$ rpki-client -vvf rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.mft File: BfhBmvmqMYTqsf-HQkpq4zz3MsQ.mft (raw, json) Hash identifier: D61OMoS1H6WfqzPi7fnIMS0vd/ulzZOFptG9XzCVVuo= Subject key identifier: 8E:D0:9B:B7:B7:6E:94:C8:E6:E4:4A:5B:45:ED:69:D6:B5:A9:8C:67 Authority key identifier: 05:F8:41:9A:F9:AA:31:84:EA:B1:FF:87:42:4A:6A:E3:3C:F7:32:C4 Certificate issuer: /CN=A915E575/serialNumber=05F8419AF9AA3184EAB1FF87424A6AE33CF732C4 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.mft Manifest number: 03AF Signing time: Tue 13 May 2025 00:30:23 +0000 Manifest this update: Tue 13 May 2025 00:30:23 +0000 Manifest next update: Tue 20 May 2025 00:30:23 +0000 Files and hashes: 1: BfhBmvmqMYTqsf-HQkpq4zz3MsQ.crl (hash: 5v+T45IhScD26CFeqzhi64WV40+5LKqNI2qRGxRBuPs=) 2: D86008008FAA11ECB0728B0FC4F9AE02.roa (hash: RsMIAFkbpydCDPohis69ldhzmBpnzB7IY6eRBCKfLas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.crl rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E575, serialNumber=05F8419AF9AA3184EAB1FF87424A6AE33CF732C4 Validity Not Before: May 13 00:30:23 2025 GMT Not After : May 20 00:30:23 2025 GMT Subject: CN=6822929f-1642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:0c:07:69:56:32:36:1c:48:a2:fe:87:c8: 44:ef:67:ee:8a:a4:04:b5:5d:21:f7:05:f9:bd:59: 76:5a:7c:fd:95:e9:4a:6d:47:ab:82:c6:8e:03:8f: 92:5b:94:70:d2:ac:c9:75:16:39:8a:44:e3:20:8f: da:ca:ed:40:5c:09:2b:32:58:bf:01:cb:cf:0b:72: ee:80:7b:6b:70:73:72:73:b8:80:fd:c0:d2:2a:75: b5:e0:04:31:87:2b:35:43:ce:9a:ea:37:93:6f:0c: 1d:7d:20:a7:4b:8e:a0:9e:70:d3:1d:d1:ac:d0:70: 3f:2d:99:cd:a4:65:f4:7b:1e:8e:2d:ca:d6:02:67: 1c:b3:18:ec:4a:be:5c:2f:cd:42:d4:46:18:8b:ea: be:2b:ab:cd:27:89:19:e8:51:48:19:a6:d2:07:03: cb:c3:1f:99:49:fd:aa:1b:db:94:71:07:59:21:1d: 23:da:6c:82:bc:25:a6:6a:a1:95:dc:cc:89:64:13: ff:3c:b1:87:e7:54:8c:f5:b8:b2:5e:78:13:fb:97: 98:a7:87:72:50:c1:ba:0d:3f:1c:a3:2f:a7:b0:fb: a7:18:89:92:6b:08:48:9e:44:9c:3b:be:b0:34:c1: 50:cb:f4:1b:01:fa:b6:0a:24:98:28:f5:92:9e:08: 25:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D0:9B:B7:B7:6E:94:C8:E6:E4:4A:5B:45:ED:69:D6:B5:A9:8C:67 X509v3 Authority Key Identifier: keyid:05:F8:41:9A:F9:AA:31:84:EA:B1:FF:87:42:4A:6A:E3:3C:F7:32:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:76:03:6b:cd:e2:5e:12:22:20:18:95:70:d8:68:e4:d0:12: 