$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json) Hash identifier: iBOMLisAKxuobxFPF4ky97zWXJ3CWdPk6YM26q3fRPE= Subject key identifier: 0B:4F:E1:CA:36:4F:4F:B3:00:D9:B5:80:38:5A:BC:16:68:F7:3C:C3 Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Certificate serial: 05B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft Manifest number: 0587 Signing time: Mon 12 May 2025 23:11:45 +0000 Manifest this update: Mon 12 May 2025 23:11:44 +0000 Manifest next update: Mon 19 May 2025 23:11:44 +0000 Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: 6PhZb0Te+PeHzugLMr18XO3HqoFTToKnYu55SNNJ5m4=) 2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: PVnENrYeIS4iiFtrLcFEnNW4yBRsfLOD9D/GbgEuWKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Validity Not Before: May 12 23:11:44 2025 GMT Not After : May 19 23:11:44 2025 GMT Subject: CN=68228031-6e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:b7:e1:69:e3:04:bb:8e:26:07:6e:e2:0b: 07:b1:64:0c:94:b2:95:5d:a1:ea:4c:c2:3f:cb:67: ec:96:75:27:15:04:8a:ce:86:e4:a8:c5:2b:b5:d3: 67:bb:ab:e5:23:44:e3:94:c1:b8:6f:d3:c6:be:7d: 2d:72:b7:6f:30:02:3a:46:c0:ed:6e:da:69:2c:db: 5b:13:13:2a:f3:20:3b:1f:75:1e:2b:46:c4:dc:60: be:1e:e7:14:c5:4f:61:f7:52:35:2f:88:af:39:fc: a4:84:de:00:0b:b5:13:d4:20:e7:a6:22:b0:d5:db: fd:ca:d7:92:4c:c1:48:88:b7:9c:af:70:c9:4e:39: 5a:7b:1a:bc:52:91:07:09:0c:fc:cd:c1:9a:06:b2: 8b:07:8a:b1:28:f7:a9:cd:06:f4:b9:76:5a:75:56: bd:ad:d8:3b:a1:84:08:4e:8e:33:50:84:65:43:ae: f7:a0:7b:22:4e:87:30:66:d1:c1:23:98:a6:4e:a0: e0:cc:ba:90:06:f9:5a:ce:40:c9:b4:39:91:4d:fd: 5b:22:c3:7f:6a:10:2b:95:3b:b8:9c:82:5d:73:98: 09:12:51:f2:43:c2:e2:9f:f2:f4:f2:50:9f:fa:bf: 28:3a:21:98:81:bf:b7:4b:bd:85:9f:08:6d:24:a0: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4F:E1:CA:36:4F:4F:B3:00:D9:B5:80:38:5A:BC:16:68:F7:3C:C3 X509v3 Authority Key Identifier: keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:fc:83:3c:5c:cb:29:cf:a6:3d:e0:f0:3c:73:3c:5a:c2:05: 68:b8:ae:43:1e:96:93:21:26:0e:0a:fd:3c:67:d8:af:f3:bd: 48:ca:34:fa:c4:46:67:12:91:6f:0e:e6:23:a8:1e:e5:55:7d: 75:67:cd:2c:ce:0b:00:fd:8a:c7:96:23:ce:88:38:e1:92:19: 5e:33:3b:e1:e4:20:ee:ca:40:ff:01:b3:1f:40:70:20:03:92: 26:3d:26:9a:52:b9:72:11:d5:0c:f4:e1:7a:a6:f4:d5:a1:ab: 4f:71:20:ee:4a:23:83:28:7b:e6:40:77:48:9a:8e:b0:36:4d: cd:f2:d8:52:f0:4a:51:7f:a4:ed:76:5f:01:34:29:ae:4b:4e: 9f:75:c8:92:8a:c3:e9:81:a0:81:79:2e:2a:b9:21:40:5f:0e: 49:0d:e7:62:52:88:46:68:f8:7d:df:33:04:db:53:ef:46:47: 97:8d:24:c9:18:f2:4b:8c:44:b1:d1:0a:fe:85:00:35:01:07: 98:bf:db:d0:95:13:65:f6:5e:16:67:b6:e9:be:9b:9a:7d:91: 52:a5:27:a0:3a:3e:5c:8b:23:21:84:54:d2:02:81:17:c3:0c: dc:80:d9:2d:ab:d5:47:f9:07:1c:4b:37:2a:82:bd:a1:7e:ae: 31:c4:95:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw MzAzRDcxQzkwHhcNMjUwNTEyMjMxMTQ0WhcNMjUwNTE5MjMxMTQ0WjAYMRYwFAYD VQQDEw02ODIyODAzMS02ZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4G34WnjBLuOJgdu4gsHsWQMlLKVXaHqTMI/y2fslnUnFQSKzobkqMUrtdNn u6vlI0TjlMG4b9PGvn0tcrdvMAI6RsDtbtppLNtbExMq8yA7H3UeK0bE3GC+HucU xU9h91I1L4ivOfykhN4AC7UT1CDnpiKw1dv9yteSTMFIiLecr3DJTjlaexq8UpEH CQz8zcGaBrKLB4qxKPepzQb0uXZadVa9rdg7oYQITo4zUIRlQ673oHsiTocwZtHB I5imTqDgzLqQBvlazkDJtDmRTf1bIsN/ahArlTu4nIJdc5gJElHyQ8Lin/L08lCf +r8oOiGYgb+3S72FnwhtJKDRjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtP4co2 T0+zANm1gDhavBZo9zzDMB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls SHVZSFFlTGhud1lEQTljY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1/IM8XMspz6Y94PA8czxawgVouK5DHpaTISYOCv08Z9iv871IyjT6 xEZnEpFvDuYjqB7lVX11Z80szgsA/YrHliPOiDjhkhleMzvh5CDuykD/AbMfQHAg A5ImPSaaUrlyEdUM9OF6pvTVoatPcSDuSiODKHvmQHdImo6wNk3N8thS8EpRf6Tt dl8BNCmuS06fdciSisPpgaCBeS4quSFAXw5JDediUohGaPh93zME21PvRkeXjSTJ GPJLjESx0Qr+hQA1AQeYv9vQlRNl9l4WZ7bpvpuafZFSpSegOj5ciyMhhFTSAoEX wwzcgNktq9VH+QccSzcqgr2hfq4xxJV1 -----END CERTIFICATE-----Generated at Wed May 14 20:53:08 2025 by rpki-client