$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: +3OlLV2DwrwnAYcdzTOMFptrrM4RgKxPqRoUTMwWoRI= Subject key identifier: B2:CA:62:FD:C6:90:C2:26:DD:98:6D:AF:B1:4A:BC:56:68:44:30:FD Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 09E1 Signing time: Thu 08 May 2025 19:50:47 +0000 Manifest this update: Thu 08 May 2025 19:50:46 +0000 Manifest next update: Thu 15 May 2025 19:50:46 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: kbwT6fMODtc7iji2Sh6l3MEOX1JZqpR871JnDJjlVGw=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: HX1z061ITJ/Mm5axSNQ3ySg9hGI3PSjhgq8jl6nzC3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 19:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: May 8 19:50:46 2025 GMT Not After : May 15 19:50:46 2025 GMT Subject: CN=681d0b17-973e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:ed:09:b5:de:c1:1c:5b:af:e6:39:74:61: 98:e8:f5:12:20:42:24:d7:ee:b7:f6:17:f0:e4:0e: b3:cd:9f:1b:7f:3f:c5:ac:70:15:5c:29:3a:76:aa: 45:4d:f1:8c:22:78:28:e8:9c:56:1a:63:96:4b:1d: b6:64:12:f5:35:a0:8d:2b:ac:09:f1:ce:cf:aa:dd: 28:26:fd:40:58:91:77:77:80:f5:3b:4b:96:d1:17: 4e:3d:de:d2:86:42:53:cc:bb:9e:2c:6b:93:20:c9: aa:9a:d1:8d:d9:18:11:b0:0e:b7:41:f2:69:91:38: ed:23:fa:11:0a:27:15:2c:64:80:fa:b1:5a:b8:d5: 47:d1:02:83:05:4e:ec:cb:eb:8f:ff:3a:93:9d:32: a8:3a:ce:2b:f3:13:bb:40:f1:86:06:c1:c3:7d:bd: e7:e9:fa:62:6c:08:5f:24:23:70:83:ee:52:73:48: 1b:03:dc:86:20:43:80:75:9a:7d:32:8c:26:5e:cd: a9:cd:45:37:5f:8b:3b:69:50:9f:33:f8:07:43:60: 75:57:9a:1d:9f:89:8a:ee:87:d1:de:94:f2:d6:c8: 70:1a:8c:00:1e:f0:aa:79:49:7c:72:37:95:d1:41: d9:28:cc:d3:7e:4e:77:f5:37:07:6b:73:a9:b2:9e: 19:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CA:62:FD:C6:90:C2:26:DD:98:6D:AF:B1:4A:BC:56:68:44:30:FD X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:68:02:b5:33:32:b0:eb:42:bb:e9:91:5f:6a:19:52:b9:64: 6f:47:f2:f5:1f:6f:dd:08:53:5c:9d:20:54:1f:d0:ab:ab:5c: 52:b7:05:c7:b9:96:0c:70:d5:84:30:1d:b0:55:f0:1c:67:3b: 93:69:51:08:78:1e:bb:bc:da:bb:69:8b:bc:c7:e8:8d:9c:e3: 22:2b:0c:49:a6:dc:31:73:4e:ed:0b:05:72:a0:34:ab:06:f4: 34:22:1f:1b:2e:21:8f:27:98:91:ab:2c:3c:3e:a2:fe:a2:4b: 54:04:4a:41:93:f6:0f:6c:e4:3f:ce:3f:58:43:6e:6b:9f:87: 74:2a:86:6b:c5:ad:27:ae:6d:26:bf:27:ec:d9:5e:a5:4c:cd: 60:de:f6:bf:3f:7a:a6:5a:4a:88:e1:83:0e:fc:a5:90:7c:c9: 2a:04:4c:20:03:eb:af:ec:a1:97:36:67:3a:52:db:05:44:e1: 23:e7:ab:7e:a8:bd:2b:31:b3:32:63:7e:fe:53:c7:e5:91:7d: 1c:43:72:f8:c0:93:02:66:5a:4d:74:14:46:a2:fe:c4:ab:cd: 52:56:67:c5:e5:a2:68:65:eb:66:a3:15:c1:f7:ea:a3:a3:d8: c5:53:b8:d9:6c:ed:a4:0d:82:2d:a6:02:f4:ca:55:81:f8:b0: 45:5d:48:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjUwNTA4MTk1MDQ2WhcNMjUwNTE1MTk1MDQ2WjAYMRYwFAYD VQQDEw02ODFkMGIxNy05NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2jtCbXewRxbr+Y5dGGY6PUSIEIk1+639hfw5A6zzZ8bfz/FrHAVXCk6dqpF TfGMIngo6JxWGmOWSx22ZBL1NaCNK6wJ8c7Pqt0oJv1AWJF3d4D1O0uW0RdOPd7S hkJTzLueLGuTIMmqmtGN2RgRsA63QfJpkTjtI/oRCicVLGSA+rFauNVH0QKDBU7s y+uP/zqTnTKoOs4r8xO7QPGGBsHDfb3n6fpibAhfJCNwg+5Sc0gbA9yGIEOAdZp9 MowmXs2pzUU3X4s7aVCfM/gHQ2B1V5odn4mK7ofR3pTy1shwGowAHvCqeUl8cjeV 0UHZKMzTfk539TcHa3Opsp4ZywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLKYv3G kMIm3Zhtr7FKvFZoRDD9MB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQaAK1MzKw60K76ZFfahlSuWRvR/L1H2/dCFNcnSBUH9Crq1xStwXH uZYMcNWEMB2wVfAcZzuTaVEIeB67vNq7aYu8x+iNnOMiKwxJptwxc07tCwVyoDSr BvQ0Ih8bLiGPJ5iRqyw8PqL+oktUBEpBk/YPbOQ/zj9YQ25rn4d0KoZrxa0nrm0m vyfs2V6lTM1g3va/P3qmWkqI4YMO/KWQfMkqBEwgA+uv7KGXNmc6UtsFROEj56t+ qL0rMbMyY37+U8flkX0cQ3L4wJMCZlpNdBRGov7Eq81SVmfF5aJoZetmoxXB9+qj o9jFU7jZbO2kDYItpgL0ylWB+LBFXUiF -----END CERTIFICATE-----Generated at Sat May 10 07:42:36 2025 by rpki-client