$ rpki-client -vvf rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft File: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft (raw, json) Hash identifier: gbqUqlzMlkO4O/ywQn+lmPzn+wuscdWQ2EjnLN9kGHI= Subject key identifier: 6B:54:42:5A:B1:87:9E:9F:C5:20:B7:D8:2B:07:60:0D:47:E7:F7:41 Authority key identifier: 07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 Certificate issuer: /CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft Manifest number: 58 Signing time: Sat 03 May 2025 06:35:22 +0000 Manifest this update: Sat 03 May 2025 06:35:21 +0000 Manifest next update: Sat 10 May 2025 06:35:21 +0000 Files and hashes: 1: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl (hash: Nm10Mpu2e/KlZVemc6qTZzxcvFvuNvyDwSU2/PPfYkE=) 2: A5CE322CAD4311EF8552641BC4F9AE02.roa (hash: oXiSJMCySt2dFDYGEcN3qaUXeVsh5lk+krDNaZUgJ2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129162, serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Validity Not Before: May 3 06:35:21 2025 GMT Not After : May 10 06:35:21 2025 GMT Subject: CN=6815b92a-6a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:fe:61:a2:de:70:36:96:c6:5e:4e:a8:4b: 33:8e:00:d6:36:84:81:99:eb:f4:75:40:91:55:c2: de:f2:4d:cf:50:0f:89:b2:27:47:31:5f:3d:a6:bc: b3:c1:0c:3d:3c:aa:61:15:8f:08:74:79:e9:2b:6d: 47:74:da:70:37:f7:bd:98:41:2f:57:1e:f5:3b:3a: b2:b4:05:83:0b:41:00:e8:b5:1a:8c:bf:37:06:e3: 2a:91:9b:32:b9:55:aa:7f:0e:d5:90:2e:27:11:b8: 1a:23:d9:98:53:b2:b4:67:c6:49:f7:15:46:16:67: 0e:16:48:bf:0d:ac:1f:57:fd:18:a0:80:df:b3:16: 42:29:81:ca:5e:5e:bf:92:7a:ab:4d:44:d6:98:ec: 06:9f:6b:ef:7b:75:62:9c:26:41:7a:56:bb:27:6c: aa:43:e6:4b:7b:91:6b:30:ad:12:d1:f0:03:3b:93: be:40:f1:08:a6:2e:af:e0:25:bc:3e:37:90:08:f1: a9:6b:55:eb:36:e6:f4:ab:21:99:6b:a4:69:1f:ff: 9f:d0:58:aa:85:6e:b6:8e:9a:15:41:a7:cb:7a:69: 4e:6f:5f:08:f8:47:bf:74:e1:53:f2:2c:c2:6d:ad: e3:05:b4:2c:00:e4:30:1c:09:bb:04:00:15:c0:20: 16:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:54:42:5A:B1:87:9E:9F:C5:20:B7:D8:2B:07:60:0D:47:E7:F7:41 X509v3 Authority Key Identifier: keyid:07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:be:2c:5e:88:8c:b8:42:a6:c7:e6:d0:ba:b5:4a:74:8a:1f: 44:f2:27:a0:ad:c5:25:d4:7e:b8:df:5b:63:86:c5:4e:d6:11: c4:b3:03:24:02:ac:06:09:e1:49:69:dd:4e:31:71:11:50:6b: 58:cb:8f:cb:e0:17:b2:27:6e:1b:22:2d:b0:ef:6d:39:fc:89: 4a:e1:13:95:0a:2a:28:b2:73:67:b0:e4:0f:05:b9:88:ad:f8: 27:67:93:2d:b3:31:41:03:c8:af:f7:ca:36:97:41:a3:8f:7b: 32:bf:b2:34:47:42:52:f7:34:d4:fe:23:b1:53:85:c6:2a:2a: c6:93:e9:05:1e:42:d1:09:df:f6:d5:20:b9:04:3f:bf:e7:9b: 72:54:e7:df:20:bd:10:bf:9c:e7:76:25:63:9e:f8:34:60:23: ce:50:25:ed:0c:f3:1a:d0:c0:85:6a:53:52:95:51:38:b5:70: a9:b6:b8:21:b2:d7:c5:65:8d:bd:0d:fa:ee:0d:78:cd:ab:3f: 7a:c5:8d:43:42:19:9d:37:20:f9:40:87:ac:79:4c:0e:8a:0d: be:e3:4b:8b:cd:a0:e0:1c:2b:f8:d5:45:8c:12:c4:3f:a6:2b: 3c:45:9b:aa:1f:2a:eb:80:35:e5:e3:aa:eb:3e:01:cb:7c:15: 77:0d:65:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTE2MjExMC8GA1UEBRMoMDdBNjgxQzkxQzNFMDUxMkQzNjg5RTk5QkNFNUJDNjY0 MDkxNjczNDAeFw0yNTA1MDMwNjM1MjFaFw0yNTA1MTAwNjM1MjFaMBgxFjAUBgNV BAMTDTY4MTViOTJhLTZhMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCX/5hot5wNpbGXk6oSzOOANY2hIGZ6/R1QJFVwt7yTc9QD4myJ0cxXz2mvLPB DD08qmEVjwh0eekrbUd02nA3972YQS9XHvU7OrK0BYMLQQDotRqMvzcG4yqRmzK5 Vap/DtWQLicRuBoj2ZhTsrRnxkn3FUYWZw4WSL8NrB9X/RiggN+zFkIpgcpeXr+S eqtNRNaY7Aafa+97dWKcJkF6VrsnbKpD5kt7kWswrRLR8AM7k75A8QimLq/gJbw+ N5AI8alrVes25vSrIZlrpGkf/5/QWKqFbraOmhVBp8t6aU5vXwj4R7904VPyLMJt reMFtCwA5DAcCbsEABXAIBb7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa1RCWrGH np/FILfYKwdgDUfn90EwHwYDVR0jBBgwFoAUB6aByRw+BRLTaJ6ZvOW8ZkCRZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MTYyLzVBMzgwRDZBQUQ0 MzExRUZBQTg2QzMxQUM0RjlBRTAyL0I2YUJ5UnctQlJMVGFKNlp2T1c4WmtDUlp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjZhQnlSdy1CUkxUYUo2WnZPVzhaa0NSWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 MTYyLzVBMzgwRDZBQUQ0MzExRUZBQTg2QzMxQUM0RjlBRTAyL0I2YUJ5UnctQlJM VGFKNlp2T1c4WmtDUlp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI++LF6IjLhCpsfm0Lq1SnSKH0TyJ6CtxSXUfrjfW2OGxU7WEcSzAyQC rAYJ4Ulp3U4xcRFQa1jLj8vgF7InbhsiLbDvbTn8iUrhE5UKKiiyc2ew5A8FuYit +Cdnky2zMUEDyK/3yjaXQaOPezK/sjRHQlL3NNT+I7FThcYqKsaT6QUeQtEJ3/bV ILkEP7/nm3JU598gvRC/nOd2JWOe+DRgI85QJe0M8xrQwIVqU1KVUTi1cKm2uCGy 18Vljb0N+u4NeM2rP3rFjUNCGZ03IPlAh6x5TA6KDb7jS4vNoOAcK/jVRYwSxD+m KzxFm6ofKuuANeXjqus+Act8FXcNZZc= -----END CERTIFICATE-----Generated at Mon May 5 02:17:46 2025 by rpki-client