$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: DnKj9OMsbGqNTkn9wRPjRbhoO8y6/nznCSCTaTGKmcM= Subject key identifier: 99:57:89:87:08:98:8D:DC:68:55:A2:89:9D:43:C7:EB:76:C5:47:12 Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 0578 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 0565 Signing time: Mon 12 May 2025 19:31:06 +0000 Manifest this update: Mon 12 May 2025 19:31:05 +0000 Manifest next update: Mon 19 May 2025 19:31:05 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: sxn+jvy7o4TXyMxC78hFwnT4xerlArxyqZeDLLaKU4E=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: hN1FG4yB+En2c4wj8yUNEIMBBFanGUa7r/bmCbomayU=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: /T6Cx82NX6eIVhHP8WlrC3rkE3NEqsy8y14HZ45ur88=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: r9rxwsZy05OBv79BaleZs2CDNDVKsWtQPtZMqmB3o+8=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: MEl6w5nE9WmS9IMiK++pW3U+fqzMAGds8O/KdUZBrWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: May 12 19:31:05 2025 GMT Not After : May 19 19:31:05 2025 GMT Subject: CN=68224c79-7e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:fb:85:3e:1b:b0:84:be:60:96:4a:5e:9f: 99:73:e3:5a:80:ff:c8:6a:bc:80:f2:d0:b1:ce:45: 11:94:91:78:00:d1:5a:ec:ca:bd:cf:1d:cd:db:11: a7:b3:93:38:7b:79:0c:a1:27:cc:c0:31:75:68:12: 07:fa:6c:8d:37:ad:c1:a3:43:e7:e7:90:09:55:cd: 0c:3d:46:f4:15:e1:96:02:37:b2:d2:48:55:31:ed: 64:54:bc:d7:af:9f:d1:f3:ba:8b:39:8e:a7:4c:8d: 41:b7:35:bc:fd:97:4f:10:77:36:12:00:c2:78:32: 62:c0:c8:e1:05:b8:4f:9e:14:b8:f7:ca:5a:20:2e: 86:fd:04:84:dc:e8:ae:7c:7b:b7:78:97:32:b7:cc: 16:46:f1:8d:9b:12:2f:6e:a6:90:7f:be:bf:5f:da: 79:10:03:3a:1a:09:22:82:14:ad:c4:6b:d3:09:bc: 82:3a:ca:3e:9d:b2:2a:ae:d2:cf:2b:0d:ee:ef:82: bb:eb:31:29:74:fc:3d:60:82:3c:f6:06:35:2c:05: 6f:fd:70:49:8e:2f:0e:d9:28:90:85:a7:2a:66:bc: db:99:e4:28:49:bc:0c:5e:fb:64:01:9d:34:2a:c0: 8a:34:fe:15:24:5c:9f:b8:40:a3:67:f3:f6:1d:26: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:57:89:87:08:98:8D:DC:68:55:A2:89:9D:43:C7:EB:76:C5:47:12 X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:e3:75:29:41:0a:80:66:6e:8c:4a:77:00:30:ee:12:b5:77: e3:94:7b:dc:b1:44:93:a8:7b:08:df:f1:29:5e:53:1b:4e:19: 33:57:73:21:54:86:2b:dd:b1:c3:b2:ee:cd:0c:79:a3:a3:f5: 2d:78:4d:fe:8e:d6:7e:97:cc:1a:ad:ce:19:c9:c4:7f:96:13: 22:a6:ec:50:dd:dc:46:be:63:6e:47:a6:6d:57:23:ef:66:09: 4d:e1:80:25:24:ee:88:9a:03:79:ba:13:44:3e:8e:f5:d9:35: 9e:52:bf:4f:75:76:a2:e4:c6:e1:67:30:ac:52:e9:0d:84:b5: ca:3b:70:40:55:09:66:b8:a1:6c:87:a0:72:ed:4e:01:7e:69: e4:9c:8d:a9:a7:b1:0b:92:21:b0:c6:68:58:d1:b2:34:be:e9: 00:27:09:1a:18:e8:29:a1:57:de:d5:e0:7a:e0:68:6c:ec:26: 4f:a9:c1:bf:7f:48:12:d4:52:16:01:be:f4:93:6a:af:89:c7: a8:9a:73:d5:14:e1:b5:e2:55:5e:ff:c5:fe:b5:81:ab:d6:5b: bc:d2:8d:2f:15:0d:1e:5d:82:63:b7:fa:ef:1e:08:0c:37:c5: 89:69:34:40:6b:ab:04:51:56:d1:a6:07:6a:4a:94:b9:ad:82: bc:f0:a3:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUwNTEyMTkzMTA1WhcNMjUwNTE5MTkzMTA1WjAYMRYwFAYD VQQDEw02ODIyNGM3OS03ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7j7hT4bsIS+YJZKXp+Zc+NagP/IaryA8tCxzkURlJF4ANFa7Mq9zx3N2xGn s5M4e3kMoSfMwDF1aBIH+myNN63Bo0Pn55AJVc0MPUb0FeGWAjey0khVMe1kVLzX r5/R87qLOY6nTI1BtzW8/ZdPEHc2EgDCeDJiwMjhBbhPnhS498paIC6G/QSE3Oiu fHu3eJcyt8wWRvGNmxIvbqaQf76/X9p5EAM6GgkighStxGvTCbyCOso+nbIqrtLP Kw3u74K76zEpdPw9YII89gY1LAVv/XBJji8O2SiQhacqZrzbmeQoSbwMXvtkAZ00 KsCKNP4VJFyfuECjZ/P2HSahFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlXiYcI mI3caFWiiZ1Dx+t2xUcSMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy43UpQQqAZm6MSncAMO4StXfjlHvcsUSTqHsI3/EpXlMbThkzV3Mh VIYr3bHDsu7NDHmjo/UteE3+jtZ+l8warc4ZycR/lhMipuxQ3dxGvmNuR6ZtVyPv ZglN4YAlJO6ImgN5uhNEPo712TWeUr9PdXai5MbhZzCsUukNhLXKO3BAVQlmuKFs h6By7U4BfmnknI2pp7ELkiGwxmhY0bI0vukAJwkaGOgpoVfe1eB64Ghs7CZPqcG/ f0gS1FIWAb70k2qviceomnPVFOG14lVe/8X+tYGr1lu80o0vFQ0eXYJjt/rvHggM N8WJaTRAa6sEUVbRpgdqSpS5rYK88KPu -----END CERTIFICATE-----Generated at Wed May 14 13:41:47 2025 by rpki-client