$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft File: bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json) Hash identifier: nE0JqYwjxllZ7ABvPOktFidtS5ZsOnL3RIG0lwQSo74= Subject key identifier: 23:D2:5F:0C:E8:DA:56:D6:10:DA:8D:0C:C5:83:A4:F2:CA:F0:9E:B9 Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Certificate serial: 08F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft Manifest number: 08E6 Signing time: Wed 14 May 2025 20:31:05 +0000 Manifest this update: Wed 14 May 2025 20:31:05 +0000 Manifest next update: Wed 21 May 2025 20:31:05 +0000 Files and hashes: 1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: Q7MHGsQun45Dm8DPi8aq1yjgZ7hbpgDfUZTaR8hzEy0=) 2: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: BidxYSVmBabzb42KTEQRZnYy7Sbks/SN1w8y9yUGtJQ=) 3: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: OlzMxXAfrSP6Nj86W0pq9Qh2aWjxJmFySgPE4i+83ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Validity Not Before: May 14 20:31:05 2025 GMT Not After : May 21 20:31:05 2025 GMT Subject: CN=6824fd89-89ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:ad:9d:27:ec:c2:3f:ad:f0:87:dd:a9:45: d3:10:54:27:c8:fa:2d:72:a7:33:84:aa:96:ea:13: d6:1c:a3:39:01:7e:07:cc:94:22:08:46:75:56:c3: 24:2f:40:11:7b:58:65:23:50:48:95:fd:a1:04:ce: d1:1a:ef:ad:a6:dd:fb:65:a6:02:3f:77:49:25:e5: e9:62:8f:84:d1:0d:e9:e1:2f:52:ae:9b:f4:14:34: 0c:20:62:a0:38:bb:3c:29:98:12:e5:7f:1a:8c:3d: aa:09:46:d6:fd:66:36:08:22:b6:78:f1:69:20:8b: b3:cd:31:89:a5:32:38:7c:f7:a7:56:39:97:30:29: 81:2e:86:51:d9:04:29:68:1d:5e:b2:15:31:6e:40: 3a:d2:5b:61:e9:80:26:d1:fb:01:5b:60:4d:e7:ea: 8f:95:d4:8a:7b:7b:c8:22:5c:14:f2:06:ce:1d:fc: a8:12:1f:68:ac:fe:ca:37:c5:81:42:25:3a:c1:33: c1:5e:d0:bf:45:75:8d:c6:39:c8:fb:b1:1d:9e:99: fe:ba:6f:f6:53:3c:e4:c1:ee:9f:1d:3d:6c:00:0a: c8:84:f9:68:34:2e:2a:2d:2b:18:5f:a1:10:5b:26: c7:41:be:8c:cc:ba:fc:c5:41:67:8b:47:72:a7:54: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D2:5F:0C:E8:DA:56:D6:10:DA:8D:0C:C5:83:A4:F2:CA:F0:9E:B9 X509v3 Authority Key Identifier: keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:14:ff:91:e0:84:46:32:81:3f:76:04:35:e4:c6:d1:7b:33: 3a:d4:74:ef:e9:e5:cd:f6:7f:ec:10:66:fa:8b:fc:f0:05:c9: 83:c4:00:18:d9:b8:c5:d0:05:1d:99:c8:29:70:d7:6b:a6:d9: 75:50:c4:7a:14:8b:4c:11:82:92:8a:db:dd:07:14:1c:25:ba: 84:f8:36:e7:f4:0e:42:41:ce:50:0c:c2:ea:7f:7c:36:15:7d: 7e:fb:28:93:8c:57:9a:12:ba:d8:d0:f3:7c:c4:a1:a8:8f:c0: 89:ed:12:f8:5a:2c:5f:46:d5:22:4e:ca:27:d3:29:86:38:ce: 38:c2:b2:c4:8b:6c:8a:f8:62:69:cd:f6:7e:14:a2:f0:81:8d: d3:93:68:ec:f8:01:2c:af:bb:6a:b7:27:b3:86:37:78:cb:3e: 96:81:e7:2d:3b:b6:21:8e:65:39:1a:ef:ab:c1:d7:a0:af:6a: 4b:21:d9:57:d6:ab:17:78:2d:26:c6:c1:0d:38:88:4b:af:a2: 45:18:03:93:a4:b0:e5:ed:a4:30:fa:63:46:55:f5:63:21:95: 2c:b7:cc:78:66:ae:d0:03:d3:97:80:16:b9:01:c7:1b:76:a9: 64:66:e8:12:0d:1e:6c:72:2c:ef:a1:bf:53:fd:43:bf:ac:9a: 60:16:fd:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz RjE1NjI3MkQwHhcNMjUwNTE0MjAzMTA1WhcNMjUwNTIxMjAzMTA1WjAYMRYwFAYD VQQDEw02ODI0ZmQ4OS04OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWCtnSfswj+t8IfdqUXTEFQnyPotcqczhKqW6hPWHKM5AX4HzJQiCEZ1VsMk L0ARe1hlI1BIlf2hBM7RGu+tpt37ZaYCP3dJJeXpYo+E0Q3p4S9Srpv0FDQMIGKg OLs8KZgS5X8ajD2qCUbW/WY2CCK2ePFpIIuzzTGJpTI4fPenVjmXMCmBLoZR2QQp aB1eshUxbkA60lth6YAm0fsBW2BN5+qPldSKe3vIIlwU8gbOHfyoEh9orP7KN8WB QiU6wTPBXtC/RXWNxjnI+7Ednpn+um/2Uzzkwe6fHT1sAArIhPloNC4qLSsYX6EQ WybHQb6MzLr8xUFni0dyp1Qd3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPSXwzo 2lbWENqNDMWDpPLK8J65MB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEE1My83MUI3RDQ3MEFCNEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2 Y0NkTURPZHpnNUlfRldKeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEFP+R4IRGMoE/dgQ15MbRezM61HTv6eXN9n/sEGb6i/zwBcmDxAAY 2bjF0AUdmcgpcNdrptl1UMR6FItMEYKSitvdBxQcJbqE+Dbn9A5CQc5QDMLqf3w2 FX1++yiTjFeaErrY0PN8xKGoj8CJ7RL4WixfRtUiTson0ymGOM44wrLEi2yK+GJp zfZ+FKLwgY3Tk2js+AEsr7tqtyezhjd4yz6WgectO7YhjmU5Gu+rwdegr2pLIdlX 1qsXeC0mxsENOIhLr6JFGAOTpLDl7aQw+mNGVfVjIZUst8x4Zq7QA9OXgBa5Accb dqlkZugSDR5scizvob9T/UO/rJpgFv0m -----END CERTIFICATE-----Generated at Thu May 15 19:04:41 2025 by rpki-client