$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft File: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft (raw, json) Hash identifier: 75altTRLD5K+ykB38p3BLctF/AkxpnwBkkeHs3R7teg= Subject key identifier: CB:8F:C3:DA:FE:65:01:FF:8B:B8:DC:26:64:AE:D5:85:9A:47:0F:52 Authority key identifier: 06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E Certificate issuer: /CN=A91E1CB1/serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft Manifest number: 2F Signing time: Tue 13 May 2025 06:52:54 +0000 Manifest this update: Tue 13 May 2025 06:52:54 +0000 Manifest next update: Tue 20 May 2025 06:52:54 +0000 Files and hashes: 1: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl (hash: NqTZkOjMn9+5BLW9n6PnWoxXAcrSjeawRvzZzRCGLTM=) 2: 8291E388EA0811EFB385192AC4F9AE02.roa (hash: XpmAeXpdeuf94znt4qbum8GMVNKKeabDl6UX2Jbwn48=) 3: 8322D244EA0811EFB385192AC4F9AE02.roa (hash: +QMIG68CS6n8ZD6zVSU18xTMohd0BVQ46zSHjpuk0xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1CB1, serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Validity Not Before: May 13 06:52:54 2025 GMT Not After : May 20 06:52:54 2025 GMT Subject: CN=6822ec46-c689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:e8:2b:f7:d8:6a:d3:90:a3:33:25:35:c3: d6:ad:56:6f:db:d5:88:d1:a9:11:58:ee:c7:c6:56: 7b:b9:b4:58:47:30:97:59:5c:eb:33:cd:dd:a2:36: 76:98:8b:74:60:a5:79:47:17:7d:27:0e:1a:1b:bd: 34:0b:e2:47:a9:c0:39:94:0e:87:c5:ac:7e:5d:de: 46:fb:08:63:7d:cd:50:b3:cb:16:7e:b5:a6:ca:25: d4:e9:99:f5:62:5d:37:13:82:92:24:33:17:f3:56: 7c:ff:69:3b:e9:14:33:d8:0d:49:64:1e:91:17:37: 01:fc:1a:42:16:2e:fc:3a:64:e9:0d:06:41:9b:32: 08:fc:4f:4b:4e:16:9c:42:0b:a1:6f:d2:20:6c:18: 3b:60:51:74:61:01:9d:83:55:29:8c:e5:be:ca:a6: 59:d1:db:e3:22:f6:bb:c7:a0:b3:ff:20:65:b4:92: 40:0c:b2:f7:87:f2:36:19:cf:bf:62:0c:9f:be:41: d6:4b:93:73:17:3b:b3:e3:a5:7b:c1:83:ad:7f:1b: 01:98:8d:fb:13:ed:78:dc:de:2f:3b:7a:9d:fc:d8: 40:8d:e8:99:a1:48:29:5d:10:54:4a:f4:4c:2f:dd: 91:e7:31:47:d2:86:d3:76:ae:49:6b:c3:2b:9c:60: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8F:C3:DA:FE:65:01:FF:8B:B8:DC:26:64:AE:D5:85:9A:47:0F:52 X509v3 Authority Key Identifier: keyid:06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e5:17:e4:df:f9:52:a2:c8:5a:48:cc:93:c8:3c:86:f5:04: 6e:c4:ab:fc:ac:ab:60:89:ed:2e:33:8b:a9:e8:46:3e:d6:61: 29:da:96:3e:a7:78:6a:d2:f5:7a:d2:0a:10:77:7b:49:0e:72: 7a:90:8f:aa:8d:ee:c3:0d:cc:f4:68:b5:e5:4d:85:0d:c2:be: a1:ac:61:88:34:a9:12:a8:00:a8:6a:1b:28:10:73:ee:a7:63: 4a:5a:dd:b9:f6:cc:4d:6c:23:cc:c3:9b:87:f6:14:48:9c:e6: 25:1a:da:13:e6:3d:92:74:24:0a:71:9f:4f:68:3e:56:7d:14: 84:68:3c:1c:8d:50:0b:ce:36:75:90:db:c8:22:df:f3:16:fa: e3:29:d4:b1:06:69:62:37:8d:1f:61:09:17:c9:7e:19:0d:4b: 7b:cd:42:b0:11:93:b4:e5:09:03:bf:b2:66:4c:39:3f:fc:75: d9:62:b8:92:36:bd:e1:d8:e1:6a:97:3d:17:01:8d:d0:3c:7c: fe:5e:6d:1b:16:ac:77:b9:f5:d4:37:0e:a9:8d:92:e4:2d:08: d0:99:a9:9a:f7:83:aa:ac:bb:c5:a6:10:bc:3d:eb:b9:d3:b9: 40:e8:43:d0:96:c3:2d:65:a5:78:4f:78:66:70:bd:a9:49:20: 3d:73:2a:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUNCMTExMC8GA1UEBRMoMDYzRTAxMjc0NzJBN0UyQTZGODQ3MDQwOUM5QjgyMzkw NUZBRkU4RTAeFw0yNTA1MTMwNjUyNTRaFw0yNTA1MjAwNjUyNTRaMBgxFjAUBgNV BAMTDTY4MjJlYzQ2LWM2ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsXugr99hq05CjMyU1w9atVm/b1YjRqRFY7sfGVnu5tFhHMJdZXOszzd2iNnaY i3RgpXlHF30nDhobvTQL4kepwDmUDofFrH5d3kb7CGN9zVCzyxZ+tabKJdTpmfVi XTcTgpIkMxfzVnz/aTvpFDPYDUlkHpEXNwH8GkIWLvw6ZOkNBkGbMgj8T0tOFpxC C6Fv0iBsGDtgUXRhAZ2DVSmM5b7KplnR2+Mi9rvHoLP/IGW0kkAMsveH8jYZz79i DJ++QdZLk3MXO7PjpXvBg61/GwGYjfsT7Xjc3i87ep382ECN6JmhSCldEFRK9Ewv 3ZHnMUfShtN2rklrwyucYKqRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy4/D2v5l Af+LuNwmZK7VhZpHD1IwHwYDVR0jBBgwFoAUBj4BJ0cqfipvhHBAnJuCOQX6/o4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQ0IxLzNGNEE1QTJFRUEw ODExRUY5RDMzOUIyOUM0RjlBRTAyL0JqNEJKMGNxZmlwdmhIQkFuSnVDT1FYNl9v NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQmo0QkowY3FmaXB2aEhCQW5KdUNPUVg2X280LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx Q0IxLzNGNEE1QTJFRUEwODExRUY5RDMzOUIyOUM0RjlBRTAyL0JqNEJKMGNxZmlw dmhIQkFuSnVDT1FYNl9vNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEHlF+Tf+VKiyFpIzJPIPIb1BG7Eq/ysq2CJ7S4zi6noRj7WYSnalj6n eGrS9XrSChB3e0kOcnqQj6qN7sMNzPRoteVNhQ3CvqGsYYg0qRKoAKhqGygQc+6n Y0pa3bn2zE1sI8zDm4f2FEic5iUa2hPmPZJ0JApxn09oPlZ9FIRoPByNUAvONnWQ 28gi3/MW+uMp1LEGaWI3jR9hCRfJfhkNS3vNQrARk7TlCQO/smZMOT/8ddliuJI2 veHY4WqXPRcBjdA8fP5ebRsWrHe59dQ3DqmNkuQtCNCZqZr3g6qsu8WmELw967nT uUDoQ9CWwy1lpXhPeGZwvalJID1zKsY= -----END CERTIFICATE-----Generated at Wed May 14 21:27:50 2025 by rpki-client