$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json) Hash identifier: UWVpcXdYTztefsJ5+zbCn+msR6GXx74/EoLsErEIHW4= Subject key identifier: B4:85:0B:D9:1F:47:DD:94:53:94:84:85:20:4A:EC:B3:E1:BE:4B:E6 Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft Manifest number: 0573 Signing time: Wed 02 Apr 2025 23:28:41 +0000 Manifest this update: Wed 02 Apr 2025 23:28:40 +0000 Manifest next update: Wed 09 Apr 2025 23:28:40 +0000 Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: AScTSLIokMqyDkkmcqokimKKPXSFvZOr1wQA5bgR9oM=) 2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: PVnENrYeIS4iiFtrLcFEnNW4yBRsfLOD9D/GbgEuWKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF04 Validity Not Before: Apr 2 23:28:40 2025 GMT Not After : Apr 9 23:28:40 2025 GMT Subject: CN=67edc829-5241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:d8:c3:13:73:60:72:08:69:72:40:ef:09: 59:ef:a8:ab:5a:2a:51:f7:86:7a:2a:6b:9d:98:88: eb:62:b5:80:a8:47:55:90:a3:b4:d7:28:ee:70:ca: d2:29:d2:e0:61:1e:11:d4:ee:cf:49:fd:de:e3:32: 09:42:4f:96:4c:ee:40:a9:e8:10:9b:e1:a3:47:32: 28:b9:38:61:aa:9f:e4:59:49:cf:83:da:83:cb:68: 18:08:4c:e9:c3:67:19:b2:c6:c4:4c:95:a1:89:3e: 05:bf:3f:65:8e:98:21:a0:df:3b:17:67:11:61:d2: c2:12:f0:2e:dd:ba:d1:56:93:03:28:b9:25:b6:59: 45:6d:ea:b7:d7:79:b8:e3:c8:c9:e8:26:28:94:54: 38:9c:af:9c:26:a5:9f:79:2e:08:84:26:62:20:6b: 74:39:0d:fb:a1:bc:fd:c8:d2:17:47:41:1d:cd:63: fd:d4:3a:00:95:34:0e:44:69:91:62:87:47:4c:de: 65:bc:7a:20:25:25:a9:22:93:bf:f4:2a:2a:99:09: 20:14:ae:1d:d2:34:8e:09:b7:34:c1:01:ee:dc:0d: c7:85:d1:1e:3a:e3:52:1a:ae:30:ee:6c:5c:a9:5c: 8f:40:76:fa:9b:ec:68:08:ce:ba:e4:b8:fa:46:9b: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:0B:D9:1F:47:DD:94:53:94:84:85:20:4A:EC:B3:E1:BE:4B:E6 X509v3 Authority Key Identifier: keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3c:b4:ee:6d:bc:2d:64:b9:dc:40:77:31:aa:72:b2:98:a3: 3d:50:a9:51:a8:b9:f2:10:27:cb:ed:a9:d7:f9:ab:c1:f1:ee: fc:d8:15:26:ed:66:00:85:c0:b9:cb:e9:42:9d:f2:85:8d:ab: ca:02:b4:5b:d2:b7:98:9a:e1:49:1b:61:cd:d9:54:e3:7c:eb: 75:85:a8:d8:a6:c1:4a:31:8a:6a:d4:fc:87:1d:05:6d:c7:07: 43:cc:4f:b1:13:8b:e9:19:c4:f7:bb:18:4f:ad:5d:92:4d:2b: c0:93:ac:e6:8f:4e:05:ba:84:ec:fd:ba:a9:70:95:a3:33:8b: 05:7b:1e:37:b3:d3:b0:e9:57:6e:14:ee:13:cc:7e:09:4c:2a: 03:71:55:38:d4:0e:31:d9:98:d1:fd:f4:20:ea:13:7e:02:fd: 89:26:7f:e3:b0:83:45:f9:ac:14:04:82:d8:8a:c3:4b:b4:51: 5a:b6:27:01:fd:c6:91:98:87:30:f8:86:61:3a:99:63:d8:f5: 2b:d5:32:8d:7d:94:4a:9c:8a:a1:3c:2d:df:d2:ff:d9:c2:0a: b6:a4:99:13:36:64:1d:14:09:44:d1:e6:61:38:7f:6a:de:80: f8:84:1d:08:bb:9a:b1:0c:ca:69:64:38:d1:a8:48:86:61:33: 19:63:f8:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw MzAzRDcxQzkwHhcNMjUwNDAyMjMyODQwWhcNMjUwNDA5MjMyODQwWjAYMRYwFAYD VQQDEw02N2VkYzgyOS01MjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttjYwxNzYHIIaXJA7wlZ76irWipR94Z6KmudmIjrYrWAqEdVkKO01yjucMrS KdLgYR4R1O7PSf3e4zIJQk+WTO5AqegQm+GjRzIouThhqp/kWUnPg9qDy2gYCEzp w2cZssbETJWhiT4Fvz9ljpghoN87F2cRYdLCEvAu3brRVpMDKLkltllFbeq313m4 48jJ6CYolFQ4nK+cJqWfeS4IhCZiIGt0OQ37obz9yNIXR0EdzWP91DoAlTQORGmR YodHTN5lvHogJSWpIpO/9CoqmQkgFK4d0jSOCbc0wQHu3A3HhdEeOuNSGq4w7mxc qVyPQHb6m+xoCM665Lj6Rpt2nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSFC9kf R92UU5SEhSBK7LPhvkvmMB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls SHVZSFFlTGhud1lEQTljY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcPLTubbwtZLncQHcxqnKymKM9UKlRqLnyECfL7anX+avB8e782BUm 7WYAhcC5y+lCnfKFjavKArRb0reYmuFJG2HN2VTjfOt1hajYpsFKMYpq1PyHHQVt xwdDzE+xE4vpGcT3uxhPrV2STSvAk6zmj04FuoTs/bqpcJWjM4sFex43s9Ow6Vdu FO4TzH4JTCoDcVU41A4x2ZjR/fQg6hN+Av2JJn/jsINF+awUBILYisNLtFFaticB /caRmIcw+IZhOplj2PUr1TKNfZRKnIqhPC3f0v/Zwgq2pJkTNmQdFAlE0eZhOH9q 3oD4hB0Iu5qxDMppZDjRqEiGYTMZY/iC -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:38 2025 by rpki-client