$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft File: BD435E3ED6FEEC26F879A0542F609A272CC71307.mft (raw, json) Hash identifier: l/jUnCik9NEmVtSirL9IEI68yYrRKe6AxsgezUrsk7E= Subject key identifier: DF:45:5F:21:97:7F:4A:7E:2F:0B:9D:B3:CF:52:AF:06:50:02:85:1D Authority key identifier: BD:43:5E:3E:D6:FE:EC:26:F8:79:A0:54:2F:60:9A:27:2C:C7:13:07 Certificate issuer: /CN=A917447B0000/serialNumber=BD435E3ED6FEEC26F879A0542F609A272CC71307 Certificate serial: 043AF511488E765A3BD87CB9ACA9293349A52DF6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft Manifest number: 0143 Signing time: Mon 12 May 2025 09:32:10 +0000 Manifest this update: Mon 12 May 2025 09:27:10 +0000 Manifest next update: Tue 13 May 2025 12:08:10 +0000 Files and hashes: 1: 3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa (hash: 6Sq9SvcA7Ko4uHqBJaPg4mhC8hCWFMTiL0m1v1oh8PE=) 2: BD435E3ED6FEEC26F879A0542F609A272CC71307.crl (hash: HrAysIIPpFQogehzmH3xChLQEpzTu3g+bl6AULr3sz4=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 12:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3a:f5:11:48:8e:76:5a:3b:d8:7c:b9:ac:a9:29:33:49:a5:2d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BD435E3ED6FEEC26F879A0542F609A272CC71307 Validity Not Before: May 12 09:27:10 2025 GMT Not After : May 13 12:08:10 2025 GMT Subject: CN=DF455F21977F4A7E2F0B9DB3CF52AF065002851D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:96:cb:11:c4:5e:10:9d:da:f3:9d:a2:17: 9a:36:f3:de:2e:3f:45:33:6f:c3:55:a8:ae:17:73: 3d:91:be:5b:4a:9a:bb:ff:39:3f:a3:a0:b3:31:5c: df:84:18:a2:cc:46:54:62:19:6c:d7:4c:3a:4d:f4: 3b:ea:12:74:ce:97:19:e8:8b:41:76:27:9d:46:5f: b8:77:f3:9b:e3:bd:2a:78:1d:e2:f3:71:be:29:33: d5:e0:9d:50:ed:e6:b3:b3:69:40:f2:40:ee:57:94: ce:6c:ef:71:f8:dd:9d:51:00:76:3b:ad:fd:0e:01: da:09:19:1f:37:77:d1:4e:e7:1d:4d:e3:88:58:77: 9f:ae:53:2e:b0:3e:e7:a6:3c:33:5e:9b:8f:6b:b8: 02:09:03:1f:6c:d7:2f:8b:b2:84:bb:3d:b8:be:ff: 20:f7:dc:57:c1:ef:d1:91:23:91:d7:28:fa:1c:83: e6:08:c1:1e:4b:d3:93:1c:ec:b7:49:b3:00:c8:33: 9d:ad:23:17:9a:e7:11:a0:7e:9a:31:fb:13:b2:8e: fd:d6:36:8f:00:75:2b:bd:ee:43:74:33:87:c9:ad: 1f:b2:97:49:c9:a1:2d:40:73:1c:56:02:6b:aa:6e: 55:d0:44:8e:b3:aa:7d:41:b9:5b:cd:11:f8:c6:96: 83:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:45:5F:21:97:7F:4A:7E:2F:0B:9D:B3:CF:52:AF:06:50:02:85:1D X509v3 Authority Key Identifier: keyid:BD:43:5E:3E:D6:FE:EC:26:F8:79:A0:54:2F:60:9A:27:2C:C7:13:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:31:cd:4f:e8:3e:94:bf:64:84:10:3b:45:93:be:01:6f:7a: 