$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft File: SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json) Hash identifier: B3iTB43b54CFE2RP+mFcpr+Ni/734QeEvIZO0vaJB5c= Subject key identifier: 2A:B7:73:10:2E:EA:1E:6A:3C:D1:20:5A:00:22:D2:2F:D7:0D:B5:08 Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E Certificate issuer: /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Certificate serial: 06D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft Manifest number: 06CC Signing time: Thu 24 Apr 2025 21:51:01 +0000 Manifest this update: Thu 24 Apr 2025 21:51:00 +0000 Manifest next update: Thu 01 May 2025 21:51:00 +0000 Files and hashes: 1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: 9vMB4JnHNb7i7MjcxeWmtJxqLVf8c/TpRo4kuvUiMCA=) 2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: xRXc4Qynp20VBH0uvYkKK7b4+52BnXGj7roDL8ZzWEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Validity Not Before: Apr 24 21:51:00 2025 GMT Not After : May 1 21:51:00 2025 GMT Subject: CN=680ab244-0ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:7b:e7:2b:89:fd:0f:0a:91:82:13:ee:86: 17:86:f4:a2:7d:3d:aa:63:f3:9a:92:ab:51:f5:38: 77:72:9d:9c:26:f1:c1:c6:cc:20:d2:de:51:59:49: 4a:74:6e:82:1e:3a:e9:ab:c0:22:ef:c4:e1:68:d7: 42:6f:fa:48:e1:ba:72:a8:7b:f8:21:29:69:94:f2: 78:bd:bf:91:99:d3:af:bd:02:4c:dc:8f:3b:0e:b9: 0c:9b:ac:ce:f4:24:d6:d1:c6:7a:09:83:97:34:34: c5:9a:b9:66:8c:77:77:06:96:29:91:0a:69:ac:cb: cc:29:92:f2:31:ab:87:d2:e0:18:26:ac:cc:e6:d0: e1:0e:a6:62:9f:63:f5:b6:eb:52:7b:ce:07:16:58: 02:6a:e9:9d:8e:16:18:4d:ce:e2:22:4e:79:29:7d: 13:00:c5:b8:ac:c4:ea:27:e0:07:80:83:0f:58:bc: 59:7c:d0:a9:e8:12:0a:b7:37:83:ed:67:bf:c6:1e: 7a:b5:e8:44:e9:2a:b1:64:ce:54:64:48:b5:73:01: 42:80:6c:28:0a:96:7b:9b:ff:cc:a9:14:e8:56:37: 10:42:e3:65:ab:c5:73:cb:eb:b1:0e:39:4a:4a:49: d0:e9:28:eb:ba:95:23:7c:c2:45:5a:39:01:9e:03: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B7:73:10:2E:EA:1E:6A:3C:D1:20:5A:00:22:D2:2F:D7:0D:B5:08 X509v3 Authority Key Identifier: keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:00:20:99:a6:88:f2:60:14:13:b3:e0:b4:c5:62:f6:a9:eb: 30:20:0b:dd:8e:c7:17:97:be:4e:29:b2:b6:ba:a3:3d:06:aa: 6a:de:63:ba:72:3a:ae:7b:6e:93:37:33:f0:d1:0e:2e:69:cd: 52:b7:ce:f0:60:da:2b:aa:60:6c:4a:1a:f9:35:bd:91:74:ac: 91:08:f1:26:9f:fa:a1:96:95:83:c9:5b:df:4f:aa:26:39:33: 03:81:a4:21:65:5d:86:62:53:42:21:e4:f8:8d:01:96:30:41: d8:45:b7:ed:ab:ba:00:b8:7d:ae:93:a9:c1:08:51:eb:cf:7f: 47:ca:45:a0:ca:ec:78:5d:37:7f:f5:bf:ad:fc:e0:7d:3a:c5: 49:d6:94:23:c7:38:95:8f:fa:e7:7f:f0:d2:ca:9d:35:c8:67: d0:82:ed:70:1e:e7:cf:a8:29:7b:b3:06:15:41:43:a9:86:09: 3a:54:5e:92:22:b9:dc:7d:a8:ee:c2:43:10:5c:eb:ca:a6:ad: b3:31:76:2d:b9:e2:02:49:c6:c3:b9:de:d2:d4:53:d2:bf:be: 3e:88:a8:64:7f:df:88:e1:dd:1d:d9:1f:60:ec:70:19:97:fc: be:13:ac:da:0b:a0:21:df:aa:73:76:8a:9e:84:76:c5:9d:d8: 0e:7b:ab:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QyMjgxMTAvBgNVBAUTKDQ4RTkwQjczQjQ5RkEzQURGNUVDOTFBNUNDRDIzREFE MzVEM0M0OEUwHhcNMjUwNDI0MjE1MTAwWhcNMjUwNTAxMjE1MTAwWjAYMRYwFAYD VQQDEw02ODBhYjI0NC0wZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumB75yuJ/Q8KkYIT7oYXhvSifT2qY/OakqtR9Th3cp2cJvHBxswg0t5RWUlK dG6CHjrpq8Ai78ThaNdCb/pI4bpyqHv4ISlplPJ4vb+RmdOvvQJM3I87DrkMm6zO 9CTW0cZ6CYOXNDTFmrlmjHd3BpYpkQpprMvMKZLyMauH0uAYJqzM5tDhDqZin2P1 tutSe84HFlgCaumdjhYYTc7iIk55KX0TAMW4rMTqJ+AHgIMPWLxZfNCp6BIKtzeD 7We/xh56tehE6SqxZM5UZEi1cwFCgGwoCpZ7m//MqRToVjcQQuNlq8Vzy+uxDjlK SknQ6SjrupUjfMJFWjkBngNr7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCq3cxAu 6h5qPNEgWgAi0i/XDbUIMB8GA1UdIwQYMBaAFEjpC3O0n6Ot9eyRpczSPa0108SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDIyOC82QjREMkRBODUw QUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82MzE3Skdsek5JOXJUWFR4 STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPa0xjN1NmbzYzMTdKR2x6Tkk5clRYVHhJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDIyOC82QjREMkRBODUwQUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82 MzE3Skdsek5JOXJUWFR4STQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlACCZpojyYBQTs+C0xWL2qeswIAvdjscXl75OKbK2uqM9Bqpq3mO6 cjque26TNzPw0Q4uac1St87wYNorqmBsShr5Nb2RdKyRCPEmn/qhlpWDyVvfT6om OTMDgaQhZV2GYlNCIeT4jQGWMEHYRbftq7oAuH2uk6nBCFHrz39HykWgyux4XTd/ 9b+t/OB9OsVJ1pQjxziVj/rnf/DSyp01yGfQgu1wHufPqCl7swYVQUOphgk6VF6S IrncfajuwkMQXOvKpq2zMXYtueICScbDud7S1FPSv74+iKhkf9+I4d0d2R9g7HAZ l/y+E6zaC6Ah36pzdoqehHbFndgOe6ur -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:44 2025 by rpki-client