$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: tbVTdbNNKwfxjFQoR4XBklIPjULqrEfhbG098VSqJVE= Subject key identifier: 9B:BD:3C:C2:9A:6E:B2:A6:30:1A:FF:04:FC:1F:62:E4:DB:67:A0:B4 Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 089C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 089B Signing time: Thu 24 Apr 2025 20:24:58 +0000 Manifest this update: Thu 24 Apr 2025 20:24:57 +0000 Manifest next update: Thu 01 May 2025 20:24:57 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: L1TE1h9rNffk0bWNpirLrTjyfjevAz6H4WoiwIKQuGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204 (0x89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Apr 24 20:24:57 2025 GMT Not After : May 1 20:24:57 2025 GMT Subject: CN=680a9e1a-fb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:6c:a1:23:21:b6:4e:27:c9:70:79:c3:7b: cb:c9:3f:33:b0:fc:13:94:57:a0:61:70:f8:e5:14: 86:fb:27:ec:7b:c7:5e:d9:7a:15:ff:d6:7b:b6:7d: a8:f4:1e:3c:f3:4c:39:9e:6d:0d:d8:80:4a:d5:3a: 9d:a0:e2:56:8e:96:d4:4d:c9:28:d6:d9:67:c8:28: d4:8c:f2:73:b7:e4:c9:42:03:d2:6a:97:c6:89:a0: 96:7f:5d:51:dd:48:dc:4d:2f:f3:a1:f1:9d:26:26: 44:fa:f7:51:54:3f:9b:f5:65:19:ba:bb:50:de:5e: 27:f1:97:98:94:9b:6e:81:d5:97:b3:ef:a4:12:40: b5:80:aa:39:f0:c4:83:41:d1:fd:e1:05:f2:1c:82: aa:f4:d3:89:b9:8d:78:37:69:60:41:29:1b:c2:ff: f2:1b:ad:33:71:71:d9:9d:51:5d:6f:d6:2a:90:1c: 0d:e5:61:aa:00:0f:5a:9e:cf:6a:ee:52:42:5f:64: ed:1a:5d:6d:78:54:1f:3b:4c:93:c9:cd:38:9b:0f: 7a:33:93:ef:c8:da:a9:b2:35:c1:a4:0a:8b:bf:e6: c4:02:b2:eb:c0:d1:08:81:08:5e:18:97:5c:65:43: d3:c1:a0:39:b5:da:49:0b:74:18:08:bb:1f:82:b1: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BD:3C:C2:9A:6E:B2:A6:30:1A:FF:04:FC:1F:62:E4:DB:67:A0:B4 X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:61:a8:dc:f6:cb:c7:13:8a:cd:21:dc:6c:c9:ef:28:69:57: 06:e6:9c:ca:0b:0e:fd:c4:f2:60:4d:4c:c1:f4:99:c8:2b:a7: 16:97:b5:44:fe:88:d4:47:5f:a1:c7:c0:16:9d:23:f0:3e:13: c8:08:6e:73:0d:9c:1e:34:93:86:96:cf:74:e0:31:0b:c6:c2: db:ff:b4:96:c2:00:3c:92:37:a7:f2:db:a2:cb:78:f4:d0:30: 81:47:e1:19:3c:ed:7c:f9:b6:a6:38:e9:10:b7:50:37:4d:15: f9:58:de:d8:76:91:13:e8:af:47:97:ce:11:5a:97:d3:93:bd: 56:f6:af:48:16:10:a2:db:22:51:13:30:e2:88:82:67:ca:62: 60:ef:04:3d:fb:59:5a:9c:20:2d:20:9d:e7:43:28:6c:58:35: 5e:e0:30:4d:15:60:5e:4a:04:11:40:6a:59:a4:5e:7d:26:55: 4e:9a:67:39:86:32:e3:44:fa:da:d8:a0:5e:a4:b0:53:aa:dc: 79:94:51:80:63:94:47:6a:a3:8e:e5:8f:26:9d:9b:21:46:07: 39:61:58:3c:c4:bb:d8:0f:dc:33:aa:72:0b:4c:82:72:db:5e: 5b:8e:d9:c2:84:98:8f:45:a4:c0:f0:2c:d5:7b:3e:f2:5a:9e: 3f:80:dc:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUwNDI0MjAyNDU3WhcNMjUwNTAxMjAyNDU3WjAYMRYwFAYD VQQDEw02ODBhOWUxYS1mYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1y5soSMhtk4nyXB5w3vLyT8zsPwTlFegYXD45RSG+yfse8de2XoV/9Z7tn2o 9B4880w5nm0N2IBK1TqdoOJWjpbUTcko1tlnyCjUjPJzt+TJQgPSapfGiaCWf11R 3UjcTS/zofGdJiZE+vdRVD+b9WUZurtQ3l4n8ZeYlJtugdWXs++kEkC1gKo58MSD QdH94QXyHIKq9NOJuY14N2lgQSkbwv/yG60zcXHZnVFdb9YqkBwN5WGqAA9ans9q 7lJCX2TtGl1teFQfO0yTyc04mw96M5PvyNqpsjXBpAqLv+bEArLrwNEIgQheGJdc ZUPTwaA5tdpJC3QYCLsfgrHDfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJu9PMKa brKmMBr/BPwfYuTbZ6C0MB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Yajc9svHE4rNIdxsye8oaVcG5pzKCw79xPJgTUzB9JnIK6cWl7VE /ojUR1+hx8AWnSPwPhPICG5zDZweNJOGls904DELxsLb/7SWwgA8kjen8tuiy3j0 0DCBR+EZPO18+bamOOkQt1A3TRX5WN7YdpET6K9Hl84RWpfTk71W9q9IFhCi2yJR EzDiiIJnymJg7wQ9+1lanCAtIJ3nQyhsWDVe4DBNFWBeSgQRQGpZpF59JlVOmmc5 hjLjRPra2KBepLBTqtx5lFGAY5RHaqOO5Y8mnZshRgc5YVg8xLvYD9wzqnILTIJy 215bjtnChJiPRaTA8CzVez7yWp4/gNzX -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:49 2025 by rpki-client