$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft File: bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft (raw, json) Hash identifier: JZ4FG5yWBaLOqp4nWxMpmKroaLXHKqNuvBuEUjEeKZc= Subject key identifier: 4A:9B:D5:BA:3E:FB:A6:08:30:4E:21:AD:6E:9F:8A:C6:A4:D8:A3:4E Authority key identifier: 6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 Certificate issuer: /CN=A913DF8A/serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft Manifest number: CD Signing time: Sun 11 May 2025 04:30:37 +0000 Manifest this update: Sun 11 May 2025 04:30:37 +0000 Manifest next update: Sun 18 May 2025 04:30:37 +0000 Files and hashes: 1: bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl (hash: FfXhGQHfQqBEB9mIws+wH83NyQnHBjqEHoC88ABkmiQ=) 2: EC873B66F37911EEA9FCAF6BC4F9AE02.roa (hash: rsabR21jqtcvoz4XthX1FqvEg0esDGA7DmhhfFQxiEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF8A, serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Validity Not Before: May 11 04:30:37 2025 GMT Not After : May 18 04:30:37 2025 GMT Subject: CN=682027ed-f472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:d5:fb:f9:ff:79:fc:da:e9:f9:69:46:11: eb:2d:19:cf:1c:db:ab:d6:9d:30:0c:e6:04:af:9d: 1a:a3:7a:b7:38:62:5f:a7:76:5d:0b:40:57:d8:a7: d3:20:ea:ba:eb:e8:58:51:69:e1:b2:e1:54:fb:e4: 29:32:ab:bc:95:7f:34:50:b5:3b:81:ac:6c:99:59: 0d:68:85:4a:c8:fb:5a:cd:e6:0f:40:c8:2d:5d:42: d0:e9:e2:e6:1b:f0:97:6e:dc:b5:35:37:2d:fd:12: b4:e5:9a:0f:8b:2a:23:1f:75:e6:74:28:73:98:96: ad:10:32:9d:a6:31:60:8f:d6:4a:71:ca:88:06:30: 07:1e:f8:d8:83:08:0f:43:ee:5c:5a:2e:57:e0:cc: 5e:dc:32:3b:51:d4:92:97:2d:5a:17:3f:8b:0f:4c: ee:bf:ce:20:ef:98:41:17:eb:74:7c:6f:a7:73:f9: 73:1d:b2:eb:bb:54:df:f2:99:57:40:fd:a2:41:64: c4:17:0b:f6:a3:e7:cd:06:48:52:35:5d:a0:47:3a: ba:42:08:b5:14:7b:df:cb:ec:c3:9f:98:8c:8d:35: f1:56:7a:84:84:cb:d5:be:66:24:3f:1c:96:bb:f6: 9e:e0:4f:34:67:63:be:12:c8:b1:ad:32:95:cc:31: af:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9B:D5:BA:3E:FB:A6:08:30:4E:21:AD:6E:9F:8A:C6:A4:D8:A3:4E X509v3 Authority Key Identifier: keyid:6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:e7:01:f4:6c:a0:b3:32:49:3d:42:87:9e:2e:1d:17:72:05: 03:f2:32:a1:7a:05:28:62:b9:cb:de:fc:9f:99:82:18:54:1e: ab:a8:ec:72:a7:8d:32:ad:90:d3:ed:1a:e6:ff:66:88:e0:4f: 31:1c:a5:d8:91:59:cb:ae:22:30:3b:87:78:f7:b0:71:74:42: 5d:00:fa:2e:ae:cd:68:12:d5:61:7f:53:bc:d4:b5:7c:bf:0f: 57:36:ed:2c:99:19:71:7a:aa:6f:2b:46:9b:7c:3e:cb:ba:6a: 2e:1a:93:45:0a:10:32:20:73:43:b8:60:e6:a0:c3:e0:bc:cc: 85:db:f5:c9:1b:8c:b4:81:ef:f8:91:cf:69:a6:b9:99:f3:c4: c6:6c:ed:47:f3:43:e6:b7:e2:9c:6e:e0:db:27:e9:8a:a8:f9: cb:18:3a:0a:19:88:72:c9:e9:c4:93:dd:2e:cc:f7:9e:dc:3d: 34:63:74:2a:7e:84:4e:f2:5e:cc:ab:25:1b:72:fe:4e:41:3c: ec:18:6f:93:5a:a8:4f:28:21:a5:64:6e:d0:54:d4:08:61:c5: 68:72:60:77:2b:f1:b7:e2:5a:4f:f0:36:d8:48:63:f2:aa:10: 3c:0b:b6:a3:05:01:07:af:59:fd:ac:ee:58:1c:c3:ea:5d:ce: 0f:04:bc:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGOEExMTAvBgNVBAUTKDZDOERGQTA0M0MyMkI4QTI3RUFCNjA0NzBBRjQwNjYw MjRBNjg0NDAwHhcNMjUwNTExMDQzMDM3WhcNMjUwNTE4MDQzMDM3WjAYMRYwFAYD VQQDEw02ODIwMjdlZC1mNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCzV+/n/efza6flpRhHrLRnPHNur1p0wDOYEr50ao3q3OGJfp3ZdC0BX2KfT IOq66+hYUWnhsuFU++QpMqu8lX80ULU7gaxsmVkNaIVKyPtazeYPQMgtXULQ6eLm G/CXbty1NTct/RK05ZoPiyojH3XmdChzmJatEDKdpjFgj9ZKccqIBjAHHvjYgwgP Q+5cWi5X4Mxe3DI7UdSSly1aFz+LD0zuv84g75hBF+t0fG+nc/lzHbLru1Tf8plX QP2iQWTEFwv2o+fNBkhSNV2gRzq6Qgi1FHvfy+zDn5iMjTXxVnqEhMvVvmYkPxyW u/ae4E80Z2O+EsixrTKVzDGv8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqb1bo+ +6YIME4hrW6fisak2KNOMB8GA1UdIwQYMBaAFGyN+gQ8IriifqtgRwr0BmAkpoRA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREY4QS84RjAxMUM2RUYz NzkxMUVFQjdFOURDNkFDNEY5QUUwMi9iSTM2QkR3aXVLSi1xMkJIQ3ZRR1lDU21o RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JJMzZCRHdpdUtKLXEyQkhDdlFHWUNTbWhFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REY4QS84RjAxMUM2RUYzNzkxMUVFQjdFOURDNkFDNEY5QUUwMi9iSTM2QkR3aXVL Si1xMkJIQ3ZRR1lDU21oRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ5wH0bKCzMkk9QoeeLh0XcgUD8jKhegUoYrnL3vyfmYIYVB6rqOxy p40yrZDT7Rrm/2aI4E8xHKXYkVnLriIwO4d497BxdEJdAPours1oEtVhf1O81LV8 vw9XNu0smRlxeqpvK0abfD7LumouGpNFChAyIHNDuGDmoMPgvMyF2/XJG4y0ge/4 kc9pprmZ88TGbO1H80Pmt+KcbuDbJ+mKqPnLGDoKGYhyyenEk90uzPee3D00Y3Qq foRO8l7MqyUbcv5OQTzsGG+TWqhPKCGlZG7QVNQIYcVocmB3K/G34lpP8DbYSGPy qhA8C7ajBQEHr1n9rO5YHMPqXc4PBLwW -----END CERTIFICATE-----Generated at Mon May 12 12:35:03 2025 by rpki-client