$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: UDhuZPhtGPixI2qwS9iUsCCELY1irJXFx5Hbe7sBO48= Subject key identifier: AC:CC:FA:A6:47:36:4E:8D:BA:48:03:87:FB:B1:7F:B4:48:56:CC:12 Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0CA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0C6E Signing time: Sat 10 May 2025 18:17:09 +0000 Manifest this update: Sat 10 May 2025 18:17:09 +0000 Manifest next update: Sat 17 May 2025 18:17:09 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: 5ON60kZCPcpeY/x50uJZq/HGoufz/1XPvkFyj+4MCrg=) 2: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: UuY5qtUwk8Dlu801YZxvnO/xKQaWGop0bKAvOOHuar0=) 3: 12561046368911EEA0CB766BC4F9AE02.roa (hash: ZsNiLxfxjjXIOR9efOK6g19RpsthQOBE4XYCmM1hnq8=) 4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: e/Kuo5QdtsaM/mztDHYG4XkizjKIPPrgUEb1ap1W45w=) 5: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: tEtTFQOPTziC3M/Up8UOSv6VFGJx+4dP/cUQCVWj4l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3238 (0xca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: May 10 18:17:09 2025 GMT Not After : May 17 18:17:09 2025 GMT Subject: CN=681f9825-d7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:c5:47:7f:8a:16:6c:e8:46:e8:21:39:22: 33:8d:c0:e4:70:2f:99:dc:bb:d9:30:47:86:fb:93: b2:4d:04:18:11:74:49:cf:2a:21:7e:a5:f5:39:71: d3:08:e7:e4:9b:33:45:bf:fb:46:a4:47:55:5b:a8: 30:36:1a:a3:c1:77:da:dd:0e:19:ed:bb:b3:02:57: 85:ea:48:80:42:8d:f2:64:69:6b:d8:81:d8:c6:9f: 98:5e:c7:15:16:fb:d4:be:70:f5:cd:8f:e5:5c:46: 81:ff:c7:d4:76:41:67:a1:0a:c8:61:49:cd:90:8e: 13:9f:89:e5:b8:60:79:fc:11:a0:2d:f2:27:21:3a: d5:23:0a:3d:f1:42:75:54:6e:42:e4:0d:9e:28:53: 79:ec:b8:50:45:a5:91:b4:72:19:7b:65:b4:1c:f9: 87:9f:c2:ba:8b:82:a7:7f:5e:aa:d8:33:34:82:04: ff:38:bb:96:e8:7c:5d:f4:e2:b1:31:39:2e:81:3b: 78:d8:f3:ea:13:28:07:1d:3c:28:0a:18:00:30:5b: eb:b4:54:e7:3d:66:99:96:59:61:f7:a3:85:b5:7d: 7d:25:e9:85:8b:68:32:f3:8e:78:83:5a:d0:87:30: d6:ba:81:31:b4:64:18:4a:d2:77:91:b1:ad:9a:f1: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CC:FA:A6:47:36:4E:8D:BA:48:03:87:FB:B1:7F:B4:48:56:CC:12 X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:26:d9:9e:17:c6:1c:94:47:c2:fa:9c:ac:44:93:b1:2d:94: 80:5e:b8:09:18:b3:6e:8b:3a:f4:b4:93:7b:96:22:bc:02:5f: 95:c8:45:32:3c:30:73:19:8b:f4:1e:d4:f3:e9:a2:3e:5f:54: ca:90:38:b3:d6:56:41:e6:4f:2b:59:13:d0:63:63:11:f4:82: 91:ae:3d:50:09:ab:e5:81:d2:0d:c7:4d:ee:8a:b0:3a:65:d3: 7f:e1:64:56:bb:51:18:8a:07:ca:84:f3:e8:bc:fc:7f:5b:52: 62:7c:0d:d0:d2:6e:7f:16:9e:c8:72:32:b6:00:cd:49:5e:5d: a3:6b:5d:c0:bd:be:ca:e3:6d:f3:c4:85:2f:3e:63:a0:48:09: 2f:d7:82:76:cb:12:d1:5d:78:29:cb:ef:2e:49:57:2d:c9:8a: 26:c6:e8:94:79:4e:3f:fb:8a:62:e5:30:73:fd:26:2e:fc:cf: 76:20:8c:de:4f:b3:bc:1c:49:a8:f9:ce:5a:9f:bd:ad:3c:84: 96:57:3e:b3:cf:0c:93:a5:f7:03:62:aa:c5:e6:aa:be:ba:e1: fc:98:5e:56:49:b2:5d:9a:07:fc:f0:0a:07:36:21:1c:09:f6: 5e:4c:72:ad:2d:f1:e1:4d:b1:5c:87:c9:bc:1a:71:2d:96:4d: d0:89:37:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjUwNTEwMTgxNzA5WhcNMjUwNTE3MTgxNzA5WjAYMRYwFAYD VQQDEw02ODFmOTgyNS1kN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzibFR3+KFmzoRughOSIzjcDkcC+Z3LvZMEeG+5OyTQQYEXRJzyohfqX1OXHT COfkmzNFv/tGpEdVW6gwNhqjwXfa3Q4Z7buzAleF6kiAQo3yZGlr2IHYxp+YXscV FvvUvnD1zY/lXEaB/8fUdkFnoQrIYUnNkI4Tn4nluGB5/BGgLfInITrVIwo98UJ1 VG5C5A2eKFN57LhQRaWRtHIZe2W0HPmHn8K6i4Knf16q2DM0ggT/OLuW6Hxd9OKx MTkugTt42PPqEygHHTwoChgAMFvrtFTnPWaZlllh96OFtX19JemFi2gy8454g1rQ hzDWuoExtGQYStJ3kbGtmvEpowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzM+qZH Nk6NukgDh/uxf7RIVswSMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9JtmeF8YclEfC+pysRJOxLZSAXrgJGLNuizr0tJN7liK8Al+VyEUy PDBzGYv0HtTz6aI+X1TKkDiz1lZB5k8rWRPQY2MR9IKRrj1QCavlgdINx03uirA6 ZdN/4WRWu1EYigfKhPPovPx/W1JifA3Q0m5/Fp7IcjK2AM1JXl2ja13Avb7K423z xIUvPmOgSAkv14J2yxLRXXgpy+8uSVctyYomxuiUeU4/+4pi5TBz/SYu/M92IIze T7O8HEmo+c5an72tPISWVz6zzwyTpfcDYqrF5qq+uuH8mF5WSbJdmgf88AoHNiEc CfZeTHKtLfHhTbFch8m8GnEtlk3QiTf4 -----END CERTIFICATE-----Generated at Mon May 12 12:43:37 2025 by rpki-client