$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft File: sG-Cllr-46vaGzofLWAX4AcnjOU.mft (raw, json) Hash identifier: 8qrR9y9/citp4XZeVaGSF2gJLZ1l8BsrdwTB6uXpE9k= Subject key identifier: B0:EC:24:57:E9:24:94:32:F8:9A:28:E6:24:FB:82:8B:B2:46:BF:CA Authority key identifier: B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5 Certificate issuer: /CN=A91557F5/serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5 Certificate serial: 06C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft Manifest number: 06B8 Signing time: Thu 24 Apr 2025 21:57:42 +0000 Manifest this update: Thu 24 Apr 2025 21:57:42 +0000 Manifest next update: Thu 01 May 2025 21:57:42 +0000 Files and hashes: 1: sG-Cllr-46vaGzofLWAX4AcnjOU.crl (hash: hrEZ9OBbnHRs0s3lJ3gtUbKi/UupUGtxFQBaQ0b6MQ4=) 2: 97D3AF84DCC611EDB75B695EC4F9AE02.roa (hash: rRipsWIPpFCqvwU6GU8CPWQ7Gw24E8Icdhb0XLzQIeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1728 (0x6c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F5, serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5 Validity Not Before: Apr 24 21:57:42 2025 GMT Not After : May 1 21:57:42 2025 GMT Subject: CN=680ab3d6-284b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:e9:a0:6a:f3:c2:6b:7d:55:c4:bf:a3:f8: 72:a6:4b:44:e3:fd:e8:d7:2d:0f:e3:6d:fc:43:17: dc:20:bc:8c:46:ae:a9:67:ab:22:a4:1a:28:85:d0: a8:19:d3:52:ca:26:af:fa:88:d3:c0:da:0f:79:4f: 5d:a6:20:1b:63:2d:b9:37:8d:0c:c0:33:dc:ee:4b: 58:5f:7b:74:e2:b4:98:79:2c:37:d7:db:42:c1:f0: c9:e8:c7:25:b8:66:7b:c0:5d:bd:d3:fd:7f:14:c1: 8f:d8:1d:88:fd:94:02:a8:21:c0:be:1a:82:b6:10: 33:51:78:ad:22:bf:17:4f:76:63:2f:93:24:56:ed: 50:31:c0:9e:e1:97:42:e8:d9:5d:dc:ae:ad:5b:b0: 98:33:7d:23:75:de:5c:74:4c:87:00:17:4a:ef:3c: 31:50:8b:f3:ae:ca:dc:15:d2:57:2c:b2:46:77:4b: e9:6a:9f:29:d2:94:a0:7d:66:ca:ed:94:f6:3f:8c: 2b:3c:74:b4:e3:d8:d4:9c:32:76:55:da:b7:31:03: db:a5:29:a6:c6:1b:5a:98:5a:f8:00:c1:ac:bf:6a: cd:d2:a7:f3:4f:45:8b:7b:88:e8:9b:61:af:50:89: 93:e8:3a:af:5c:83:7e:9d:f9:9a:10:14:8f:08:96: 71:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EC:24:57:E9:24:94:32:F8:9A:28:E6:24:FB:82:8B:B2:46:BF:CA X509v3 Authority Key Identifier: keyid:B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ec:39:b9:09:fb:83:95:7a:f0:9c:45:f4:0a:42:05:9c:1f: dd:c7:36:6c:7b:52:0f:8f:5e:20:26:61:99:27:0b:01:9e:85: 0b:ea:71:7e:3b:96:64:5c:d1:db:41:36:ac:45:16:b6:fe:e1: 47:19:63:f9:04:21:27:2b:64:a3:20:ae:ab:19:58:64:07:5a: 2b:0e:df:e8:1f:03:12:a7:e3:03:35:7d:a6:f8:f3:47:fd:df: 12:88:65:29:22:30:32:88:77:d9:64:2e:4a:f2:f6:16:f4:d6: 04:7d:71:9d:91:d5:c4:e4:f1:ac:41:f3:e0:3d:a6:97:e0:08: f6:9c:3b:7c:39:9b:93:52:31:5d:21:b5:76:01:8d:60:0c:cb: 7a:8c:af:99:ea:1a:bc:2d:00:04:6b:25:3d:fd:66:65:65:93: 59:63:03:e0:59:e6:00:4b:d6:93:f5:86:92:24:1b:08:a2:99: 5e:22:ad:77:16:2f:61:c9:20:94:ef:9c:b4:8d:d3:b6:4e:a4: ac:d5:6f:df:cb:6b:7e:43:be:54:72:9b:28:d5:b7:d0:ed:9c: 33:f4:05:c3:8a:3b:c5:68:60:5c:34:51:03:2a:46:04:b3:88: 84:47:c4:8d:3b:84:b8:fe:fa:90:bc:b1:1d:e2:46:2c:51:cb: 41:6b:34:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjUxMTAvBgNVBAUTKEIwNkY4Mjk2NUFGRUUzQUJEQTFCM0ExRjJENjAxN0Uw MDcyNzhDRTUwHhcNMjUwNDI0MjE1NzQyWhcNMjUwNTAxMjE1NzQyWjAYMRYwFAYD VQQDEw02ODBhYjNkNi0yODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnXpoGrzwmt9VcS/o/hypktE4/3o1y0P4238QxfcILyMRq6pZ6sipBoohdCo GdNSyiav+ojTwNoPeU9dpiAbYy25N40MwDPc7ktYX3t04rSYeSw319tCwfDJ6Mcl uGZ7wF290/1/FMGP2B2I/ZQCqCHAvhqCthAzUXitIr8XT3ZjL5MkVu1QMcCe4ZdC 6Nld3K6tW7CYM30jdd5cdEyHABdK7zwxUIvzrsrcFdJXLLJGd0vpap8p0pSgfWbK 7ZT2P4wrPHS049jUnDJ2Vdq3MQPbpSmmxhtamFr4AMGsv2rN0qfzT0WLe4jom2Gv UImT6DqvXIN+nfmaEBSPCJZxJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDsJFfp JJQy+Joo5iT7gouyRr/KMB8GA1UdIwQYMBaAFLBvgpZa/uOr2hs6Hy1gF+AHJ4zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGNS9FQzQwNUUxNjVD NkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2dmFHem9mTFdBWDRBY25q T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHLUNsbHItNDZ2YUd6b2ZMV0FYNEFjbmpPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGNS9FQzQwNUUxNjVDNkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2 dmFHem9mTFdBWDRBY25qT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA67Dm5CfuDlXrwnEX0CkIFnB/dxzZse1IPj14gJmGZJwsBnoUL6nF+ O5ZkXNHbQTasRRa2/uFHGWP5BCEnK2SjIK6rGVhkB1orDt/oHwMSp+MDNX2m+PNH /d8SiGUpIjAyiHfZZC5K8vYW9NYEfXGdkdXE5PGsQfPgPaaX4Aj2nDt8OZuTUjFd IbV2AY1gDMt6jK+Z6hq8LQAEayU9/WZlZZNZYwPgWeYAS9aT9YaSJBsIopleIq13 Fi9hySCU75y0jdO2TqSs1W/fy2t+Q75Ucpso1bfQ7Zwz9AXDijvFaGBcNFEDKkYE s4iER8SNO4S4/vqQvLEd4kYsUctBazT3 -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:43 2025 by rpki-client