$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json) Hash identifier: pKuCVb+eiBd8YL4SiXKVMBc1LW0l6oN93JMr881ambc= Subject key identifier: 0D:51:1F:EF:7A:24:F1:6F:45:4C:0C:E4:79:C0:E7:59:CD:6B:FA:AA Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Certificate serial: 091D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft Manifest number: 0917 Signing time: Thu 24 Apr 2025 20:11:08 +0000 Manifest this update: Thu 24 Apr 2025 20:11:08 +0000 Manifest next update: Thu 01 May 2025 20:11:08 +0000 Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: R+KOtCKSTpwHFbEVdEFxWSF3bo64VFcrM3GMUI1tD90=) 2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: kT9n+KoUVrMxTcDdDdchHMpGKJgB1YHqyxZ9/EDRDrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2333 (0x91d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Validity Not Before: Apr 24 20:11:08 2025 GMT Not After : May 1 20:11:08 2025 GMT Subject: CN=680a9adc-6ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:57:a0:df:59:19:fe:86:9c:27:1d:e5:85: f3:78:d3:42:dd:9d:f5:c4:6f:6d:b7:95:4f:c8:fd: 24:ad:62:8c:ea:99:a3:4d:3a:a3:0c:5f:3c:51:d1: 71:c4:67:c3:5d:7e:7d:fb:e1:ba:3b:b4:eb:18:ee: 13:ff:1e:4d:2e:41:c4:6d:4c:eb:7c:1a:e4:87:7a: 10:f2:ec:8a:e0:90:f2:51:17:59:eb:15:71:66:73: a8:49:14:52:45:df:b5:8b:0d:2c:95:fa:57:03:fb: 3d:dd:2c:72:4f:39:9f:09:25:1b:84:76:9b:70:1b: 46:d3:ed:30:11:2e:2d:ed:7f:f4:32:7b:08:f0:fe: a7:66:6d:99:c6:37:ad:6c:74:6e:d3:37:c0:f3:4e: 9a:24:ea:36:08:50:dd:a2:ce:3a:63:90:fe:03:68: e2:5d:0c:7f:b1:4b:5c:e1:c4:81:a9:55:9a:da:57: 82:bf:73:aa:f1:12:6a:46:dd:e9:02:7c:67:39:f4: af:bb:32:ce:c0:08:e5:c6:30:02:35:cd:a4:dd:e6: ab:4b:eb:1b:de:bf:6b:4f:bb:3c:c3:a4:55:7a:07: 2a:d4:03:5a:82:16:e5:a7:4b:cc:60:7c:f4:1a:64: 44:4d:b4:2a:39:91:38:35:2f:22:39:86:b4:ad:4d: b7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:51:1F:EF:7A:24:F1:6F:45:4C:0C:E4:79:C0:E7:59:CD:6B:FA:AA X509v3 Authority Key Identifier: keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8d:7f:9f:0a:7d:b0:01:f6:f2:35:7c:a7:ad:35:a8:15:29: 9a:2e:e0:79:5d:fb:05:fb:7f:22:d9:b9:2b:6d:0e:d1:96:6c: c7:7c:cb:40:32:68:f9:ef:cb:ae:42:6c:f2:04:71:f7:53:5d: ff:a0:a9:1d:06:77:27:60:d3:f1:3a:cf:b8:ae:e2:17:b3:93: f3:1e:5a:88:2b:83:82:e7:b2:66:aa:51:a5:c1:b8:00:d7:43: 09:ea:30:d1:05:f4:ca:81:c0:16:12:75:05:4a:7a:2c:98:5b: 5a:82:28:b4:cc:9e:0e:cb:a4:83:e8:49:40:03:fb:f6:b2:f0: c0:86:6a:59:0a:14:38:ba:1d:ce:61:bd:a3:ac:3c:2b:a3:c6: a4:02:6a:48:32:04:7e:54:69:4a:79:3e:64:0b:7c:c1:2d:fb: 94:39:2a:8c:c9:09:67:be:f3:08:bb:47:dd:0e:c6:85:da:93: 0c:4b:80:c9:41:23:90:96:63:70:2e:29:8e:2e:0d:e9:8f:fe: 10:7e:85:86:44:95:40:97:4f:c7:c7:62:41:3b:c8:9c:19:6d: 07:6f:dc:60:89:57:b8:8d:1f:6b:a1:a7:92:94:3c:ff:8e:17: 36:33:c3:65:2c:16:87:ef:f7:33:de:97:c5:16:c4:f3:35:b0: ca:9d:89:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4 OTA1M0Q0MzYwHhcNMjUwNDI0MjAxMTA4WhcNMjUwNTAxMjAxMTA4WjAYMRYwFAYD VQQDEw02ODBhOWFkYy02ZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquxXoN9ZGf6GnCcd5YXzeNNC3Z31xG9tt5VPyP0krWKM6pmjTTqjDF88UdFx xGfDXX59++G6O7TrGO4T/x5NLkHEbUzrfBrkh3oQ8uyK4JDyURdZ6xVxZnOoSRRS Rd+1iw0slfpXA/s93SxyTzmfCSUbhHabcBtG0+0wES4t7X/0MnsI8P6nZm2Zxjet bHRu0zfA806aJOo2CFDdos46Y5D+A2jiXQx/sUtc4cSBqVWa2leCv3Oq8RJqRt3p AnxnOfSvuzLOwAjlxjACNc2k3earS+sb3r9rT7s8w6RVegcq1ANaghblp0vMYHz0 GmRETbQqOZE4NS8iOYa0rU23QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1RH+96 JPFvRUwM5HnA51nNa/qqMB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj MU1QOEM5WVFrY1NKQlQxRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbjX+fCn2wAfbyNXynrTWoFSmaLuB5XfsF+38i2bkrbQ7RlmzHfMtA Mmj578uuQmzyBHH3U13/oKkdBncnYNPxOs+4ruIXs5PzHlqIK4OC57JmqlGlwbgA 10MJ6jDRBfTKgcAWEnUFSnosmFtagii0zJ4Oy6SD6ElAA/v2svDAhmpZChQ4uh3O Yb2jrDwro8akAmpIMgR+VGlKeT5kC3zBLfuUOSqMyQlnvvMIu0fdDsaF2pMMS4DJ QSOQlmNwLimOLg3pj/4QfoWGRJVAl0/Hx2JBO8icGW0Hb9xgiVe4jR9roaeSlDz/ jhc2M8NlLBaH7/cz3pfFFsTzNbDKnYkk -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:29 2025 by rpki-client