$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft File: sgd9XTkKxy472IWxHzrm0qUmqe0.mft (raw, json) Hash identifier: /Q2o3L5SN1cUemJpB27IhnAK5i6mj6CHTEWnyW9sZ6c= Subject key identifier: 62:54:FF:5D:35:EE:15:0E:5F:5F:B2:E9:F2:C0:9C:DC:96:4F:36:CC Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED Certificate issuer: /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Certificate serial: 0779 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft Manifest number: 0770 Signing time: Thu 24 Apr 2025 21:18:48 +0000 Manifest this update: Thu 24 Apr 2025 21:18:47 +0000 Manifest next update: Thu 01 May 2025 21:18:47 +0000 Files and hashes: 1: sgd9XTkKxy472IWxHzrm0qUmqe0.crl (hash: 1F1+1jCWTCvRDkYJWs5SiF/8mglYjWMYJcbg66W1fbk=) 2: 53B6E5D212CF11EBA8D2C037C4F9AE02.roa (hash: SqNXqLNgkpLICxW/LBSYL1V/21ZqqGqKzf6yPi47f5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913 (0x779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B85, serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Validity Not Before: Apr 24 21:18:47 2025 GMT Not After : May 1 21:18:47 2025 GMT Subject: CN=680aaab8-fe41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:10:43:e9:1a:88:22:0a:6c:f0:71:55:66: f7:d7:20:9b:b8:2a:7e:b8:03:dc:11:a4:b9:8a:53: 83:d1:ff:30:5f:10:08:ad:c9:fd:bf:0a:6f:87:ba: 66:13:0f:f1:cb:53:ec:7f:e5:77:8e:a5:6f:fc:72: 48:3f:fa:64:30:77:2e:6e:3e:c6:21:9e:80:19:28: 70:1a:7f:82:3a:43:f5:3e:69:80:a3:81:c2:1b:a5: 3c:c6:48:ec:ac:b7:44:02:ba:d4:34:e3:c7:3e:7f: 15:2e:6e:e9:a7:cc:9a:a3:86:7e:64:95:e2:21:47: 78:64:84:e2:88:aa:b3:e8:19:84:47:de:77:4c:ac: 7f:ac:da:23:94:3a:5d:f6:ed:39:dd:39:9f:95:85: 93:26:18:fe:cc:cc:18:20:31:c9:3b:1b:cf:fe:97: 9c:a9:5c:6e:cc:b3:27:05:6d:b6:b6:d1:f6:bf:b9: 2f:53:87:ff:fb:8f:82:d7:33:81:09:b5:54:5d:f2: 0d:a4:b7:b8:7c:73:af:69:2c:a0:e6:89:f0:2e:74: 04:6c:ea:8a:29:95:58:f5:7e:a0:88:9b:b0:30:54: 68:37:17:21:6c:52:73:d7:3d:48:ac:b2:14:f1:d1: b7:c9:31:8d:7f:8f:03:f6:ab:4d:80:6c:59:2c:d6: 9b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:54:FF:5D:35:EE:15:0E:5F:5F:B2:E9:F2:C0:9C:DC:96:4F:36:CC X509v3 Authority Key Identifier: keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:15:58:d4:60:02:db:76:5d:ba:f8:24:4e:ef:f4:a9:05:a1: b8:87:78:96:b5:f5:19:a4:87:5a:2f:7b:f0:58:d9:67:a5:12: fb:c8:ef:75:22:a8:98:b9:b7:dd:be:99:63:ad:87:f8:5b:79: 44:4f:62:e0:4a:87:80:92:dc:48:6a:d9:44:8d:37:30:0d:2b: a4:d0:2a:ba:5a:02:3e:ec:d2:78:8a:76:b6:66:59:16:d0:8d: bf:dd:87:1d:22:0c:5e:5e:b4:35:2a:92:71:be:8f:82:56:a9: b9:57:9c:ad:66:1f:12:fc:4f:5b:a6:8e:06:fd:7d:2f:44:26: 87:a2:a1:4f:6c:c0:e7:75:c6:46:4a:f4:1c:28:13:36:22:1c: c0:0c:1c:45:4c:80:8c:0d:a5:ca:94:64:7e:2c:8e:3a:8f:7b: 3d:ad:45:fd:a3:08:a2:a1:73:4a:4c:58:53:f7:ed:6e:69:ae: fc:dc:c5:e9:77:83:32:d3:68:5c:e3:c9:92:08:f3:fa:15:14: d4:bb:88:4b:08:b6:5a:11:0b:7b:1f:4f:66:51:42:83:51:eb: eb:a1:62:1a:0e:16:29:0e:2f:d6:d0:17:3e:53:2c:48:02:7d: 2f:fd:9d:04:65:26:67:ac:a1:14:85:5c:a7:11:17:98:d9:5f: dd:91:62:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCODUxMTAvBgNVBAUTKEIyMDc3RDVEMzkwQUM3MkUzQkQ4ODVCMTFGM0FFNkQy QTUyNkE5RUQwHhcNMjUwNDI0MjExODQ3WhcNMjUwNTAxMjExODQ3WjAYMRYwFAYD VQQDEw02ODBhYWFiOC1mZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/AQQ+kaiCIKbPBxVWb31yCbuCp+uAPcEaS5ilOD0f8wXxAIrcn9vwpvh7pm Ew/xy1Psf+V3jqVv/HJIP/pkMHcubj7GIZ6AGShwGn+COkP1PmmAo4HCG6U8xkjs rLdEArrUNOPHPn8VLm7pp8yao4Z+ZJXiIUd4ZITiiKqz6BmER953TKx/rNojlDpd 9u053TmflYWTJhj+zMwYIDHJOxvP/pecqVxuzLMnBW22ttH2v7kvU4f/+4+C1zOB CbVUXfINpLe4fHOvaSyg5onwLnQEbOqKKZVY9X6giJuwMFRoNxchbFJz1z1IrLIU 8dG3yTGNf48D9qtNgGxZLNabNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJU/101 7hUOX1+y6fLAnNyWTzbMMB8GA1UdIwQYMBaAFLIHfV05CscuO9iFsR865tKlJqnt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUI4NS80MkQ3QzAwQzEy Q0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5NDcySVd4SHpybTBxVW1x ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnZDlYVGtLeHk0NzJJV3hIenJtMHFVbXFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUI4NS80MkQ3QzAwQzEyQ0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5 NDcySVd4SHpybTBxVW1xZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMFVjUYALbdl26+CRO7/SpBaG4h3iWtfUZpIdaL3vwWNlnpRL7yO91 IqiYubfdvpljrYf4W3lET2LgSoeAktxIatlEjTcwDSuk0Cq6WgI+7NJ4ina2ZlkW 0I2/3YcdIgxeXrQ1KpJxvo+CVqm5V5ytZh8S/E9bpo4G/X0vRCaHoqFPbMDndcZG SvQcKBM2IhzADBxFTICMDaXKlGR+LI46j3s9rUX9owiioXNKTFhT9+1uaa783MXp d4My02hc48mSCPP6FRTUu4hLCLZaEQt7H09mUUKDUevroWIaDhYpDi/W0Bc+UyxI An0v/Z0EZSZnrKEUhVynEReY2V/dkWJa -----END CERTIFICATE-----Generated at Sat Apr 26 15:05:43 2025 by rpki-client