$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json) Hash identifier: wLZEeIBqVVh2CxS52bIT99pcp7ODdASUAhSXJ3/r3VI= Subject key identifier: 1E:0D:6A:E4:69:9D:67:64:57:D5:6D:6C:A3:9F:06:53:0E:1E:A8:E1 Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Certificate serial: 05B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft Manifest number: 058F Signing time: Fri 30 May 2025 23:35:13 +0000 Manifest this update: Fri 30 May 2025 23:35:12 +0000 Manifest next update: Fri 06 Jun 2025 23:35:12 +0000 Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: Iq2dvvoxtqoSZiqxeRhdNlOfMslYivf+KoeVHcZXIJs=) 2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: PVnENrYeIS4iiFtrLcFEnNW4yBRsfLOD9D/GbgEuWKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1465 (0x5b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Validity Not Before: May 30 23:35:12 2025 GMT Not After : Jun 6 23:35:12 2025 GMT Subject: CN=683a40b0-e78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:44:c2:6f:33:85:2c:7c:76:2e:c0:db:9a:1d: d6:e9:4a:bc:40:97:08:14:62:0b:ad:08:54:a4:44: d2:c7:8a:6b:50:a6:83:a3:01:56:fb:13:67:c1:b0: 01:3e:2a:be:bb:22:d1:3c:5b:27:9b:fc:9b:b3:8c: 85:23:6b:a8:51:4b:ec:af:74:0e:ce:f2:63:b7:3b: a8:f2:d0:04:e9:8b:f8:eb:1b:49:80:4a:db:b0:1c: 6c:bb:4b:6e:1f:38:03:78:95:ea:cc:bb:a0:d9:e9: 18:46:a4:66:b8:36:f7:4f:f5:07:af:8a:0a:1d:00: a3:91:c9:c1:af:2e:2e:f4:15:3e:05:29:8c:27:a9: 39:e7:aa:56:5a:f9:b1:97:50:c0:e9:01:55:83:94: 95:95:1c:4e:3f:0f:84:2f:21:8a:0e:08:62:99:be: 81:68:7e:f0:1d:3a:80:3e:d1:69:29:43:14:0a:6a: 12:03:b7:31:d5:85:70:a9:41:14:67:34:ff:92:b0: ba:db:84:33:5c:ca:50:8a:0d:75:dc:d7:73:7f:a9: 29:bf:ce:c6:12:1c:f1:28:34:a8:00:f8:fa:46:50: 4c:cb:2a:2f:49:0f:61:f8:ef:4f:2c:20:f9:d2:cf: 09:3a:c6:98:06:6e:4a:34:f7:5e:dc:01:b0:b6:f9: 4e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0D:6A:E4:69:9D:67:64:57:D5:6D:6C:A3:9F:06:53:0E:1E:A8:E1 X509v3 Authority Key Identifier: keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:4d:64:68:c3:08:d4:15:bd:74:75:d3:fe:82:ed:7b:17:31: 0a:de:2c:18:d5:f7:63:10:9f:a0:8c:b6:52:2b:2e:8e:fe:20: 90:bf:ab:f9:be:e4:c4:3a:db:90:e3:77:5c:e0:80:6b:41:01: cb:45:ff:6c:df:77:ca:42:8a:59:9e:8c:28:1c:47:37:e1:51: e8:7a:6e:19:ba:1d:e4:13:fa:ba:c5:d5:1c:03:5e:ce:78:b6: 9b:bc:a9:05:30:ee:66:8d:a3:57:5c:ec:dc:18:53:32:d2:93: 3b:21:d5:1b:ee:7a:7a:72:01:2d:97:ff:f4:6f:29:2e:78:b0: af:69:db:1e:a3:63:07:65:87:6e:ca:d1:b4:85:3b:18:1d:4f: 11:96:84:12:6f:32:60:a7:73:35:34:4f:fe:bd:2a:94:39:08: af:c3:f2:b6:3d:b3:d7:e5:79:20:6c:68:cc:08:50:6d:3b:30: ff:76:3e:22:69:09:b3:3a:ac:2b:39:01:28:7c:49:5e:74:86: f4:4f:44:0c:8e:ff:ec:ac:cb:23:68:41:0f:d1:66:9d:91:b4: 3a:f8:c9:d8:e1:28:0e:62:73:85:c6:0c:20:81:58:7e:2e:58: 6e:59:48:f6:ab:0c:da:55:ab:f2:31:ac:75:b7:cd:48:f0:5c: 30:14:9f:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw MzAzRDcxQzkwHhcNMjUwNTMwMjMzNTEyWhcNMjUwNjA2MjMzNTEyWjAYMRYwFAYD VQQDEw02ODNhNDBiMC1lNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0TCbzOFLHx2LsDbmh3W6Uq8QJcIFGILrQhUpETSx4prUKaDowFW+xNnwbAB Piq+uyLRPFsnm/ybs4yFI2uoUUvsr3QOzvJjtzuo8tAE6Yv46xtJgErbsBxsu0tu HzgDeJXqzLug2ekYRqRmuDb3T/UHr4oKHQCjkcnBry4u9BU+BSmMJ6k556pWWvmx l1DA6QFVg5SVlRxOPw+ELyGKDghimb6BaH7wHTqAPtFpKUMUCmoSA7cx1YVwqUEU ZzT/krC624QzXMpQig113Ndzf6kpv87GEhzxKDSoAPj6RlBMyyovSQ9h+O9PLCD5 0s8JOsaYBm5KNPde3AGwtvlO3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4NauRp nWdkV9VtbKOfBlMOHqjhMB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls SHVZSFFlTGhud1lEQTljY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDtTWRowwjUFb10ddP+gu17FzEK3iwY1fdjEJ+gjLZSKy6O/iCQv6v5 vuTEOtuQ43dc4IBrQQHLRf9s33fKQopZnowoHEc34VHoem4Zuh3kE/q6xdUcA17O eLabvKkFMO5mjaNXXOzcGFMy0pM7IdUb7np6cgEtl//0bykueLCvadseo2MHZYdu ytG0hTsYHU8RloQSbzJgp3M1NE/+vSqUOQivw/K2PbPX5XkgbGjMCFBtOzD/dj4i aQmzOqwrOQEofEledIb0T0QMjv/srMsjaEEP0WadkbQ6+MnY4SgOYnOFxgwggVh+ LlhuWUj2qwzaVavyMax1t81I8FwwFJ84 -----END CERTIFICATE-----Generated at Sat May 31 17:28:59 2025 by rpki-client