$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft File: bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json) Hash identifier: Xh0v9GucJemZ7wIHleyQC5MfDa+7c/6G+j1UeQ4tXOQ= Subject key identifier: C4:05:A3:EE:E9:02:77:14:52:29:11:92:08:31:C2:EB:32:47:74:35 Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B Certificate issuer: /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft Manifest number: CD Signing time: Thu 15 May 2025 05:05:10 +0000 Manifest this update: Thu 15 May 2025 05:05:10 +0000 Manifest next update: Thu 22 May 2025 05:05:10 +0000 Files and hashes: 1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: MKYq0ztvvShXHBEAtf8DH7Ws+2ePcKeYnSdEBglrmfs=) 2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: GoylksPgamABprAXemlh5qC8IA2EnKvQRHTbupKYReA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B Validity Not Before: May 15 05:05:10 2025 GMT Not After : May 22 05:05:10 2025 GMT Subject: CN=68257606-be76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:72:88:02:e6:6a:82:95:cf:a0:f4:87:46: 15:48:7e:c5:1c:c7:e5:9c:0d:27:69:22:af:03:4b: 7d:c5:04:02:9f:c8:d2:ac:4d:5c:9b:99:4d:6c:1b: 67:8f:f8:e4:ad:22:5d:8e:56:da:3a:a4:da:33:27: 8e:1a:98:2c:b7:d1:a4:11:0b:eb:5d:e3:7e:29:4a: 93:df:c9:78:5b:f6:69:36:74:98:71:98:11:35:6f: ce:8f:8b:0a:70:8a:5d:a9:c5:fd:d9:61:c5:21:84: cb:0a:28:b3:35:54:23:a4:b6:d9:02:dd:b9:21:50: 4e:9e:19:3b:5f:75:f6:34:af:e9:8a:d7:7c:de:af: 96:6e:1f:63:dd:b3:2b:7f:3a:96:33:9b:93:92:21: 10:5f:b6:26:ec:23:3b:00:25:75:c2:4d:25:ff:6d: c7:f2:a5:d6:77:50:75:d5:56:f1:c3:90:b3:fb:1c: 84:29:3c:86:37:fe:21:18:a1:45:9f:39:01:66:3b: 47:8c:44:78:31:4a:a1:21:bd:d2:00:db:5c:ce:1d: 8b:77:6e:10:8b:7b:0f:f6:42:98:88:e8:09:e7:2a: b7:e9:40:2d:1e:3e:ac:e9:c5:07:dd:f5:0f:50:0b: 70:55:d9:f9:a5:76:71:c3:6d:5f:04:89:87:e9:be: b0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:05:A3:EE:E9:02:77:14:52:29:11:92:08:31:C2:EB:32:47:74:35 X509v3 Authority Key Identifier: keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:63:42:34:ef:55:05:71:76:cc:ad:26:a7:95:ad:ce:c3:52: 62:b9:2b:6b:dd:80:85:28:53:20:72:19:ae:24:44:78:c7:02: 1f:a0:49:38:0e:6e:ee:44:58:fc:af:98:be:88:61:d7:1a:de: a7:7e:64:53:83:ea:00:8f:ef:7c:89:0c:15:90:b5:1a:c9:98: a4:32:49:3e:1c:b9:cc:fb:e9:12:e0:9c:e4:0e:44:65:93:9e: a3:67:12:2e:3d:77:4a:e7:7d:6a:26:fc:2b:7f:e4:57:f8:f3: c5:ea:e1:aa:ba:f0:be:3e:c5:81:29:7d:15:80:fe:1c:a4:04: 81:48:b7:2d:4e:43:1f:3c:1a:bf:e5:5f:94:f3:b2:6d:ae:6b: 71:d2:7d:cd:ae:7b:60:8d:f9:6e:4d:7f:56:c0:63:70:29:9f: 80:2b:bd:34:f6:1c:6a:52:40:22:2e:4d:7b:0c:d5:fb:d6:6c: f5:31:9a:d1:2e:9f:08:ef:d2:7d:78:c0:3a:80:8d:97:e7:e6: bb:28:ae:c1:b1:75:41:87:f1:69:88:70:4f:f0:d8:90:72:f1: a1:0a:57:94:27:c3:05:66:49:59:a6:86:d0:f3:e9:3f:5e:84: d9:67:42:1a:6b:7a:af:c9:f2:d4:15:00:b0:fe:91:42:05:49: f7:63:bf:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRkIxMTAvBgNVBAUTKDZFNDU3MzM0ODY4MDMyNkQzREFERTk4NTIxNUQyMjY2 MjhCOUYxNkIwHhcNMjUwNTE1MDUwNTEwWhcNMjUwNTIyMDUwNTEwWjAYMRYwFAYD VQQDEw02ODI1NzYwNi1iZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA081yiALmaoKVz6D0h0YVSH7FHMflnA0naSKvA0t9xQQCn8jSrE1cm5lNbBtn j/jkrSJdjlbaOqTaMyeOGpgst9GkEQvrXeN+KUqT38l4W/ZpNnSYcZgRNW/Oj4sK cIpdqcX92WHFIYTLCiizNVQjpLbZAt25IVBOnhk7X3X2NK/pitd83q+Wbh9j3bMr fzqWM5uTkiEQX7Ym7CM7ACV1wk0l/23H8qXWd1B11Vbxw5Cz+xyEKTyGN/4hGKFF nzkBZjtHjER4MUqhIb3SANtczh2Ld24Qi3sP9kKYiOgJ5yq36UAtHj6s6cUH3fUP UAtwVdn5pXZxw21fBImH6b6w8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQFo+7p AncUUikRkggxwusyR3Q1MB8GA1UdIwQYMBaAFG5FczSGgDJtPa3phSFdImYoufFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi81MDU2QzhCMjAw NTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1tMDlyZW1GSVYwaVppaTU4 V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrVnpOSWFBTW0wOXJlbUZJVjBpWmlpNThXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGQi81MDU2QzhCMjAwNTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1t MDlyZW1GSVYwaVppaTU4V3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiY0I071UFcXbMrSanla3Ow1JiuStr3YCFKFMgchmuJER4xwIfoEk4 Dm7uRFj8r5i+iGHXGt6nfmRTg+oAj+98iQwVkLUayZikMkk+HLnM++kS4JzkDkRl k56jZxIuPXdK531qJvwrf+RX+PPF6uGquvC+PsWBKX0VgP4cpASBSLctTkMfPBq/ 5V+U87Jtrmtx0n3NrntgjfluTX9WwGNwKZ+AK7009hxqUkAiLk17DNX71mz1MZrR Lp8I79J9eMA6gI2X5+a7KK7BsXVBh/FpiHBP8NiQcvGhCleUJ8MFZklZpobQ8+k/ XoTZZ0Iaa3qvyfLUFQCw/pFCBUn3Y793 -----END CERTIFICATE-----Generated at Thu May 15 19:20:03 2025 by rpki-client