$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft File: bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft (raw, json) Hash identifier: FR//Bw0e8yEoLeQlWPf0wk/eT0Q2yHlyzUnUwjfCW4E= Subject key identifier: 92:1F:80:2E:1C:E3:D2:4E:C4:49:BC:51:F9:64:46:BF:8D:AD:DF:E4 Authority key identifier: 6D:D0:75:C0:70:CD:19:40:5C:09:4D:4D:3D:4B:DA:16:34:0C:EE:FC Certificate issuer: /CN=A91B4873/serialNumber=6DD075C070CD19405C094D4D3D4BDA16340CEEFC Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft Manifest number: A2 Signing time: Thu 15 May 2025 05:28:56 +0000 Manifest this update: Thu 15 May 2025 05:28:55 +0000 Manifest next update: Thu 22 May 2025 05:28:55 +0000 Files and hashes: 1: bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl (hash: AYJbOlwY3C4aeRpWTv151fKhnZKuqMmSlTBqAyqAtEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4873, serialNumber=6DD075C070CD19405C094D4D3D4BDA16340CEEFC Validity Not Before: May 15 05:28:55 2025 GMT Not After : May 22 05:28:55 2025 GMT Subject: CN=68257b97-0b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:eb:7f:6b:84:f1:3e:1f:82:22:2d:fc:57:80: 65:56:d0:b3:ad:91:bd:75:27:10:af:ad:42:6c:fb: 01:97:f3:c4:40:ff:92:1c:47:0a:19:95:42:36:71: 04:ef:b0:84:2b:a6:3a:81:36:32:c2:81:0d:0b:56: 53:5d:57:9a:51:98:d5:9e:ef:48:69:ca:eb:f9:d8: 1a:dc:f3:46:62:86:68:90:90:f2:f8:66:4e:7d:55: 5c:2b:75:de:87:f8:4b:de:36:41:5d:f4:ef:21:ee: 70:37:c6:fe:02:a0:ed:40:93:77:01:ea:39:c9:da: 28:33:65:b2:d2:9a:42:b4:00:30:0c:f1:7a:02:d9: 83:01:1c:b1:17:49:ba:54:22:24:9f:49:2f:9d:32: 1b:90:8f:4e:4d:46:e8:f2:1d:0d:c5:0d:2c:49:62: e5:f4:47:54:20:b8:a5:b6:8f:51:59:a9:8b:2c:5c: 00:07:b5:d1:26:9f:18:40:06:0d:d9:30:30:f5:ae: 85:8e:10:32:8a:3f:b1:83:9a:e5:14:f2:fd:15:ec: 46:75:e7:36:80:a3:90:fb:bf:df:82:68:bd:93:02: f1:ed:f9:53:a7:6a:c6:3e:b8:81:e6:7a:b9:ad:0b: b7:e6:11:30:f3:dd:c3:80:fd:76:9a:f8:8f:a6:55: b4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1F:80:2E:1C:E3:D2:4E:C4:49:BC:51:F9:64:46:BF:8D:AD:DF:E4 X509v3 Authority Key Identifier: keyid:6D:D0:75:C0:70:CD:19:40:5C:09:4D:4D:3D:4B:DA:16:34:0C:EE:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:9e:95:fb:45:61:3b:87:27:fd:5e:5c:89:e9:9e:74:9e:df: 9d:f0:30:f5:9b:bf:f4:0a:e1:d3:5d:43:00:bb:2f:e1:61:40: a9:84:c1:e6:14:f8:fa:d9:1b:f4:9c:03:de:02:6b:5b:03:d8: 58:5a:1b:38:34:14:6f:25:09:76:88:41:bc:4c:bf:06:ab:07: 53:68:4f:09:cb:96:28:80:b1:77:31:0f:1e:d4:a2:cc:f5:da: 89:70:3d:da:95:ec:33:55:9d:fe:67:da:b4:0c:3b:43:f1:ce: f2:9e:f4:1a:2e:0a:12:f5:19:08:4f:ed:f0:27:0c:4b:c0:8d: af:ab:81:21:20:65:1d:f2:0e:f0:2f:dd:ac:16:fc:5f:97:f7: ee:e0:26:81:6b:2c:3a:55:bf:76:10:a2:99:d3:ab:7f:f5:a5: 0d:a9:a9:5a:54:40:92:07:da:6b:f4:92:35:23:fa:37:95:ca: cc:bd:92:56:e1:02:c6:05:d9:1f:13:1f:bf:40:47:b1:99:8c: 0a:c1:f6:7e:8e:0f:41:36:ce:6d:a5:46:8c:50:f8:c3:a5:f9: 6a:6b:13:e0:fe:3b:55:c9:97:b0:3e:26:78:7a:ec:a9:cd:61: b7:29:ac:31:65:ea:a7:d2:c9:d7:bd:82:f7:2a:7d:0d:ea:bc: c3:6b:5c:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4NzMxMTAvBgNVBAUTKDZERDA3NUMwNzBDRDE5NDA1QzA5NEQ0RDNENEJEQTE2 MzQwQ0VFRkMwHhcNMjUwNTE1MDUyODU1WhcNMjUwNTIyMDUyODU1WjAYMRYwFAYD VQQDEw02ODI1N2I5Ny0wYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+t/a4TxPh+CIi38V4BlVtCzrZG9dScQr61CbPsBl/PEQP+SHEcKGZVCNnEE 77CEK6Y6gTYywoENC1ZTXVeaUZjVnu9Iacrr+dga3PNGYoZokJDy+GZOfVVcK3Xe h/hL3jZBXfTvIe5wN8b+AqDtQJN3Aeo5ydooM2Wy0ppCtAAwDPF6AtmDARyxF0m6 VCIkn0kvnTIbkI9OTUbo8h0NxQ0sSWLl9EdUILilto9RWamLLFwAB7XRJp8YQAYN 2TAw9a6FjhAyij+xg5rlFPL9FexGdec2gKOQ+7/fgmi9kwLx7flTp2rGPriB5nq5 rQu35hEw893DgP12mviPplW0DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIfgC4c 49JOxEm8UflkRr+Nrd/kMB8GA1UdIwQYMBaAFG3QdcBwzRlAXAlNTT1L2hY0DO78 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg3My81NkE1QjJBRTM4 RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi9iZEIxd0hETkdVQmNDVTFOUFV2YUZqUU03 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JkQjF3SEROR1VCY0NVMU5QVXZhRmpRTTd2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg3My81NkE1QjJBRTM4RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi9iZEIxd0hETkdV QmNDVTFOUFV2YUZqUU03dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlnpX7RWE7hyf9XlyJ6Z50nt+d8DD1m7/0CuHTXUMAuy/hYUCphMHm FPj62Rv0nAPeAmtbA9hYWhs4NBRvJQl2iEG8TL8GqwdTaE8Jy5YogLF3MQ8e1KLM 9dqJcD3alewzVZ3+Z9q0DDtD8c7ynvQaLgoS9RkIT+3wJwxLwI2vq4EhIGUd8g7w L92sFvxfl/fu4CaBayw6Vb92EKKZ06t/9aUNqalaVECSB9pr9JI1I/o3lcrMvZJW 4QLGBdkfEx+/QEexmYwKwfZ+jg9BNs5tpUaMUPjDpflqaxPg/jtVyZewPiZ4euyp zWG3KawxZeqn0snXvYL3Kn0N6rzDa1zl -----END CERTIFICATE-----Generated at Fri May 16 18:33:56 2025 by rpki-client