$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: l7lJAPhoDmcu10fNkFnuXTdLEIZCKr5w2GYtgOiIbtY= Subject key identifier: 2C:75:84:D8:C4:5D:C9:AF:FC:6D:C5:42:7C:40:E3:BB:B7:4E:C7:6E Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 1518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 1510 Signing time: Thu 24 Apr 2025 16:49:37 +0000 Manifest this update: Thu 24 Apr 2025 16:49:37 +0000 Manifest next update: Thu 01 May 2025 16:49:37 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: MlLbRk8CnUMThYexdZfMVhJBAYywJTmK56JfWDRv15I=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: Yhfg4YvQQZjhY3KRsDWyz6hCLcA/Ph/uJc8vvKK428M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5400 (0x1518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: Apr 24 16:49:37 2025 GMT Not After : May 1 16:49:37 2025 GMT Subject: CN=680a6ba1-73c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:56:d3:e8:c0:e8:30:8d:e4:29:4a:ae:f6: d2:a5:5f:ca:89:da:d6:f9:4e:3f:8b:50:14:c3:0b: bd:39:57:2e:86:9e:cb:8e:64:1d:9d:05:da:28:32: 8d:53:25:11:43:11:85:44:a7:fa:1d:89:7e:a0:ae: 3f:c1:d0:13:3e:97:36:4f:ad:34:d4:06:56:1e:10: 9b:4f:3c:63:91:39:76:79:a0:6a:75:c3:57:f1:9a: 71:65:9f:82:0a:90:ee:e8:51:60:af:24:4e:c5:00: 7d:8f:7e:2c:10:55:eb:a5:b1:ca:ca:79:f1:84:2c: 55:3f:ef:ed:e3:89:16:3f:29:89:58:28:cd:bb:26: 3a:2b:c9:2e:cd:5a:21:92:2d:ab:8e:6e:00:5e:08: 9c:dc:1a:b7:3e:17:34:63:b7:e8:ef:20:97:4b:7d: 95:96:a7:30:c4:e7:06:c4:31:af:92:e5:dd:eb:2b: a0:6c:30:39:7c:ef:37:c5:ed:10:6c:f8:9e:dc:1f: 51:6b:c6:4f:15:50:bd:8b:4b:9f:55:84:93:de:e0: ce:9b:be:8c:ab:45:98:73:34:21:76:fe:2f:ad:5b: fa:6b:6b:ff:30:80:ad:ab:74:36:cf:c7:c3:08:48: 49:e2:2b:49:63:8b:42:22:9e:64:4c:8a:bc:41:06: e9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:75:84:D8:C4:5D:C9:AF:FC:6D:C5:42:7C:40:E3:BB:B7:4E:C7:6E X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:1b:99:d6:da:0e:d8:97:70:ff:2f:e1:46:5f:a7:74:09:1a: a4:07:e3:5c:5a:c9:03:64:3d:55:57:a0:5a:fc:27:dd:ee:c3: 42:b4:cd:71:f7:d0:88:f1:c6:59:6a:32:01:6d:c5:f5:b2:be: de:57:aa:d0:18:f0:a0:18:d8:32:1b:e3:71:73:78:19:4c:ba: fa:4a:bb:17:de:2d:ea:a9:93:20:22:3d:cf:1e:2d:97:58:ef: 57:fb:54:9e:63:5b:7a:e2:e0:40:7a:36:e2:ef:8a:df:07:d6: e0:c1:71:fd:0b:67:bd:54:42:df:76:59:54:66:ae:7d:d4:16: 31:f2:0f:5e:e2:3b:89:de:a2:7f:3a:e0:ad:df:e9:4d:8b:28: 9b:bd:80:2b:3a:42:67:e9:e3:7a:e4:a8:e6:42:32:ff:1c:ca: 10:98:91:e4:dc:18:81:3c:62:72:dc:cb:07:fa:ab:88:87:30: 4e:0f:21:cd:19:53:ab:d0:9f:64:05:16:8a:01:fb:5b:ea:ef: 63:61:17:5c:50:c1:73:73:57:97:f8:81:52:60:d3:3d:d7:a1: d5:20:34:d4:4a:69:85:db:ba:52:0c:22:da:3d:b8:62:30:21: fb:53:b6:83:ab:04:07:85:14:ef:3d:f5:88:f4:ac:92:23:e4: 3c:57:74:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUwNDI0MTY0OTM3WhcNMjUwNTAxMTY0OTM3WjAYMRYwFAYD VQQDEw02ODBhNmJhMS03M2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVBW0+jA6DCN5ClKrvbSpV/KidrW+U4/i1AUwwu9OVcuhp7LjmQdnQXaKDKN UyURQxGFRKf6HYl+oK4/wdATPpc2T6001AZWHhCbTzxjkTl2eaBqdcNX8ZpxZZ+C CpDu6FFgryROxQB9j34sEFXrpbHKynnxhCxVP+/t44kWPymJWCjNuyY6K8kuzVoh ki2rjm4AXgic3Bq3Phc0Y7fo7yCXS32VlqcwxOcGxDGvkuXd6yugbDA5fO83xe0Q bPie3B9Ra8ZPFVC9i0ufVYST3uDOm76Mq0WYczQhdv4vrVv6a2v/MICtq3Q2z8fD CEhJ4itJY4tCIp5kTIq8QQbpgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx1hNjE Xcmv/G3FQnxA47u3TsduMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlG5nW2g7Yl3D/L+FGX6d0CRqkB+NcWskDZD1VV6Ba/Cfd7sNCtM1x 99CI8cZZajIBbcX1sr7eV6rQGPCgGNgyG+Nxc3gZTLr6SrsX3i3qqZMgIj3PHi2X WO9X+1SeY1t64uBAejbi74rfB9bgwXH9C2e9VELfdllUZq591BYx8g9e4juJ3qJ/ OuCt3+lNiyibvYArOkJn6eN65KjmQjL/HMoQmJHk3BiBPGJy3MsH+quIhzBODyHN GVOr0J9kBRaKAftb6u9jYRdcUMFzc1eX+IFSYNM916HVIDTUSmmF27pSDCLaPbhi MCH7U7aDqwQHhRTvPfWI9KySI+Q8V3Rf -----END CERTIFICATE-----Generated at Sat Apr 26 17:07:10 2025 by rpki-client