$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft File: 1BPN69UikmPRj0A_RCF4UlVUbMQ.mft (raw, json) Hash identifier: M9/k3hZDp66Il7nVps3UatOebk3s053X/+VkkrzFxqA= Subject key identifier: 91:03:E3:D0:46:A0:19:8A:29:77:B8:5F:1C:C5:66:72:C4:DA:08:4C Authority key identifier: D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4 Certificate issuer: /CN=A91A4F53/serialNumber=D413CDEBD5229263D18F403F4421785255546CC4 Certificate serial: 03DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft Manifest number: 03D6 Signing time: Tue 13 May 2025 00:23:02 +0000 Manifest this update: Tue 13 May 2025 00:23:02 +0000 Manifest next update: Tue 20 May 2025 00:23:02 +0000 Files and hashes: 1: 1BPN69UikmPRj0A_RCF4UlVUbMQ.crl (hash: 3FQj1iymApgOnbEmRSCh+NBLepuKkSFGJagR6ZZXg+8=) 2: 1ACED69481C311ECA399B842C4F9AE02.roa (hash: IKY7Nb0x1ujuZNuPt+3gHji4GgFtnx3tom+2NfDXEw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 987 (0x3db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4F53, serialNumber=D413CDEBD5229263D18F403F4421785255546CC4 Validity Not Before: May 13 00:23:02 2025 GMT Not After : May 20 00:23:02 2025 GMT Subject: CN=682290e6-0240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:7b:bf:dc:5d:69:de:15:d3:7a:9c:b9:f4: cc:5d:68:84:5d:21:09:50:2c:db:ec:35:bb:07:8f: a2:43:95:9b:4a:0a:d7:04:0f:fa:fb:41:3a:9a:77: da:d8:74:bd:bb:9f:03:42:4a:9a:0d:84:6d:67:90: 1f:da:ce:ec:6f:2f:b1:82:70:d9:d6:1d:26:bc:76: 5d:15:d3:ba:e3:cd:44:bc:31:16:e0:b6:e9:93:60: ca:b3:9c:0a:59:ee:26:d9:76:27:84:45:4a:74:4f: 92:67:9a:ec:90:2c:24:b3:8e:68:dc:a4:17:1f:4a: 02:50:7e:18:99:b3:75:27:b9:e0:d2:fc:c5:e8:b6: 2b:11:63:31:42:27:48:44:e2:ca:58:e9:f7:93:83: 83:55:50:08:e6:d4:53:f2:36:da:91:7b:52:04:5d: 27:dc:2f:f3:58:34:e6:f4:6e:f4:c2:bb:e5:b8:d4: 65:86:e1:6a:02:82:a5:48:93:ad:0d:07:12:00:6f: 9f:27:44:7f:04:b3:36:ee:19:4b:e8:68:85:1c:0f: 3b:18:cf:e1:a9:1a:22:73:9d:d5:e6:46:0d:88:18: 37:87:f4:29:a9:50:94:36:8e:b5:2d:40:07:8a:e9: cd:30:ef:30:f7:d2:76:f5:82:48:71:62:0f:90:e6: 74:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:03:E3:D0:46:A0:19:8A:29:77:B8:5F:1C:C5:66:72:C4:DA:08:4C X509v3 Authority Key Identifier: keyid:D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:fe:76:f2:6b:ff:dc:7e:b0:2c:69:59:22:42:57:c7:b3:00: f4:7b:fb:ef:cd:8d:eb:f8:54:28:ce:5c:bb:32:14:41:a9:2e: 00:12:7d:34:02:48:87:c2:ae:cb:05:60:2d:cc:35:92:93:8e: 50:b8:94:bc:33:e6:cc:d1:50:99:22:6e:b0:e1:95:93:b0:4a: ba:82:85:73:10:70:2c:93:16:90:63:69:bc:4a:ef:ea:90:45: 36:1c:39:7e:c4:f3:54:ff:4d:1c:0d:07:90:1f:96:9c:c9:63: 68:35:e2:e9:8b:47:19:01:1d:b5:0c:ee:77:9f:7b:06:ef:a8: d9:ad:45:4e:b8:54:6d:24:1e:53:f4:ed:7a:e3:1e:44:b7:7d: 2b:8a:b2:f2:9b:13:06:c0:ae:1e:55:ab:30:b1:86:4a:9e:e0: 08:a7:bd:75:e9:41:61:20:28:c1:e7:cd:8b:1b:98:6e:92:f4: 1c:77:de:7e:be:f8:ec:af:2d:76:db:70:5b:c7:5d:91:f8:7e: 07:dc:60:2a:78:cb:76:41:f1:55:24:12:58:6f:c8:56:ab:25: a1:ee:d1:3c:30:05:57:ae:e4:50:ea:bc:f6:61:18:9a:58:8e: 57:0d:fe:10:3c:a0:1e:96:79:3e:63:a9:d5:09:2a:c9:3d:7b: 27:ca:7f:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRGNTMxMTAvBgNVBAUTKEQ0MTNDREVCRDUyMjkyNjNEMThGNDAzRjQ0MjE3ODUy NTU1NDZDQzQwHhcNMjUwNTEzMDAyMzAyWhcNMjUwNTIwMDAyMzAyWjAYMRYwFAYD VQQDEw02ODIyOTBlNi0wMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoV7v9xdad4V03qcufTMXWiEXSEJUCzb7DW7B4+iQ5WbSgrXBA/6+0E6mnfa 2HS9u58DQkqaDYRtZ5Af2s7sby+xgnDZ1h0mvHZdFdO6481EvDEW4Lbpk2DKs5wK We4m2XYnhEVKdE+SZ5rskCwks45o3KQXH0oCUH4YmbN1J7ng0vzF6LYrEWMxQidI ROLKWOn3k4ODVVAI5tRT8jbakXtSBF0n3C/zWDTm9G70wrvluNRlhuFqAoKlSJOt DQcSAG+fJ0R/BLM27hlL6GiFHA87GM/hqRoic53V5kYNiBg3h/QpqVCUNo61LUAH iunNMO8w99J29YJIcWIPkOZ0HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJED49BG oBmKKXe4XxzFZnLE2ghMMB8GA1UdIwQYMBaAFNQTzevVIpJj0Y9AP0QheFJVVGzE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEY1My81QjJCQzdEQTgx QzExMUVDQUI3QzlBNDJDNEY5QUUwMi8xQlBONjlVaWttUFJqMEFfUkNGNFVsVlVi TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCUE42OVVpa21QUmowQV9SQ0Y0VWxWVWJNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEY1My81QjJCQzdEQTgxQzExMUVDQUI3QzlBNDJDNEY5QUUwMi8xQlBONjlVaWtt UFJqMEFfUkNGNFVsVlViTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR/nbya//cfrAsaVkiQlfHswD0e/vvzY3r+FQozly7MhRBqS4AEn00 AkiHwq7LBWAtzDWSk45QuJS8M+bM0VCZIm6w4ZWTsEq6goVzEHAskxaQY2m8Su/q kEU2HDl+xPNU/00cDQeQH5acyWNoNeLpi0cZAR21DO53n3sG76jZrUVOuFRtJB5T 9O164x5Et30rirLymxMGwK4eVaswsYZKnuAIp7116UFhICjB582LG5hukvQcd95+ vvjsry1223Bbx12R+H4H3GAqeMt2QfFVJBJYb8hWqyWh7tE8MAVXruRQ6rz2YRia WI5XDf4QPKAelnk+Y6nVCSrJPXsnyn8s -----END CERTIFICATE-----Generated at Wed May 14 21:08:36 2025 by rpki-client