24:74:96:1e:27:f8:6f:81:fb:ad:02:b9:b8:9d:45:a3:74:3c: 05:49:9e:bb:11:0c:61:23:ca:26:73:e9:5b:59:e5:c9:14:8a: af:14:c2:88:a9:ac:0a:4d:a2:6c:6d:8d:56:c8:d2:21:66:24: 00:9e:ed:0b:e1:c1:a4:83:d9:a3:11:30:14:5e:f9:2e:0f:8c: 3c:b3:fb:86:a0:3e:50:2c:84:6e:f3:59:2b:44:f1:98:45:c5: 6a:40:28:49:65:d7:c1:89:5c:73:70:8c:71:25:79:bc:6f:c0: 67:0b:9e:fd:05:91:8b:fe:a8:cd:0d:87:8b:ce:9c:26:ac:e8: 9c:8c:fa:5d:cc:03:04:ae:e6:11:0c:f7:96:41:96:a7:fc:8f: 51:72:d3:17:da:a8:69:7a:d1:8e:dc:0e:8c:4b:47:cb:7c:96: 60:d2:6d:36:25:69:de:3c:a8:86:bd:7b:07:67:41:b2:e7:41: 7d:2e:4a:ba:02:2b:41:33:ce:e2:45:87:e9:ad:25:31:f1:ed: 3b:02:af:56:62:f5:a1:4b:16:94:7d:da:2e:95:8f:48:2a:e2: 68:8f:f2:ea:81:84:02:2e:5e:6f:f0:58:46:a3:25:ad:ae:e9: 4c:4a:ac:32 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBDr1EUiOdlo72Hy5rKkpM0mlLfYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRDQzNUUzRUQ2 RkVFQzI2Rjg3OUEwNTQyRjYwOUEyNzJDQzcxMzA3MB4XDTI1MDUxMjA5MjcxMFoX DTI1MDUxMzEyMDgxMFowMzExMC8GA1UEAxMoREY0NTVGMjE5NzdGNEE3RTJGMEI5 REIzQ0Y1MkFGMDY1MDAyODUxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALd8lssRxF4QndrznaIXmjbz3i4/RTNvw1WorhdzPZG+W0qau/85P6OgszFc 34QYosxGVGIZbNdMOk30O+oSdM6XGeiLQXYnnUZfuHfzm+O9Kngd4vNxvikz1eCd UO3ms7NpQPJA7leUzmzvcfjdnVEAdjut/Q4B2gkZHzd30U7nHU3jiFh3n65TLrA+ 56Y8M16bj2u4AgkDH2zXL4uyhLs9uL7/IPfcV8Hv0ZEjkdco+hyD5gjBHkvTkxzs t0mzAMgzna0jF5rnEaB+mjH7E7KO/dY2jwB1K73uQ3Qzh8mtH7KXScmhLUBzHFYC a6puVdBEjrOqfUG5W80R+MaWg1MCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTfRV8h l39Kfi8LnbPPUq8GUAKFHTAfBgNVHSMEGDAWgBS9Q14+1v7sJvh5oFQvYJonLMcT BzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRDQzNUUz RUQ2RkVFQzI2Rjg3OUEwNTQyRjYwOUEyNzJDQzcxMzA3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92VU5lUHRiLTdD YjRlYUJVTDJDYUp5ekhFd2MuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRDQzNUUzRUQ2RkVFQzI2Rjg3OUEwNTQyRjYwOUEyNzJDQzcxMzA3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEADjHNT+g+lL9khBA7RZO+AW96JHSWHif4b4H7rQK5uJ1Fo3Q8 BUmeuxEMYSPKJnPpW1nlyRSKrxTCiKmsCk2ibG2NVsjSIWYkAJ7tC+HBpIPZoxEw FF75Lg+MPLP7hqA+UCyEbvNZK0TxmEXFakAoSWXXwYlcc3CMcSV5vG/AZwue/QWR i/6ozQ2Hi86cJqzonIz6XcwDBK7mEQz3lkGWp/yPUXLTF9qoaXrRjtwOjEtHy3yW YNJtNiVp3jyohr17B2dBsudBfS5KugIrQTPO4kWH6a0lMfHtOwKvVmL1oUsWlH3a LpWPSCriaI/y6oGEAi5eb/BYRqMlra7pTEqsMg== -----END CERTIFICATE-----Generated at Tue May 13 01:43:07 2025 by rpki-client