$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json) Hash identifier: rXku1/MwTG0ztRo52i1EakJhD156JsuaMMSX3E9x7Jg= Subject key identifier: 7C:CA:DE:32:8F:F5:55:95:2B:08:ED:C6:19:40:A0:EE:4A:4A:59:79 Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft Manifest number: 0113 Signing time: Fri 25 Apr 2025 04:03:19 +0000 Manifest this update: Fri 25 Apr 2025 04:03:18 +0000 Manifest next update: Fri 02 May 2025 04:03:18 +0000 Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: fUggBg0ltnEkHawVuDs1TSjFXiqXSLjLP+WdYDDx7NM=) 2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: 1nis0P6SfwA6Mcq8SFQmwhxCRMw2QytQSM1sy/jc0jU=) 3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: KgYF6AgzMh0SR6YaAVsJGBjcvKCcJWg6gXxqQiLpD64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Validity Not Before: Apr 25 04:03:18 2025 GMT Not After : May 2 04:03:18 2025 GMT Subject: CN=680b0987-953e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:93:7a:f2:94:5e:c8:03:b6:bf:98:ee:7e: e5:62:bc:a6:a9:43:31:43:c7:6a:2d:12:7e:3c:88: 1d:30:c9:02:b5:fa:68:30:0d:03:bc:4e:32:6f:a6: 29:08:14:9f:02:23:2d:9e:cb:41:22:e3:37:21:27: 62:b7:2f:0d:a8:76:62:47:c4:df:d0:7b:26:e4:3d: 1f:72:0b:36:29:e9:b1:90:6f:b9:6d:85:25:a6:24: bb:da:e2:28:0c:c5:20:d1:1a:11:b5:cd:e5:94:10: be:06:bb:a3:1b:8b:d5:58:d8:e7:42:75:80:5e:15: 19:69:d8:b6:58:a0:26:ef:5f:7d:f1:84:1b:1b:b0: db:10:da:6d:52:4d:33:81:61:4a:0c:67:6c:fc:04: 09:b7:4a:78:ca:b9:46:57:26:4b:0a:c4:7b:18:2b: 4c:ad:17:08:fe:a7:90:9a:5c:c7:e0:50:b0:a8:67: 30:df:a2:e2:25:0b:e0:44:52:4a:6b:30:6f:5d:98: 1d:89:0e:57:5c:39:fc:84:d6:4b:04:79:7a:26:72: 1f:52:e4:21:0a:6d:bd:de:0f:c2:a1:48:2f:d0:a2: b0:d6:89:af:b0:a0:07:46:66:af:75:5c:75:8a:34: 07:b8:91:37:36:e8:99:43:83:25:d2:91:1b:9e:b1: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:DE:32:8F:F5:55:95:2B:08:ED:C6:19:40:A0:EE:4A:4A:59:79 X509v3 Authority Key Identifier: keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:80:61:75:be:c8:3a:54:f3:90:12:3c:bd:d8:b7:85:01:c9: 9a:8b:63:b9:db:6d:e8:84:3b:60:72:85:f0:9c:14:73:e8:5f: e7:75:39:34:79:34:1e:fd:d6:76:f0:64:54:1e:09:ce:38:c4: c1:28:cc:32:a9:2c:ba:76:b7:d8:64:84:3c:2d:14:be:41:85: de:82:92:c0:07:82:dc:c6:2f:a3:9b:a6:df:bb:9f:dd:98:94: f4:1e:06:a8:f8:c7:03:ea:79:36:54:5c:60:1d:7e:7f:1f:58: 6f:6e:60:a7:94:61:ea:0d:87:a4:34:6f:eb:08:ca:77:2d:08: 68:da:1c:7f:6d:84:22:d7:db:f1:78:67:3c:19:2e:c3:1a:d6: 72:b2:15:fa:88:29:fb:b0:df:88:e0:eb:27:ff:cf:a4:a5:af: a4:58:2c:c4:63:b7:e7:db:87:89:26:5b:ae:63:8b:4c:f8:70: ef:96:40:ed:ab:51:0e:02:72:4d:70:9f:0d:a3:a3:1f:3a:06: d2:c0:ed:eb:3b:58:27:36:71:c5:97:5c:c9:f5:4d:5b:e6:26: 31:b0:24:d6:c8:e7:7e:36:8f:67:14:fc:b9:5d:d8:3c:9d:87: 38:21:68:cc:12:5f:af:48:f8:ac:66:d2:5f:de:27:ba:cb:b9: 0c:15:e8:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzOUYxMTAvBgNVBAUTKDA3MUUyNTg1NUU2QTM1QjNEODA4RkY3QTYwQTA4Qjg3 ODEzNTYzNjIwHhcNMjUwNDI1MDQwMzE4WhcNMjUwNTAyMDQwMzE4WjAYMRYwFAYD VQQDEw02ODBiMDk4Ny05NTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOiTevKUXsgDtr+Y7n7lYrymqUMxQ8dqLRJ+PIgdMMkCtfpoMA0DvE4yb6Yp CBSfAiMtnstBIuM3ISdity8NqHZiR8Tf0Hsm5D0fcgs2KemxkG+5bYUlpiS72uIo DMUg0RoRtc3llBC+BrujG4vVWNjnQnWAXhUZadi2WKAm71998YQbG7DbENptUk0z gWFKDGds/AQJt0p4yrlGVyZLCsR7GCtMrRcI/qeQmlzH4FCwqGcw36LiJQvgRFJK azBvXZgdiQ5XXDn8hNZLBHl6JnIfUuQhCm293g/CoUgv0KKw1omvsKAHRmavdVx1 ijQHuJE3NuiZQ4Ml0pEbnrFFRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzK3jKP 9VWVKwjtxhlAoO5KSll5MB8GA1UdIwQYMBaAFAceJYVeajWz2Aj/emCgi4eBNWNi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTM5Ri8yMkU1RjY1NjhB QzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5iUFlDUDk2WUtDTGg0RTFZ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVkySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTM5Ri8yMkU1RjY1NjhBQzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5i UFlDUDk2WUtDTGg0RTFZMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcgGF1vsg6VPOQEjy92LeFAcmai2O5223ohDtgcoXwnBRz6F/ndTk0 eTQe/dZ28GRUHgnOOMTBKMwyqSy6drfYZIQ8LRS+QYXegpLAB4Lcxi+jm6bfu5/d mJT0Hgao+McD6nk2VFxgHX5/H1hvbmCnlGHqDYekNG/rCMp3LQho2hx/bYQi19vx eGc8GS7DGtZyshX6iCn7sN+I4Osn/8+kpa+kWCzEY7fn24eJJluuY4tM+HDvlkDt q1EOAnJNcJ8No6MfOgbSwO3rO1gnNnHFl1zJ9U1b5iYxsCTWyOd+No9nFPy5Xdg8 nYc4IWjMEl+vSPisZtJf3ie6y7kMFehw -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:50 2025 by rpki-client