$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft File: 1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json) Hash identifier: bydEIss4DsiViG+OBOoB/IXyBgpGHX79JEutGPhnm1c= Subject key identifier: 28:B5:CA:D9:02:99:6A:6D:C2:A2:D7:0B:A8:57:97:B3:D7:1F:E0:4A Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Certificate serial: 153C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft Manifest number: 152A Signing time: Mon 28 Apr 2025 17:01:58 +0000 Manifest this update: Mon 28 Apr 2025 17:01:57 +0000 Manifest next update: Mon 05 May 2025 17:01:57 +0000 Files and hashes: 1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: Kk+cJNdGCG296BNgo0wpKB4X2PZ+khdOISbWvUudRxQ=) 2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: fttFYbQ36BNhaDw4KkKJxxNjWTmLtF2Lj6rIn6jBjOw=) 3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: 1pX1xgZiUndMELmZkTsenLOVPD7ayPzn9r1F8xRSN8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5436 (0x153c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Validity Not Before: Apr 28 17:01:57 2025 GMT Not After : May 5 17:01:57 2025 GMT Subject: CN=680fb485-8e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:80:f5:cd:a6:2b:0d:34:65:a4:25:59:b4:34: a4:26:03:20:27:49:e3:3e:ef:b8:75:56:7a:15:0b: 62:dd:eb:d1:c7:03:f7:f3:c7:7d:fc:61:c6:61:52: b9:4a:de:08:c4:56:6a:45:09:25:0c:eb:a4:98:63: ea:13:e1:53:1e:f7:e2:d1:2b:40:ac:b5:26:7b:c3: 67:d9:71:0c:85:01:e8:42:2a:40:08:b1:af:52:83: af:f2:6e:fd:d2:c9:a7:c7:d2:eb:24:ad:7f:f2:ee: ab:a9:ee:85:b5:8c:47:e8:47:c9:ed:2d:2a:23:3c: 3b:76:cc:f0:17:89:b7:8e:ca:0f:f6:58:01:4a:b2: be:90:22:0d:e8:fc:c9:06:35:c8:ad:3c:09:93:6b: 40:3d:93:aa:47:63:71:3b:1d:61:53:b3:a3:68:29: 22:7b:e7:ca:4c:96:65:cb:37:e4:76:ca:d8:49:2d: 22:47:ef:10:9c:ca:1b:14:fa:e9:53:2b:67:d7:ac: 6a:b9:01:13:b9:93:df:00:1a:ea:99:10:3f:9d:64: c5:db:0a:10:89:46:51:e6:4e:2c:4f:fc:84:47:ef: 52:14:f0:f2:af:12:6b:2b:e8:56:26:8b:f8:2c:0d: 2c:1a:34:dc:38:aa:97:fc:dd:8c:a6:0b:c1:bd:70: 0d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B5:CA:D9:02:99:6A:6D:C2:A2:D7:0B:A8:57:97:B3:D7:1F:E0:4A X509v3 Authority Key Identifier: keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:52:5a:6c:41:f7:96:a2:c9:f3:da:89:0b:e1:0a:c8:39:8f: 9f:c5:07:d3:97:89:29:a5:2f:a8:53:b7:a4:27:c3:19:a8:f6: 6f:f5:c0:68:39:c3:e3:ac:f5:08:ff:db:19:68:54:50:b9:47: 4a:8e:53:47:dc:2d:82:66:b9:11:ac:ab:62:57:18:b5:bf:ce: 3f:3e:88:83:f3:dc:6b:61:71:1b:11:91:d4:ab:ce:27:23:30: 5f:47:b5:e5:43:49:c4:e8:55:a1:8e:8e:06:25:2d:90:c2:1d: b8:90:5b:49:0c:66:d8:ed:34:05:b9:0b:b3:cc:52:8c:02:51: 14:c5:3c:28:49:fc:5b:30:11:7b:4e:3f:02:20:45:c3:cc:2f: 18:ee:a1:89:27:a7:69:73:1d:d8:8d:82:a1:1c:9c:d9:f8:96: a3:7e:c5:e5:cd:3a:ba:cb:f3:43:37:c7:a7:18:c5:23:b5:78: 33:ed:3d:05:d8:57:76:46:a1:e1:02:b9:4c:13:c3:6c:5e:10: a1:8d:c3:05:4a:45:92:93:15:e7:e7:a5:26:49:3f:46:93:c5: d6:23:41:60:96:9c:ef:9b:f8:23:6c:b0:3e:d5:67:f5:bf:22: 2b:5d:41:59:2a:c4:59:8a:b5:73:b1:be:1c:aa:ca:f7:27:3a: 6a:71:b3:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI0MzQxMTAvBgNVBAUTKEQ1QjQ5QzAwOEY2Mjg3NUYxNTI2RDg3NkQzNDk0MEEw OUIwRTlENkQwHhcNMjUwNDI4MTcwMTU3WhcNMjUwNTA1MTcwMTU3WjAYMRYwFAYD VQQDEw02ODBmYjQ4NS04ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YD1zaYrDTRlpCVZtDSkJgMgJ0njPu+4dVZ6FQti3evRxwP388d9/GHGYVK5 St4IxFZqRQklDOukmGPqE+FTHvfi0StArLUme8Nn2XEMhQHoQipACLGvUoOv8m79 0smnx9LrJK1/8u6rqe6FtYxH6EfJ7S0qIzw7dszwF4m3jsoP9lgBSrK+kCIN6PzJ BjXIrTwJk2tAPZOqR2NxOx1hU7OjaCkie+fKTJZlyzfkdsrYSS0iR+8QnMobFPrp Uytn16xquQETuZPfABrqmRA/nWTF2woQiUZR5k4sT/yER+9SFPDyrxJrK+hWJov4 LA0sGjTcOKqX/N2MpgvBvXANnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi1ytkC mWptwqLXC6hXl7PXH+BKMB8GA1UdIwQYMBaAFNW0nACPYodfFSbYdtNJQKCbDp1t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjQzNC9FMkM2MjY3NjQy RDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgxOFZKdGgyMDBsQW9Kc09u VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFiU2NBSTlpaDE4Vkp0aDIwMGxBb0pzT25XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjQzNC9FMkM2MjY3NjQyRDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgx OFZKdGgyMDBsQW9Kc09uVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1UlpsQfeWosnz2okL4QrIOY+fxQfTl4kppS+oU7ekJ8MZqPZv9cBo OcPjrPUI/9sZaFRQuUdKjlNH3C2CZrkRrKtiVxi1v84/PoiD89xrYXEbEZHUq84n IzBfR7XlQ0nE6FWhjo4GJS2Qwh24kFtJDGbY7TQFuQuzzFKMAlEUxTwoSfxbMBF7 Tj8CIEXDzC8Y7qGJJ6dpcx3YjYKhHJzZ+JajfsXlzTq6y/NDN8enGMUjtXgz7T0F 2Fd2RqHhArlME8NsXhChjcMFSkWSkxXn56UmST9Gk8XWI0Fglpzvm/gjbLA+1Wf1 vyIrXUFZKsRZirVzsb4cqsr3JzpqcbM+ -----END CERTIFICATE-----Generated at Tue Apr 29 04:31:53 2025 by rpki-client