$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json) Hash identifier: Mr7WTjDbQgpyFD6sJN9Uqnp1lTvHq2VyonsYczNlRKU= Subject key identifier: ED:6F:DD:BB:FE:15:B7:D0:22:D4:17:61:6B:7E:08:EA:D6:26:65:AE Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Certificate serial: 0FF3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft Manifest number: 0FDB Signing time: Fri 16 May 2025 17:44:47 +0000 Manifest this update: Fri 16 May 2025 17:44:47 +0000 Manifest next update: Fri 23 May 2025 17:44:47 +0000 Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: VtylMtSmhazbkdV39kFUHkHDgCl/o195IcqVqMZ99bQ=) 2: F7F18D8C2BA711F09514D439C4F9AE02.roa (hash: RQ31QQqNnbR7hUGab4NBe2n82ZvCRfsZ20QWiB5eLdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4083 (0xff3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Validity Not Before: May 16 17:44:47 2025 GMT Not After : May 23 17:44:47 2025 GMT Subject: CN=6827798f-5f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a8:f3:d2:8d:6c:31:4c:83:d5:5c:5b:ff:bc: 0e:b9:8d:74:9d:dc:78:fd:8b:3d:7a:58:f1:1d:47: 3c:2a:3e:82:1c:8f:b7:c2:7a:07:a7:c3:16:24:67: 20:d7:47:89:66:ac:a3:b8:05:17:3e:d4:ec:fd:86: e8:65:9b:18:2e:71:5c:54:52:18:fd:e8:55:05:13: d1:dc:30:5f:97:48:bb:4c:3c:18:89:15:d4:83:c9: 20:b2:1f:09:e3:50:cb:c6:1f:88:e8:8a:64:9d:32: 81:c8:57:15:0f:bd:43:be:83:53:10:21:68:e5:c3: 13:57:86:ea:76:cf:6f:a4:8a:ae:67:2e:89:9c:1e: 2d:1a:7c:74:12:b1:e0:f9:e5:f0:05:07:33:0f:ca: 85:0e:6b:08:b5:47:ac:ae:59:87:e8:91:74:f1:b4: a5:92:95:d8:2b:60:df:f9:d1:bf:0f:f0:12:75:74: 26:44:73:32:dd:f5:72:03:38:0d:09:bd:89:b8:37: 10:4f:d9:ac:4d:98:d3:b1:65:ff:b2:78:96:11:ee: e6:a0:e4:db:2e:03:99:1a:b6:38:e4:07:3a:e9:b4: 86:02:2d:2a:4f:ad:6c:08:d2:64:20:1b:59:c8:3e: 1f:9f:95:07:48:f1:df:9a:e6:38:46:07:b8:50:1c: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6F:DD:BB:FE:15:B7:D0:22:D4:17:61:6B:7E:08:EA:D6:26:65:AE X509v3 Authority Key Identifier: keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c1:22:a4:09:e2:da:91:a4:86:5f:0d:89:2b:35:5b:05:92: ed:06:b9:29:e7:b1:cf:e4:67:4e:bc:54:0a:e0:1f:9d:3a:c1: f1:d0:12:36:69:8a:e9:c7:f3:d0:e6:74:b9:a4:b2:b8:bc:d7: 72:27:71:35:7a:05:5f:97:24:1f:86:29:f8:b1:17:0d:1e:6b: 64:7e:b0:d3:b1:63:00:f8:9d:fe:07:de:71:83:ff:47:44:68: 7c:14:75:1e:f1:c9:c7:f3:63:b3:1f:1b:8f:ae:c8:fa:bb:8f: 97:5e:ae:29:d9:4f:35:ae:13:2a:61:54:01:d1:0d:35:b8:23: 92:e0:b8:d5:fc:82:c5:76:05:99:c3:13:ae:45:e9:53:c9:27: 8b:91:ee:a6:0e:1e:ba:e8:6b:7f:0d:df:3e:dd:ba:6e:b6:5d: f2:63:4b:19:0c:f6:22:1b:79:76:7b:4d:ad:08:bd:c5:6f:a0: ea:5f:a8:c6:9f:02:6f:b1:0e:df:5b:53:83:2f:c9:93:51:bd: b8:19:1f:f2:86:9f:d0:3e:a7:58:80:98:fb:45:27:bd:ea:2c: 86:c3:c2:92:b9:d2:cf:d7:fa:9f:dd:ba:d8:5c:ab:4d:8e:8e: eb:9a:59:78:22:a3:cf:3c:a9:03:c7:69:d0:dc:a4:b3:42:34: 6e:fe:3a:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY5QkIyOUIwQUJFODQ5RTdGRTE4MEUzMzlFNEIxQzI4 MjM2OEM1MjEwHhcNMjUwNTE2MTc0NDQ3WhcNMjUwNTIzMTc0NDQ3WjAYMRYwFAYD VQQDEw02ODI3Nzk4Zi01ZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qjz0o1sMUyD1Vxb/7wOuY10ndx4/Ys9eljxHUc8Kj6CHI+3wnoHp8MWJGcg 10eJZqyjuAUXPtTs/YboZZsYLnFcVFIY/ehVBRPR3DBfl0i7TDwYiRXUg8kgsh8J 41DLxh+I6IpknTKByFcVD71DvoNTECFo5cMTV4bqds9vpIquZy6JnB4tGnx0ErHg +eXwBQczD8qFDmsItUesrlmH6JF08bSlkpXYK2Df+dG/D/ASdXQmRHMy3fVyAzgN Cb2JuDcQT9msTZjTsWX/sniWEe7moOTbLgOZGrY45Ac66bSGAi0qT61sCNJkIBtZ yD4fn5UHSPHfmuY4Rge4UBx/8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1v3bv+ FbfQItQXYWt+COrWJmWuMB8GA1UdIwQYMBaAFPm7KbCr6Enn/hgOM55LHCgjaMUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8wQTA0RjRFMjU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1NlZi1HQTR6bmtzY0tDTm94 U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ic3BzS3ZvU2VmLUdBNHpua3NjS0NOb3hTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8wQTA0RjRFMjU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1Nl Zi1HQTR6bmtzY0tDTm94U0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLwSKkCeLakaSGXw2JKzVbBZLtBrkp57HP5GdOvFQK4B+dOsHx0BI2 aYrpx/PQ5nS5pLK4vNdyJ3E1egVflyQfhin4sRcNHmtkfrDTsWMA+J3+B95xg/9H RGh8FHUe8cnH82OzHxuPrsj6u4+XXq4p2U81rhMqYVQB0Q01uCOS4LjV/ILFdgWZ wxOuRelTySeLke6mDh666Gt/Dd8+3bputl3yY0sZDPYiG3l2e02tCL3Fb6DqX6jG nwJvsQ7fW1ODL8mTUb24GR/yhp/QPqdYgJj7RSe96iyGw8KSudLP1/qf3brYXKtN jo7rmll4IqPPPKkDx2nQ3KSzQjRu/jo1 -----END CERTIFICATE-----Generated at Sat May 17 10:25:03 2025 by rpki-client