$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json) Hash identifier: wOOb6vfU/k85caThShedKSDEeTH2apxvJtWo9a2yt78= Subject key identifier: 84:9B:B2:E7:31:3D:A3:2E:5A:2D:E4:3F:67:0E:24:DF:EE:ED:68:F9 Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft Manifest number: 7E Signing time: Sun 11 May 2025 05:37:18 +0000 Manifest this update: Sun 11 May 2025 05:37:18 +0000 Manifest next update: Sun 18 May 2025 05:37:18 +0000 Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: DVbtnwCyc3pKqbEmn5fjFiIMJ9f5wbDZtTUbzfCB5Ew=) 2: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: bYiGlJTSCLhia07K1lJYXHC5JgOu+61a9mLQrwhq6HI=) 3: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: mbFfYSX+BdjEnhF4lUo27j9bjQ0kInCW9ZTNXOQrp2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Validity Not Before: May 11 05:37:18 2025 GMT Not After : May 18 05:37:18 2025 GMT Subject: CN=6820378e-17aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:99:51:a6:ec:a2:3c:fc:8f:40:1a:27:9e:f6: ce:59:6a:34:e5:dd:48:b0:3f:61:7b:8e:74:b7:a8: db:a7:6e:21:6d:12:68:34:8f:de:b0:a0:9e:32:f8: 8b:b0:3c:c0:d4:43:fa:7a:e1:8d:79:de:b3:24:32: 91:22:1b:7d:63:18:f4:5b:d1:8d:2a:2d:7e:fa:c9: 84:09:1c:a1:dc:83:a2:00:39:59:9b:52:31:e1:c7: cf:91:6d:ed:17:cf:b9:b0:59:62:a5:72:0b:f0:1b: be:47:c3:c8:5b:1c:a2:c5:61:28:ae:a0:9f:b7:d2: 5b:a5:2c:c1:7c:47:ec:d1:d6:a5:d7:2e:4a:34:86: 2b:b5:c7:f3:b9:f3:f3:16:e2:ec:9e:18:c4:34:74: 5a:b0:64:44:97:9f:f9:a8:9c:0b:9a:df:3c:ee:be: 9e:ea:f5:4e:87:1a:9e:02:a6:3e:a9:98:ef:5c:a6: ff:12:33:b0:e3:e4:e1:7d:11:1d:88:f9:58:fa:ce: 80:02:76:be:00:b9:15:7b:d2:1f:ec:14:c3:15:81: 93:20:0f:a4:86:41:52:97:b4:d3:b9:26:88:e8:35: db:78:11:be:17:bb:6c:ff:a7:f1:f2:3b:75:2a:ce: 3d:84:5a:f1:b2:be:f2:3b:86:06:fc:48:b8:45:ea: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9B:B2:E7:31:3D:A3:2E:5A:2D:E4:3F:67:0E:24:DF:EE:ED:68:F9 X509v3 Authority Key Identifier: keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:26:ae:8e:bb:62:09:78:70:ed:79:2c:66:5b:5f:8a:71:46: e8:17:69:52:99:0f:e5:74:a0:75:4c:33:93:20:9d:ff:43:af: 90:be:f6:92:fe:a4:f1:d0:39:0b:a7:19:50:25:d8:69:b1:87: 9a:b1:ed:46:67:d8:b7:cd:3e:4e:9f:67:40:fc:82:c0:a7:58: 48:92:03:c1:36:20:52:d1:49:3f:12:af:f8:6c:e9:bd:b2:f3: e5:b0:43:78:7f:d4:92:63:55:d8:77:5c:3b:38:8e:4e:61:a0: b7:45:fd:ed:67:f1:4a:ff:f3:20:ef:3e:d7:b2:bd:36:7b:b4: 29:db:b6:df:19:83:47:23:e1:b1:cf:e6:a2:08:ea:06:e2:ac: 82:0a:32:35:4c:8d:28:c2:c4:79:7a:aa:43:4e:7c:ec:24:8e: 43:b7:4d:f2:55:0c:73:b3:32:0b:a3:31:ba:20:5a:1c:07:7b: 13:31:b2:f8:fb:de:a1:76:af:7e:a3:0a:39:74:32:72:2d:b2: 10:8b:ef:56:83:bb:b8:ab:02:6a:02:2b:2a:a5:b6:ed:9e:ee: 3f:9a:d5:28:e8:f0:aa:40:0e:26:6c:d3:c4:8a:0f:b1:4d:ba: 1f:a6:06:96:1d:3d:db:dc:c3:b4:50:3b:a3:66:17:d9:1d:46: 73:9b:83:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw MjI3QjkwODYwHhcNMjUwNTExMDUzNzE4WhcNMjUwNTE4MDUzNzE4WjAYMRYwFAYD VQQDEw02ODIwMzc4ZS0xN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55lRpuyiPPyPQBonnvbOWWo05d1IsD9he450t6jbp24hbRJoNI/esKCeMviL sDzA1EP6euGNed6zJDKRIht9Yxj0W9GNKi1++smECRyh3IOiADlZm1Ix4cfPkW3t F8+5sFlipXIL8Bu+R8PIWxyixWEorqCft9JbpSzBfEfs0dal1y5KNIYrtcfzufPz FuLsnhjENHRasGREl5/5qJwLmt887r6e6vVOhxqeAqY+qZjvXKb/EjOw4+ThfREd iPlY+s6AAna+ALkVe9If7BTDFYGTIA+khkFSl7TTuSaI6DXbeBG+F7ts/6fx8jt1 Ks49hFrxsr7yO4YG/Ei4RepKKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISbsucx PaMuWi3kP2cOJN/u7Wj5MB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2 RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3 VzNKMXNhcHJfZm9DSjdrSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmJq6Ou2IJeHDteSxmW1+KcUboF2lSmQ/ldKB1TDOTIJ3/Q6+QvvaS /qTx0DkLpxlQJdhpsYease1GZ9i3zT5On2dA/ILAp1hIkgPBNiBS0Uk/Eq/4bOm9 svPlsEN4f9SSY1XYd1w7OI5OYaC3Rf3tZ/FK//Mg7z7Xsr02e7Qp27bfGYNHI+Gx z+aiCOoG4qyCCjI1TI0owsR5eqpDTnzsJI5Dt03yVQxzszILozG6IFocB3sTMbL4 +96hdq9+owo5dDJyLbIQi+9Wg7u4qwJqAisqpbbtnu4/mtUo6PCqQA4mbNPEig+x TbofpgaWHT3b3MO0UDujZhfZHUZzm4PB -----END CERTIFICATE-----Generated at Mon May 12 04:18:33 2025 by rpki-client