$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json) Hash identifier: U6cdo6LKps5BuJ1RgDQwkiC4Lcn1eVUBkMH28bftG4Q= Subject key identifier: EC:FD:A9:44:91:71:2B:1E:52:68:FD:38:8F:13:03:85:BC:49:30:F7 Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft Manifest number: 0743 Signing time: Thu 24 Apr 2025 21:28:57 +0000 Manifest this update: Thu 24 Apr 2025 21:28:57 +0000 Manifest next update: Thu 01 May 2025 21:28:57 +0000 Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: EbQzWHTdlyLATvrL5bSBZs2ImXFTGnexMf6rYbf3lT4=) 2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Validity Not Before: Apr 24 21:28:57 2025 GMT Not After : May 1 21:28:57 2025 GMT Subject: CN=680aad19-ddee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:ea:71:87:78:03:06:be:e7:89:72:3b:f6: 2c:70:b9:6f:03:3d:76:07:03:20:02:10:43:26:d1: f5:82:b7:27:df:a1:ab:6e:e9:b5:3f:4e:f2:d8:5c: c4:47:d7:8c:5d:c2:68:78:79:c3:27:bb:62:16:56: ed:d9:40:88:5d:8b:25:cd:87:39:5f:f8:98:7d:2b: 40:6c:96:3a:51:db:e7:97:d8:cf:26:b6:d3:aa:91: bc:12:ea:14:39:79:99:56:b0:d9:6b:33:6f:2d:b5: 13:3d:51:32:e8:e2:4d:61:73:79:58:5a:3a:d3:91: 14:6d:89:22:55:88:55:85:1e:9c:b3:d6:82:d9:08: 51:d0:70:9b:08:df:ed:2d:c4:44:3a:47:ed:00:2a: 33:af:19:6d:86:77:19:ad:a0:23:cf:2f:7b:78:92: 04:20:e3:d2:cc:8e:ce:4f:de:1a:24:c4:2e:7c:01: 75:d5:db:13:94:61:96:21:0b:7f:1a:87:2c:e8:34: 0a:d3:1d:ed:88:58:b8:f5:ac:ee:48:9c:d2:f3:08: e8:e6:73:9b:1b:fa:79:10:4f:8c:38:67:79:c1:69: ae:5d:9f:7d:c8:4a:67:d3:29:a2:7b:cb:ab:1f:38: 30:83:41:ff:9d:81:51:8a:e2:ce:ce:ce:45:60:1e: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FD:A9:44:91:71:2B:1E:52:68:FD:38:8F:13:03:85:BC:49:30:F7 X509v3 Authority Key Identifier: keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:70:d2:73:07:f9:f7:58:4c:a4:e6:3f:52:7f:ad:91:1a:a5: b2:76:d3:66:52:87:56:69:81:13:f8:af:2a:85:15:9f:b9:91: 0b:86:a1:26:02:2e:6b:09:03:ed:3d:5f:b9:96:2f:7d:8d:0f: e0:45:b0:70:f4:50:f4:42:84:85:cd:33:b7:56:03:51:fc:bd: 79:09:7e:68:51:85:c5:07:68:08:70:20:1d:45:2b:d3:9f:f7: 0f:bb:8c:59:d4:dc:14:29:5b:62:6b:12:63:d1:6f:59:02:83: 2d:6e:7c:3c:c4:e6:fe:90:2b:e4:31:6e:15:e2:5b:78:e6:fb: cb:cb:0d:f8:42:8d:a8:42:8b:3d:e0:38:73:50:6f:9a:9a:6f: 00:52:ca:27:1a:6b:b1:42:a4:3c:b6:77:ca:e3:d8:3b:e9:18: ed:0a:26:7b:67:e7:eb:5e:a2:88:20:ce:23:0a:e7:a8:b0:ca: 06:b7:b5:a4:2f:fd:9b:f8:ba:bf:25:4a:a8:16:51:c4:7d:86: 1c:2e:86:62:24:1b:c3:35:e9:22:f9:31:74:9c:22:07:94:eb: b1:38:16:fe:38:95:7e:04:e8:f1:8c:ab:9e:09:c0:d4:a8:a0: 73:3e:96:11:a3:a3:e6:08:78:95:88:ae:5b:27:97:28:2b:cd: 1f:35:0f:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1 Qjg4MDk4RDEwHhcNMjUwNDI0MjEyODU3WhcNMjUwNTAxMjEyODU3WjAYMRYwFAYD VQQDEw02ODBhYWQxOS1kZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv/qcYd4Awa+54lyO/YscLlvAz12BwMgAhBDJtH1grcn36Grbum1P07y2FzE R9eMXcJoeHnDJ7tiFlbt2UCIXYslzYc5X/iYfStAbJY6Udvnl9jPJrbTqpG8EuoU OXmZVrDZazNvLbUTPVEy6OJNYXN5WFo605EUbYkiVYhVhR6cs9aC2QhR0HCbCN/t LcREOkftACozrxlthncZraAjzy97eJIEIOPSzI7OT94aJMQufAF11dsTlGGWIQt/ Gocs6DQK0x3tiFi49azuSJzS8wjo5nObG/p5EE+MOGd5wWmuXZ99yEpn0ymie8ur Hzgwg0H/nYFRiuLOzs5FYB5btwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOz9qUSR cSseUmj9OI8TA4W8STD3MB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAscNJzB/n3WEyk5j9Sf62RGqWydtNmUodWaYET+K8qhRWfuZELhqEm Ai5rCQPtPV+5li99jQ/gRbBw9FD0QoSFzTO3VgNR/L15CX5oUYXFB2gIcCAdRSvT n/cPu4xZ1NwUKVtiaxJj0W9ZAoMtbnw8xOb+kCvkMW4V4lt45vvLyw34Qo2oQos9 4DhzUG+amm8AUsonGmuxQqQ8tnfK49g76RjtCiZ7Z+frXqKIIM4jCueosMoGt7Wk L/2b+Lq/JUqoFlHEfYYcLoZiJBvDNeki+TF0nCIHlOuxOBb+OJV+BOjxjKueCcDU qKBzPpYRo6PmCHiViK5bJ5coK80fNQ9o -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:19 2025 by rpki-client