$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json) Hash identifier: Ujz0K26fS32Rqon/jBoPSCJ8VvKK8JdLDRZxwRyGgKM= Subject key identifier: E5:50:BC:03:05:E6:91:76:58:CB:CB:50:13:E9:29:54:E1:91:7A:B0 Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Certificate serial: 075E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft Manifest number: 0EAE Signing time: Thu 24 Apr 2025 21:24:39 +0000 Manifest this update: Thu 24 Apr 2025 21:24:38 +0000 Manifest next update: Thu 01 May 2025 21:24:38 +0000 Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: /GBF+czqnuh2eO781Cg58sR9rFEg7IvSQ0olm7MoGvE=) 2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: hkxmNGokisQG0mbBKypviapB/RNUZ9nsMjdRwBRak9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1886 (0x75e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Validity Not Before: Apr 24 21:24:38 2025 GMT Not After : May 1 21:24:38 2025 GMT Subject: CN=680aac17-f67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7c:5c:3b:df:f9:e9:c1:58:91:06:1f:56:48: 09:2c:51:62:e1:c5:a2:4f:ce:e4:35:8e:1c:6c:18: 00:d7:9c:5e:99:03:7c:2f:a2:b6:5d:fa:9c:45:c1: 75:10:d8:28:b9:90:40:06:ae:fe:2c:66:17:75:1a: 98:46:7d:0a:ef:55:e5:73:6b:87:e8:55:2e:c1:e3: cc:41:8e:38:11:28:5d:c6:c4:45:04:b2:e9:c2:ac: b8:57:f5:cf:29:42:a5:80:ef:4a:df:af:51:e1:fc: 87:6f:83:c0:62:c5:05:70:a9:ab:f5:17:d3:cb:2b: 52:de:14:4a:81:45:9a:bf:6d:d6:9c:08:06:8f:d6: ef:80:5a:69:5e:cf:7d:2a:b7:80:6a:8b:05:f7:67: b4:26:e5:7a:c3:b7:50:27:93:91:1c:f6:15:14:20: c9:ef:33:5b:6a:9b:6f:b5:f5:d8:58:88:0d:0a:6f: 66:bf:0f:59:98:eb:25:c1:49:b0:0f:6d:ac:29:0b: 79:6c:15:7f:ce:b6:e9:6d:2c:33:58:c2:ce:8b:55: 4d:ff:6e:5d:30:fc:45:57:a6:c5:38:d8:21:52:6b: 5f:80:27:f2:d6:0d:02:1c:8c:80:d1:11:77:ee:78: d7:e9:90:1b:e2:5b:fc:53:7d:e9:08:ab:54:b7:96: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:50:BC:03:05:E6:91:76:58:CB:CB:50:13:E9:29:54:E1:91:7A:B0 X509v3 Authority Key Identifier: keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9a:18:3d:53:53:e4:63:2a:4a:a0:a6:f8:12:7f:dc:37:db: 9e:ed:10:fa:5b:10:20:cf:a8:0d:2a:88:6e:5c:e6:4a:b5:81: b0:72:b2:7a:e0:d3:aa:e6:0b:25:12:e4:86:86:26:e6:30:67: 0c:fc:dd:e5:60:c1:e8:1c:69:f7:33:32:41:76:91:49:d6:54: a5:0c:c0:0a:4d:15:8e:c2:3b:ac:01:96:b6:15:d8:b8:72:ad: 13:04:5c:91:10:ff:03:16:9a:c3:d3:bc:d8:65:49:7c:16:9c: e4:1b:eb:40:f7:28:4a:a7:0c:aa:9a:a2:a9:3b:00:be:61:8c: e2:4e:d8:01:6a:51:95:df:a4:22:41:a0:23:b1:1c:d1:24:10: 54:12:39:01:1c:e4:40:d9:96:83:df:22:b7:e5:ea:57:7c:70: 5b:98:23:c5:e2:d1:4d:7e:77:01:7b:f1:d5:57:84:8a:c5:f0: 61:c0:88:12:21:e6:09:ba:0c:90:9c:7f:f9:f8:43:10:71:3a: d7:08:60:2c:86:e5:5a:38:b4:fe:04:45:a4:14:67:0d:c1:00: 32:61:00:e2:73:72:fe:8e:6c:f7:f0:0b:c1:81:16:07:9c:8c: 22:6d:0e:b7:13:5e:e8:66:85:93:29:4c:93:8c:03:be:bb:80: d4:1b:97:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKDQ0MTZFODk4NThEQTY3N0IwQ0RBMzNCODdCMkU4QzhB RkQxQzYwNzgwHhcNMjUwNDI0MjEyNDM4WhcNMjUwNTAxMjEyNDM4WjAYMRYwFAYD VQQDEw02ODBhYWMxNy1mNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXxcO9/56cFYkQYfVkgJLFFi4cWiT87kNY4cbBgA15xemQN8L6K2XfqcRcF1 ENgouZBABq7+LGYXdRqYRn0K71Xlc2uH6FUuwePMQY44EShdxsRFBLLpwqy4V/XP KUKlgO9K369R4fyHb4PAYsUFcKmr9RfTyytS3hRKgUWav23WnAgGj9bvgFppXs99 KreAaosF92e0JuV6w7dQJ5ORHPYVFCDJ7zNbaptvtfXYWIgNCm9mvw9ZmOslwUmw D22sKQt5bBV/zrbpbSwzWMLOi1VN/25dMPxFV6bFONghUmtfgCfy1g0CHIyA0RF3 7njX6ZAb4lv8U33pCKtUt5Yi0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVQvAMF 5pF2WMvLUBPpKVThkXqwMB8GA1UdIwQYMBaAFEQW6JhY2md7DNozuHsujIr9HGB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVozc00yak80ZXk2TWl2MGNZ SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCYm9tRmphWjNzTTJqTzRleTZNaXYwY1lIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVoz c00yak80ZXk2TWl2MGNZSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJmhg9U1PkYypKoKb4En/cN9ue7RD6WxAgz6gNKohuXOZKtYGwcrJ6 4NOq5gslEuSGhibmMGcM/N3lYMHoHGn3MzJBdpFJ1lSlDMAKTRWOwjusAZa2Fdi4 cq0TBFyREP8DFprD07zYZUl8FpzkG+tA9yhKpwyqmqKpOwC+YYziTtgBalGV36Qi QaAjsRzRJBBUEjkBHORA2ZaD3yK35epXfHBbmCPF4tFNfncBe/HVV4SKxfBhwIgS IeYJugyQnH/5+EMQcTrXCGAshuVaOLT+BEWkFGcNwQAyYQDic3L+jmz38AvBgRYH nIwibQ63E17oZoWTKUyTjAO+u4DUG5eF -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:58 2025 by rpki-client