$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft File: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft (raw, json) Hash identifier: 1/ffhXC7SA6gaDpY91pllZ7kqL9t+5Oq0ZgpZkRoVyo= Subject key identifier: B7:E8:4F:11:8C:79:2D:FC:12:1D:40:30:B6:63:99:DC:93:B6:B1:8A Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Certificate serial: 051B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft Manifest number: 0516 Signing time: Sat 10 May 2025 23:12:08 +0000 Manifest this update: Sat 10 May 2025 23:12:07 +0000 Manifest next update: Sat 17 May 2025 23:12:07 +0000 Files and hashes: 1: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl (hash: /djh6HGkSDJ8uKb9RnjIG4aJiIQqNPvlSbVskG/TWEA=) 2: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (hash: 4HbuRwfGRyDZiXaifrjrnY5mPijGwg/rzxNxMS6Fugs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1307 (0x51b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Validity Not Before: May 10 23:12:07 2025 GMT Not After : May 17 23:12:07 2025 GMT Subject: CN=681fdd48-4b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:bb:25:7d:dc:2f:7e:bd:b1:dc:2d:de:04: e8:ec:08:0a:eb:c0:cb:77:bd:0e:58:cf:0e:09:40: 6f:77:a5:fc:0e:de:17:40:a9:03:8c:c4:6e:f0:51: 4d:c3:7f:84:52:f7:bb:e4:c6:ab:23:c5:64:6a:79: c3:e3:47:9b:bd:88:18:a7:cc:02:a6:39:33:6c:88: 30:45:e4:21:0a:b4:51:2b:de:3e:57:8b:29:1f:06: 98:9c:9d:bb:7a:59:2a:65:a5:87:56:68:e7:09:7f: 7a:1c:4f:f9:1e:2d:2c:44:2e:69:b5:eb:99:de:1e: 41:dd:52:21:82:28:a9:9b:60:2f:9c:80:d9:2a:96: 4c:9f:b5:01:cd:cf:2b:9d:be:64:20:33:6c:f1:99: 52:56:9c:46:17:b8:c1:86:36:a5:24:92:d3:a7:a6: c9:d7:08:8a:a9:5e:11:e0:92:e3:7a:cc:b2:58:6d: cc:f9:17:30:e3:43:04:b1:4e:72:3d:07:73:98:31: 98:b8:28:bb:63:0d:3c:e3:27:12:07:f3:82:43:ab: aa:5d:78:f5:46:75:5a:44:d8:03:b8:a1:89:90:c0: e2:d1:04:8c:a6:8e:b3:7e:86:70:ac:18:1a:9b:ca: ae:bd:32:3c:71:52:8e:03:31:a9:f4:ff:80:ff:ac: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E8:4F:11:8C:79:2D:FC:12:1D:40:30:B6:63:99:DC:93:B6:B1:8A X509v3 Authority Key Identifier: keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d7:30:3d:96:38:c7:1f:83:bb:cc:21:3d:29:48:32:e2:35: c1:82:af:7f:7d:1a:13:b7:eb:55:d9:37:13:f4:c6:05:70:78: d6:70:6e:d8:09:64:00:45:18:4f:7d:0a:b3:b2:57:25:ac:21: 82:a1:7a:4c:f5:75:ef:97:3f:14:07:e7:b7:c6:4c:1f:c7:f5: d4:49:41:78:11:84:42:93:75:bd:0c:40:ff:1a:4f:56:8d:98: 21:90:fa:17:5e:11:39:19:3f:76:55:cd:14:e7:91:22:52:76: 9b:ea:f9:8e:cf:e4:63:2a:77:e8:92:07:0b:4e:38:f8:2d:3c: 70:4a:8c:9c:ba:6a:a4:46:68:53:fe:16:0d:43:a5:2e:53:53: 00:68:67:cc:59:30:15:72:41:bf:09:7e:e4:5f:34:a8:a8:0c: a1:d8:11:12:ea:ab:06:06:f1:db:11:01:ea:7d:25:ac:cb:d0: d7:c9:13:4c:98:82:4a:13:f4:aa:c7:39:7b:a9:a6:53:68:50: 50:ba:68:85:74:ed:59:d4:47:63:f9:69:9e:1a:5b:b0:d0:0d: 73:e6:b7:de:ad:67:70:80:a8:35:34:fc:f5:45:9c:c4:79:30: ae:96:4f:9f:87:91:75:8b:8b:e9:98:5c:cd:70:c1:53:63:0b: 08:a5:85:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc5NUIxMTAvBgNVBAUTKDA1QkVGM0I3NjQ2MzU2Q0U0MDlGQzU2M0YyQTY5MDc4 Njc3OTVFRjcwHhcNMjUwNTEwMjMxMjA3WhcNMjUwNTE3MjMxMjA3WjAYMRYwFAYD VQQDEw02ODFmZGQ0OC00YjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxy7JX3cL369sdwt3gTo7AgK68DLd70OWM8OCUBvd6X8Dt4XQKkDjMRu8FFN w3+EUve75MarI8VkannD40ebvYgYp8wCpjkzbIgwReQhCrRRK94+V4spHwaYnJ27 elkqZaWHVmjnCX96HE/5Hi0sRC5pteuZ3h5B3VIhgiipm2AvnIDZKpZMn7UBzc8r nb5kIDNs8ZlSVpxGF7jBhjalJJLTp6bJ1wiKqV4R4JLjesyyWG3M+Rcw40MEsU5y PQdzmDGYuCi7Yw084ycSB/OCQ6uqXXj1RnVaRNgDuKGJkMDi0QSMpo6zfoZwrBga m8quvTI8cVKOAzGp9P+A/6wvFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfoTxGM eS38Eh1AMLZjmdyTtrGKMB8GA1UdIwQYMBaAFAW+87dkY1bOQJ/FY/KmkHhneV73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzk1Qi9BODhGQjNFMjAw QzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZzNUFuOFZqOHFhUWVHZDVY dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JiN3p0MlJqVnM1QW44Vmo4cWFRZUdkNVh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzk1Qi9BODhGQjNFMjAwQzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZz NUFuOFZqOHFhUWVHZDVYdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd1zA9ljjHH4O7zCE9KUgy4jXBgq9/fRoTt+tV2TcT9MYFcHjWcG7Y CWQARRhPfQqzslclrCGCoXpM9XXvlz8UB+e3xkwfx/XUSUF4EYRCk3W9DED/Gk9W jZghkPoXXhE5GT92Vc0U55EiUnab6vmOz+RjKnfokgcLTjj4LTxwSoycumqkRmhT /hYNQ6UuU1MAaGfMWTAVckG/CX7kXzSoqAyh2BES6qsGBvHbEQHqfSWsy9DXyRNM mIJKE/Sqxzl7qaZTaFBQumiFdO1Z1Edj+WmeGluw0A1z5rferWdwgKg1NPz1RZzE eTCulk+fh5F1i4vpmFzNcMFTYwsIpYXX -----END CERTIFICATE-----Generated at Sun May 11 11:36:10 2025 by rpki-client