$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft File: mBpus4OnlllRIB38cbLqDUSWGxQ.mft (raw, json) Hash identifier: J+7HYM6qmMyuGDWcdp/TYoBd/rTHEnODlQoSmiA7cFY= Subject key identifier: 92:DB:0A:7B:91:A3:AC:E8:83:E0:16:7E:D1:C3:B1:0E:A6:C0:BA:AA Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 Certificate issuer: /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Certificate serial: 054C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft Manifest number: 0547 Signing time: Thu 24 Apr 2025 23:13:55 +0000 Manifest this update: Thu 24 Apr 2025 23:13:54 +0000 Manifest next update: Thu 01 May 2025 23:13:54 +0000 Files and hashes: 1: mBpus4OnlllRIB38cbLqDUSWGxQ.crl (hash: wAtoW5OjQ6qhLn+6FQNJ1eyj1ub137IND6l64EQrUoI=) 2: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (hash: q+L5tLTqjDOQUKLHpaKDvKoXYe9C7le5sZCMKuytaU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1356 (0x54c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110888, serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Validity Not Before: Apr 24 23:13:54 2025 GMT Not After : May 1 23:13:54 2025 GMT Subject: CN=680ac5b2-ce92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:71:25:ef:51:8c:3e:6d:88:b4:02:83:a9:66: 87:f9:74:66:68:99:5f:7a:e4:a5:17:4f:33:1d:17: ac:a5:0f:57:95:39:6b:49:a4:e7:8d:8f:8a:33:ac: c7:e3:15:5e:aa:a0:08:31:6e:97:29:f9:e4:a4:7d: 8e:e3:06:90:a6:9e:67:de:7f:b7:11:65:68:f8:6b: f8:52:e4:b1:7d:e1:4d:1f:36:1f:14:20:04:60:4a: 37:37:4e:26:d5:dd:96:e2:0f:a0:0d:f5:07:f6:16: 20:83:f6:29:3c:25:b0:c4:95:7d:0e:78:07:b1:ef: b9:4d:5c:34:37:a9:7b:83:17:eb:69:7b:50:9a:3d: ba:fd:0f:76:50:33:0c:22:20:11:59:9b:d0:a9:7e: ef:6c:d6:ba:25:cf:41:0c:8d:ab:3b:ab:1a:fa:65: a0:67:76:4c:9d:1b:f9:32:dd:b4:46:c2:06:68:9f: 27:0a:57:88:6f:f8:ae:bd:1c:0b:c5:31:47:2b:e9: b9:4b:75:df:60:ee:21:34:ba:66:c3:75:c6:bf:e9: 81:fa:eb:46:3b:76:b5:0d:f8:b1:b1:06:c7:f5:a3: e9:fc:91:86:26:e3:8c:1e:35:45:c9:0f:9e:9f:91: c7:9e:1f:5d:51:3a:5f:a0:83:fe:db:9c:62:89:1c: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DB:0A:7B:91:A3:AC:E8:83:E0:16:7E:D1:C3:B1:0E:A6:C0:BA:AA X509v3 Authority Key Identifier: keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:23:8c:8c:8f:0c:46:a5:1a:65:50:29:5a:0a:61:b8:a5:a3: 73:a7:c9:69:33:26:3a:c7:10:ce:29:50:68:19:db:f1:42:b1: 95:87:50:51:5c:d5:0b:fa:aa:1e:01:e4:0e:c5:d9:c7:63:f3: be:9f:a4:8a:06:1c:19:21:df:f2:fc:0b:72:d3:e1:f2:ad:e7: b6:34:78:3c:7a:96:1d:f6:22:95:b3:fb:41:4e:c8:56:e1:62: d8:f5:f4:d6:4b:3c:ad:ae:57:28:11:cf:5d:a4:fe:a0:d7:a5: 3e:45:21:5f:24:70:9b:cb:b7:44:62:0c:c8:65:c7:ee:5d:29: 14:7f:b0:cd:e6:7a:42:56:cf:77:5a:91:30:33:0d:f5:d5:bd: c8:0f:15:3a:ca:83:4c:e2:f5:a6:c6:34:78:72:78:bc:c5:fe: 5f:54:0b:45:5e:0b:57:14:e1:23:52:fd:a4:88:77:f5:fa:8a: 0b:2d:39:d0:a7:3c:5a:3c:c7:b6:ab:ed:42:4d:f7:8b:ea:92: 5f:39:55:5e:d6:13:ec:3b:31:2a:d1:23:a2:4e:1c:92:60:ac: fc:99:46:57:d6:3c:e4:01:14:86:9f:c4:37:ca:a7:7f:36:83: 33:59:de:34:4a:49:f6:28:98:20:4d:d5:7b:b1:20:cc:53:0a: 7e:9a:a1:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA4ODgxMTAvBgNVBAUTKDk4MUE2RUIzODNBNzk2NTk1MTIwMURGQzcxQjJFQTBE NDQ5NjFCMTQwHhcNMjUwNDI0MjMxMzU0WhcNMjUwNTAxMjMxMzU0WjAYMRYwFAYD VQQDEw02ODBhYzViMi1jZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XEl71GMPm2ItAKDqWaH+XRmaJlfeuSlF08zHRespQ9XlTlrSaTnjY+KM6zH 4xVeqqAIMW6XKfnkpH2O4waQpp5n3n+3EWVo+Gv4UuSxfeFNHzYfFCAEYEo3N04m 1d2W4g+gDfUH9hYgg/YpPCWwxJV9DngHse+5TVw0N6l7gxfraXtQmj26/Q92UDMM IiARWZvQqX7vbNa6Jc9BDI2rO6sa+mWgZ3ZMnRv5Mt20RsIGaJ8nCleIb/iuvRwL xTFHK+m5S3XfYO4hNLpmw3XGv+mB+utGO3a1DfixsQbH9aPp/JGGJuOMHjVFyQ+e n5HHnh9dUTpfoIP+25xiiRxkbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLbCnuR o6zog+AWftHDsQ6mwLqqMB8GA1UdIwQYMBaAFJgabrODp5ZZUSAd/HGy6g1ElhsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDg4OC82QzhFM0FBNkVC MTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxsbFJJQjM4Y2JMcURVU1dH eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CcHVzNE9ubGxsUklCMzhjYkxxRFVTV0d4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDg4OC82QzhFM0FBNkVCMTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxs bFJJQjM4Y2JMcURVU1dHeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKI4yMjwxGpRplUClaCmG4paNzp8lpMyY6xxDOKVBoGdvxQrGVh1BR XNUL+qoeAeQOxdnHY/O+n6SKBhwZId/y/Aty0+Hyree2NHg8epYd9iKVs/tBTshW 4WLY9fTWSzytrlcoEc9dpP6g16U+RSFfJHCby7dEYgzIZcfuXSkUf7DN5npCVs93 WpEwMw311b3IDxU6yoNM4vWmxjR4cni8xf5fVAtFXgtXFOEjUv2kiHf1+ooLLTnQ pzxaPMe2q+1CTfeL6pJfOVVe1hPsOzEq0SOiThySYKz8mUZX1jzkARSGn8Q3yqd/ NoMzWd40Skn2KJggTdV7sSDMUwp+mqEp -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:46 2025 by rpki-client