$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json) Hash identifier: o9nJhaYtibBX1Icpcy3vAeVPv9iqgRSmg4mwLsQJ+xA= Subject key identifier: 6B:D2:F6:32:1A:BE:8E:C1:5D:6E:AB:0C:2D:77:D4:C1:2E:CA:CC:3D Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 0AA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft Manifest number: 0A98 Signing time: Thu 24 Apr 2025 19:27:23 +0000 Manifest this update: Thu 24 Apr 2025 19:27:23 +0000 Manifest next update: Thu 01 May 2025 19:27:23 +0000 Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: torvLY3d117PyVPrSA9kg6Ox1kJSYwEU00F7tpL0T0s=) 2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: azG9+zsiLDhAUqM7p+rm2GUFPqeXgedKf8uLYwG6GGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2724 (0xaa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: Apr 24 19:27:23 2025 GMT Not After : May 1 19:27:23 2025 GMT Subject: CN=680a909b-86f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:29:d8:bd:a7:4d:a3:02:17:1d:a5:cb:06:73: 2a:d4:78:fc:bb:51:21:72:41:c9:9b:f6:ba:f8:f2: 76:45:09:90:d4:7f:e4:81:9b:aa:83:6e:69:60:89: 24:7f:42:18:c2:da:00:b5:59:f6:b1:bf:f2:dc:01: a0:f0:38:db:6f:7d:2c:2d:2b:68:4b:e3:4b:b3:72: 7c:f6:39:c0:b2:5d:77:fb:79:6f:51:68:49:0f:e8: b7:a4:54:ef:3a:c7:89:09:68:4a:6a:91:3e:56:2f: 68:eb:09:b2:1e:b2:62:65:23:fb:d2:8b:32:c3:21: a0:3a:ce:a6:d2:45:73:f5:46:1c:c7:82:33:72:00: 1c:b0:80:66:cf:b3:bb:d7:79:5c:f1:dd:2c:27:12: b9:9c:e1:6b:a4:d2:74:4b:a8:1c:b6:88:dd:5b:3e: 5f:6d:94:7a:79:64:38:10:ab:0f:35:5c:1a:9a:f1: 06:e2:c2:7a:a9:7c:19:4c:50:31:90:9b:72:36:af: 59:59:c5:3d:7d:c2:83:6e:41:c7:0f:cf:8c:b5:bc: e1:4c:a9:f4:eb:01:15:4f:95:62:4f:b7:99:c6:4e: 12:77:ee:0c:0b:b9:2b:9c:58:f8:bc:7a:c9:88:a8: 4f:90:fc:35:8e:ae:b1:f8:e5:6a:e5:50:19:86:bb: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D2:F6:32:1A:BE:8E:C1:5D:6E:AB:0C:2D:77:D4:C1:2E:CA:CC:3D X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a3:1b:25:fc:af:d5:90:bd:41:02:fb:6a:ef:73:09:4a:eb: 40:26:aa:d6:5a:25:1a:1b:60:1e:a3:22:bb:25:2f:c2:f1:ff: 35:4f:95:f1:1c:55:40:cb:f0:4a:4c:4a:59:d7:c2:1b:03:5c: ed:48:cc:f1:c3:94:4d:eb:6e:89:48:1b:e9:4e:ab:0b:df:5a: 08:82:c8:18:18:2d:a0:94:a6:7f:05:d2:6d:7e:68:29:93:98: 11:8d:44:ac:28:bc:68:90:1d:c0:48:cd:59:f3:13:1a:b7:94: f5:48:0b:ff:a2:2d:58:6b:d8:69:07:10:53:1d:24:38:9d:35: 5e:17:22:31:a4:ae:b4:4d:fa:6d:3f:37:d0:b0:a4:25:e4:94: 88:5b:e1:aa:a5:aa:18:ef:44:36:33:3f:c7:c6:e5:fb:27:1e: c8:3a:59:17:b1:c0:c1:37:9f:a0:6f:22:09:3f:7f:c2:22:51: ba:a3:ba:c8:50:f0:25:b3:d0:70:fa:9c:d0:52:fa:1f:7e:8b: 5a:81:23:53:5d:ba:23:77:5b:4b:36:ab:55:28:27:24:20:74: 79:4e:73:3f:a8:dd:bb:f7:8b:1c:b8:6a:d2:de:2e:07:dd:a9: 1c:6c:2b:14:52:d6:62:8b:1c:e9:f3:92:4d:63:ee:7c:39:5b: 04:17:2f:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjUwNDI0MTkyNzIzWhcNMjUwNTAxMTkyNzIzWjAYMRYwFAYD VQQDEw02ODBhOTA5Yi04NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzynYvadNowIXHaXLBnMq1Hj8u1EhckHJm/a6+PJ2RQmQ1H/kgZuqg25pYIkk f0IYwtoAtVn2sb/y3AGg8Djbb30sLStoS+NLs3J89jnAsl13+3lvUWhJD+i3pFTv OseJCWhKapE+Vi9o6wmyHrJiZSP70osywyGgOs6m0kVz9UYcx4IzcgAcsIBmz7O7 13lc8d0sJxK5nOFrpNJ0S6gctojdWz5fbZR6eWQ4EKsPNVwamvEG4sJ6qXwZTFAx kJtyNq9ZWcU9fcKDbkHHD8+MtbzhTKn06wEVT5ViT7eZxk4Sd+4MC7krnFj4vHrJ iKhPkPw1jq6x+OVq5VAZhrsszQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvS9jIa vo7BXW6rDC131MEuysw9MB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzE2NS8yMTVGRUZCNDU1QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpH WGI4dl9BS3R1T05VQTJ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBioxsl/K/VkL1BAvtq73MJSutAJqrWWiUaG2AeoyK7JS/C8f81T5Xx HFVAy/BKTEpZ18IbA1ztSMzxw5RN626JSBvpTqsL31oIgsgYGC2glKZ/BdJtfmgp k5gRjUSsKLxokB3ASM1Z8xMat5T1SAv/oi1Ya9hpBxBTHSQ4nTVeFyIxpK60Tfpt PzfQsKQl5JSIW+GqpaoY70Q2Mz/HxuX7Jx7IOlkXscDBN5+gbyIJP3/CIlG6o7rI UPAls9Bw+pzQUvoffotagSNTXbojd1tLNqtVKCckIHR5TnM/qN2794scuGrS3i4H 3akcbCsUUtZiixzp85JNY+58OVsEFy8a -----END CERTIFICATE-----Generated at Sat Apr 26 12:40:30 2025 by rpki-client