$ rpki-client -vvf rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft File: BudciPNpAzH-l_hiEjG2XRR6O20.mft (raw, json) Hash identifier: PvQrj10pliKqWFVGXO3vDn/XjONqCqHEJ7iIQliCBjQ= Subject key identifier: 64:31:F3:14:59:C8:CF:DE:72:66:7B:E0:3B:BD:D9:D4:E5:7A:85:4A Authority key identifier: 06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D Certificate issuer: /CN=A915FEAC/serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft Manifest number: 2A Signing time: Thu 15 May 2025 07:02:27 +0000 Manifest this update: Thu 15 May 2025 07:02:27 +0000 Manifest next update: Thu 22 May 2025 07:02:27 +0000 Files and hashes: 1: BudciPNpAzH-l_hiEjG2XRR6O20.crl (hash: 2xg/m8u4otPPW0yDJr/e17ZWKvOM7DCxgimrN38KvP8=) 2: 2511401EF40311EFBB6EF777C4F9AE02.roa (hash: tnCDhZMDrHPp0NMpU0cMFqMJ1EvDl+x9yj+eC20nwlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FEAC, serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D Validity Not Before: May 15 07:02:27 2025 GMT Not After : May 22 07:02:27 2025 GMT Subject: CN=68259183-7a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:15:1a:a3:b1:53:4b:6c:51:a6:8a:90:3f: 6c:87:e3:32:c6:68:51:17:ef:a6:03:be:f5:8c:8a: bc:a5:7a:54:0d:c3:73:86:ea:fc:9f:86:a6:8e:06: b3:89:7f:6f:9b:2e:f3:22:c6:02:83:4b:30:f4:4f: a1:4b:a4:e2:c4:3d:29:69:61:0d:34:ad:f6:92:66: 96:ae:13:a9:1c:e1:62:db:6b:e3:f4:f2:d9:92:43: 6b:0f:70:08:ee:88:04:30:08:f2:50:06:ed:6c:ab: 70:22:ff:ce:d4:5b:96:39:a7:10:22:fc:78:0a:52: 2a:21:da:51:4e:39:7e:60:c1:5a:d3:f7:f0:b8:9e: f9:09:f9:46:6a:49:d5:63:49:ff:1f:95:7a:85:63: 19:d8:b4:1d:31:51:4c:1d:0d:3f:8f:43:4d:03:38: ee:9b:44:07:49:09:e7:39:ee:fc:c8:db:1f:de:22: f1:2c:37:d3:7e:0c:90:dc:1a:55:9f:14:0c:f7:d4: b4:40:64:d9:8d:3a:1e:a1:c9:e2:a6:e2:3e:ea:e7: c8:5b:e7:7d:db:d3:c7:33:bb:8f:4c:bd:8b:de:ce: 13:f6:a5:bb:49:65:f1:24:c0:14:74:13:d7:77:45: 27:b3:26:83:ef:c6:65:71:d6:29:94:7c:b3:7f:80: 3f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:31:F3:14:59:C8:CF:DE:72:66:7B:E0:3B:BD:D9:D4:E5:7A:85:4A X509v3 Authority Key Identifier: keyid:06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:22:11:e8:0f:b4:51:56:1e:c9:49:d8:42:d4:1c:c4:d0:da: c2:33:25:58:48:57:0d:eb:7c:b4:83:57:13:69:8f:82:ce:07: ca:7c:3e:83:8e:dc:42:96:fb:a7:aa:26:8b:ef:33:2d:83:5c: f6:01:10:86:89:92:17:dc:7c:70:02:99:d5:dd:ac:ee:48:24: 12:e0:9d:f8:51:fb:45:7a:9a:c8:84:4d:53:14:f0:36:a8:c6: 72:31:6b:cd:8e:ca:5f:3c:14:7e:d2:0a:a3:d3:ba:36:d2:4f: 3f:94:01:98:a2:7e:8e:a6:b2:ea:fc:60:d2:77:89:06:0a:44: ea:65:35:c7:c0:9d:fd:92:6b:8d:9b:70:c6:e1:0b:78:14:76: ef:85:35:a3:ab:a5:c2:d8:b7:14:95:92:df:cb:e8:28:a2:54: 86:3b:fc:57:a7:76:49:dd:78:5e:77:37:5e:f3:a5:72:cd:eb: 88:8e:bd:0c:16:47:fb:18:f1:8c:78:50:08:b8:1c:52:97:64: 21:c7:cf:03:0d:e1:99:75:ed:44:d8:4a:8f:d7:0f:9d:5d:9a: a7:47:f1:4d:8a:b9:65:83:ff:1d:d4:73:3e:7a:e1:dd:a2:2f: 23:47:e4:26:81:81:1b:2f:a1:58:17:8b:3f:15:b3:df:4c:c9: 51:79:de:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkVBQzExMC8GA1UEBRMoMDZFNzVDODhGMzY5MDMzMUZFOTdGODYyMTIzMUI2NUQx NDdBM0I2RDAeFw0yNTA1MTUwNzAyMjdaFw0yNTA1MjIwNzAyMjdaMBgxFjAUBgNV BAMTDTY4MjU5MTgzLTdhNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFcxUao7FTS2xRpoqQP2yH4zLGaFEX76YDvvWMirylelQNw3OG6vyfhqaOBrOJ f2+bLvMixgKDSzD0T6FLpOLEPSlpYQ00rfaSZpauE6kc4WLba+P08tmSQ2sPcAju iAQwCPJQBu1sq3Ai/87UW5Y5pxAi/HgKUioh2lFOOX5gwVrT9/C4nvkJ+UZqSdVj Sf8flXqFYxnYtB0xUUwdDT+PQ00DOO6bRAdJCec57vzI2x/eIvEsN9N+DJDcGlWf FAz31LRAZNmNOh6hyeKm4j7q58hb533b08czu49MvYvezhP2pbtJZfEkwBR0E9d3 RSezJoPvxmVx1imUfLN/gD97AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZDHzFFnI z95yZnvgO73Z1OV6hUowHwYDVR0jBBgwFoAUBudciPNpAzH+l/hiEjG2XRR6O20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRUFDLzc5M0E5REY4RjQw MjExRUZCMUEwNkM1OUM0RjlBRTAyL0J1ZGNpUE5wQXpILWxfaGlFakcyWFJSNk8y MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQnVkY2lQTnBBekgtbF9oaUVqRzJYUlI2TzIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG RUFDLzc5M0E5REY4RjQwMjExRUZCMUEwNkM1OUM0RjlBRTAyL0J1ZGNpUE5wQXpI LWxfaGlFakcyWFJSNk8yMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMIiEegPtFFWHslJ2ELUHMTQ2sIzJVhIVw3rfLSDVxNpj4LOB8p8PoOO 3EKW+6eqJovvMy2DXPYBEIaJkhfcfHACmdXdrO5IJBLgnfhR+0V6msiETVMU8Dao xnIxa82Oyl88FH7SCqPTujbSTz+UAZiifo6msur8YNJ3iQYKROplNcfAnf2Sa42b cMbhC3gUdu+FNaOrpcLYtxSVkt/L6CiiVIY7/FendkndeF53N17zpXLN64iOvQwW R/sY8Yx4UAi4HFKXZCHHzwMN4Zl17UTYSo/XD51dmqdH8U2KuWWD/x3Ucz564d2i LyNH5CaBgRsvoVgXiz8Vs99MyVF53iE= -----END CERTIFICATE-----Generated at Thu May 15 12:11:44 2025 by rpki-client