$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: f00XuiGwgjbQR15hgKR4JNYjAV5ViuD+TJQeVBF+oEY= Subject key identifier: A3:B9:A6:6E:0F:0C:68:A1:29:07:9C:28:6F:03:17:A2:12:C9:74:4B Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: FB Signing time: Fri 09 May 2025 04:15:07 +0000 Manifest this update: Fri 09 May 2025 04:15:07 +0000 Manifest next update: Fri 16 May 2025 04:15:07 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: V93TkmUt8d8NdR/8VbKdngBTAXkOYpCwGlQty1kk95k=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: May 9 04:15:07 2025 GMT Not After : May 16 04:15:07 2025 GMT Subject: CN=681d814b-ba1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:75:07:76:9a:da:51:ae:5a:4a:ce:40:f1: 86:a9:63:19:80:45:75:16:f8:84:19:fc:5f:7e:3e: 48:3e:03:b1:e8:5b:3a:76:63:30:db:34:30:1a:a7: 23:90:e9:fb:53:a8:67:5e:db:a4:e6:b6:6c:d7:39: ea:5d:ad:d3:56:38:12:fd:e8:f8:bc:aa:46:45:01: 48:e2:df:63:81:25:68:89:1c:8a:57:f8:ba:6d:fb: 22:58:d7:ad:57:f0:82:7f:fa:fd:81:79:70:cd:98: bf:f3:55:c0:9f:53:4b:7a:07:ff:91:a2:47:6b:b2: 5e:0d:42:a7:e7:33:f8:88:17:dd:45:c9:bf:fe:12: 93:ce:63:28:4e:60:4e:c4:1f:f4:49:7d:b9:58:cb: 96:51:bd:1a:51:3c:03:33:53:ea:7f:f8:b1:0c:64: e1:d4:fd:1c:40:35:9c:ff:7a:72:ec:52:47:06:9d: 81:c2:17:4c:11:21:99:32:7d:27:4a:c3:58:ac:47: e6:5e:0c:98:43:ef:06:d0:29:9a:e9:47:8a:19:c3: 87:35:93:f6:50:8f:9a:db:35:d7:7f:18:0e:23:f8: c9:e7:70:6b:e2:66:45:b5:e6:59:85:9a:b9:1a:04: 1a:1d:7e:62:99:ea:cb:67:5f:ba:2a:79:32:ed:ff: 68:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B9:A6:6E:0F:0C:68:A1:29:07:9C:28:6F:03:17:A2:12:C9:74:4B X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c3:21:ea:a2:bc:4d:46:80:a7:02:3c:81:ba:fd:7e:3d:aa: df:8c:3b:31:a9:72:58:8c:5f:fb:0e:e7:c8:65:56:60:64:2b: 7e:4a:38:6d:bb:19:45:23:30:74:2f:00:d6:36:08:98:38:86: e9:38:4f:d8:60:aa:00:68:2c:25:a5:c8:be:3e:54:92:eb:78: 72:7b:69:27:84:9e:a1:7e:38:d3:3d:ab:fa:fe:bf:6e:fb:93: 22:72:59:69:f6:15:8c:e1:c4:d6:90:ad:cd:a5:ce:b2:d1:7a: b4:56:bd:30:97:2a:be:be:af:8a:73:9e:e9:3e:4d:33:38:61: 0b:be:0b:a7:36:dd:94:b9:8d:9a:b5:eb:3e:60:b7:7c:62:57: 68:6f:79:84:91:e6:0e:8f:7e:38:ca:c4:0f:75:c1:f5:34:8a: 4c:6c:03:7d:a6:36:7b:00:22:c5:69:06:4a:b5:ea:a8:c5:db: eb:d9:fa:00:8e:2e:64:77:c0:c6:a1:d5:98:0b:53:54:77:83: 3d:9f:24:79:5c:9c:49:0d:c1:54:bb:b0:76:50:c5:7f:4a:38: 02:e7:3d:0f:c2:6b:c8:8b:18:63:c5:dc:72:1a:2a:21:e8:ee: 28:55:ac:23:a2:af:f3:c5:25:9c:89:96:c5:59:75:ab:7e:69: fe:68:1d:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjUwNTA5MDQxNTA3WhcNMjUwNTE2MDQxNTA3WjAYMRYwFAYD VQQDEw02ODFkODE0Yi1iYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3It1B3aa2lGuWkrOQPGGqWMZgEV1FviEGfxffj5IPgOx6Fs6dmMw2zQwGqcj kOn7U6hnXtuk5rZs1znqXa3TVjgS/ej4vKpGRQFI4t9jgSVoiRyKV/i6bfsiWNet V/CCf/r9gXlwzZi/81XAn1NLegf/kaJHa7JeDUKn5zP4iBfdRcm//hKTzmMoTmBO xB/0SX25WMuWUb0aUTwDM1Pqf/ixDGTh1P0cQDWc/3py7FJHBp2BwhdMESGZMn0n SsNYrEfmXgyYQ+8G0Cma6UeKGcOHNZP2UI+a2zXXfxgOI/jJ53Br4mZFteZZhZq5 GgQaHX5imerLZ1+6Knky7f9ojwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKO5pm4P DGihKQecKG8DF6ISyXRLMB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUwyHqorxNRoCnAjyBuv1+ParfjDsxqXJYjF/7DufIZVZgZCt+Sjht uxlFIzB0LwDWNgiYOIbpOE/YYKoAaCwlpci+PlSS63hye2knhJ6hfjjTPav6/r9u +5Micllp9hWM4cTWkK3Npc6y0Xq0Vr0wlyq+vq+Kc57pPk0zOGELvgunNt2UuY2a tes+YLd8Yldob3mEkeYOj344ysQPdcH1NIpMbAN9pjZ7ACLFaQZKteqoxdvr2foA ji5kd8DGodWYC1NUd4M9nyR5XJxJDcFUu7B2UMV/SjgC5z0PwmvIixhjxdxyGioh 6O4oVawjoq/zxSWciZbFWXWrfmn+aB1c -----END CERTIFICATE-----Generated at Sun May 11 04:51:30 2025 by rpki-client