$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft File: BWvvRscxWDfrrepBeAueQaP7fqA.mft (raw, json) Hash identifier: w+ZtKYajWHgJ62IbSaLWA5TQw2D7fPQtBKgRAG+WZqo= Subject key identifier: 7A:7F:3D:DA:F2:E5:41:39:FE:D3:9A:0F:C1:D2:11:0B:56:6A:C8:40 Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 Certificate issuer: /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft Manifest number: 026C Signing time: Tue 13 May 2025 01:31:58 +0000 Manifest this update: Tue 13 May 2025 01:31:58 +0000 Manifest next update: Tue 20 May 2025 01:31:58 +0000 Files and hashes: 1: BWvvRscxWDfrrepBeAueQaP7fqA.crl (hash: y5Tl3i/Y+QRpTjJiKCVaeY+yPfMUTra45puC+t8Tt9E=) 2: 207B27560EE411EDA32ABE0FC4F9AE02.roa (hash: 6uwFx8/ukSzKKH+6QOFIRRiywJ0AdBaXItyBqWPv0ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912391D, serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Validity Not Before: May 13 01:31:58 2025 GMT Not After : May 20 01:31:58 2025 GMT Subject: CN=6822a10e-51ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:0d:e0:fb:61:39:49:55:36:76:d7:b8:d4: 2f:f1:86:68:b6:57:b1:81:14:de:53:3d:20:ed:f4: 30:1d:a1:77:d6:11:25:d4:b3:15:d4:50:10:40:72: 85:31:7c:60:7f:b2:fc:c0:e2:b0:07:3b:0a:15:7f: af:fe:dd:86:f9:5c:44:ac:82:d8:fa:82:d7:50:61: 37:f6:e5:bd:69:40:25:ea:4a:ed:9d:3c:c7:99:fb: 48:b7:30:ec:98:db:6d:87:5e:20:52:fd:02:78:02: d3:b3:2e:de:b7:64:9b:e2:23:b2:d2:14:b9:bb:ff: a6:66:13:33:04:e1:f3:ac:59:52:1e:e3:11:8d:0a: 64:79:e1:be:d0:f8:8e:23:0e:f0:c8:d8:32:c7:2e: c9:5a:bc:db:3e:0b:f8:f7:ee:10:4a:6e:53:85:e6: 79:cf:5d:78:70:27:be:2c:86:a7:58:11:a1:08:99: 5d:53:e5:af:36:d5:6a:4c:1d:94:c3:34:b7:70:1e: 65:6d:65:05:90:3d:09:a6:d7:30:67:4b:0a:dc:5d: f5:66:bd:10:07:2c:b8:48:f4:40:df:b3:76:42:9a: 45:9f:45:80:7d:05:a4:f8:95:b1:03:4e:80:8b:15: 48:20:31:ca:37:d0:45:7e:d8:f9:74:b2:9d:de:78: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7F:3D:DA:F2:E5:41:39:FE:D3:9A:0F:C1:D2:11:0B:56:6A:C8:40 X509v3 Authority Key Identifier: keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a7:57:a0:53:96:7f:aa:fd:7f:38:66:c0:90:dc:e2:9b:14: 97:61:11:61:35:aa:dc:8b:6a:52:32:bd:d9:13:f3:fd:9a:3e: 40:24:c7:94:ee:38:ff:1f:af:1b:2f:e4:e2:43:f9:2e:71:10: 95:6f:46:19:4c:7c:da:4b:fe:63:4b:e3:13:6b:b5:31:c2:ff: 7c:85:a8:55:f5:c4:f1:d9:b1:4b:b8:d5:f5:ff:30:96:53:e5: 40:a8:92:4a:7a:c5:9f:cf:0d:62:0e:a0:97:fd:74:de:ed:af: d5:95:56:f9:53:4f:1e:57:5c:a3:70:74:5e:ad:03:7d:bd:63: 19:07:24:7e:59:ab:04:c6:a0:f1:81:ef:d9:c7:e4:9e:3b:a8: 2c:41:fb:de:dd:33:68:f3:58:52:ac:ab:2f:52:16:18:b8:ad: 3a:45:20:69:97:80:c7:83:ec:91:68:3d:9a:b6:53:b2:7f:af: 58:f2:7d:13:31:53:bc:04:fd:c3:43:22:8a:6e:36:bf:e9:1e: ec:bc:9a:7f:ba:37:f5:ab:e7:43:f4:3f:39:17:d7:76:ba:74: 5e:83:1a:0c:9d:ab:d2:70:d1:79:68:c0:48:57:d7:9c:19:8f: 45:7f:2a:56:93:7d:70:12:46:7d:20:67:0b:5b:a4:1b:c9:74: 3d:bd:f3:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MUQxMTAvBgNVBAUTKDA1NkJFRjQ2QzczMTU4MzdFQkFERUE0MTc4MEI5RTQx QTNGQjdFQTAwHhcNMjUwNTEzMDEzMTU4WhcNMjUwNTIwMDEzMTU4WjAYMRYwFAYD VQQDEw02ODIyYTEwZS01MWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqYN4PthOUlVNnbXuNQv8YZotlexgRTeUz0g7fQwHaF31hEl1LMV1FAQQHKF MXxgf7L8wOKwBzsKFX+v/t2G+VxErILY+oLXUGE39uW9aUAl6krtnTzHmftItzDs mNtth14gUv0CeALTsy7et2Sb4iOy0hS5u/+mZhMzBOHzrFlSHuMRjQpkeeG+0PiO Iw7wyNgyxy7JWrzbPgv49+4QSm5TheZ5z114cCe+LIanWBGhCJldU+WvNtVqTB2U wzS3cB5lbWUFkD0JptcwZ0sK3F31Zr0QByy4SPRA37N2QppFn0WAfQWk+JWxA06A ixVIIDHKN9BFftj5dLKd3ngp3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHp/Pdry 5UE5/tOaD8HSEQtWashAMB8GA1UdIwQYMBaAFAVr70bHMVg3663qQXgLnkGj+36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxRC9CNTcxQ0NCRTBF RTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdEZnJyZXBCZUF1ZVFhUDdm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JXdnZSc2N4V0RmcnJlcEJlQXVlUWFQN2ZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzkxRC9CNTcxQ0NCRTBFRTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdE ZnJyZXBCZUF1ZVFhUDdmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1p1egU5Z/qv1/OGbAkNzimxSXYRFhNarci2pSMr3ZE/P9mj5AJMeU 7jj/H68bL+TiQ/kucRCVb0YZTHzaS/5jS+MTa7Uxwv98hahV9cTx2bFLuNX1/zCW U+VAqJJKesWfzw1iDqCX/XTe7a/VlVb5U08eV1yjcHRerQN9vWMZByR+WasExqDx ge/Zx+SeO6gsQfve3TNo81hSrKsvUhYYuK06RSBpl4DHg+yRaD2atlOyf69Y8n0T MVO8BP3DQyKKbja/6R7svJp/ujf1q+dD9D85F9d2unRegxoMnavScNF5aMBIV9ec GY9FfypWk31wEkZ9IGcLW6QbyXQ9vfMu -----END CERTIFICATE-----Generated at Wed May 14 04:44:23 2025 by rpki-client