$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json) Hash identifier: u2CzWEsFLoJmep4ZNeYStEKZb6k8UnmJCGKrR8hrRXM= Subject key identifier: BB:02:34:03:F1:C8:60:7A:26:D9:D1:B0:35:14:45:F0:01:95:31:ED Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft Manifest number: 012D Signing time: Tue 13 May 2025 03:46:16 +0000 Manifest this update: Tue 13 May 2025 03:46:16 +0000 Manifest next update: Tue 20 May 2025 03:46:16 +0000 Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: MfoWN6GceQXYu8cr75v0iRge8rPcMYJux3JUXxDIA3c=) 2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: GWZ2MHtEWnxPiTCBVRb6cUY0T8WOEUXRXli5S8fNKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336 Validity Not Before: May 13 03:46:16 2025 GMT Not After : May 20 03:46:16 2025 GMT Subject: CN=6822c088-8acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:c4:0a:8d:a2:e7:cf:13:8d:b7:09:63:24: ea:86:1a:13:a1:a0:2f:47:b7:d3:94:1d:25:9e:6c: 94:0a:86:e9:52:2a:2a:a6:08:14:09:65:05:c5:d7: 63:31:43:01:13:52:bf:6d:07:dd:53:92:a7:c7:42: 02:2e:d2:3b:2a:23:59:50:85:ec:d6:d1:e8:5d:71: 72:ec:33:24:fc:18:c6:8d:50:32:ca:d9:9c:7c:d6: 55:11:2f:f2:cf:7e:5d:79:e0:d6:bb:64:6c:17:0c: f6:05:28:95:0b:73:8c:2b:b2:e6:b4:f0:00:ee:a4: 21:1e:55:b6:72:10:d2:d4:88:f1:b6:c1:da:08:9b: 14:6f:07:c9:9e:bb:9c:9e:12:61:9f:06:4a:85:29: 9c:00:2f:49:02:c9:39:19:1d:75:b2:af:d3:96:f3: 21:69:73:6b:07:eb:79:4a:0c:91:1b:95:88:f9:ba: 8f:1f:6c:66:b8:35:26:2f:8d:6f:3e:ee:37:a5:64: 5c:e6:15:37:ee:ae:d0:8f:67:b7:ca:94:48:76:3e: c3:a4:1b:c2:93:c3:a3:d2:da:e1:08:60:12:70:d9: 59:c6:e4:b4:ae:42:04:a4:94:2f:40:b9:bb:36:4e: 60:ef:96:d0:f4:d4:5e:68:e8:85:c7:b0:a4:75:a3: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:02:34:03:F1:C8:60:7A:26:D9:D1:B0:35:14:45:F0:01:95:31:ED X509v3 Authority Key Identifier: keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:98:6d:2d:7c:0c:63:33:cf:16:44:69:ec:4c:b8:c6:70:a9: b8:d3:ea:53:46:58:8a:99:57:6d:fc:92:45:81:b2:69:e1:a9: 35:09:4e:46:19:fe:a3:ca:bd:1b:6e:86:0c:d9:c3:78:26:5e: d4:37:d2:1c:de:4d:64:3a:65:55:5c:72:f5:21:f3:c1:66:8b: 1e:a0:b2:a5:97:72:29:be:73:c3:c3:e9:78:a6:a1:d4:9e:a6: 1b:7b:eb:20:38:03:65:25:e8:d1:8d:94:d7:16:21:d6:ff:07: 0a:74:53:6c:95:6b:ab:c4:c9:db:99:e8:57:8c:5e:10:cb:ab: 4a:6d:b1:bd:e8:13:46:6c:0e:9e:18:6f:a8:7e:a4:1a:86:cb: 51:ff:c7:61:28:ed:14:d1:89:32:23:31:46:9d:3c:63:d2:aa: a2:2e:49:75:47:29:c6:42:65:0f:89:8a:17:77:1d:2d:88:75: 06:d6:77:44:03:40:2f:37:25:c6:de:a0:05:ba:e6:19:f3:a0: 91:c9:89:44:a5:cf:51:e5:af:1f:44:61:f9:39:ee:da:4d:82: 05:3f:35:80:b1:58:fe:ad:fc:60:72:30:74:14:55:20:ce:75: df:d9:a0:5f:d9:ac:5c:c3:e3:c8:21:00:03:50:54:63:aa:a6: e4:1b:24:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3RUQxMTAvBgNVBAUTKDA3MUY4MTE5MTcxNDQxODAyQkUzMjYxRjE1NjI3REFG Mjg5REIzMzYwHhcNMjUwNTEzMDM0NjE2WhcNMjUwNTIwMDM0NjE2WjAYMRYwFAYD VQQDEw02ODIyYzA4OC04YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/3ECo2i588TjbcJYyTqhhoToaAvR7fTlB0lnmyUCobpUioqpggUCWUFxddj MUMBE1K/bQfdU5Knx0ICLtI7KiNZUIXs1tHoXXFy7DMk/BjGjVAyytmcfNZVES/y z35deeDWu2RsFwz2BSiVC3OMK7LmtPAA7qQhHlW2chDS1IjxtsHaCJsUbwfJnruc nhJhnwZKhSmcAC9JAsk5GR11sq/TlvMhaXNrB+t5SgyRG5WI+bqPH2xmuDUmL41v Pu43pWRc5hU37q7Qj2e3ypRIdj7DpBvCk8Oj0trhCGAScNlZxuS0rkIEpJQvQLm7 Nk5g75bQ9NReaOiFx7CkdaNuawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsCNAPx yGB6JtnRsDUURfABlTHtMB8GA1UdIwQYMBaAFAcfgRkXFEGAK+MmHxVifa8onbM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdFRC82REI5NTRBMjYy QTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZQXI0eVlmRldKOXJ5aWRz elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4LUJHUmNVUVlBcjR5WWZGV0o5cnlpZHN6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdFRC82REI5NTRBMjYyQTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZ QXI0eVlmRldKOXJ5aWRzelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgmG0tfAxjM88WRGnsTLjGcKm40+pTRliKmVdt/JJFgbJp4ak1CU5G Gf6jyr0bboYM2cN4Jl7UN9Ic3k1kOmVVXHL1IfPBZoseoLKll3IpvnPDw+l4pqHU nqYbe+sgOANlJejRjZTXFiHW/wcKdFNslWurxMnbmehXjF4Qy6tKbbG96BNGbA6e GG+ofqQahstR/8dhKO0U0YkyIzFGnTxj0qqiLkl1RynGQmUPiYoXdx0tiHUG1ndE A0AvNyXG3qAFuuYZ86CRyYlEpc9R5a8fRGH5Oe7aTYIFPzWAsVj+rfxgcjB0FFUg znXf2aBf2axcw+PIIQADUFRjqqbkGyRS -----END CERTIFICATE-----Generated at Tue May 13 15:00:33 2025 by rpki-client