$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft File: 4BXzk-ejI8P08b_iblv-BA415VM.mft (raw, json) Hash identifier: psZ/oRq0of2tVG5YP9YbJeMGRaoUbuXR1sUz0G0UHuM= Subject key identifier: 14:1F:7D:DA:11:A1:E5:5B:4B:F8:06:9D:57:0E:E8:16:E0:8B:25:08 Authority key identifier: E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53 Certificate issuer: /CN=A91C6CAF/serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft Manifest number: F8 Signing time: Sun 11 May 2025 04:03:54 +0000 Manifest this update: Sun 11 May 2025 04:03:53 +0000 Manifest next update: Sun 18 May 2025 04:03:53 +0000 Files and hashes: 1: 4BXzk-ejI8P08b_iblv-BA415VM.crl (hash: gtgy/vh+6QNK18qb6vQhA59h0tbUgkcy7Vz+aOFjY5U=) 2: C4C0B9160E4C11EF82F91F39C4F9AE02.roa (hash: kz0noASfcID+yNUD17+dcNzBgS2AhI7keu64pTKydZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553 Validity Not Before: May 11 04:03:53 2025 GMT Not After : May 18 04:03:53 2025 GMT Subject: CN=682021a9-aace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:ee:e7:07:54:bf:25:7b:ee:f6:7d:22:b4: 0c:59:ca:aa:0a:c1:50:ed:a1:e1:39:12:33:08:d2: 0f:f8:60:13:a8:1b:40:b8:f1:30:c9:e0:4d:27:03: 0b:cf:e0:bf:eb:f1:6c:2b:25:7d:c7:ab:77:c4:b9: d6:9e:6e:56:75:e5:06:86:78:8f:42:40:e7:65:44: ab:0c:7e:54:01:03:a0:fd:6c:71:f7:28:fd:60:c8: 90:40:5d:39:b4:23:dd:80:1c:e4:c0:d7:af:de:aa: d6:d9:cf:c0:91:ac:2f:d1:22:f2:18:b7:96:5d:ba: 05:6b:86:cc:23:e8:53:61:d6:b2:c5:b0:63:f3:c4: d6:62:c2:47:10:fa:8a:1a:e9:78:73:44:bc:b3:7a: 5d:9a:c7:fa:5e:4f:c7:ac:e5:0f:4f:36:4f:f9:6f: a8:a5:85:9f:ba:ed:11:99:53:db:98:77:c9:50:b7: 16:e6:4d:07:6d:56:0a:6b:4f:fc:fc:e7:d5:cf:5e: 58:5b:a7:e3:2d:73:a4:e5:51:b0:3b:30:fa:fb:45: c0:cc:ea:53:b7:67:ad:89:e0:9c:77:13:41:e1:d2: 13:6d:f6:12:d8:66:4f:d2:54:5b:c9:43:f8:9b:c4: 8c:67:46:70:64:5f:57:21:af:2a:62:2a:78:9c:15: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1F:7D:DA:11:A1:E5:5B:4B:F8:06:9D:57:0E:E8:16:E0:8B:25:08 X509v3 Authority Key Identifier: keyid:E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3a:c5:ea:7f:cb:2e:4d:24:3a:e3:77:d5:59:56:6f:aa:b9: 67:f4:a2:03:10:18:ae:b7:4f:a7:ec:05:92:6b:24:11:43:e1: 02:f0:74:c7:01:0c:10:1c:d6:0f:a8:34:1f:4f:b6:e8:58:ea: 5c:53:6b:15:6c:f6:37:27:d9:4e:30:7b:65:b3:e7:42:c2:9a: c3:26:0f:41:e2:7b:13:9a:82:66:b4:69:9d:4c:d1:58:f7:b9: 5c:29:b1:07:a7:13:38:60:69:9e:d1:8e:e9:88:46:97:b9:dc: d4:e6:38:bf:f7:78:e1:a6:66:43:69:0e:a0:0f:e2:9d:09:66: 28:f4:b5:ba:7c:a6:ca:7a:eb:c9:69:49:9c:6e:79:23:b9:07: c2:93:ea:a1:1e:12:de:71:bb:60:0d:d9:7e:a9:5a:f4:a5:55: c3:c7:3c:c1:d5:0b:af:01:de:f5:5a:f4:83:39:7e:79:a7:68: 00:14:cb:06:72:69:82:83:8a:25:ac:bf:41:31:f8:cd:98:e7: 1d:b2:8b:75:28:1f:fb:4a:0f:e8:cc:f4:ef:77:46:12:11:a9: b4:6a:55:36:c8:38:5c:bd:f6:42:7a:91:c0:3f:18:50:c9:29: 26:b4:da:a5:f5:58:42:91:cd:5f:3f:a7:47:d1:b9:e7:42:73: bb:9a:0a:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKEUwMTVGMzkzRTdBMzIzQzNGNEYxQkZFMjZFNUJGRTA0 MEUzNUU1NTMwHhcNMjUwNTExMDQwMzUzWhcNMjUwNTE4MDQwMzUzWjAYMRYwFAYD VQQDEw02ODIwMjFhOS1hYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNTu5wdUvyV77vZ9IrQMWcqqCsFQ7aHhORIzCNIP+GATqBtAuPEwyeBNJwML z+C/6/FsKyV9x6t3xLnWnm5WdeUGhniPQkDnZUSrDH5UAQOg/Wxx9yj9YMiQQF05 tCPdgBzkwNev3qrW2c/Akawv0SLyGLeWXboFa4bMI+hTYdayxbBj88TWYsJHEPqK Gul4c0S8s3pdmsf6Xk/HrOUPTzZP+W+opYWfuu0RmVPbmHfJULcW5k0HbVYKa0/8 /OfVz15YW6fjLXOk5VGwOzD6+0XAzOpTt2etieCcdxNB4dITbfYS2GZP0lRbyUP4 m8SMZ0ZwZF9XIa8qYip4nBVB6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQffdoR oeVbS/gGnVcO6BbgiyUIMB8GA1UdIwQYMBaAFOAV85PnoyPD9PG/4m5b/gQONeVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GRDI2REMyMkI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi80Qlh6ay1lakk4UDA4Yl9pYmx2LUJBNDE1 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCWHprLWVqSThQMDhiX2libHYtQkE0MTVWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GRDI2REMyMkI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi80Qlh6ay1lakk4 UDA4Yl9pYmx2LUJBNDE1Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdOsXqf8suTSQ643fVWVZvqrln9KIDEBiut0+n7AWSayQRQ+EC8HTH AQwQHNYPqDQfT7boWOpcU2sVbPY3J9lOMHtls+dCwprDJg9B4nsTmoJmtGmdTNFY 97lcKbEHpxM4YGme0Y7piEaXudzU5ji/93jhpmZDaQ6gD+KdCWYo9LW6fKbKeuvJ aUmcbnkjuQfCk+qhHhLecbtgDdl+qVr0pVXDxzzB1QuvAd71WvSDOX55p2gAFMsG cmmCg4olrL9BMfjNmOcdsot1KB/7Sg/ozPTvd0YSEam0alU2yDhcvfZCepHAPxhQ ySkmtNql9VhCkc1fP6dH0bnnQnO7mgrA -----END CERTIFICATE-----Generated at Sun May 11 10:23:15 2025 by rpki-client