$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json) Hash identifier: 3+8Gh27uweTWLqqh3sf/ERPs466L+r1Lr4TnByoB200= Subject key identifier: B9:35:11:4B:23:A1:B5:5A:5D:F6:59:D2:D6:E5:C8:93:AE:5E:93:35 Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft Manifest number: 59 Signing time: Fri 25 Apr 2025 06:10:20 +0000 Manifest this update: Fri 25 Apr 2025 06:10:20 +0000 Manifest next update: Fri 02 May 2025 06:10:20 +0000 Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: SC7YQAL9All+atO3EvTm7lo+i89SbYYNBcgQTBFyGFU=) 2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: 20U7R8Yje/fzXp5s/Ng4KAPvO8aTGVHHdc0Vt45hE8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Validity Not Before: Apr 25 06:10:20 2025 GMT Not After : May 2 06:10:20 2025 GMT Subject: CN=680b274c-4eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:7d:1a:30:85:24:75:38:7f:90:b5:a5:a9: 89:68:43:62:83:e8:fc:bb:68:bd:10:25:0e:d2:fa: ff:ff:a0:74:4e:96:14:45:ca:d1:a7:3a:17:e1:50: a4:d2:5a:5c:36:8e:1c:46:23:26:4c:14:cb:41:93: 3c:dc:17:09:cb:57:d0:df:3f:82:3b:19:4a:8b:75: 50:8d:b0:9c:be:07:5e:b2:3e:fb:82:c8:3b:41:d4: db:0a:10:b4:ed:ee:ba:de:3d:94:07:8b:d7:9d:84: e9:9c:31:4f:33:d0:b4:2c:a0:c4:a9:e5:9e:14:51: 5a:d8:af:66:00:eb:a4:8e:15:76:ad:ac:52:ba:91: ba:2d:3f:e4:15:14:f0:fb:59:bd:2f:43:0b:89:5a: fd:e4:a5:63:95:3c:eb:44:8d:3d:b1:ea:db:9b:30: a3:a5:2f:7d:4f:9c:ca:05:8a:61:e9:bd:31:6e:a5: 18:19:9d:3c:d6:a3:76:45:d7:46:7e:81:df:8e:53: 31:c1:22:f5:5c:6a:e0:5d:7b:5c:b2:14:4d:bb:39: d8:7d:21:2f:e2:3f:2d:4c:39:61:dc:8a:75:3b:64: 0d:d8:4e:a5:2b:34:8e:d9:71:97:56:a0:d7:c1:9f: 19:b1:46:a5:ec:b9:6b:f7:27:6e:28:a7:4d:ec:c5: 45:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:35:11:4B:23:A1:B5:5A:5D:F6:59:D2:D6:E5:C8:93:AE:5E:93:35 X509v3 Authority Key Identifier: keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6b:3a:81:30:3c:55:86:04:ca:90:5d:35:af:f0:79:da:62: d8:09:2f:66:d2:21:c4:a4:79:12:e2:e9:f6:f6:ac:0e:b1:09: 94:2a:d7:43:bc:12:30:2b:3e:ef:6f:c7:1a:40:6f:2b:f0:9f: 19:1e:50:76:48:ce:05:4a:c2:00:37:b9:16:1b:97:7a:7c:da: bb:51:88:08:63:ff:8f:f4:96:b9:1b:eb:97:3a:ba:1e:6f:5d: 94:42:b6:cd:4a:60:cf:cb:6c:c0:35:a6:cb:a4:8d:a7:5c:2a: 42:fd:c1:57:99:84:cc:91:84:38:c2:68:4e:7b:8d:df:9f:a5: fd:fc:45:71:f1:d8:d7:ef:58:a5:35:f1:86:10:07:f7:cb:74: 3d:f6:4d:21:60:c7:fe:02:51:4c:6d:fe:5b:04:16:46:92:69: e3:b1:87:9c:78:0e:80:ec:05:11:4f:0d:10:43:7e:5b:c8:40: d5:48:6b:5f:f3:b8:3d:41:80:32:42:fc:f6:8b:3c:ee:50:6e: 05:4f:40:33:78:e6:95:02:a5:ff:27:a9:58:cd:cc:fe:c9:71: 82:0f:b5:05:51:66:ae:5f:ca:a1:85:f9:3f:38:d5:56:e8:60: a0:a6:40:ae:19:a1:b2:b9:ad:db:72:99:f5:50:b3:cd:23:2f: d9:63:ec:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTk0MTExMC8GA1UEBRMoQjJFOURBNUVCMzg5NkJFRkMwREZENUE3RUIzMERCMjkz MTRCQkExMjAeFw0yNTA0MjUwNjEwMjBaFw0yNTA1MDIwNjEwMjBaMBgxFjAUBgNV BAMTDTY4MGIyNzRjLTRlYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHuH0aMIUkdTh/kLWlqYloQ2KD6Py7aL0QJQ7S+v//oHROlhRFytGnOhfhUKTS Wlw2jhxGIyZMFMtBkzzcFwnLV9DfP4I7GUqLdVCNsJy+B16yPvuCyDtB1NsKELTt 7rrePZQHi9edhOmcMU8z0LQsoMSp5Z4UUVrYr2YA66SOFXatrFK6kbotP+QVFPD7 Wb0vQwuJWv3kpWOVPOtEjT2x6tubMKOlL31PnMoFimHpvTFupRgZnTzWo3ZF10Z+ gd+OUzHBIvVcauBde1yyFE27Odh9IS/iPy1MOWHcinU7ZA3YTqUrNI7ZcZdWoNfB nxmxRqXsuWv3J24op03sxUWRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuTURSyOh tVpd9lnS1uXIk65ekzUwHwYDVR0jBBgwFoAUsunaXrOJa+/A39Wn6zDbKTFLuhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBOTQxLzkzQUNBQjY0QTBB MDExRUY5MDUyMzI1RkM0RjlBRTAyL3N1bmFYck9KYS1fQTM5V242ekRiS1RGTHVo SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc3VuYVhyT0phLV9BMzlXbjZ6RGJLVEZMdWhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB OTQxLzkzQUNBQjY0QTBBMDExRUY5MDUyMzI1RkM0RjlBRTAyL3N1bmFYck9KYS1f QTM5V242ekRiS1RGTHVoSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAxrOoEwPFWGBMqQXTWv8HnaYtgJL2bSIcSkeRLi6fb2rA6xCZQq10O8 EjArPu9vxxpAbyvwnxkeUHZIzgVKwgA3uRYbl3p82rtRiAhj/4/0lrkb65c6uh5v XZRCts1KYM/LbMA1psukjadcKkL9wVeZhMyRhDjCaE57jd+fpf38RXHx2NfvWKU1 8YYQB/fLdD32TSFgx/4CUUxt/lsEFkaSaeOxh5x4DoDsBRFPDRBDflvIQNVIa1/z uD1BgDJC/PaLPO5QbgVPQDN45pUCpf8nqVjNzP7JcYIPtQVRZq5fyqGF+T841Vbo YKCmQK4ZobK5rdtymfVQs80jL9lj7J0= -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:27 2025 by rpki-client