$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft File: BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json) Hash identifier: 3Qn7dvtoXVzxxCf32kPC3qgRrelZxxfMDLRWsOmzqLY= Subject key identifier: 82:EB:C6:E0:08:B0:00:A4:18:8D:C2:AC:04:A5:17:6D:9D:AB:28:DF Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD Certificate issuer: /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Certificate serial: 23E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft Manifest number: 23AD Signing time: Mon 12 May 2025 15:47:28 +0000 Manifest this update: Mon 12 May 2025 15:47:27 +0000 Manifest next update: Mon 19 May 2025 15:47:27 +0000 Files and hashes: 1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: /P4Jm56dUTH0e1xCGwCxb+n2IB5R1I34RSy0yb/fsJM=) 2: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 2VqKtLp4I4n3i3xfxJ0a0zauep05yhz4m6vcbsayeiY=) 3: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=) 4: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: fkO78SaWxLHL6UEeOmDkgAwdKa1QD3bVWVMip2dHju0=) 5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: Xr4axXAE5xhZlqvtubxZ2pb3RMbCF82Tss/A5eKchFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9191 (0x23e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Validity Not Before: May 12 15:47:27 2025 GMT Not After : May 19 15:47:27 2025 GMT Subject: CN=6822180f-2bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:ff:9d:00:67:ad:f7:17:0e:fc:61:66:66: 76:63:a4:b4:b6:03:18:f6:5b:86:d8:46:f5:6c:b0: 68:fb:24:00:66:4f:46:9d:8f:bb:fb:72:72:1e:65: 0a:8e:c4:e4:0b:b5:78:6d:6c:8d:5c:cc:1c:03:9d: 9b:30:16:1a:04:2a:12:94:65:f2:b2:a2:34:52:fc: 7b:c5:63:c9:86:6f:15:17:fb:bd:f6:4b:f7:d3:ee: 28:4a:c5:94:f1:69:1c:29:a7:0b:d4:07:3d:d6:60: 17:60:90:a3:72:7a:87:ee:30:9a:e4:55:3d:11:ef: e3:2f:d9:a9:7a:2d:de:f8:a3:29:10:9b:7f:2d:d9: b2:a6:04:ce:47:eb:3c:c5:5b:b6:d8:c0:73:d6:e6: ec:93:7c:f7:3b:e0:cb:71:f6:9b:18:38:7a:ec:0a: de:83:c5:7b:08:c1:85:63:8a:bc:3f:93:74:11:6f: e7:ee:95:c1:ba:32:16:35:7a:2d:7a:ce:29:38:e0: 38:4d:f8:e8:2e:15:30:9c:ec:48:73:64:d8:77:e1: 94:8a:ab:7c:35:5d:eb:ff:3d:03:49:60:a1:0f:66: 0a:b7:ce:ba:10:b1:ea:25:b1:ab:23:f5:11:61:cd: 6a:23:e7:9b:fb:eb:57:02:a2:1b:dc:06:14:85:90: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EB:C6:E0:08:B0:00:A4:18:8D:C2:AC:04:A5:17:6D:9D:AB:28:DF X509v3 Authority Key Identifier: keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e6:e4:c5:6c:5a:17:5a:6e:27:f4:9e:ce:85:c7:ef:e0:b8: 93:fa:41:1c:36:43:e5:b7:bc:9d:c9:f6:45:26:23:eb:2c:88: de:5f:ea:8a:66:40:47:ce:a2:e5:41:a2:91:7b:ce:bd:b6:e6: f3:a5:8d:fe:23:e9:a2:50:25:43:47:45:df:07:01:64:52:be: ac:77:80:47:54:8b:27:cb:4d:85:40:ad:33:28:a1:0d:f0:b6: 44:d1:b0:83:da:35:c3:cb:03:de:85:e9:ba:c3:be:50:2e:3c: 18:2d:eb:63:4d:fb:91:79:46:cc:05:74:50:4c:ca:6c:10:18: 9f:35:43:4f:49:a4:d3:73:88:a9:06:f5:b6:6a:9d:b5:5e:fd: 31:63:1b:28:dc:d5:7c:dc:8f:da:5e:c2:37:48:20:15:88:cc: 8b:0d:85:05:40:49:e0:78:a5:5f:e7:43:f7:07:01:76:b5:c8: 4c:e8:fc:1d:4f:3a:a5:8f:dc:05:88:43:93:df:69:71:45:ad: 07:6b:f4:3a:48:e0:06:58:48:e5:0c:8d:43:17:05:f9:68:0d: 1e:68:aa:cd:21:51:15:8f:64:5d:9c:b1:75:d5:33:38:77:b3: 62:ec:7d:ee:9b:c2:b6:d0:5e:57:ec:ef:49:96:f5:2d:17:06: d7:93:34:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMkYxMTAvBgNVBAUTKDA0NUI1QzA4NjdERTU4MUQyQjc0ODQyRkVGODA0NUMx QTc3QkU4QkQwHhcNMjUwNTEyMTU0NzI3WhcNMjUwNTE5MTU0NzI3WjAYMRYwFAYD VQQDEw02ODIyMTgwZi0yYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUj/nQBnrfcXDvxhZmZ2Y6S0tgMY9luG2Eb1bLBo+yQAZk9GnY+7+3JyHmUK jsTkC7V4bWyNXMwcA52bMBYaBCoSlGXysqI0Uvx7xWPJhm8VF/u99kv30+4oSsWU 8WkcKacL1Ac91mAXYJCjcnqH7jCa5FU9Ee/jL9mpei3e+KMpEJt/LdmypgTOR+s8 xVu22MBz1ubsk3z3O+DLcfabGDh67Areg8V7CMGFY4q8P5N0EW/n7pXBujIWNXot es4pOOA4TfjoLhUwnOxIc2TYd+GUiqt8NV3r/z0DSWChD2YKt866ELHqJbGrI/UR Yc1qI+eb++tXAqIb3AYUhZCuXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILrxuAI sACkGI3CrASlF22dqyjfMB8GA1UdIwQYMBaAFARbXAhn3lgdK3SEL++ARcGne+i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyRi9ENDExNDE0QzZE NTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdCMHJkSVF2NzRCRndhZDc2 TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JGdGNDR2ZlV0IwcmRJUXY3NEJGd2FkNzZMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyRi9ENDExNDE0QzZENTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdC MHJkSVF2NzRCRndhZDc2TDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq5uTFbFoXWm4n9J7Ohcfv4LiT+kEcNkPlt7ydyfZFJiPrLIjeX+qK ZkBHzqLlQaKRe869tubzpY3+I+miUCVDR0XfBwFkUr6sd4BHVIsny02FQK0zKKEN 8LZE0bCD2jXDywPehem6w75QLjwYLetjTfuReUbMBXRQTMpsEBifNUNPSaTTc4ip BvW2ap21Xv0xYxso3NV83I/aXsI3SCAViMyLDYUFQEngeKVf50P3BwF2tchM6Pwd Tzqlj9wFiEOT32lxRa0Ha/Q6SOAGWEjlDI1DFwX5aA0eaKrNIVEVj2RdnLF11TM4 d7Ni7H3um8K20F5X7O9JlvUtFwbXkzSh -----END CERTIFICATE-----Generated at Mon May 12 23:15:22 2025 by rpki-client