$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft File: SXppmDQJrXDCF1ZAccz1vjTFG8c.mft (raw, json) Hash identifier: zyLlF34SjyhK2x8C769UZX0r6JJI62ixGxEy/G62VoA= Subject key identifier: D1:12:E3:C6:E9:BD:5B:BA:A1:AD:C0:13:13:7B:EC:A8:61:08:38:9A Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft Manifest number: 0454 Signing time: Fri 25 Apr 2025 00:00:23 +0000 Manifest this update: Fri 25 Apr 2025 00:00:22 +0000 Manifest next update: Fri 02 May 2025 00:00:22 +0000 Files and hashes: 1: SXppmDQJrXDCF1ZAccz1vjTFG8c.crl (hash: qDRY6S95qIU3VnTpqjJcUewYuBx/r1pRV4vZcM2GQcc=) 2: E9237B16683211EDA8B5DD35C4F9AE02.roa (hash: m/W09ZD2DgnbOhKrF8d5SNMRuuUCLsB529DhjnozbkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C751F, serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Validity Not Before: Apr 25 00:00:22 2025 GMT Not After : May 2 00:00:22 2025 GMT Subject: CN=680ad096-8e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:14:9f:0e:89:3b:42:b0:31:0e:4a:9b:43:e9: 01:b1:16:a8:40:0a:63:10:5c:bf:2e:b5:62:e0:f5: ef:40:b4:a9:48:c2:0b:28:a0:8e:e2:a7:77:2c:c2: 52:9d:26:ea:f5:bd:71:81:b9:c0:48:d4:b8:86:4e: 5b:42:41:24:67:ce:ac:ad:8a:68:04:a7:e7:fb:68: d0:48:70:02:d6:73:ce:fe:9f:ef:9d:79:01:c3:f5: 06:64:6e:82:73:b8:cd:b7:f8:d8:34:95:ba:b9:3e: e6:d6:74:9a:a6:d8:26:39:5f:9a:1a:a2:85:bb:95: 5e:e6:af:56:59:b1:ee:cd:bb:fa:06:75:3b:c7:fb: 3a:59:bb:2c:d5:93:59:ce:25:cd:2c:37:ed:9f:e7: ae:8c:cc:a5:90:2c:9b:92:97:a3:dc:92:90:60:7c: 39:cc:00:e3:0a:4b:f4:a6:bb:6d:95:c6:93:e4:9a: 12:81:74:8d:b9:e6:ea:0d:3c:50:4d:c8:33:ff:ba: 25:2d:84:4e:53:d8:a2:ad:1d:cf:f1:6e:b3:af:a2: 3b:94:cd:22:a9:56:47:61:4b:f7:8e:f7:55:75:39: 3c:15:85:22:28:a2:31:23:3d:18:da:f3:2c:10:74: b2:2a:77:95:c6:fa:cf:9e:99:0d:4d:99:c6:90:1d: 9a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:12:E3:C6:E9:BD:5B:BA:A1:AD:C0:13:13:7B:EC:A8:61:08:38:9A X509v3 Authority Key Identifier: keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1b:68:57:08:43:67:0b:3e:ba:b0:1e:fb:e2:1d:d5:da:74: 57:57:5d:e5:87:99:d0:56:80:f2:f9:e8:e3:cc:34:23:86:77: 39:2d:33:46:0f:ed:cb:b9:87:fc:76:4c:1c:ce:33:f6:a7:a5: 38:53:43:c5:bc:61:7d:2b:d2:21:0f:55:97:ad:d1:b4:ac:3f: 43:e0:04:d9:fd:6e:c1:90:a9:f9:c3:7b:52:c5:76:66:93:08: a1:ad:6f:db:1f:1a:2c:9d:3f:00:94:50:0a:fe:21:37:94:51: 85:7c:6f:41:d2:08:50:a7:c4:2d:ef:f0:e5:70:65:a2:f3:5c: 40:42:57:d4:42:14:27:fd:77:bc:61:84:e4:05:fb:05:85:aa: f8:6a:fd:dc:c6:f5:82:c2:d3:9a:86:5b:a2:bd:ce:91:91:87: 33:5a:57:67:08:f5:4b:2c:39:b6:72:5b:bc:ad:90:7f:05:d0: 35:b1:46:d9:9c:9e:c2:33:cf:f0:0a:04:10:90:1d:56:46:db: 08:26:c0:88:a3:09:1a:7f:16:35:02:0d:6a:2c:6c:87:25:71: e6:c3:72:4a:e9:a7:34:fb:94:f7:ec:2a:e7:47:70:f2:96:96: 08:4f:82:c3:5e:79:90:8a:85:4e:1e:22:f7:21:cc:c5:2a:5a: db:52:28:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc1MUYxMTAvBgNVBAUTKDQ5N0E2OTk4MzQwOUFENzBDMjE3NTY0MDcxQ0NGNUJF MzRDNTFCQzcwHhcNMjUwNDI1MDAwMDIyWhcNMjUwNTAyMDAwMDIyWjAYMRYwFAYD VQQDEw02ODBhZDA5Ni04ZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xSfDok7QrAxDkqbQ+kBsRaoQApjEFy/LrVi4PXvQLSpSMILKKCO4qd3LMJS nSbq9b1xgbnASNS4hk5bQkEkZ86srYpoBKfn+2jQSHAC1nPO/p/vnXkBw/UGZG6C c7jNt/jYNJW6uT7m1nSaptgmOV+aGqKFu5Ve5q9WWbHuzbv6BnU7x/s6Wbss1ZNZ ziXNLDftn+eujMylkCybkpej3JKQYHw5zADjCkv0prttlcaT5JoSgXSNuebqDTxQ Tcgz/7olLYROU9iirR3P8W6zr6I7lM0iqVZHYUv3jvdVdTk8FYUiKKIxIz0Y2vMs EHSyKneVxvrPnpkNTZnGkB2arQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNES48bp vVu6oa3AExN77KhhCDiaMB8GA1UdIwQYMBaAFEl6aZg0Ca1wwhdWQHHM9b40xRvH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzUxRi8xODM5ODFEMjUx ODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJYRENGMVpBY2N6MXZqVEZH OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYcHBtRFFKclhEQ0YxWkFjY3oxdmpURkc4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzUxRi8xODM5ODFEMjUxODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJY RENGMVpBY2N6MXZqVEZHOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9G2hXCENnCz66sB774h3V2nRXV13lh5nQVoDy+ejjzDQjhnc5LTNG D+3LuYf8dkwczjP2p6U4U0PFvGF9K9IhD1WXrdG0rD9D4ATZ/W7BkKn5w3tSxXZm kwihrW/bHxosnT8AlFAK/iE3lFGFfG9B0ghQp8Qt7/DlcGWi81xAQlfUQhQn/Xe8 YYTkBfsFhar4av3cxvWCwtOahluivc6RkYczWldnCPVLLDm2clu8rZB/BdA1sUbZ nJ7CM8/wCgQQkB1WRtsIJsCIowkafxY1Ag1qLGyHJXHmw3JK6ac0+5T37CrnR3Dy lpYIT4LDXnmQioVOHiL3IczFKlrbUigz -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:52 2025 by rpki-client