$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft File: bRdadMGgmL-i337kNxYF_2owQkk.mft (raw, json) Hash identifier: et7t7nh3BD5x+NdODTk7D5ogXNiShqJtNiZh92D/EPw= Subject key identifier: 47:4F:BB:61:07:01:20:19:E7:B5:01:8D:62:E9:41:C6:1A:BE:03:8B Authority key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49 Certificate issuer: /CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249 Certificate serial: 051E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft Manifest number: 050B Signing time: Sat 10 May 2025 23:15:12 +0000 Manifest this update: Sat 10 May 2025 23:15:11 +0000 Manifest next update: Sat 17 May 2025 23:15:11 +0000 Files and hashes: 1: bRdadMGgmL-i337kNxYF_2owQkk.crl (hash: iYMmnJQ6qrykQq9V6CzJkSLHIsfN7JPzCnYL4JCAY8M=) 2: 80379A8A09EA11EC8762242CC4F9AE02.roa (hash: bLDcJFTKOtM843ZtxHRVBda6/t9v0F+nd+NQWcmzuYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1310 (0x51e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6CB0, serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249 Validity Not Before: May 10 23:15:11 2025 GMT Not After : May 17 23:15:11 2025 GMT Subject: CN=681fddff-a058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:97:db:cc:99:51:bc:bf:40:8d:d4:88:1b: 12:d4:8c:d4:bb:57:b3:27:dc:ff:07:f9:fb:5b:3a: a9:01:38:18:58:11:11:25:d9:aa:e6:52:d0:7c:ae: b2:dd:64:d5:83:4e:a2:c5:f9:7e:eb:9f:e8:4d:e2: 4f:65:29:73:21:a7:01:86:81:4b:b7:8c:bd:13:a8: be:ee:cc:bf:6c:48:10:32:cc:ab:33:2c:48:8c:aa: 5c:b4:48:d8:36:3b:b1:b4:07:81:81:b4:bc:cd:db: fd:60:61:45:39:15:53:b0:83:53:9d:b3:cc:37:4c: 9e:54:6d:35:62:f7:b9:d0:e0:0c:e2:46:3d:c1:2c: 7c:bd:2a:90:70:04:d3:20:f2:fa:eb:c5:fa:05:bb: 02:33:05:a2:c6:d1:24:e7:a1:ac:d5:1c:c4:ac:49: 26:5f:0e:cf:4d:d9:60:fc:46:1b:6c:90:2b:2f:51: 51:bc:bb:46:05:b2:92:f7:92:e3:32:c6:21:c9:1c: 3f:f6:11:b2:e1:d8:e7:d6:70:b2:09:99:c1:17:02: a4:49:9a:36:00:30:f0:2f:0f:d6:b0:87:c4:3d:44: 1d:53:25:13:35:4b:93:ac:51:28:15:ab:6f:30:c8: 10:9d:d2:a1:3a:c2:59:8f:c0:16:7c:90:3e:e0:8c: 02:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4F:BB:61:07:01:20:19:E7:B5:01:8D:62:E9:41:C6:1A:BE:03:8B X509v3 Authority Key Identifier: keyid:6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:dd:49:2e:7f:20:75:0d:46:54:6b:0a:ab:70:d7:28:09:0d: 2a:31:89:33:9a:79:af:9f:ee:fb:88:12:6d:98:fc:fc:1f:fe: 9f:7e:c0:43:bd:f0:21:de:22:0c:a7:60:03:45:e7:93:69:b1: 55:57:a1:5a:9b:fa:18:b5:c0:b5:4d:65:2e:3e:bf:7a:1a:c5: 11:2e:a4:a3:cc:94:01:cc:eb:43:97:e1:f8:4c:98:b9:75:bc: fb:a3:5b:1f:e0:fa:52:6e:54:3e:97:4c:49:a4:ce:bb:48:99: b2:05:e1:2d:07:95:4d:d2:b9:d2:c3:2b:6e:e9:ab:91:08:6c: dd:40:1c:03:c6:74:40:ab:05:6d:8d:1e:bd:63:ce:99:db:09: 0d:65:6f:b5:d3:62:be:5e:ad:d1:e3:b5:87:61:25:f5:c6:f1: 29:6d:d8:c8:9d:3c:ea:42:b7:06:df:63:e8:26:dd:a4:81:8e: f0:25:80:ae:f8:44:0d:da:29:de:9e:71:c1:eb:6b:1a:c7:02: 0d:8e:81:10:a9:b9:ea:93:fd:c4:cc:43:89:76:35:ab:b3:ce: ce:33:a0:c3:58:f9:e8:f8:e6:05:e8:0d:22:ec:a8:1a:ea:cd: e9:b6:c0:e6:56:c8:de:c7:c0:ea:b6:fc:07:bb:7e:32:c4:a0: 66:52:ee:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDQjAxMTAvBgNVBAUTKDZEMTc1QTc0QzFBMDk4QkZBMkRGN0VFNDM3MTYwNUZG NkEzMDQyNDkwHhcNMjUwNTEwMjMxNTExWhcNMjUwNTE3MjMxNTExWjAYMRYwFAYD VQQDEw02ODFmZGRmZi1hMDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL6X28yZUby/QI3UiBsS1IzUu1ezJ9z/B/n7WzqpATgYWBERJdmq5lLQfK6y 3WTVg06ixfl+65/oTeJPZSlzIacBhoFLt4y9E6i+7sy/bEgQMsyrMyxIjKpctEjY NjuxtAeBgbS8zdv9YGFFORVTsINTnbPMN0yeVG01Yve50OAM4kY9wSx8vSqQcATT IPL668X6BbsCMwWixtEk56Gs1RzErEkmXw7PTdlg/EYbbJArL1FRvLtGBbKS95Lj MsYhyRw/9hGy4djn1nCyCZnBFwKkSZo2ADDwLw/WsIfEPUQdUyUTNUuTrFEoFatv MMgQndKhOsJZj8AWfJA+4IwC6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdPu2EH ASAZ57UBjWLpQcYavgOLMB8GA1UdIwQYMBaAFG0XWnTBoJi/ot9+5DcWBf9qMEJJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkNCMC8zNTU2MjAxQzA5 MzIxMUVDOThCOERGMEVDNEY5QUUwMi9iUmRhZE1HZ21MLWkzMzdrTnhZRl8yb3dR a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JSZGFkTUdnbUwtaTMzN2tOeFlGXzJvd1Fray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkNCMC8zNTU2MjAxQzA5MzIxMUVDOThCOERGMEVDNEY5QUUwMi9iUmRhZE1HZ21M LWkzMzdrTnhZRl8yb3dRa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj3UkufyB1DUZUawqrcNcoCQ0qMYkzmnmvn+77iBJtmPz8H/6ffsBD vfAh3iIMp2ADReeTabFVV6Fam/oYtcC1TWUuPr96GsURLqSjzJQBzOtDl+H4TJi5 dbz7o1sf4PpSblQ+l0xJpM67SJmyBeEtB5VN0rnSwytu6auRCGzdQBwDxnRAqwVt jR69Y86Z2wkNZW+102K+Xq3R47WHYSX1xvEpbdjInTzqQrcG32PoJt2kgY7wJYCu +EQN2inennHB62saxwINjoEQqbnqk/3EzEOJdjWrs87OM6DDWPno+OYF6A0i7Kga 6s3ptsDmVsjex8DqtvwHu34yxKBmUu75 -----END CERTIFICATE-----Generated at Sun May 11 14:56:12 2025 by rpki-client