$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft File: bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json) Hash identifier: 3u6ubpsDucW/9YhdnWhVetQrhvbYTdb8W0VE4U2Pmqc= Subject key identifier: 2D:4A:FA:7E:C6:D6:DB:60:88:90:26:FD:A0:A5:EE:B3:7F:C1:31:F9 Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Certificate serial: 1379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft Manifest number: 1351 Signing time: Sun 04 May 2025 16:56:09 +0000 Manifest this update: Sun 04 May 2025 16:56:08 +0000 Manifest next update: Sun 11 May 2025 16:56:08 +0000 Files and hashes: 1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: zQKinadwUd9/Sp+Ks4tfmBS2soq384vfna9FVPho9I4=) 2: 872698A8041B11F0A98AFA39C4F9AE02.roa (hash: KRihtjgc09Z77Kl0lz0K09YLnot4iNb77HfA1M9eF18=) 3: 30C9CCC6AA7711EF87AB7648C4F9AE02.roa (hash: 9a/Xf144BGTz9lOQV2iGyEyfB/0EaARDTCMaH2wHCnE=) 4: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: cgaL7Wf09B5hb9Lh9/xte6mskd3x1yFmaoyUjIx3lJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4985 (0x1379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Validity Not Before: May 4 16:56:08 2025 GMT Not After : May 11 16:56:08 2025 GMT Subject: CN=68179c29-b97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:e0:5a:39:7f:50:ce:b8:14:70:d7:0b:f8:4f: bc:16:05:8f:41:79:de:7f:12:12:59:83:15:25:c0: c0:fa:5f:2e:74:61:5e:ac:ec:5a:a9:62:03:e4:c8: d1:cd:cd:f3:62:54:ed:a8:c7:80:2b:0b:63:6b:1d: 75:e6:be:75:19:4d:dd:77:20:05:c0:77:2e:e1:88: 10:c2:75:50:0b:98:c0:88:41:dc:de:aa:99:8f:92: 1e:cb:0c:41:6e:6c:3a:25:fb:a2:57:88:2c:4a:83: b1:e5:bd:8b:e1:38:4b:da:61:e3:58:0b:bf:3d:bb: c5:73:cb:25:fb:26:c4:db:93:39:8a:e5:03:a1:2c: 3f:2e:93:81:d4:cf:52:df:01:ae:1c:37:d6:b7:c4: 92:ea:b9:b8:25:2e:17:e5:57:4c:60:61:a0:30:02: 2b:d1:02:41:a8:11:c4:11:69:0b:b2:6c:30:57:da: 0b:c2:f9:2a:98:04:a8:92:c2:52:3e:6b:ea:21:5e: c8:99:0f:fa:6e:3c:fd:f1:1d:2e:13:7a:f3:c4:08: 6c:3c:71:dc:2c:8c:6f:2a:bd:3d:a5:75:ff:53:8a: 07:c6:23:49:0f:09:a8:54:d0:2b:c1:0a:42:8e:81: c4:4f:9a:1b:4e:60:b1:29:60:f6:ec:8c:eb:6c:1e: be:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4A:FA:7E:C6:D6:DB:60:88:90:26:FD:A0:A5:EE:B3:7F:C1:31:F9 X509v3 Authority Key Identifier: keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b2:ba:db:ff:5f:3b:45:3b:e8:4e:dc:c7:2c:65:11:09:e9: 37:7e:18:0d:46:8b:b8:4e:73:b6:8b:2a:7f:a8:af:3e:fd:68: 91:5c:08:c6:3e:91:37:1d:cb:bb:16:f3:77:27:09:26:76:62: d2:03:23:c7:7f:58:9f:b1:50:40:10:45:14:bb:af:e0:a1:28: 42:21:e3:4e:e0:3f:5a:2b:f9:63:6a:26:da:80:68:14:81:fe: e0:a0:6d:f2:7f:c9:68:1d:0f:17:ab:00:3f:96:cf:52:41:29: b3:8f:5c:cc:64:45:7e:8e:ef:b1:58:3b:61:27:02:35:fd:9a: 4f:12:bb:ca:6c:61:20:b9:d2:40:4a:5c:e3:7b:c0:85:a8:46: 4c:2f:58:96:22:34:c8:36:21:87:ed:db:bb:6a:0e:ea:31:73: 74:43:42:45:78:8e:d2:7d:64:91:f4:9a:26:55:3f:2b:4a:9d: 23:3a:5c:bb:81:f6:de:ba:d2:9e:01:84:ee:a7:27:50:d5:e5: ca:bb:15:44:01:b7:11:e5:ea:ba:86:aa:4f:62:4a:bc:d1:9e: 38:3d:62:c1:ef:00:77:f5:c6:42:62:20:91:eb:2a:cc:52:d9: a3:d6:85:92:04:d2:13:ff:81:7a:8d:34:cb:b2:e0:25:24:b9: 43:91:26:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG MDNBNjA1QzMwHhcNMjUwNTA0MTY1NjA4WhcNMjUwNTExMTY1NjA4WjAYMRYwFAYD VQQDEw02ODE3OWMyOS1iOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA++BaOX9QzrgUcNcL+E+8FgWPQXnefxISWYMVJcDA+l8udGFerOxaqWID5MjR zc3zYlTtqMeAKwtjax115r51GU3ddyAFwHcu4YgQwnVQC5jAiEHc3qqZj5IeywxB bmw6JfuiV4gsSoOx5b2L4ThL2mHjWAu/PbvFc8sl+ybE25M5iuUDoSw/LpOB1M9S 3wGuHDfWt8SS6rm4JS4X5VdMYGGgMAIr0QJBqBHEEWkLsmwwV9oLwvkqmASoksJS PmvqIV7ImQ/6bjz98R0uE3rzxAhsPHHcLIxvKr09pXX/U4oHxiNJDwmoVNArwQpC joHET5obTmCxKWD27IzrbB6+1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1K+n7G 1ttgiJAm/aCl7rN/wTH5MB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3 NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDlBRC82NTZERDI2QUE3NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhm TDBraGEzNjdBTlh3T21CY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARsrrb/187RTvoTtzHLGURCek3fhgNRou4TnO2iyp/qK8+/WiRXAjG PpE3Hcu7FvN3JwkmdmLSAyPHf1ifsVBAEEUUu6/goShCIeNO4D9aK/ljaibagGgU gf7goG3yf8loHQ8XqwA/ls9SQSmzj1zMZEV+ju+xWDthJwI1/ZpPErvKbGEgudJA Slzje8CFqEZML1iWIjTINiGH7du7ag7qMXN0Q0JFeI7SfWSR9JomVT8rSp0jOly7 gfbeutKeAYTupydQ1eXKuxVEAbcR5eq6hqpPYkq80Z44PWLB7wB39cZCYiCR6yrM Utmj1oWSBNIT/4F6jTTLsuAlJLlDkSYT -----END CERTIFICATE-----Generated at Mon May 5 17:04:39 2025 by rpki-client