$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft File: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft (raw, json) Hash identifier: mOhFWSBaQcslbb9rwDERTgLaargJ76PFi7j0aQduxfc= Subject key identifier: F8:64:0C:9D:19:3E:0B:61:A6:92:8A:37:BF:61:B6:3A:07:53:39:36 Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 Certificate issuer: /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft Manifest number: 027B Signing time: Thu 15 May 2025 01:39:08 +0000 Manifest this update: Thu 15 May 2025 01:39:07 +0000 Manifest next update: Thu 22 May 2025 01:39:07 +0000 Files and hashes: 1: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl (hash: V7zOAX9wlhw+WWUr4e9LERme2FQhQZAHRNGtLn25gRc=) 2: ED947C26088911EDA7D9A84AC4F9AE02.roa (hash: wd4QJR9Px8ImvSHEPaKQomQHqTQIJfzdAznmx8J+K4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A44, serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Validity Not Before: May 15 01:39:07 2025 GMT Not After : May 22 01:39:07 2025 GMT Subject: CN=682545bb-31af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:ad:d4:fb:94:48:ca:7e:76:30:fe:a0:c6: 35:9a:89:bb:87:e7:95:c0:ef:ae:cd:da:21:e0:9e: 45:76:04:2a:40:82:1b:4c:a8:a1:f9:23:00:48:81: 93:5a:39:f4:bd:3a:8b:0a:8a:f6:d2:7a:86:20:8e: 03:83:6c:aa:25:34:7d:28:b6:e6:f8:93:34:23:6b: 46:b0:84:8e:fa:20:5a:ac:6a:fa:f1:48:ed:7c:ed: 9b:f5:59:67:d9:d2:6e:09:ea:f1:b6:05:86:ba:c9: 27:28:15:81:2e:dd:a5:b7:7c:05:59:09:7d:0c:6c: 57:40:01:39:9f:14:66:cc:86:55:2e:1b:91:32:a6: 5a:15:8b:98:f6:ee:41:0b:f3:81:3b:57:7d:58:d5: e3:c5:45:b6:44:bf:80:7b:0a:58:60:03:9a:66:bb: 54:96:97:7b:b3:b2:eb:8d:f6:ab:5c:04:31:4d:05: 23:34:84:5a:ed:df:aa:20:a0:a6:43:65:2e:4d:65: 4c:50:98:43:dc:ea:4a:6c:66:28:1e:67:f1:cb:35: 5a:7f:bf:4b:65:3d:f0:99:88:00:54:bc:a1:cb:55: 31:f6:b1:99:72:51:c2:bc:62:ac:b2:6a:e5:24:8a: aa:ff:82:34:c2:da:bf:4d:45:f9:d6:a1:2e:cb:e7: 29:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:64:0C:9D:19:3E:0B:61:A6:92:8A:37:BF:61:B6:3A:07:53:39:36 X509v3 Authority Key Identifier: keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:27:93:9b:05:0a:8d:1d:f0:ba:b1:58:d2:b0:1b:32:b4:63: 64:65:ec:08:a5:6c:50:65:03:a9:b8:f2:f8:07:e7:5a:dc:a4: 2b:bf:d1:a4:cd:7f:fe:17:81:51:f8:b7:31:4b:54:24:53:74: fc:2a:08:71:88:d6:4b:51:50:a9:04:1d:cf:64:3e:88:be:d8: 8d:ab:91:2b:09:de:6f:30:ac:eb:b4:de:88:31:dc:f5:97:4d: ff:18:3a:94:66:70:18:e3:e2:e6:db:e4:85:36:89:78:75:95: 93:f4:86:ae:02:e6:48:97:c8:f1:6b:05:c7:60:f6:1d:aa:84: 81:d6:da:74:d5:20:e1:03:63:80:1a:81:d0:de:84:15:4b:0d: 0b:63:26:e6:c0:e5:75:16:20:d3:7e:99:5d:e1:5e:54:dd:89: 6d:ab:da:53:3c:07:21:5b:81:10:28:9d:cb:a7:cb:b3:df:54: 8d:9b:5a:55:2d:0e:3d:be:32:ec:98:9d:5a:2e:56:c5:ed:48: 1a:0b:a0:82:01:42:de:79:01:86:33:d3:b0:21:18:50:d9:01: aa:ae:d6:81:4e:8e:cf:ff:d4:50:eb:c4:08:7b:e9:fa:ff:c3: 9d:69:24:79:6a:b2:37:71:9e:03:5e:77:cf:0a:26:d3:d4:cc: dd:45:c1:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNDQxMTAvBgNVBAUTKDZDOUUwQzJCRkU5RjdEMUIxREUxRDZFRjYyODI1M0FB NzA4OTJBMjUwHhcNMjUwNTE1MDEzOTA3WhcNMjUwNTIyMDEzOTA3WjAYMRYwFAYD VQQDEw02ODI1NDViYi0zMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDyt1PuUSMp+djD+oMY1mom7h+eVwO+uzdoh4J5FdgQqQIIbTKih+SMASIGT Wjn0vTqLCor20nqGII4Dg2yqJTR9KLbm+JM0I2tGsISO+iBarGr68UjtfO2b9Vln 2dJuCerxtgWGusknKBWBLt2lt3wFWQl9DGxXQAE5nxRmzIZVLhuRMqZaFYuY9u5B C/OBO1d9WNXjxUW2RL+AewpYYAOaZrtUlpd7s7LrjfarXAQxTQUjNIRa7d+qIKCm Q2UuTWVMUJhD3OpKbGYoHmfxyzVaf79LZT3wmYgAVLyhy1Ux9rGZclHCvGKssmrl JIqq/4I0wtq/TUX51qEuy+cpZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhkDJ0Z PgthppKKN79htjoHUzk2MB8GA1UdIwQYMBaAFGyeDCv+n30bHeHW72KCU6pwiSol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE0NC8wRUM4RTQyQTA4 ODcxMUVEODkxRUU2NDRDNEY5QUUwMi9iSjRNS182ZmZSc2Q0ZGJ2WW9KVHFuQ0pL aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JKNE1LXzZmZlJzZDRkYnZZb0pUcW5DSktpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE0NC8wRUM4RTQyQTA4ODcxMUVEODkxRUU2NDRDNEY5QUUwMi9iSjRNS182ZmZS c2Q0ZGJ2WW9KVHFuQ0pLaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgJ5ObBQqNHfC6sVjSsBsytGNkZewIpWxQZQOpuPL4B+da3KQrv9Gk zX/+F4FR+LcxS1QkU3T8KghxiNZLUVCpBB3PZD6IvtiNq5ErCd5vMKzrtN6IMdz1 l03/GDqUZnAY4+Lm2+SFNol4dZWT9IauAuZIl8jxawXHYPYdqoSB1tp01SDhA2OA GoHQ3oQVSw0LYybmwOV1FiDTfpld4V5U3Yltq9pTPAchW4EQKJ3Lp8uz31SNm1pV LQ49vjLsmJ1aLlbF7UgaC6CCAULeeQGGM9OwIRhQ2QGqrtaBTo7P/9RQ68QIe+n6 /8OdaSR5arI3cZ4DXnfPCibT1MzdRcEp -----END CERTIFICATE-----Generated at Fri May 16 02:47:43 2025 by rpki-client