$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: CXGdN9TlIcmHLSAnd8fab4WzBLlb46cm+Syugx6iTaI= Subject key identifier: 65:DC:27:BA:2D:46:05:1D:EB:E3:6B:97:A6:87:2C:97:13:46:BB:1A Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 03A5 Signing time: Tue 13 May 2025 00:33:18 +0000 Manifest this update: Tue 13 May 2025 00:33:18 +0000 Manifest next update: Tue 20 May 2025 00:33:18 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: OHVuGJCzWsLGanSeyXMXbG9766nhoO/+mdbqTWXZ09k=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: pTLG0WiZ5krYcSGHfWJAPWz+llPAx5qbifmNwzqhPMM=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: /9wYxqntRiGnvgXxlBbc4/94IQMO4HOR9thkiSTkR6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: May 13 00:33:18 2025 GMT Not After : May 20 00:33:18 2025 GMT Subject: CN=6822934e-98db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:7a:23:cd:c8:76:5e:c2:6f:23:99:48:77: 4a:b4:ef:53:0a:91:80:ac:1f:4a:0e:2c:7f:9d:08: 58:05:9e:64:aa:cd:c9:07:88:d5:3f:13:1e:64:9a: a9:f3:dc:36:be:f1:ad:08:82:89:c2:74:55:41:f0: ac:f3:04:c9:98:ca:2b:6b:1c:e1:18:1e:f6:4f:99: e9:4b:15:f4:bc:4d:9a:a0:da:07:ef:2a:9b:f6:38: bd:18:dd:ee:27:f3:df:15:31:cd:f4:99:27:06:53: 13:a6:de:d9:a1:b9:74:d8:ce:48:b0:63:37:2c:f1: 06:bc:47:bb:3e:40:eb:20:e3:13:a2:30:8d:05:32: cd:d5:2a:01:5a:2c:77:75:0e:9d:7c:c6:6a:1f:df: ba:7d:fe:b7:12:fc:c3:a3:d3:c1:9f:e9:b7:a9:be: b5:51:87:e5:b4:2b:c5:d7:df:3d:79:9a:98:d8:ea: fa:00:f1:8a:63:27:17:b8:ef:33:bb:85:bb:1c:15: 3d:03:78:8c:be:bc:10:96:49:84:84:80:24:db:9c: a6:3d:03:c9:5c:bf:d6:17:27:60:f6:03:4c:45:73: db:c3:67:f6:bb:a9:cf:5b:f1:3c:70:73:26:89:57: e7:96:46:8a:76:55:0a:8e:cc:a6:11:3c:41:cb:83: 29:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DC:27:BA:2D:46:05:1D:EB:E3:6B:97:A6:87:2C:97:13:46:BB:1A X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:b5:f7:21:24:06:5e:26:c4:48:7a:07:c6:cd:50:ea:d7:36: c1:ab:c7:f6:10:e4:6b:1c:51:c1:d0:fc:4e:9f:83:fc:fb:f5: 2e:87:98:4b:f8:db:96:a1:d7:5c:40:68:42:77:16:3a:7b:9a: 32:07:d9:e5:bc:00:0d:5e:7e:d1:bf:f4:e5:32:66:c4:a1:8e: bf:0f:90:74:f6:c7:93:36:2c:83:4e:90:53:86:55:8b:d1:2c: 1a:2a:c2:7f:e5:89:e6:cb:58:4b:d7:60:0e:f8:39:d1:b3:be: 73:35:a1:a6:14:64:52:f5:08:c2:e6:98:15:24:71:3c:b2:4a: 11:8f:0f:3c:91:91:57:f8:7d:0f:3e:c0:e6:a1:82:2c:c5:af: 4e:e2:94:7c:c4:44:eb:8a:62:ed:af:7d:7c:70:c6:40:56:bf: 3e:91:3d:d0:f9:a9:57:11:c0:05:30:d1:49:16:fd:c7:94:c3: 0e:0a:ef:17:0a:2e:ee:e4:07:8e:8d:fb:9e:da:ef:8d:83:5d: 73:0b:f6:5b:f0:26:35:48:34:33:e2:6b:a3:bf:29:38:35:bc: ea:f1:e2:23:91:5e:9b:43:dc:ec:16:90:55:c2:f4:d1:08:1c: ca:7f:81:3e:b9:ef:3d:89:5f:aa:67:3e:b2:49:12:da:22:4e: 6c:b1:0a:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjUwNTEzMDAzMzE4WhcNMjUwNTIwMDAzMzE4WjAYMRYwFAYD VQQDEw02ODIyOTM0ZS05OGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVV6I83Idl7CbyOZSHdKtO9TCpGArB9KDix/nQhYBZ5kqs3JB4jVPxMeZJqp 89w2vvGtCIKJwnRVQfCs8wTJmMoraxzhGB72T5npSxX0vE2aoNoH7yqb9ji9GN3u J/PfFTHN9JknBlMTpt7Zobl02M5IsGM3LPEGvEe7PkDrIOMTojCNBTLN1SoBWix3 dQ6dfMZqH9+6ff63EvzDo9PBn+m3qb61UYfltCvF1989eZqY2Or6APGKYycXuO8z u4W7HBU9A3iMvrwQlkmEhIAk25ymPQPJXL/WFydg9gNMRXPbw2f2u6nPW/E8cHMm iVfnlkaKdlUKjsymETxBy4Mp1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXcJ7ot RgUd6+Nrl6aHLJcTRrsaMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDetfchJAZeJsRIegfGzVDq1zbBq8f2EORrHFHB0PxOn4P8+/Uuh5hL +NuWoddcQGhCdxY6e5oyB9nlvAANXn7Rv/TlMmbEoY6/D5B09seTNiyDTpBThlWL 0SwaKsJ/5Ynmy1hL12AO+DnRs75zNaGmFGRS9QjC5pgVJHE8skoRjw88kZFX+H0P PsDmoYIsxa9O4pR8xETrimLtr318cMZAVr8+kT3Q+alXEcAFMNFJFv3HlMMOCu8X Ci7u5AeOjfue2u+Ng11zC/Zb8CY1SDQz4mujvyk4Nbzq8eIjkV6bQ9zsFpBVwvTR CBzKf4E+ue89iV+qZz6ySRLaIk5ssQp7 -----END CERTIFICATE-----Generated at Tue May 13 17:19:41 2025 by rpki-client