2:26:bc:fa:15:dd:d6:ca:44:b8:d7:34:31: 51:5b:56:c8:28:a4:2d:2d:e7:b9:33:4c:c0:c2:0c: f1:26:8f:5d:4f:c1:98:21:72:3f:ee:c4:b7:78:43: b2:d6:11:2c:22:3a:76:3b:61:d6:2e:64:57:65:bd: eb:4e:1f:5a:f4:e0:af:21:78:93:ee:14:64:d8:c9: ef:e2:7d:53:35:34:95:84:f4:b5:4f:23:38:cf:e9: a7:61:b5:6d:f8:99:e8:b3:14:20:d5:31:f2:e5:7b: 24:8b:de:42:a5:d5:a7:33:18:2e:2e:22:6e:b7:36: 64:b0:52:8e:87:76:40:22:aa:75:92:bf:ec:92:75: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:1D:0E:EE:43:57:5C:A1:5E:CF:A9:7A:59:D6:08:7B:9E:C2:15 X509v3 Authority Key Identifier: keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:59:b2:7a:4c:37:79:ef:e6:f7:09:81:64:c3:0c:ee:5a:d0: 0b:e6:31:f6:66:85:05:12:2d:cc:9e:23:76:bf:e6:ac:42:d1: de:bc:9d:61:40:06:90:fe:7b:6e:ad:7c:3f:58:e0:a9:a4:f2: 58:7e:c4:5c:b5:5b:20:4e:d4:10:19:ea:5d:40:c5:bf:06:6f: c5:0d:f6:77:cc:6c:d1:f6:24:8d:5a:c3:f5:4d:a5:38:13:6c: 8d:f8:a8:6d:da:6a:51:dd:4c:14:ef:7b:9b:7b:ca:6a:a1:56: f9:4d:55:08:6c:65:78:02:f9:2a:56:cc:63:0a:cc:4b:1b:cc: 4f:ba:7e:2a:d6:2d:fe:54:1b:d3:42:74:00:d8:92:0c:7d:8e: 77:4a:79:b0:2e:eb:55:70:ac:31:40:43:21:42:b2:63:4e:97: ed:46:ca:95:e1:80:2d:1f:96:62:94:97:44:86:9a:ed:f6:6d: 1e:0c:be:ec:91:81:dc:88:39:ce:d2:be:b6:13:ba:5f:18:44: 68:d0:0c:15:9b:eb:a5:73:ea:60:69:c4:b6:e2:75:56:cb:9f: 5f:49:3a:51:f0:61:34:41:20:45:ff:33:b8:93:5b:4d:b8:af: 4b:62:dd:db:c8:f7:f4:0a:93:e1:ef:bf:45:57:e6:3b:7f:a5: 05:e8:8d:a1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbEPzph4HzF9n8cLjDNUf1ItA3I8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkU2RDcwMDAwMTEwLwYDVQQFEyhCRURFREQwQUJD MUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJCMB4XDTI1MDQyNTEyMDQ1M1oX DTI1MDQyNjE1NTA1M1owMzExMC8GA1UEAxMoQzVENDFEMEVFRTQzNTc1Q0ExNUVD RkE5N0E1OUQ2MDg3QjlFQzIxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7RujWfttHskBDTCWXagTwvG9annVFsboTIhNhjoPZg/StKtwzL/s6EQER3 ln6kuvWrvMUPTT/r0fjyrA0B1K6fkvV3dJLwJtkFg48DlfjyVRywVCgF9/eDv0Ce lkVT361e6FVyLZq6ymPbZ3LSIGE0EFZ5bCfEtszSJrz6Fd3WykS41zQxUVtWyCik LS3nuTNMwMIM8SaPXU/BmCFyP+7Et3hDstYRLCI6djth1i5kV2W9604fWvTgryF4 k+4UZNjJ7+J9UzU0lYT0tU8jOM/pp2G1bfiZ6LMUINUx8uV7JIveQqXVpzMYLi4i brc2ZLBSjod2QCKqdZK/7JJ1/tMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTF1B0O 7kNXXKFez6l6WdYIe57CFTAfBgNVHSMEGDAWgBS+3t0KvBryk37THTYDO3yrBIuJ uzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFCRTZENzAwMDAvMC9CRURFREQw QUJDMUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92dDdkQ3J3YThw Ti0weDAyQXp0OHF3U0xpYnMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFCRTZE NzAwMDAvMC9CRURFREQwQUJDMUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAXVmyekw3ee/m9wmBZMMM7lrQC+Yx9maFBRItzJ4jdr/mrELR 3rydYUAGkP57bq18P1jgqaTyWH7EXLVbIE7UEBnqXUDFvwZvxQ32d8xs0fYkjVrD 9U2lOBNsjfiobdpqUd1MFO97m3vKaqFW+U1VCGxleAL5KlbMYwrMSxvMT7p+KtYt /lQb00J0ANiSDH2Od0p5sC7rVXCsMUBDIUKyY06X7UbKleGALR+WYpSXRIaa7fZt Hgy+7JGB3Ig5ztK+thO6XxhEaNAMFZvrpXPqYGnEtuJ1VsufX0k6UfBhNEEgRf8z uJNbTbivS2Ld28j39AqT4e+/RVfmO3+lBeiNoQ== -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:56 2025 by rpki-client