$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: vCTDpfxSHMrhVX1vaUUv/c9Uf4og8ayLRLsQcx75VOk= Subject key identifier: F3:76:7B:34:FE:43:3C:8F:C3:AB:74:38:2F:9B:08:4D:49:A4:13:67 Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 0740 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 073B Signing time: Fri 16 May 2025 22:01:16 +0000 Manifest this update: Fri 16 May 2025 22:01:16 +0000 Manifest next update: Fri 23 May 2025 22:01:16 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: FZq47VmvlyhJqiw8KSpUqanDSovWcu3STW31Tg+RIpQ=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: 0mX5AyQ3/wAE6Y3GapFs8PrduN5XApUo77DD01nsgSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Validity Not Before: May 16 22:01:16 2025 GMT Not After : May 23 22:01:16 2025 GMT Subject: CN=6827b5ac-a654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:67:7c:9a:32:c2:61:f9:cf:e9:b2:0e:da: 87:3a:a1:b9:3a:04:6d:d4:85:94:2b:0a:27:7c:f2: 10:e4:0d:ba:1c:1d:8a:d6:5a:db:9c:65:c7:69:23: 75:91:e7:de:79:59:8f:31:77:03:46:f4:f4:8f:93: 44:dd:d2:aa:56:ff:17:85:9d:46:29:1f:84:90:42: 29:2b:99:ae:ce:6f:90:51:10:17:51:27:b1:d0:8e: 48:15:f2:51:48:fe:d1:30:9b:93:6c:3f:6e:35:3d: 8f:14:f0:10:15:ec:c5:2c:65:fb:43:9f:f6:91:42: cd:83:19:56:37:16:a6:77:20:57:4c:d4:f8:60:3b: b5:b9:6a:20:8e:2e:54:4b:7f:fd:b6:27:7f:34:c6: e1:66:54:b8:fe:19:1b:86:18:87:ae:e4:66:a0:0b: fb:5a:10:6d:99:96:7c:43:6b:fe:e7:04:4e:be:cc: 89:7c:d7:ea:16:5f:7c:f6:fd:0b:d6:cd:12:66:50: 73:57:a7:79:f0:12:97:74:66:44:c4:f5:92:bc:d8: 4b:12:2e:dc:23:16:0e:df:78:95:f2:c4:08:04:e4: 5e:3e:8c:46:61:fd:46:da:ef:bd:54:b8:fa:2b:54: dc:24:59:d2:d3:65:69:63:df:6c:e8:d6:d9:d3:92: 53:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:76:7B:34:FE:43:3C:8F:C3:AB:74:38:2F:9B:08:4D:49:A4:13:67 X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:68:50:87:ed:89:14:3e:a4:7f:f4:b6:fa:46:2b:e5:bd:68: 7e:2a:03:3f:6f:ca:15:8b:12:3f:3a:5e:ee:aa:2f:cb:d2:4e: 8c:e5:44:f9:41:a1:de:3b:10:0b:b1:cb:fc:04:e1:30:7f:6a: 3f:a6:31:c5:0c:f4:f6:40:a1:2a:98:c3:2b:8b:ac:d8:f7:94: 68:37:98:22:72:8e:74:f6:09:37:0a:83:cd:07:46:f7:53:b7: 0c:40:21:e1:43:cd:f0:7d:47:8c:2b:b8:69:1a:69:d5:e0:29: a0:9c:ff:ee:f3:75:8b:c1:5e:e8:49:0c:c8:b3:25:cc:cc:21: 6a:33:16:23:a6:6f:81:78:65:41:d3:e5:10:f8:fd:1f:2c:36: cf:e6:65:3b:72:ca:3e:e3:72:8d:fc:1f:3e:f8:55:2b:da:62: 43:85:cc:0d:ed:76:f9:05:5d:80:e4:04:be:5b:11:d6:c6:9b: c1:1b:6b:21:c5:67:0e:1f:31:99:8b:15:d2:fb:20:d3:49:77: 0e:70:33:d8:2a:7f:bd:f1:ac:36:bc:52:8e:c4:9e:78:19:ce: f6:2a:28:a7:89:cd:46:81:10:f7:45:8e:24:df:07:91:15:14: 0a:10:55:b9:1a:0f:9c:69:a8:12:55:c0:2c:80:0a:44:1b:46: f5:39:f0:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjUwNTE2MjIwMTE2WhcNMjUwNTIzMjIwMTE2WjAYMRYwFAYD VQQDEw02ODI3YjVhYy1hNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprpnfJoywmH5z+myDtqHOqG5OgRt1IWUKwonfPIQ5A26HB2K1lrbnGXHaSN1 kefeeVmPMXcDRvT0j5NE3dKqVv8XhZ1GKR+EkEIpK5muzm+QURAXUSex0I5IFfJR SP7RMJuTbD9uNT2PFPAQFezFLGX7Q5/2kULNgxlWNxamdyBXTNT4YDu1uWogji5U S3/9tid/NMbhZlS4/hkbhhiHruRmoAv7WhBtmZZ8Q2v+5wROvsyJfNfqFl989v0L 1s0SZlBzV6d58BKXdGZExPWSvNhLEi7cIxYO33iV8sQIBORePoxGYf1G2u+9VLj6 K1TcJFnS02VpY99s6NbZ05JT+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPN2ezT+ QzyPw6t0OC+bCE1JpBNnMB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSaFCH7YkUPqR/9Lb6RivlvWh+KgM/b8oVixI/Ol7uqi/L0k6M5UT5 QaHeOxALscv8BOEwf2o/pjHFDPT2QKEqmMMri6zY95RoN5gico509gk3CoPNB0b3 U7cMQCHhQ83wfUeMK7hpGmnV4CmgnP/u83WLwV7oSQzIsyXMzCFqMxYjpm+BeGVB 0+UQ+P0fLDbP5mU7cso+43KN/B8++FUr2mJDhcwN7Xb5BV2A5AS+WxHWxpvBG2sh xWcOHzGZixXS+yDTSXcOcDPYKn+98aw2vFKOxJ54Gc72Kiinic1GgRD3RY4k3weR FRQKEFW5Gg+caagSVcAsgApEG0b1OfAh -----END CERTIFICATE-----Generated at Sat May 17 00:17:58 2025 by rpki-client