$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json) Hash identifier: 2Yso8EFGf6bmygVLZKsG/IdzHb3SuzBmHzT+jieKq5U= Subject key identifier: 1C:1A:2D:19:A9:B5:18:86:B9:35:94:1A:8A:C1:70:D3:AB:85:2C:DA Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft Manifest number: B8 Signing time: Fri 25 Apr 2025 04:59:35 +0000 Manifest this update: Fri 25 Apr 2025 04:59:35 +0000 Manifest next update: Fri 02 May 2025 04:59:35 +0000 Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: 6O1Uaiqsc/HXRYlmaAcHkCoxpLbCeQ+207yXptgnemM=) 2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: yRSzHrzurf6XSOu6xC9tCIXU5IVd5pxNWSd3g3cqSyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: Apr 25 04:59:35 2025 GMT Not After : May 2 04:59:35 2025 GMT Subject: CN=680b16b7-cbc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:c3:c3:de:0d:22:35:6e:c6:d4:3f:4a:34: ec:a0:fd:ac:25:3d:24:fe:87:33:34:25:0d:69:eb: 8e:9a:ce:cc:42:00:b1:43:79:97:0c:c8:ea:62:06: 7d:95:c4:39:80:39:05:27:bc:5b:42:ef:0a:59:39: 25:84:cc:e5:44:9e:f6:d4:b6:af:b9:db:eb:74:97: f2:be:e1:d6:53:9f:42:ca:b9:95:86:e7:8a:03:9e: 36:23:e7:f1:29:9b:bc:60:c0:5e:da:2a:5b:2c:5c: 99:1d:50:97:42:6c:12:c1:04:50:15:a2:1f:e4:f0: 86:78:68:09:b2:58:1a:25:25:d1:ab:ec:16:b0:0b: e0:6c:11:4a:42:3f:24:9c:1c:9f:04:9a:40:4a:7b: ac:be:a9:4a:87:2a:84:ab:91:d4:10:6d:e0:bf:c4: 3b:05:63:9c:1a:85:18:60:f9:39:c7:27:7b:4b:df: b6:73:5f:2d:8e:64:75:78:b8:7a:4a:04:4a:24:da: 74:95:c6:94:97:2f:8e:86:c4:eb:e2:33:ea:e3:8e: 4d:53:56:8a:b7:6d:1f:20:aa:e3:d3:66:08:bb:40: b6:01:9c:ea:75:e8:96:d5:d6:a2:0f:97:90:3a:53: 0b:fe:f2:ef:dc:96:ea:7e:68:e9:ba:9a:6c:fc:8b: 29:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1A:2D:19:A9:B5:18:86:B9:35:94:1A:8A:C1:70:D3:AB:85:2C:DA X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:99:12:6b:09:2c:c7:29:3a:f4:0d:dd:a2:33:1a:ca:8f:58: 6b:35:45:96:0f:90:95:62:4f:ce:9d:1c:93:0f:31:2c:bd:91: e1:e8:18:99:5b:bb:e7:60:a3:24:f0:31:ec:52:e5:ea:9d:1a: fc:91:b8:dc:fb:e5:03:81:f0:eb:30:ce:33:1a:e7:8a:a4:f3: 36:aa:4c:72:73:f1:72:fe:bc:68:9f:9b:9c:c5:27:2c:60:3a: d6:a2:e3:62:16:6d:c0:4d:8b:1f:9b:4c:1a:2a:ce:3c:58:aa: 88:22:af:54:c8:88:d6:b3:e9:b5:09:3c:42:a6:2d:53:0a:0c: df:1c:8a:62:82:d4:e1:4e:da:37:ba:34:98:79:91:af:5b:86: ec:fd:63:9e:d5:26:3b:24:66:5b:8a:71:69:52:a4:94:88:bb: 8b:a8:d1:a9:bc:f9:a8:8b:a3:52:33:25:56:18:78:c8:87:e0: f6:08:89:35:f6:bf:fc:9c:8c:f7:2a:e3:4d:8f:cf:2e:d2:45: 3f:2c:4b:a4:67:e4:d5:72:77:7a:2b:5a:cb:32:f2:e9:38:39: 6b:04:18:53:21:84:75:d4:d6:3e:e0:14:01:f2:bc:35:7d:16: 18:51:c4:b4:da:f9:63:45:a8:91:63:f4:93:cd:88:72:fd:0e: aa:48:eb:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1 Mjg4NjM4MTEwHhcNMjUwNDI1MDQ1OTM1WhcNMjUwNTAyMDQ1OTM1WjAYMRYwFAYD VQQDEw02ODBiMTZiNy1jYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJvDw94NIjVuxtQ/SjTsoP2sJT0k/oczNCUNaeuOms7MQgCxQ3mXDMjqYgZ9 lcQ5gDkFJ7xbQu8KWTklhMzlRJ721LavudvrdJfyvuHWU59CyrmVhueKA542I+fx KZu8YMBe2ipbLFyZHVCXQmwSwQRQFaIf5PCGeGgJslgaJSXRq+wWsAvgbBFKQj8k nByfBJpASnusvqlKhyqEq5HUEG3gv8Q7BWOcGoUYYPk5xyd7S9+2c18tjmR1eLh6 SgRKJNp0lcaUly+OhsTr4jPq445NU1aKt20fIKrj02YIu0C2AZzqdeiW1daiD5eQ OlML/vLv3Jbqfmjpupps/IspQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwaLRmp tRiGuTWUGorBcNOrhSzaMB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUyQi9GODM2QkRFQzBDRUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURf WnJmeDVNa1AtWWRTaUdPQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDmRJrCSzHKTr0Dd2iMxrKj1hrNUWWD5CVYk/OnRyTDzEsvZHh6BiZ W7vnYKMk8DHsUuXqnRr8kbjc++UDgfDrMM4zGueKpPM2qkxyc/Fy/rxon5ucxScs YDrWouNiFm3ATYsfm0waKs48WKqIIq9UyIjWs+m1CTxCpi1TCgzfHIpigtThTto3 ujSYeZGvW4bs/WOe1SY7JGZbinFpUqSUiLuLqNGpvPmoi6NSMyVWGHjIh+D2CIk1 9r/8nIz3KuNNj88u0kU/LEukZ+TVcnd6K1rLMvLpODlrBBhTIYR11NY+4BQB8rw1 fRYYUcS02vljRaiRY/STzYhy/Q6qSOvd -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:39 2025 by rpki-client