$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft File: sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json) Hash identifier: JvKCW52RinWLUbLnx/9cJrt7YlJmDCI/qCRxT3aI+tA= Subject key identifier: 92:50:66:C5:BF:FE:8A:1D:BC:4F:37:86:D5:DC:EE:2D:44:08:0F:6C Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Certificate serial: 05DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft Manifest number: 05D9 Signing time: Thu 24 Apr 2025 22:47:59 +0000 Manifest this update: Thu 24 Apr 2025 22:47:59 +0000 Manifest next update: Thu 01 May 2025 22:47:59 +0000 Files and hashes: 1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: cNIxOL8i4AKxMLn9Ljf3X2UmPAks9CIGuH3Iv5jF3PE=) 2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: h5dvfa3FRBYPtcjjdPkOqAVQA/qeLJ42SQi+kECAh1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1503 (0x5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Validity Not Before: Apr 24 22:47:59 2025 GMT Not After : May 1 22:47:59 2025 GMT Subject: CN=680abf9f-a06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:84:5b:35:1b:1b:ed:ab:66:44:04:ab:b4:ae: 0d:93:b4:67:9d:38:02:9b:84:a2:b6:89:96:c7:a5: b9:7b:65:fa:26:3e:a1:7e:75:7d:e8:08:36:02:e4: 9c:42:a1:0c:93:ed:6b:d9:1a:4c:91:14:20:f0:f2: 33:8f:ae:69:ec:e4:60:fa:5d:b7:e6:47:38:12:ea: 7c:cd:4f:ed:8b:d0:42:6d:2e:b5:a3:ae:aa:b5:65: bf:7b:3f:a7:b1:81:3c:e5:96:56:51:00:aa:57:09: e1:4c:3e:77:ad:12:0b:02:f9:d9:8f:e1:c4:8e:28: 66:64:1e:20:e0:66:ab:44:ba:30:83:b3:42:c9:6c: a6:fd:ea:04:80:cc:5e:86:10:de:29:22:a9:c1:79: 52:83:53:00:9e:11:0f:a4:db:2f:60:54:dd:ed:c9: 59:98:af:53:5d:b9:03:7b:39:ad:b8:c5:0b:e8:7c: 84:d1:29:a8:28:32:24:42:87:41:8d:53:53:bb:dc: ab:0d:05:ea:8a:87:13:80:03:4e:cf:a5:4c:0e:96: a1:0c:28:5f:07:e0:14:3a:65:26:f1:b2:d4:8e:ca: dc:13:b8:7d:03:53:e2:82:03:fa:bd:7c:18:8d:df: 90:52:d0:53:3d:08:a3:5a:cb:a7:20:9e:50:5b:26: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:50:66:C5:BF:FE:8A:1D:BC:4F:37:86:D5:DC:EE:2D:44:08:0F:6C X509v3 Authority Key Identifier: keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:57:6a:e6:5a:e3:b2:a9:fa:4e:92:9b:bb:3e:c7:1a:7b:94: 83:76:98:d4:58:b1:dd:f8:64:ee:56:89:a8:1c:61:c0:c3:9c: 6b:ca:81:77:8f:fc:71:47:20:7e:f2:1c:7c:66:98:87:c8:82: 5f:0b:24:51:f0:8f:30:2c:61:34:ce:cc:2a:85:95:ca:39:97: 0f:86:33:cd:d8:48:3a:57:4d:fe:62:4e:f7:79:ef:ca:ea:3b: 95:d1:60:95:80:f9:5e:53:69:74:28:e1:b5:e7:92:aa:7e:df: 54:be:0d:06:a7:b9:6a:f5:a6:23:e0:22:e8:19:f1:5e:98:7c: 88:f0:64:dc:ed:1c:89:68:1a:ab:07:d7:d5:82:55:e5:2c:27: dd:ab:72:8a:a3:bc:56:52:51:a9:af:a9:a5:be:fd:2a:88:c4: d3:05:21:05:64:50:04:55:fc:72:09:4b:a2:a0:11:4e:0d:a8: 5d:99:34:6c:42:3b:c8:80:86:23:b1:23:5c:f9:99:10:cf:de: ac:23:58:4b:89:8a:a8:34:72:0a:73:55:a6:ba:cc:ac:2e:cc: 23:d8:b9:24:ec:ee:38:6c:93:0e:91:59:36:0a:92:4c:38:41: 33:d8:2c:5a:58:e4:6e:08:79:0a:80:f0:72:09:19:55:ab:19: 85:de:a3:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKEIwOTEwQjA3Qzg2QjBGRkEzMDBBNTJBQzdDMzFGQ0I1 MkMwNTMyRDcwHhcNMjUwNDI0MjI0NzU5WhcNMjUwNTAxMjI0NzU5WjAYMRYwFAYD VQQDEw02ODBhYmY5Zi1hMDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IRbNRsb7atmRASrtK4Nk7RnnTgCm4SitomWx6W5e2X6Jj6hfnV96Ag2AuSc QqEMk+1r2RpMkRQg8PIzj65p7ORg+l235kc4Eup8zU/ti9BCbS61o66qtWW/ez+n sYE85ZZWUQCqVwnhTD53rRILAvnZj+HEjihmZB4g4GarRLowg7NCyWym/eoEgMxe hhDeKSKpwXlSg1MAnhEPpNsvYFTd7clZmK9TXbkDezmtuMUL6HyE0SmoKDIkQodB jVNTu9yrDQXqiocTgANOz6VMDpahDChfB+AUOmUm8bLUjsrcE7h9A1PiggP6vXwY jd+QUtBTPQijWsunIJ5QWya6SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJQZsW/ /oodvE83htXc7i1ECA9sMB8GA1UdIwQYMBaAFLCRCwfIaw/6MApSrHwx/LUsBTLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82MkQwM0U4Q0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRfb3dDbEtzZkRIOHRTd0ZN dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NKRUxCOGhyRF9vd0NsS3NmREg4dFN3Rk10Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82MkQwM0U4Q0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRf b3dDbEtzZkRIOHRTd0ZNdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeV2rmWuOyqfpOkpu7Pscae5SDdpjUWLHd+GTuVomoHGHAw5xryoF3 j/xxRyB+8hx8ZpiHyIJfCyRR8I8wLGE0zswqhZXKOZcPhjPN2Eg6V03+Yk73ee/K 6juV0WCVgPleU2l0KOG155Kqft9Uvg0Gp7lq9aYj4CLoGfFemHyI8GTc7RyJaBqr B9fVglXlLCfdq3KKo7xWUlGpr6mlvv0qiMTTBSEFZFAEVfxyCUuioBFODahdmTRs QjvIgIYjsSNc+ZkQz96sI1hLiYqoNHIKc1WmusysLswj2Lkk7O44bJMOkVk2CpJM OEEz2CxaWORuCHkKgPByCRlVqxmF3qMQ -----END CERTIFICATE-----Generated at Sat Apr 26 13:39:07 2025 by rpki-client