$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json) Hash identifier: 25tvx5M3yPs5UkW6NlK2mcGm7Wrrv0apGjDihgnYpfM= Subject key identifier: 16:B5:AB:FE:2F:01:80:B9:2E:16:C5:4D:62:15:E0:1E:3D:23:01:AA Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Certificate serial: 085F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft Manifest number: 0857 Signing time: Thu 24 Apr 2025 20:35:00 +0000 Manifest this update: Thu 24 Apr 2025 20:35:00 +0000 Manifest next update: Thu 01 May 2025 20:35:00 +0000 Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: MpGOmSFj8LRdE6bNOJgKwX8/8BN7L6hOMItWCKfyqS8=) 2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: nVx5Y0jzC9bHhMI0JsTAXXHXSiIymADxDx7MlszHZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2143 (0x85f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Validity Not Before: Apr 24 20:35:00 2025 GMT Not After : May 1 20:35:00 2025 GMT Subject: CN=680aa074-336a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:47:fe:a3:f4:fd:95:9f:48:dd:96:f2:ef:5d: 3f:20:8b:1c:3a:b2:23:21:4a:a5:cc:cd:23:b1:3a: 89:54:7b:90:16:bd:9b:91:dc:be:22:fe:b0:93:f1: ff:f7:f8:aa:54:ff:95:44:50:e8:36:5f:0e:f6:be: 84:ea:1d:4e:d1:3a:8f:75:b6:d2:18:7e:24:c7:8e: cb:3f:63:af:72:70:45:b0:04:c7:45:cc:f1:7d:1c: 84:15:3f:81:ff:24:b2:9f:c6:3d:2e:6b:c7:a2:52: 24:2e:64:56:88:1c:59:63:c9:82:c0:40:db:2a:74: f1:28:2f:16:93:8a:42:1a:6c:65:ea:70:36:1f:e9: 36:68:9c:ab:62:79:36:46:93:7e:97:22:ed:ff:cc: 94:21:f7:8e:36:87:4f:c1:5d:1b:43:d3:e3:02:46: 25:0c:43:eb:b8:9f:22:f7:21:3f:26:56:01:e3:11: 04:01:30:86:6f:f0:26:31:c9:9b:c8:7a:f8:cd:41: 9f:36:2e:5c:ad:bd:fe:59:0c:3e:9b:20:84:55:29: a6:c6:e6:56:91:71:40:09:a1:d7:a8:b8:f1:6a:76: ec:b4:dc:78:fe:dc:68:4b:9f:6b:d4:f4:c8:55:0b: f2:49:af:72:5e:7e:20:13:77:b8:a4:c4:4b:0b:89: 13:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B5:AB:FE:2F:01:80:B9:2E:16:C5:4D:62:15:E0:1E:3D:23:01:AA X509v3 Authority Key Identifier: keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ce:d1:9b:62:7e:ad:39:1f:f7:8d:6b:8e:8c:fa:66:16:d9: 7e:c1:97:c3:fb:d1:bc:79:2f:9e:55:1d:a4:3f:66:17:c7:c2: 74:0e:05:8d:6f:2c:30:d3:ce:dd:07:09:31:a5:b8:65:8c:53: ae:ef:95:55:6f:bf:67:15:a2:a3:94:72:0b:82:df:47:0d:d4: ac:08:e1:39:77:17:8f:e4:ad:73:2f:f7:88:d8:e1:10:c1:40: 0f:87:0f:00:5e:0c:24:a0:28:61:9c:13:42:ca:cb:b9:f5:ca: 41:a9:34:6a:e3:7c:ed:51:9c:4c:da:5b:c8:25:d1:01:be:81: 7d:9a:61:3f:00:f1:e2:d2:1e:71:5a:c6:40:65:1b:67:0d:d8: b1:d1:00:ac:b2:9f:68:67:1c:18:b7:d5:a6:00:a4:18:ce:58: cd:35:cf:76:e9:26:a9:a2:f0:25:67:35:2e:20:47:c7:44:d0: 36:97:2f:f4:5d:cc:14:0b:25:9e:6f:73:22:79:9c:7e:ef:6a: 9b:b3:b5:44:9a:69:b4:3b:e8:6f:f8:10:08:4d:6b:66:36:b4: 04:a4:49:f8:fe:91:1d:64:f6:ae:98:b7:36:da:37:e4:90:28: b1:32:fe:2d:bd:8b:ba:e1:41:c6:b2:42:cc:bb:87:c8:89:19: bb:a2:a1:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwRjMxMTAvBgNVBAUTKEIwQjQwMDc2NTJGQjNEMTQzMjg4MTNCM0U1N0VFRkYx Nzc1OUNGRjIwHhcNMjUwNDI0MjAzNTAwWhcNMjUwNTAxMjAzNTAwWjAYMRYwFAYD VQQDEw02ODBhYTA3NC0zMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Ef+o/T9lZ9I3Zby710/IIscOrIjIUqlzM0jsTqJVHuQFr2bkdy+Iv6wk/H/ 9/iqVP+VRFDoNl8O9r6E6h1O0TqPdbbSGH4kx47LP2OvcnBFsATHRczxfRyEFT+B /ySyn8Y9LmvHolIkLmRWiBxZY8mCwEDbKnTxKC8Wk4pCGmxl6nA2H+k2aJyrYnk2 RpN+lyLt/8yUIfeONodPwV0bQ9PjAkYlDEPruJ8i9yE/JlYB4xEEATCGb/AmMcmb yHr4zUGfNi5crb3+WQw+myCEVSmmxuZWkXFACaHXqLjxanbstNx4/txoS59r1PTI VQvySa9yXn4gE3e4pMRLC4kTwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBa1q/4v AYC5LhbFTWIV4B49IwGqMB8GA1UdIwQYMBaAFLC0AHZS+z0UMogTs+V+7/F3Wc/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTBGMy84RTFDMUU3NkM1 NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BSUXlpQk96NVg3djhYZFp6 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMUUFkbEw3UFJReWlCT3o1WDd2OFhkWnpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTBGMy84RTFDMUU3NkM1NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BS UXlpQk96NVg3djhYZFp6X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEztGbYn6tOR/3jWuOjPpmFtl+wZfD+9G8eS+eVR2kP2YXx8J0DgWN byww087dBwkxpbhljFOu75VVb79nFaKjlHILgt9HDdSsCOE5dxeP5K1zL/eI2OEQ wUAPhw8AXgwkoChhnBNCysu59cpBqTRq43ztUZxM2lvIJdEBvoF9mmE/APHi0h5x WsZAZRtnDdix0QCssp9oZxwYt9WmAKQYzljNNc926SapovAlZzUuIEfHRNA2ly/0 XcwUCyWeb3MieZx+72qbs7VEmmm0O+hv+BAITWtmNrQEpEn4/pEdZPaumLc22jfk kCixMv4tvYu64UHGskLMu4fIiRm7oqGz -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:32 2025 by rpki-client