$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: 0IboZSzk6MBBFCU3T9S3bE4e0FUrL6/oFuQ4Ti0SGqU= Subject key identifier: DB:12:CA:D7:11:B8:DE:57:95:08:05:35:1C:55:C3:AB:02:7C:54:BF Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 0452 Signing time: Thu 24 Apr 2025 23:59:32 +0000 Manifest this update: Thu 24 Apr 2025 23:59:32 +0000 Manifest next update: Thu 01 May 2025 23:59:32 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: 528yWrNy+B9LOXjSwYoSM7srUrYosFVAUAQhqw3QlNE=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: P2DNiNhjlpF64BsKz4nEdQOFVD1WxrPx8iOejuhEZGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: Apr 24 23:59:32 2025 GMT Not After : May 1 23:59:32 2025 GMT Subject: CN=680ad064-444a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:d7:cf:73:5c:0a:6a:3d:7a:12:c7:b5:30: 0c:03:5e:00:91:65:30:f4:0c:24:8e:8f:9d:0d:e1: a7:a6:84:da:8f:66:c5:6c:31:7f:be:58:57:7f:b9: 17:53:80:33:93:8e:90:f8:8f:5d:01:64:8c:62:69: df:2a:c5:43:53:4e:f6:1a:bc:bb:f8:ad:00:ca:27: 9e:0a:c5:a7:6b:88:c0:2f:a2:b5:74:01:40:9a:16: 88:cd:e6:0c:1e:bf:7c:a6:eb:3b:b8:49:cd:12:5e: 86:72:2b:e8:64:30:9a:dc:f0:47:06:c6:c4:86:4b: e8:c8:de:24:8b:bc:3e:10:b5:92:5f:0e:01:6b:c1: 8c:85:87:12:de:9a:84:05:5a:09:12:be:56:c2:d9: e1:d8:9b:e3:5e:c0:5d:ac:fd:12:2e:9c:54:b5:74: 96:d2:bf:19:be:78:27:07:0b:9d:5c:db:04:19:13: 28:1b:47:17:61:d5:60:9d:0d:5f:e4:09:2b:93:83: a9:1b:c3:be:bc:61:86:7c:9d:e3:28:4d:9e:7d:b2: a6:dc:7f:a3:75:0c:73:2f:27:72:f6:ad:50:c3:3f: cd:ea:28:62:22:ce:72:39:43:05:07:a6:6e:72:5a: d6:ad:f1:ef:6e:6e:53:ff:16:12:d1:45:3c:8a:ef: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:12:CA:D7:11:B8:DE:57:95:08:05:35:1C:55:C3:AB:02:7C:54:BF X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:35:05:b0:77:82:61:03:11:e6:45:2a:09:51:76:fb:7f:f8: a1:c7:88:b9:f5:35:5d:a2:a1:ea:72:4b:e1:b0:ad:3a:66:f7: 30:26:21:c6:96:42:d1:6a:a2:ed:07:5d:d2:51:e8:8e:25:40: 80:ea:7a:27:6e:20:14:e2:fd:67:6c:60:77:55:ba:7b:a9:40: 9d:7d:7b:c9:54:73:c3:e3:0a:b6:1e:b1:57:48:54:ea:66:6f: f6:2e:64:35:9d:a0:fc:77:fc:71:c8:20:ec:da:46:54:5f:08: 19:39:2a:5c:cd:c9:26:4f:2b:d0:5f:ac:cd:5a:bf:f7:b7:2d: 17:18:0d:79:6d:c8:39:48:68:3b:12:8f:c4:ae:a9:d4:e4:02: 72:12:2f:a5:25:1e:66:6b:dc:ef:06:c8:bb:8b:a1:c1:d6:c8: a6:82:8b:b1:88:a6:43:cb:39:6a:22:5e:5c:4e:18:15:cd:05: eb:53:b6:5c:eb:8c:01:f0:b0:1c:75:47:a7:db:ed:e4:02:dd: b4:c3:39:e3:e4:ab:69:16:e7:cc:50:c0:fb:fd:23:c6:86:f4: f7:ca:52:73:c4:d6:e2:c7:58:ab:9a:0d:b7:67:9a:f9:85:7e: e1:bd:bd:a8:0d:de:ba:fa:5c:c0:42:2f:a5:ed:8a:56:72:93: 1c:50:ab:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjUwNDI0MjM1OTMyWhcNMjUwNTAxMjM1OTMyWjAYMRYwFAYD VQQDEw02ODBhZDA2NC00NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJTXz3NcCmo9ehLHtTAMA14AkWUw9Awkjo+dDeGnpoTaj2bFbDF/vlhXf7kX U4Azk46Q+I9dAWSMYmnfKsVDU072Gry7+K0AyieeCsWna4jAL6K1dAFAmhaIzeYM Hr98pus7uEnNEl6GcivoZDCa3PBHBsbEhkvoyN4ki7w+ELWSXw4Ba8GMhYcS3pqE BVoJEr5Wwtnh2JvjXsBdrP0SLpxUtXSW0r8ZvngnBwudXNsEGRMoG0cXYdVgnQ1f 5Akrk4OpG8O+vGGGfJ3jKE2efbKm3H+jdQxzLydy9q1Qwz/N6ihiIs5yOUMFB6Zu clrWrfHvbm5T/xYS0UU8iu+hVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsSytcR uN5XlQgFNRxVw6sCfFS/MB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByNQWwd4JhAxHmRSoJUXb7f/ihx4i59TVdoqHqckvhsK06ZvcwJiHG lkLRaqLtB13SUeiOJUCA6nonbiAU4v1nbGB3Vbp7qUCdfXvJVHPD4wq2HrFXSFTq Zm/2LmQ1naD8d/xxyCDs2kZUXwgZOSpczckmTyvQX6zNWr/3ty0XGA15bcg5SGg7 Eo/ErqnU5AJyEi+lJR5ma9zvBsi7i6HB1simgouxiKZDyzlqIl5cThgVzQXrU7Zc 64wB8LAcdUen2+3kAt20wznj5KtpFufMUMD7/SPGhvT3ylJzxNbix1irmg23Z5r5 hX7hvb2oDd66+lzAQi+l7YpWcpMcUKto -----END CERTIFICATE-----Generated at Sat Apr 26 17:10:52 2025 by rpki-client