$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: 9gLxcSsfe+dJVokW1/e//FHHeWjSiRqCME30C7rk+8I= Subject key identifier: 9A:93:82:96:AC:53:F7:74:98:FE:26:B0:A4:32:AD:58:19:99:52:52 Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: AE Signing time: Sun 11 May 2025 04:51:44 +0000 Manifest this update: Sun 11 May 2025 04:51:43 +0000 Manifest next update: Sun 18 May 2025 04:51:43 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: gFVQidydyScSl3zMr/JMfeo813hUV51yDlq4fW6zKw4=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: dk/mJ6WLbx1un0lM/kEaDG7s+C714fNxg9o9daVbyM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: May 11 04:51:43 2025 GMT Not After : May 18 04:51:43 2025 GMT Subject: CN=68202cdf-b3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:84:25:66:3a:b2:48:ba:e1:e5:13:9f:28: 71:75:0f:5b:56:6e:2e:d2:af:dd:44:89:95:ec:35: ee:52:8e:1d:37:75:12:2e:44:fd:ea:f7:d7:1e:8a: fa:85:de:e5:59:0f:d6:3e:aa:72:05:58:ee:22:ee: de:2a:5b:e6:d7:e8:e8:18:30:1f:bf:8c:bd:b8:a9: 6b:23:98:eb:be:5b:3e:b6:d0:e7:df:21:c7:1f:39: ac:43:cd:ea:b8:c6:86:46:65:04:83:19:1b:64:5a: a0:43:9d:82:b5:7a:3f:e3:d0:2b:92:10:fd:59:87: 66:bc:97:79:ff:d5:b1:46:32:6a:e0:3a:f3:63:70: e6:cc:f8:ad:89:44:68:86:ba:11:3f:0f:46:ed:16: 86:bd:11:14:96:b8:a1:5d:b8:7f:44:c7:6d:1c:0f: 7a:4d:c7:1e:ed:e6:a4:7e:cf:ea:35:af:1b:1b:d5: 84:8b:ee:8e:2c:57:a7:80:06:44:df:ae:41:72:7c: 85:e0:10:80:fd:f3:48:33:00:f4:f1:7e:10:78:80: 00:52:7a:61:8f:70:06:5a:8d:93:23:e0:78:e0:af: 6e:d2:05:bd:31:4d:c0:45:6e:1b:b7:3a:4e:08:65: 9c:25:cb:d1:6e:77:6e:b4:63:80:14:e5:5f:ca:5f: 43:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:93:82:96:AC:53:F7:74:98:FE:26:B0:A4:32:AD:58:19:99:52:52 X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:f2:9c:2b:eb:62:d1:38:dc:85:0a:5c:de:9b:6b:9f:12:72: 64:3c:87:60:8a:0e:87:4a:a9:6a:64:a1:b9:0e:a1:a6:cb:b9: 97:52:00:ad:fb:78:36:21:12:9d:92:ac:74:d3:4b:e7:b3:21: 02:88:d3:33:c6:1d:89:e1:2b:73:ea:81:71:4b:ed:db:96:f9: 07:c9:67:12:f1:8c:93:da:ee:9c:e0:c2:94:5c:7b:2b:60:2b: a2:c9:c2:b4:68:ef:8c:67:c8:1b:2e:81:52:34:63:2b:76:ed: 6d:a3:cd:c9:24:e6:74:e3:28:f5:04:ec:68:a7:c2:83:6f:df: 96:51:87:1e:a5:98:9c:d1:3c:5e:e1:9c:07:e5:35:38:18:9c: f5:03:f3:df:1a:7a:92:f3:3f:00:d3:d4:2b:08:d3:cd:41:33: 43:44:e1:17:40:3d:f6:dd:1c:8f:49:39:1c:9d:58:c2:f2:0a: 41:87:40:7c:ab:c2:bf:f9:7b:06:68:28:70:31:02:ec:9c:ba: 5b:44:9a:df:9b:5c:12:de:79:d3:5a:84:51:2f:60:e0:7f:17: cf:ed:05:3e:88:61:e1:f2:31:a6:54:ae:04:0a:a3:e9:17:40: 1e:da:c1:15:e4:3d:f0:bc:67:45:84:11:67:34:56:64:33:10: 1b:5a:7c:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjUwNTExMDQ1MTQzWhcNMjUwNTE4MDQ1MTQzWjAYMRYwFAYD VQQDEw02ODIwMmNkZi1iM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyOEJWY6ski64eUTnyhxdQ9bVm4u0q/dRImV7DXuUo4dN3USLkT96vfXHor6 hd7lWQ/WPqpyBVjuIu7eKlvm1+joGDAfv4y9uKlrI5jrvls+ttDn3yHHHzmsQ83q uMaGRmUEgxkbZFqgQ52CtXo/49ArkhD9WYdmvJd5/9WxRjJq4DrzY3DmzPitiURo hroRPw9G7RaGvREUlrihXbh/RMdtHA96Tcce7eakfs/qNa8bG9WEi+6OLFengAZE 365BcnyF4BCA/fNIMwD08X4QeIAAUnphj3AGWo2TI+B44K9u0gW9MU3ARW4btzpO CGWcJcvRbndutGOAFOVfyl9DTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqTgpas U/d0mP4msKQyrVgZmVJSMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD8pwr62LRONyFClzem2ufEnJkPIdgig6HSqlqZKG5DqGmy7mXUgCt +3g2IRKdkqx000vnsyECiNMzxh2J4Stz6oFxS+3blvkHyWcS8YyT2u6c4MKUXHsr YCuiycK0aO+MZ8gbLoFSNGMrdu1to83JJOZ04yj1BOxop8KDb9+WUYcepZic0Txe 4ZwH5TU4GJz1A/PfGnqS8z8A09QrCNPNQTNDROEXQD323RyPSTkcnVjC8gpBh0B8 q8K/+XsGaChwMQLsnLpbRJrfm1wS3nnTWoRRL2DgfxfP7QU+iGHh8jGmVK4ECqPp F0Ae2sEV5D3wvGdFhBFnNFZkMxAbWnzB -----END CERTIFICATE-----Generated at Mon May 12 06:54:01 2025 by rpki-client