$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: lxUbMNYRx2ZrRoss6hJxKWCada52RPsaloH/nRxDIPo= Subject key identifier: 5F:CE:7F:2C:CA:D5:4A:DB:B2:D0:0B:FA:B1:C7:8E:1F:3A:2E:E1:08 Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0B0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0B03 Signing time: Sat 10 May 2025 19:02:56 +0000 Manifest this update: Sat 10 May 2025 19:02:56 +0000 Manifest next update: Sat 17 May 2025 19:02:56 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: 38/upHc5SfFjNpQgN7qpdbt4DheQs6Se995oQ+TTdi0=) 2: 494B4070419C11EAAE836772C4F9AE02.roa (hash: Y3JTz6x7Gh76YU/+03lkuBO3MY94CeW1sP7iPG9gZfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2826 (0xb0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: May 10 19:02:56 2025 GMT Not After : May 17 19:02:56 2025 GMT Subject: CN=681fa2e0-40dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:81:8a:80:f8:f6:d2:92:15:26:be:f5:97: f4:3f:3c:f3:ae:36:37:46:0a:06:ee:43:70:43:fb: fe:25:97:00:71:e4:4e:20:c0:28:f8:68:e9:13:10: ec:cf:94:84:e7:54:33:8d:04:b8:06:5e:15:c4:ed: fd:38:02:57:d3:23:91:33:24:1e:bf:0f:19:1c:39: 5e:ef:46:49:06:a5:99:2d:24:36:9c:63:d9:bb:d5: 2c:29:9c:72:99:2a:66:23:80:9b:37:6e:85:64:33: 66:34:1c:16:1d:35:a1:22:3a:c6:d1:39:c7:13:91: f0:b5:e4:4a:55:f5:b2:6d:02:e1:1c:0f:0e:d6:c1: 28:4a:1f:5b:7c:1c:84:59:6d:13:6a:bf:1e:38:21: c2:94:d1:7b:7f:ec:e5:97:f4:47:6e:d9:c5:4f:b4: 0c:bc:9b:64:95:68:0e:eb:0e:ca:94:4d:f1:aa:48: ef:bb:82:29:16:04:11:ab:73:d3:c9:ee:6a:43:39: 36:50:01:f8:81:8f:4b:5e:9e:dc:ce:21:11:f9:48: 86:c0:ea:79:52:b6:8f:79:b3:83:f6:8e:b0:23:b1: 53:43:4c:4d:13:aa:0f:a4:b2:ab:8d:87:4a:1f:14: 89:cd:56:30:4c:21:6f:c7:fd:73:51:ea:b9:8a:70: 6f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CE:7F:2C:CA:D5:4A:DB:B2:D0:0B:FA:B1:C7:8E:1F:3A:2E:E1:08 X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:88:f8:f2:5e:00:ab:af:b8:c3:71:59:53:8c:87:e6:e4:c8: df:1f:5f:25:70:37:34:94:ab:bc:b9:e7:d6:03:a7:e5:89:95: d9:c8:1c:87:9e:0d:a3:32:b0:29:24:0e:a6:64:e3:8d:4e:3d: c7:e9:d1:8b:78:49:5a:a5:4c:88:1d:94:f5:a6:b6:22:87:f5: 8f:50:80:9a:a6:b8:08:f5:98:66:ca:11:b6:ca:9f:e6:bb:7c: a6:e5:a9:d4:33:dd:c7:be:25:fa:dd:47:85:b7:9c:ba:d4:20: 7a:f0:df:c0:48:72:32:1c:b5:ef:cd:27:03:f1:4a:7b:be:78: 6b:63:c2:83:ac:58:2e:21:a6:db:bb:1c:d9:80:82:02:54:72: fd:d2:29:ca:4b:0e:63:d7:f0:23:b4:b1:45:c4:00:1b:d7:7c: a9:d4:92:6a:42:93:ed:4f:58:11:89:c4:ca:59:0f:b9:ef:26: 3e:c0:ac:32:ed:a5:66:39:45:47:9a:8d:91:51:e1:24:72:4d: b9:78:19:78:d1:c4:1e:6a:69:71:e4:31:f5:4a:3f:fb:fe:a1: f8:6d:b5:d6:e6:af:1c:b8:8c:7a:6f:9b:a5:91:d5:4b:2b:28: 88:42:4b:a6:2c:a3:c4:18:bd:3b:61:d3:da:ec:fd:dd:07:c7: c3:1c:d2:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjUwNTEwMTkwMjU2WhcNMjUwNTE3MTkwMjU2WjAYMRYwFAYD VQQDEw02ODFmYTJlMC00MGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HyBioD49tKSFSa+9Zf0PzzzrjY3RgoG7kNwQ/v+JZcAceROIMAo+GjpExDs z5SE51QzjQS4Bl4VxO39OAJX0yORMyQevw8ZHDle70ZJBqWZLSQ2nGPZu9UsKZxy mSpmI4CbN26FZDNmNBwWHTWhIjrG0TnHE5HwteRKVfWybQLhHA8O1sEoSh9bfByE WW0Tar8eOCHClNF7f+zll/RHbtnFT7QMvJtklWgO6w7KlE3xqkjvu4IpFgQRq3PT ye5qQzk2UAH4gY9LXp7cziER+UiGwOp5UraPebOD9o6wI7FTQ0xNE6oPpLKrjYdK HxSJzVYwTCFvx/1zUeq5inBvuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/OfyzK 1UrbstAL+rHHjh86LuEIMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoiPjyXgCrr7jDcVlTjIfm5MjfH18lcDc0lKu8uefWA6fliZXZyByH ng2jMrApJA6mZOONTj3H6dGLeElapUyIHZT1prYih/WPUICaprgI9ZhmyhG2yp/m u3ym5anUM93HviX63UeFt5y61CB68N/ASHIyHLXvzScD8Up7vnhrY8KDrFguIabb uxzZgIICVHL90inKSw5j1/AjtLFFxAAb13yp1JJqQpPtT1gRicTKWQ+57yY+wKwy 7aVmOUVHmo2RUeEkck25eBl40cQeamlx5DH1Sj/7/qH4bbXW5q8cuIx6b5ulkdVL KyiIQkumLKPEGL07YdPa7P3dB8fDHNL3 -----END CERTIFICATE-----Generated at Sun May 11 15:22:24 2025 by rpki-client