$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft File: Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json) Hash identifier: zTtSjGgqaqKKhYWu5I0OqVERVubYpDQrDcqoJta4xsk= Subject key identifier: 7A:94:70:9B:0A:5C:A0:9D:1C:D4:7B:C3:E1:22:EB:70:40:55:65:EF Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft Manifest number: 01DE Signing time: Sat 17 May 2025 02:27:02 +0000 Manifest this update: Sat 17 May 2025 02:27:01 +0000 Manifest next update: Sat 24 May 2025 02:27:01 +0000 Files and hashes: 1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: E8rvOiM6YNIWWerHOwKKV5b7M/g6/WGx3hnxoIIj8Gw=) 2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: giH1vIhIIPvv5hJDOK02Raj/lgCr3oz3hTTRlbexHIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 00:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: May 17 02:27:01 2025 GMT Not After : May 24 02:27:01 2025 GMT Subject: CN=6827f3f6-897f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:95:07:c7:2c:12:b4:2c:9b:22:eb:95:ab: 2c:4d:65:5c:fc:1b:ed:49:5c:5c:57:96:7b:a5:c2: bf:f9:f5:b9:67:31:ac:c8:43:24:13:72:74:ed:22: 3e:ce:c1:c0:a2:89:d5:6d:74:e7:25:8a:db:08:07: d7:6c:9f:c2:9c:4b:cb:ef:04:2d:64:1d:54:13:ae: ab:b2:fb:b5:b7:71:f5:b5:2c:26:78:67:77:1a:4e: 4f:79:02:ad:00:98:3d:ec:7a:eb:30:ed:88:1d:0f: e5:6d:66:a1:4c:cb:02:b9:e3:c2:ff:88:c3:ed:45: 99:a9:74:d3:ed:ff:b1:a4:26:e5:6f:62:1d:c4:b5: 93:10:23:d3:c8:da:27:c2:f0:6f:38:ce:b6:b1:92: 7a:0f:42:c8:e5:65:85:06:f7:29:c6:47:f8:be:1d: 2d:a8:a4:a3:03:42:d7:b6:3f:1f:7e:26:80:a0:1b: 9a:a7:86:d8:b2:ca:09:9c:95:f4:13:d0:eb:83:8d: 1c:f1:3f:ce:77:0f:67:17:02:d2:1b:b1:d1:19:13: 4b:f7:dd:bf:b3:df:25:2e:cf:dd:d5:96:2a:6a:fb: fb:db:c3:97:cc:7b:f3:be:3f:de:cd:d7:b3:65:b1: 09:6a:36:9c:35:f4:b3:8d:a0:b8:1d:59:45:e9:e9: d9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:94:70:9B:0A:5C:A0:9D:1C:D4:7B:C3:E1:22:EB:70:40:55:65:EF X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:fb:bc:40:31:21:1d:da:0e:27:62:2c:13:8d:e2:d0:95:63: 1b:87:de:18:c0:f3:57:ce:14:99:b9:e7:78:07:63:dc:56:79: ed:7a:91:25:a9:ab:3e:f1:57:2b:28:b7:c2:72:63:11:ac:f4: ed:01:5c:0f:c4:e0:0d:43:aa:aa:36:ec:b5:ba:07:67:30:7c: f0:75:60:a6:f2:22:ca:39:7e:a7:49:cc:ee:f5:e1:99:69:f7: d7:c0:96:54:85:51:1b:22:a2:3a:04:6b:7c:57:89:ed:78:36: b0:9f:5e:3a:88:f9:27:f4:e1:c2:a9:fe:e6:6f:60:8e:51:c8: 45:cb:9c:ab:12:85:03:24:40:9a:73:a4:f2:54:6d:c4:17:61: cd:b8:83:a4:b0:6c:a3:9d:4b:a9:e6:82:6e:c7:cc:52:4e:e6: ed:c9:34:f1:00:b0:ac:e0:35:66:f0:c3:14:8f:8d:56:03:51: 88:81:ab:5a:05:e3:ab:ff:18:d1:bd:f2:3e:f8:bd:7b:15:5b: c2:1d:5a:70:7e:5e:b7:40:fd:e8:f7:d5:82:4c:57:a0:57:49: 5f:19:03:f5:b5:18:09:85:ec:f0:07:0b:56:c6:89:43:73:3a: 22:a3:3e:41:89:63:e9:6e:c3:92:09:11:b4:de:ff:bb:51:c4: eb:32:98:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjUwNTE3MDIyNzAxWhcNMjUwNTI0MDIyNzAxWjAYMRYwFAYD VQQDEw02ODI3ZjNmNi04OTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuySVB8csErQsmyLrlassTWVc/BvtSVxcV5Z7pcK/+fW5ZzGsyEMkE3J07SI+ zsHAoonVbXTnJYrbCAfXbJ/CnEvL7wQtZB1UE66rsvu1t3H1tSwmeGd3Gk5PeQKt AJg97HrrMO2IHQ/lbWahTMsCuePC/4jD7UWZqXTT7f+xpCblb2IdxLWTECPTyNon wvBvOM62sZJ6D0LI5WWFBvcpxkf4vh0tqKSjA0LXtj8ffiaAoBuap4bYssoJnJX0 E9Drg40c8T/Odw9nFwLSG7HRGRNL992/s98lLs/d1ZYqavv728OXzHvzvj/ezdez ZbEJajacNfSzjaC4HVlF6enZ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqUcJsK XKCdHNR7w+Ei63BAVWXvMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0M5My80MDIxQTRFNjVGMjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpF N2V5ZHo3MkhtYmpIUGpsd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ+7xAMSEd2g4nYiwTjeLQlWMbh94YwPNXzhSZued4B2PcVnntepEl qas+8VcrKLfCcmMRrPTtAVwPxOANQ6qqNuy1ugdnMHzwdWCm8iLKOX6nSczu9eGZ affXwJZUhVEbIqI6BGt8V4nteDawn146iPkn9OHCqf7mb2COUchFy5yrEoUDJECa c6TyVG3EF2HNuIOksGyjnUup5oJux8xSTubtyTTxALCs4DVm8MMUj41WA1GIgata BeOr/xjRvfI++L17FVvCHVpwfl63QP3o99WCTFegV0lfGQP1tRgJhezwBwtWxolD czoioz5BiWPpbsOSCRG03v+7UcTrMpjm -----END CERTIFICATE-----Generated at Sat May 17 04:59:38 2025 by rpki-client