$ rpki-client -vvf rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft File: bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft (raw, json) Hash identifier: xACKRaW5kiVTjfCi+PQJbmE2ISbG/VPbGkY47D2qEuw= Subject key identifier: F1:8A:52:69:23:99:77:CC:5C:3B:A4:FB:68:33:DE:A0:E9:EF:3D:25 Authority key identifier: 6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9 Certificate issuer: /CN=A914949E/serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft Manifest number: 0126 Signing time: Tue 13 May 2025 03:52:58 +0000 Manifest this update: Tue 13 May 2025 03:52:58 +0000 Manifest next update: Tue 20 May 2025 03:52:58 +0000 Files and hashes: 1: bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl (hash: 87jHKw/C8BLZKYwVdjrkxvmx4wccnMZsCIybNxEIl+8=) 2: 52531292718111EEA2596A60C4F9AE02.roa (hash: Vg73TN1ibIfWQIPliBrxJS/1BLP/byeXdiTRX/hU2Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914949E, serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9 Validity Not Before: May 13 03:52:58 2025 GMT Not After : May 20 03:52:58 2025 GMT Subject: CN=6822c21a-57ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:48:39:95:2d:44:f7:92:50:ea:ca:b5:c7: 72:6e:03:24:a0:89:53:1f:f1:3f:88:e8:45:be:ee: 3d:f1:f1:01:ae:1a:f8:d2:1c:40:d1:c4:e2:25:13: 81:18:4a:c9:04:0c:1b:21:fe:a8:2c:a6:2d:72:98: 9c:ec:c0:82:ab:e1:46:a3:d4:ff:ae:2d:be:1c:61: d6:8e:b5:91:f2:d2:53:04:53:4a:e8:99:a9:87:2e: 66:c8:33:bf:70:98:4f:df:1e:85:fd:a6:d4:ae:43: 45:f1:be:12:38:9d:21:11:aa:2e:35:ac:9e:a6:36: 27:f0:19:f7:cb:36:54:2d:ff:64:d9:2d:9b:07:52: 95:d1:8e:d3:05:8a:5b:d1:de:81:28:02:12:73:b6: 21:09:06:0c:49:ef:63:18:79:78:50:e9:da:51:75: 66:24:86:ca:e7:ca:fd:7a:09:a3:aa:3f:00:ea:27: d5:2d:1e:39:0d:d4:fc:32:b9:2d:24:82:ca:ed:bc: 2b:21:ed:50:d0:d9:55:84:44:2f:a3:83:ff:db:cf: 73:89:9f:31:0c:62:51:62:27:ab:d2:e0:43:5e:7d: 79:f3:09:d9:43:6f:da:fc:09:e9:16:28:80:bc:4c: e7:c2:d8:f1:b0:83:1f:73:b1:4f:90:86:1b:08:14: 27:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8A:52:69:23:99:77:CC:5C:3B:A4:FB:68:33:DE:A0:E9:EF:3D:25 X509v3 Authority Key Identifier: keyid:6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:19:c5:56:94:4e:a9:e4:73:e2:13:43:c4:21:01:44:08:fc: 1c:3a:4f:7d:85:d0:e6:33:1e:47:16:fd:46:08:54:1e:aa:e9: f6:8a:45:b9:40:0d:cc:a5:2e:72:61:0e:53:16:da:2c:74:50: 3d:e5:7a:4d:9a:a9:08:a9:81:87:44:11:6b:a9:cb:a5:79:94: ff:36:9e:a3:15:39:49:c0:1b:81:91:12:4a:99:f7:6e:d6:b6: 56:e2:1e:fa:d9:a3:c4:c3:15:6c:6d:6a:9f:4b:a0:19:cb:b6: 18:85:44:e1:da:e6:af:99:fc:a3:9c:f5:fa:f6:76:49:a7:9a: 47:c1:83:b3:b2:d7:e0:f1:08:53:0d:d1:de:35:9f:4d:a6:63: 30:e0:63:cd:62:25:91:e7:05:69:5a:1b:12:2d:bc:ad:5e:2b: 5f:84:07:30:90:8c:51:60:fb:c6:1d:e7:cd:32:af:33:3e:df: f9:90:77:74:81:c0:99:e0:c5:d7:4c:15:5f:f0:a0:25:ef:9f: 50:f4:b4:5b:0f:40:22:6b:56:e1:0f:0e:46:31:53:04:b9:62: f7:8d:c5:48:e6:05:92:da:cc:02:93:21:f4:31:45:ca:f9:9a: c3:94:aa:0b:58:4a:ad:4e:18:62:9a:08:7c:76:0d:a0:d0:08: 4e:91:8a:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk0OUUxMTAvBgNVBAUTKDZFMzQ1QzAxNTU2REUzRURBMUQ5MTM0RDRBMkQ3RUE1 MjNBMTQ4RjkwHhcNMjUwNTEzMDM1MjU4WhcNMjUwNTIwMDM1MjU4WjAYMRYwFAYD VQQDEw02ODIyYzIxYS01N2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhtIOZUtRPeSUOrKtcdybgMkoIlTH/E/iOhFvu498fEBrhr40hxA0cTiJROB GErJBAwbIf6oLKYtcpic7MCCq+FGo9T/ri2+HGHWjrWR8tJTBFNK6Jmphy5myDO/ cJhP3x6F/abUrkNF8b4SOJ0hEaouNayepjYn8Bn3yzZULf9k2S2bB1KV0Y7TBYpb 0d6BKAISc7YhCQYMSe9jGHl4UOnaUXVmJIbK58r9egmjqj8A6ifVLR45DdT8Mrkt JILK7bwrIe1Q0NlVhEQvo4P/289ziZ8xDGJRYier0uBDXn158wnZQ2/a/AnpFiiA vEznwtjxsIMfc7FPkIYbCBQnjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGKUmkj mXfMXDuk+2gz3qDp7z0lMB8GA1UdIwQYMBaAFG40XAFVbePtodkTTUotfqUjoUj5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTQ5RS84MDc4NUY1MDcx NjkxMUVFQjUxQjM4MERDNEY5QUUwMi9ialJjQVZWdDQtMmgyUk5OU2kxLXBTT2hT UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqUmNBVlZ0NC0yaDJSTk5TaTEtcFNPaFNQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTQ5RS84MDc4NUY1MDcxNjkxMUVFQjUxQjM4MERDNEY5QUUwMi9ialJjQVZWdDQt MmgyUk5OU2kxLXBTT2hTUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBGcVWlE6p5HPiE0PEIQFECPwcOk99hdDmMx5HFv1GCFQequn2ikW5 QA3MpS5yYQ5TFtosdFA95XpNmqkIqYGHRBFrqculeZT/Np6jFTlJwBuBkRJKmfdu 1rZW4h762aPEwxVsbWqfS6AZy7YYhUTh2uavmfyjnPX69nZJp5pHwYOzstfg8QhT DdHeNZ9NpmMw4GPNYiWR5wVpWhsSLbytXitfhAcwkIxRYPvGHefNMq8zPt/5kHd0 gcCZ4MXXTBVf8KAl759Q9LRbD0Aia1bhDw5GMVMEuWL3jcVI5gWS2swCkyH0MUXK +ZrDlKoLWEqtThhimgh8dg2g0AhOkYo5 -----END CERTIFICATE-----Generated at Wed May 14 06:35:23 2025 by rpki-client