$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: C+nTpatdISdUohBtf9zpA6rvOB4Kp/A3QL8LVqNLk2E= Subject key identifier: E1:C5:99:74:24:92:C1:03:4C:5A:3D:B8:8F:45:67:0C:E8:C5:7C:63 Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 34C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 349D Signing time: Tue 06 May 2025 14:37:22 +0000 Manifest this update: Tue 06 May 2025 14:37:21 +0000 Manifest next update: Tue 13 May 2025 14:37:21 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: HcCPpgLMt3YNr2+W4iujUr9uBsLS46mZidUdWKvnjYo=) 2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: wvEIUxvlUFTH2qcHsopuAxq+KjN4ylNQUioBhK93yXg=) 3: 4A08F422F43211EBA188C86AC4F9AE02.roa (hash: 3Y7LHhfPoBb0WxabpgiKDHOJivLh/nfOe4OHRiwg/0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 14:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13509 (0x34c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: May 6 14:37:21 2025 GMT Not After : May 13 14:37:21 2025 GMT Subject: CN=681a1ea2-93b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:f6:c6:fd:9a:a9:18:25:0a:39:ce:ff:88: 91:77:e6:06:f8:2f:7d:9f:61:aa:55:5d:ba:25:36: 3f:da:ab:66:b4:8a:a1:c0:07:65:26:10:f1:51:09: 68:e9:a5:bf:a2:b2:e9:8e:db:28:8e:8e:30:dc:34: b5:20:db:b5:3f:5d:4d:e8:f6:53:13:e7:a9:a2:aa: 39:e7:fe:3f:f1:a9:1b:13:f9:fd:d4:60:81:5f:57: 2c:fb:8a:e8:80:a8:0e:85:bd:2d:67:6d:61:20:70: 12:84:29:b0:51:b4:74:62:d3:d7:85:fe:92:6e:56: 14:77:87:37:47:d9:c2:41:f9:af:3d:ff:97:e8:d9: 4e:29:84:3c:1f:48:50:4b:60:0f:bc:fd:81:b3:f0: 4f:40:d5:53:7d:d4:13:f4:d6:cb:f4:51:87:2b:5f: cd:ff:33:2e:09:59:0e:d0:fa:a5:f6:1e:ec:c9:c3: 87:b2:3f:50:c3:31:d8:f7:80:2a:5a:52:75:f7:b8: 28:92:21:b1:e7:17:8e:e3:dd:c2:f4:4c:e8:37:ad: 2d:33:6b:9b:63:2c:95:5b:ca:65:d6:d2:f8:31:4d: 7f:ea:ba:4d:34:bf:37:d8:01:3a:ad:76:eb:0e:04: 23:49:f1:fa:b0:a4:80:5f:1b:9d:6d:d6:97:3f:76: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C5:99:74:24:92:C1:03:4C:5A:3D:B8:8F:45:67:0C:E8:C5:7C:63 X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:54:79:63:10:1c:8e:fc:4c:7e:72:34:40:e8:c4:4c:29:ec: 27:81:be:95:71:34:b3:36:c9:fb:f5:c1:35:6e:17:65:e0:a9: 14:97:8f:30:a4:63:f3:c3:39:14:93:36:b3:61:fe:95:38:e1: 4e:e2:92:81:05:b7:af:a2:cc:96:b3:05:97:8e:88:12:fe:51: a7:ac:43:85:6d:54:4f:3a:2d:81:e9:de:69:c4:56:5d:5b:e8: 76:f6:e6:7d:3a:3c:3b:a1:8c:44:64:3b:ed:6d:df:4b:2e:f3: 5d:c6:fc:0c:1d:28:26:b4:be:20:3b:2c:f8:73:8c:88:b2:49: ed:27:36:f9:95:9f:4a:fb:85:f5:2a:81:6c:6e:9b:fc:17:12: c2:3d:e7:54:76:56:7e:d8:4d:09:18:f4:95:cd:9f:0f:a1:1e: c8:aa:25:69:62:dc:c9:67:c5:c1:a7:7c:b2:94:fe:e9:8c:8b: b5:7d:eb:88:83:9f:59:1b:50:07:f4:dd:f6:2e:07:97:d6:99: 04:02:25:d4:a4:ec:61:11:54:0c:3a:30:d8:a9:19:a9:2d:c5: ed:0e:2f:c5:4d:86:3b:8d:02:b7:9c:62:a0:6f:1c:8a:b8:b9: 14:1f:bd:3d:32:36:0f:c5:7c:4b:f0:48:d9:62:71:52:d6:ee: f8:7a:70:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjUwNTA2MTQzNzIxWhcNMjUwNTEzMTQzNzIxWjAYMRYwFAYD VQQDEw02ODFhMWVhMi05M2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLD2xv2aqRglCjnO/4iRd+YG+C99n2GqVV26JTY/2qtmtIqhwAdlJhDxUQlo 6aW/orLpjtsojo4w3DS1INu1P11N6PZTE+epoqo55/4/8akbE/n91GCBX1cs+4ro gKgOhb0tZ21hIHAShCmwUbR0YtPXhf6SblYUd4c3R9nCQfmvPf+X6NlOKYQ8H0hQ S2APvP2Bs/BPQNVTfdQT9NbL9FGHK1/N/zMuCVkO0Pql9h7sycOHsj9QwzHY94Aq WlJ197gokiGx5xeO493C9EzoN60tM2ubYyyVW8pl1tL4MU1/6rpNNL832AE6rXbr DgQjSfH6sKSAXxudbdaXP3b/RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHFmXQk ksEDTFo9uI9FZwzoxXxjMB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjVHljEByO/Ex+cjRA6MRMKewngb6VcTSzNsn79cE1bhdl4KkUl48w pGPzwzkUkzazYf6VOOFO4pKBBbevosyWswWXjogS/lGnrEOFbVRPOi2B6d5pxFZd W+h29uZ9Ojw7oYxEZDvtbd9LLvNdxvwMHSgmtL4gOyz4c4yIskntJzb5lZ9K+4X1 KoFsbpv8FxLCPedUdlZ+2E0JGPSVzZ8PoR7IqiVpYtzJZ8XBp3yylP7pjIu1feuI g59ZG1AH9N32LgeX1pkEAiXUpOxhEVQMOjDYqRmpLcXtDi/FTYY7jQK3nGKgbxyK uLkUH709MjYPxXxL8EjZYnFS1u74enCu -----END CERTIFICATE-----Generated at Wed May 7 22:10:48 2025 by rpki-client