$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft File: BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json) Hash identifier: Y3RGcBsdM/B51HuX98LfQBxnWFHqwaC29Ky4zgww4lM= Subject key identifier: 8A:6A:A9:BC:5F:54:58:2D:E1:80:56:54:00:F5:2B:0E:08:6C:81:41 Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft Manifest number: 2F Signing time: Sat 17 May 2025 07:09:29 +0000 Manifest this update: Sat 17 May 2025 07:09:28 +0000 Manifest next update: Sat 24 May 2025 07:09:28 +0000 Files and hashes: 1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: oPbenD20sy5jShBG4jkcLBP5WTQ3Dr4HLGc9ZZzdrs4=) 2: 44A28FACEFEC11EF80EC123DC4F9AE02.roa (hash: kIHtM5yk/7E77z9qFDfBUJpQm2RMukSPxAc1zKCnuxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 07:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134 Validity Not Before: May 17 07:09:28 2025 GMT Not After : May 24 07:09:28 2025 GMT Subject: CN=68283629-f2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:c6:6d:9a:3d:b1:ea:81:65:3b:cb:99:ad: 7d:99:a8:c4:a4:5d:8f:15:ca:0b:89:f9:c6:f8:de: 2c:90:7f:ff:c3:3c:f4:6c:97:08:36:2f:d8:3c:f7: 4d:0e:54:12:3d:d4:8a:67:cd:08:62:3e:bf:0f:45: 6e:68:b8:54:42:fd:cb:57:48:19:5b:a1:a3:b1:80: 37:90:20:09:d8:78:ee:f2:86:8d:b2:62:50:7c:b4: 0e:a0:09:c3:2f:02:04:bc:88:0f:b1:e3:2f:a7:e9: b9:66:64:73:4b:c5:72:fb:88:fe:15:02:6c:71:6c: 0f:8b:e0:8e:62:79:22:af:47:75:3c:5f:94:1b:e1: 7e:eb:80:69:70:2f:d9:29:2c:a7:87:cf:78:28:86: 2f:7e:3e:9e:28:1b:86:d9:50:8c:64:70:ac:17:5b: 0f:34:7b:0d:e1:6b:92:ee:8d:2a:05:0f:5f:9f:d3: 8d:e5:23:d4:13:c0:e6:9e:21:fb:bd:f8:9c:a7:0d: 48:d5:ea:2c:c6:5b:7c:8d:35:80:d2:99:f4:d3:35: 91:09:50:9d:6e:4e:29:66:61:9f:39:27:61:32:be: 63:52:38:e4:af:ce:d3:bc:4a:08:d7:78:e7:dc:ec: 65:bb:f6:22:bd:20:6f:a3:8e:bf:33:bc:0d:4a:fb: c5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6A:A9:BC:5F:54:58:2D:E1:80:56:54:00:F5:2B:0E:08:6C:81:41 X509v3 Authority Key Identifier: keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:63:e7:77:ce:cb:e8:d4:da:82:17:e2:98:0b:68:10:85:fa: 4e:89:8c:a0:43:49:44:78:83:61:84:8b:c0:2e:20:50:78:47: aa:92:37:d8:ba:c6:5b:22:ab:5b:84:2b:ed:2e:b8:86:b1:a0: 5c:63:e4:ef:05:15:69:26:fb:d3:41:32:23:93:92:09:0e:28: 4c:5c:de:c7:a5:93:75:28:14:eb:97:60:69:25:79:ad:16:6e: 42:de:f2:79:36:04:d5:4e:2a:b5:2f:fc:89:fa:5f:ff:19:eb: 12:2e:8a:7a:2e:6b:8b:53:37:2f:68:1f:23:d0:d6:e3:bf:4f: 91:7a:1b:ac:71:ad:99:b4:9e:f2:60:88:47:7e:1d:82:a2:b9: 88:55:c3:da:f4:4a:2a:70:de:3c:d2:71:d7:15:d6:c1:5c:99: e7:a1:33:71:b3:02:1e:4c:89:57:f2:93:8a:89:3c:25:fb:4f: 5e:14:a7:86:8e:3f:dd:0e:2c:26:03:9e:b6:57:8a:f4:ae:42: e7:9e:11:13:92:ed:2f:17:7c:ac:98:47:fe:93:ec:86:5a:21: f3:aa:ec:54:8f:c2:d9:f0:5f:76:49:78:05:95:46:19:1c:1a: 26:1c:19:32:a8:14:c8:e9:8c:6c:0f:18:4d:da:66:27:ce:5e: af:b4:f6:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTJGQTExMC8GA1UEBRMoMDU3QjUzNzc0MDM4MjY3OEEwNzhGNUJGMjg0QzcyNjc5 NEI5RDEzNDAeFw0yNTA1MTcwNzA5MjhaFw0yNTA1MjQwNzA5MjhaMBgxFjAUBgNV BAMTDTY4MjgzNjI5LWYyZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHpsZtmj2x6oFlO8uZrX2ZqMSkXY8VyguJ+cb43iyQf//DPPRslwg2L9g8900O VBI91IpnzQhiPr8PRW5ouFRC/ctXSBlboaOxgDeQIAnYeO7yho2yYlB8tA6gCcMv AgS8iA+x4y+n6blmZHNLxXL7iP4VAmxxbA+L4I5ieSKvR3U8X5Qb4X7rgGlwL9kp LKeHz3gohi9+Pp4oG4bZUIxkcKwXWw80ew3ha5LujSoFD1+f043lI9QTwOaeIfu9 +JynDUjV6izGW3yNNYDSmfTTNZEJUJ1uTilmYZ85J2EyvmNSOOSvztO8SgjXeOfc 7GW79iK9IG+jjr8zvA1K+8UxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUimqpvF9U WC3hgFZUAPUrDghsgUEwHwYDVR0jBBgwFoAUBXtTd0A4JnigePW/KExyZ5S50TQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5MkZBL0ZBNDZFMEQyRUUw MzExRUY5QzJCOEE0OUM0RjlBRTAyL0JYdFRkMEE0Sm5pZ2VQV19LRXh5WjVTNTBU US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQlh0VGQwQTRKbmlnZVBXX0tFeHlaNVM1MFRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 MkZBL0ZBNDZFMEQyRUUwMzExRUY5QzJCOEE0OUM0RjlBRTAyL0JYdFRkMEE0Sm5p Z2VQV19LRXh5WjVTNTBUUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACFj53fOy+jU2oIX4pgLaBCF+k6JjKBDSUR4g2GEi8AuIFB4R6qSN9i6 xlsiq1uEK+0uuIaxoFxj5O8FFWkm+9NBMiOTkgkOKExc3selk3UoFOuXYGklea0W bkLe8nk2BNVOKrUv/In6X/8Z6xIuinoua4tTNy9oHyPQ1uO/T5F6G6xxrZm0nvJg iEd+HYKiuYhVw9r0Sipw3jzScdcV1sFcmeehM3GzAh5MiVfyk4qJPCX7T14Up4aO P90OLCYDnrZXivSuQueeEROS7S8XfKyYR/6T7IZaIfOq7FSPwtnwX3ZJeAWVRhkc GiYcGTKoFMjpjGwPGE3aZifOXq+09tM= -----END CERTIFICATE-----Generated at Sun May 18 09:06:11 2025 by rpki-client