$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json) Hash identifier: H8GwdcNz9cQaYVLkOrI9yUOl9Qkb8poU5dk4MZbG6Ps= Subject key identifier: 37:F7:73:A7:E4:14:4C:61:B6:AB:42:BD:D0:E6:DE:1B:71:B6:59:9D Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft Manifest number: F0 Signing time: Sun 11 May 2025 04:07:59 +0000 Manifest this update: Sun 11 May 2025 04:07:58 +0000 Manifest next update: Sun 18 May 2025 04:07:58 +0000 Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: T2cqHV8X6R9LLIi45UHth2Gta5S2jyXjC/Bki8aVbsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Validity Not Before: May 11 04:07:58 2025 GMT Not After : May 18 04:07:58 2025 GMT Subject: CN=6820229f-ccca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:b0:4c:7e:9d:6f:6a:78:e0:0f:db:28:aa: 65:2c:de:c5:ae:ba:d2:97:38:e0:82:cd:7c:bc:86: 16:07:23:7a:93:06:e2:22:93:7f:fb:34:c5:24:60: 06:d7:9c:64:ee:e5:fd:15:54:77:da:37:81:3f:b1: 3c:2b:93:20:77:6a:03:e3:46:5b:04:0e:ad:20:92: 5a:c4:d7:a6:48:f6:a2:03:47:f5:57:fc:84:08:e3: cc:d0:5a:00:00:48:e5:3a:97:a4:3c:67:21:e3:ee: 13:b2:60:d9:26:15:9a:b5:44:33:7a:eb:26:59:16: 55:67:fe:80:14:a4:12:c0:98:c0:75:b3:f6:96:3f: 56:8e:5b:20:81:1a:3d:95:f0:82:66:45:44:19:d8: d8:45:6a:53:8d:26:cf:66:ed:2c:54:32:87:c4:30: 16:eb:20:a0:5c:2d:ba:d6:2d:b6:b0:3e:02:61:29: b5:6b:b8:0c:64:aa:93:80:b9:99:1f:96:6c:59:9e: 3c:b6:3f:a7:58:05:c2:13:23:01:ad:5e:7e:a7:3e: cf:97:34:9e:0c:3d:6e:6e:fb:cd:ff:1a:f2:e5:1e: ce:81:11:de:c0:1e:30:73:79:0a:91:d3:15:73:a1: 20:ab:35:ab:99:e7:be:c8:6b:d5:d6:5d:aa:6b:eb: a4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F7:73:A7:E4:14:4C:61:B6:AB:42:BD:D0:E6:DE:1B:71:B6:59:9D X509v3 Authority Key Identifier: keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:eb:88:30:f3:1a:43:7f:51:06:ea:86:39:c4:c2:a9:c0:39: a1:cc:b5:91:2f:f4:66:11:29:5b:76:01:c8:67:a6:20:a9:3a: e7:3b:86:ca:c8:71:fa:c9:f4:dc:8a:c9:28:53:13:0f:d6:00: e5:7a:b6:1b:59:3a:aa:d3:a9:32:62:06:2b:aa:1a:43:a2:0a: 7c:63:a9:4b:1c:35:39:c0:3e:0a:dd:d5:f1:f9:fe:3f:8b:b8: 4a:dc:27:31:22:bf:0e:30:2b:d4:a6:9c:9f:bb:ea:f7:39:13: d4:f6:fe:07:fb:0e:5b:16:59:ca:ee:ae:a9:ae:f5:6d:00:e6: b2:b3:d2:68:59:b4:91:46:3e:52:16:fe:d9:ef:79:bf:34:78: fa:19:2d:82:5b:37:e6:0e:9d:30:e8:e0:02:55:65:a6:ec:76: f5:93:43:08:93:0d:a4:38:ea:6e:b0:a9:28:95:6e:78:7f:0e: a8:79:b2:2b:9a:85:9c:fe:69:7a:c5:db:b0:b3:19:bd:e9:30: 6e:7d:89:60:34:74:39:d4:1e:11:e7:b9:3b:f1:70:55:b5:74: 81:aa:54:2c:36:fa:41:6b:9f:1f:7e:75:be:19:8d:d6:a5:4a: e4:ab:25:63:23:8d:d1:22:27:fd:1f:65:36:db:29:f9:8c:ff: b2:32:0b:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB MDE0QzY5MDkwHhcNMjUwNTExMDQwNzU4WhcNMjUwNTE4MDQwNzU4WjAYMRYwFAYD VQQDEw02ODIwMjI5Zi1jY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucmwTH6db2p44A/bKKplLN7FrrrSlzjggs18vIYWByN6kwbiIpN/+zTFJGAG 15xk7uX9FVR32jeBP7E8K5Mgd2oD40ZbBA6tIJJaxNemSPaiA0f1V/yECOPM0FoA AEjlOpekPGch4+4TsmDZJhWatUQzeusmWRZVZ/6AFKQSwJjAdbP2lj9WjlsggRo9 lfCCZkVEGdjYRWpTjSbPZu0sVDKHxDAW6yCgXC261i22sD4CYSm1a7gMZKqTgLmZ H5ZsWZ48tj+nWAXCEyMBrV5+pz7PlzSeDD1ubvvN/xry5R7OgRHewB4wc3kKkdMV c6EgqzWrmee+yGvV1l2qa+ukqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf3c6fk FExhtqtCvdDm3htxtlmdMB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z SGpMRE1JR05HMzJnRk1hUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp64gw8xpDf1EG6oY5xMKpwDmhzLWRL/RmESlbdgHIZ6YgqTrnO4bK yHH6yfTciskoUxMP1gDlerYbWTqq06kyYgYrqhpDogp8Y6lLHDU5wD4K3dXx+f4/ i7hK3CcxIr8OMCvUppyfu+r3ORPU9v4H+w5bFlnK7q6prvVtAOays9JoWbSRRj5S Fv7Z73m/NHj6GS2CWzfmDp0w6OACVWWm7Hb1k0MIkw2kOOpusKkolW54fw6oebIr moWc/ml6xduwsxm96TBufYlgNHQ51B4R57k78XBVtXSBqlQsNvpBa58ffnW+GY3W pUrkqyVjI43RIif9H2U22yn5jP+yMgvN -----END CERTIFICATE-----Generated at Mon May 12 01:42:52 2025 by rpki-client