$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json) Hash identifier: HBU5MZUetcEC2Zvwjeh3/SAUh8033EScIqFhdhkuSCI= Subject key identifier: 8E:96:DA:38:0D:8C:DD:61:73:C9:E0:B2:F7:E1:84:64:0E:F4:A3:CE Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft Manifest number: 58 Signing time: Fri 25 Apr 2025 06:09:32 +0000 Manifest this update: Fri 25 Apr 2025 06:09:31 +0000 Manifest next update: Fri 02 May 2025 06:09:31 +0000 Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: s381BxFGG5AuEAYxy+BpB2E8IkLjtSbr+j5DoczRR9s=) 2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: CckqoSL6Kl8ijND7YWEunm6CSbx21plf0BMP2SCxoy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Validity Not Before: Apr 25 06:09:31 2025 GMT Not After : May 2 06:09:31 2025 GMT Subject: CN=680b271c-ea57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:d1:2e:6f:ae:01:0b:04:6f:81:92:a6:4c: 7d:3c:9d:e7:16:dd:6a:58:9b:cb:f9:a9:95:7b:d9: f1:0d:d0:de:f0:d3:71:ea:50:5d:1e:2c:b3:c8:11: 45:dc:62:d1:e4:e9:ff:59:5e:8e:a7:e2:66:46:44: 32:f5:aa:3a:d0:bd:38:1f:c9:0a:35:db:16:d6:24: 1e:8d:3f:5d:38:27:88:8c:26:ed:de:4b:3e:89:39: 35:df:09:cd:56:cf:26:a3:9e:5a:33:19:3d:d9:b1: e0:fb:b2:42:56:9a:a2:80:23:19:27:92:0d:6f:da: e2:91:05:0c:6c:09:a5:eb:88:7a:c0:2c:77:52:96: 39:26:5a:b7:04:d6:c8:76:89:32:ff:9f:fd:bc:82: fc:5e:c8:c4:1e:6c:17:63:cc:4f:7e:4f:08:d6:c2: b2:6f:0a:93:3d:32:9f:c6:30:a2:c8:a1:e4:7c:5b: 69:3a:47:f8:65:6c:8d:6b:ba:a3:8f:f3:af:51:a2: b6:cc:50:c2:66:3f:6c:eb:eb:3f:c1:b7:0c:67:45: 8e:e7:49:6b:0f:bd:c1:a1:be:a4:28:f7:52:3e:3a: 10:72:1a:da:da:9e:86:36:2d:b6:cd:c9:67:2f:fd: 42:f0:b8:cd:eb:6b:da:aa:fd:3c:f0:97:0a:1f:5a: 22:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:96:DA:38:0D:8C:DD:61:73:C9:E0:B2:F7:E1:84:64:0E:F4:A3:CE X509v3 Authority Key Identifier: keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d6:dc:b1:83:5b:35:07:9c:1f:6e:44:57:31:27:fb:b6:57: 47:59:df:17:40:85:57:e1:7a:a1:2d:1e:c3:72:31:b9:5b:34: a5:6f:dc:e3:32:db:c5:ad:d4:3b:2f:21:78:a9:da:6a:47:f8: 6d:b5:1e:c8:04:07:df:00:70:36:bd:1b:7c:fe:79:df:47:dc: 01:d2:21:c1:24:fb:25:9c:dd:4f:d2:57:43:5a:af:61:a0:1c: 42:9f:93:60:6c:c0:e9:c9:fd:df:5e:12:fe:cf:b2:45:fd:49: 49:3c:65:22:6c:68:a5:67:21:10:6d:1a:2f:49:f6:8f:17:a2: 68:28:75:f2:1c:35:73:f0:50:39:5f:e4:35:cc:c6:d5:9d:9b: 10:22:b2:1c:4d:d9:b2:bf:fa:a3:77:be:54:7e:e0:da:e5:d3: f1:67:07:4b:f9:e7:d0:57:1e:58:5f:88:c5:c3:a2:ce:bb:fb: 33:1a:d2:5d:b3:41:77:9f:50:c5:43:a9:38:0e:84:d7:4a:59: 50:c2:51:fe:35:95:c0:c9:e0:5a:eb:f7:dd:9e:af:3c:68:62: 6e:f9:7f:e3:ac:43:28:33:f2:f8:fe:9c:19:44:ba:52:dd:8f: 59:60:56:6a:aa:bb:38:d2:48:3c:00:88:80:3d:cc:ce:fc:a6: 4e:8f:22:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjdDNzExMC8GA1UEBRMoNDRCQzc4RURFNjNENUI2MjJCN0JBQzAzQjM0OTk2QjJG RTQyRTMyNzAeFw0yNTA0MjUwNjA5MzFaFw0yNTA1MDIwNjA5MzFaMBgxFjAUBgNV BAMTDTY4MGIyNzFjLWVhNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWv9Eub64BCwRvgZKmTH08necW3WpYm8v5qZV72fEN0N7w03HqUF0eLLPIEUXc YtHk6f9ZXo6n4mZGRDL1qjrQvTgfyQo12xbWJB6NP104J4iMJu3eSz6JOTXfCc1W zyajnlozGT3ZseD7skJWmqKAIxknkg1v2uKRBQxsCaXriHrALHdSljkmWrcE1sh2 iTL/n/28gvxeyMQebBdjzE9+TwjWwrJvCpM9Mp/GMKLIoeR8W2k6R/hlbI1ruqOP 869RorbMUMJmP2zr6z/BtwxnRY7nSWsPvcGhvqQo91I+OhByGtranoY2LbbNyWcv /ULwuM3ra9qq/TzwlwofWiJBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjpbaOA2M 3WFzyeCy9+GEZA70o84wHwYDVR0jBBgwFoAURLx47eY9W2Ire6wDs0mWsv5C4ycw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCN0M3L0EyNDUxMTQ2OUQ5 QjExRUY4NjA1MDQ2OUM0RjlBRTAyL1JMeDQ3ZVk5VzJJcmU2d0RzMG1Xc3Y1QzR5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkx4NDdlWTlXMklyZTZ3RHMwbVdzdjVDNHljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC N0M3L0EyNDUxMTQ2OUQ5QjExRUY4NjA1MDQ2OUM0RjlBRTAyL1JMeDQ3ZVk5VzJJ cmU2d0RzMG1Xc3Y1QzR5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF7W3LGDWzUHnB9uRFcxJ/u2V0dZ3xdAhVfheqEtHsNyMblbNKVv3OMy 28Wt1DsvIXip2mpH+G21HsgEB98AcDa9G3z+ed9H3AHSIcEk+yWc3U/SV0Nar2Gg HEKfk2BswOnJ/d9eEv7PskX9SUk8ZSJsaKVnIRBtGi9J9o8XomgodfIcNXPwUDlf 5DXMxtWdmxAishxN2bK/+qN3vlR+4Nrl0/FnB0v559BXHlhfiMXDos67+zMa0l2z QXefUMVDqTgOhNdKWVDCUf41lcDJ4Frr992erzxoYm75f+OsQygz8vj+nBlEulLd j1lgVmqquzjSSDwAiIA9zM78pk6PImw= -----END CERTIFICATE-----Generated at Sat Apr 26 17:14:10 2025 by rpki-client