65:40:ab:86:91:72:01:6e:13:52:74:66:d0:1f:73:a6:30:b4: 29:d0:07:57:bf:63:4e:b8:fe:14:72:db:c0:d7:b6:95:3e:ec: 2d:b8:2e:2b:e6:a6:55:0a:52:85:a0:bb:7c:7d:04:a2:17:3e: d5:36:05:a5:c6:af:2c:8c:59:d2:b0:8e:63:8d:95:af:b4:5a: bd:98:24:c1:00:c9:e5:47:e5:45:9c:22:87:e3:d9:54:b6:9b: a2:8c:e6:a4:9f:15:8d:9b:d1:c3:3e:6e:c2:77:ea:1a:62:09: 29:04:95:6e:f8:1f:71:77:28:e9:a5:20:ef:cf:31:a6:3d:cb: 87:4f:81:54:b0:5d:93:a7:0f:a9:4c:44:c6:b7:aa:ce:76:f1: af:8c:1c:13:b7:fa:33:4e:53:61:b1:23:4d:00:a3:e1:b5:bf: 35:f9:26:d3:41:c5:6f:de:d9:fa:3f:7f:62:5a:80:f1:25:41: 13:72:30:47:54:15:7e:8d:5d:10:37:60:35:60:36:61:00:9d: e6:9c:b8:bf:a3:18:f2:e2:cb:a4:d8:a8:ef:47:cc:84:a5:6b: 9d:16:ea:31:b9:06:a0:b4:7f:93:ab:fb:f7:45:70:83:44:6e: b4:94:03:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1NzUxMTAvBgNVBAUTKDA1Rjg0MTlBRjlBQTMxODRFQUIxRkY4NzQyNEE2QUUz M0NGNzMyQzQwHhcNMjUwNTEzMDAzMDIzWhcNMjUwNTIwMDAzMDIzWjAYMRYwFAYD VQQDEw02ODIyOTI5Zi0xNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv94MB2lWMjYcSKL+h8hE72fuiqQEtV0h9wX5vVl2Wnz9lelKbUergsaOA4+S W5Rw0qzJdRY5ikTjII/ayu1AXAkrMli/AcvPC3LugHtrcHNyc7iA/cDSKnW14AQx hys1Q86a6jeTbwwdfSCnS46gnnDTHdGs0HA/LZnNpGX0ex6OLcrWAmccsxjsSr5c L81C1EYYi+q+K6vNJ4kZ6FFIGabSBwPLwx+ZSf2qG9uUcQdZIR0j2myCvCWmaqGV 3MyJZBP/PLGH51SM9biyXngT+5eYp4dyUMG6DT8coy+nsPunGImSawhInkScO76w NMFQy/QbAfq2CiSYKPWSnggloQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7Qm7e3 bpTI5uRKW0Xtada1qYxnMB8GA1UdIwQYMBaAFAX4QZr5qjGE6rH/h0JKauM89zLE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTU3NS9GMEIyNDIxNDhG QTYxMUVDOUMzOTc3NjJDNEY5QUUwMi9CZmhCbXZtcU1ZVHFzZi1IUWtwcTR6ejNN c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JmaEJtdm1xTVlUcXNmLUhRa3BxNHp6M01zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTU3NS9GMEIyNDIxNDhGQTYxMUVDOUMzOTc3NjJDNEY5QUUwMi9CZmhCbXZtcU1Z VHFzZi1IUWtwcTR6ejNNc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJdgNrzeJeEiIgGJVw2Gjk0BJlQKuGkXIBbhNSdGbQH3OmMLQp0AdX v2NOuP4UctvA17aVPuwtuC4r5qZVClKFoLt8fQSiFz7VNgWlxq8sjFnSsI5jjZWv tFq9mCTBAMnlR+VFnCKH49lUtpuijOaknxWNm9HDPm7Cd+oaYgkpBJVu+B9xdyjp pSDvzzGmPcuHT4FUsF2Tpw+pTETGt6rOdvGvjBwTt/ozTlNhsSNNAKPhtb81+SbT QcVv3tn6P39iWoDxJUETcjBHVBV+jV0QN2A1YDZhAJ3mnLi/oxjy4suk2KjvR8yE pWudFuoxuQagtH+Tq/v3RXCDRG60lAMm -----END CERTIFICATE-----Generated at Wed May 14 22:50:38 2025 by rpki-client