$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: AVTmuZZ/fGCWpgTW7tQ7ZXUd8AwisEPDX7eaOioxsSU= Subject key identifier: AB:DE:37:6B:EA:13:62:66:1C:01:38:23:19:BF:BE:D8:7D:73:90:35 Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 078B Signing time: Thu 24 Apr 2025 21:11:26 +0000 Manifest this update: Thu 24 Apr 2025 21:11:26 +0000 Manifest next update: Thu 01 May 2025 21:11:26 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: dJfpSn3UCqZv11rstSy+eR5txBOLku49aMO8enUnziY=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: Y7eFgzF/UlzHZlIaZMMT6p/6Ir1lnrNlq+1rkd8Vdws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Apr 24 21:11:26 2025 GMT Not After : May 1 21:11:26 2025 GMT Subject: CN=680aa8fe-cd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:71:58:74:a2:b1:12:07:d0:37:1c:62:12: f1:45:88:40:39:8b:73:41:0e:8b:96:37:47:e5:ad: 68:0e:5d:c1:a3:9b:ae:dd:a1:a5:40:1a:d1:8c:21: b0:ac:b9:71:a3:3b:e2:02:e5:0f:dd:06:5b:56:33: 97:a4:e6:81:14:cc:64:a4:bd:cd:08:fb:a1:62:3e: 2f:a8:bc:73:62:93:48:48:ea:8a:e8:f2:e1:29:5b: 16:3a:10:9d:f4:93:3d:e9:87:58:ee:cd:31:92:d1: fa:34:e5:d3:23:82:c4:c6:63:8e:d7:0e:17:76:6f: 5c:a0:85:c9:d1:f0:18:a6:da:ea:ef:3d:88:62:2f: 93:1b:6a:22:fd:4b:09:7d:a5:32:cb:2f:eb:04:c2: 35:6d:d4:ef:8e:27:04:9c:b9:8c:6b:87:e6:11:8e: 2a:0b:ea:b2:ec:2b:a5:04:cd:27:57:29:d4:03:ce: ea:4a:25:3f:97:34:5e:0b:3b:48:ec:b2:38:0d:40: 21:6f:52:f9:7c:e3:26:03:b7:87:09:52:84:4e:fa: 70:03:57:3c:7f:d2:99:e2:75:39:6a:51:e7:7f:f8: df:9f:87:0b:e8:0d:ea:29:3a:e6:be:b0:2e:26:52: 44:b3:84:df:0f:33:5c:ba:2c:1e:f3:cc:35:04:25: 78:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DE:37:6B:EA:13:62:66:1C:01:38:23:19:BF:BE:D8:7D:73:90:35 X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:31:27:73:61:d3:3a:b7:47:79:e4:e5:d7:3c:d2:7f:9e:c5: 96:c7:47:9a:58:07:24:4c:74:3a:f0:e5:96:43:81:1a:31:93: 0e:01:9b:5e:ea:86:b7:e9:de:d1:0e:98:3c:18:c0:7c:1d:b9: 93:b3:c0:b5:1e:8b:45:2a:fa:22:f3:b7:36:a4:0a:ad:fc:49: cc:ea:7a:39:5e:ff:83:21:34:cc:3a:0f:34:56:c0:b3:3d:ef: 12:d2:65:5f:aa:11:9b:92:d2:72:47:70:1e:51:d5:73:98:fa: 17:1e:ce:e7:58:06:9e:e6:3f:ba:59:2f:f8:7e:44:88:75:a6: ad:55:50:c6:00:5b:e6:e6:0e:7c:14:2b:e5:3e:6d:b7:7f:8b: 81:80:03:6a:a8:9a:ad:47:50:64:6f:79:21:ef:56:bb:0f:c4: d0:2e:d9:3b:77:fb:a7:0b:29:4d:35:8f:cc:72:34:9e:bd:aa: fe:c9:5b:e6:2d:1f:0d:17:fc:14:93:98:99:c6:1f:ff:6a:53: f6:07:e7:79:36:7b:c2:f5:05:f4:13:04:e8:ec:f0:a3:9c:11: 4e:8c:e8:33:39:f2:88:1c:1a:44:1e:a6:13:31:52:07:c3:5e: 10:a5:d4:d1:68:a6:96:43:51:38:61:2f:2d:72:c6:8e:9e:21: 02:78:13:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjUwNDI0MjExMTI2WhcNMjUwNTAxMjExMTI2WjAYMRYwFAYD VQQDEw02ODBhYThmZS1jZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxadxWHSisRIH0DccYhLxRYhAOYtzQQ6LljdH5a1oDl3Bo5uu3aGlQBrRjCGw rLlxozviAuUP3QZbVjOXpOaBFMxkpL3NCPuhYj4vqLxzYpNISOqK6PLhKVsWOhCd 9JM96YdY7s0xktH6NOXTI4LExmOO1w4Xdm9coIXJ0fAYptrq7z2IYi+TG2oi/UsJ faUyyy/rBMI1bdTvjicEnLmMa4fmEY4qC+qy7CulBM0nVynUA87qSiU/lzReCztI 7LI4DUAhb1L5fOMmA7eHCVKETvpwA1c8f9KZ4nU5alHnf/jfn4cL6A3qKTrmvrAu JlJEs4TfDzNcuiwe88w1BCV4QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKveN2vq E2JmHAE4Ixm/vth9c5A1MB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeMSdzYdM6t0d55OXXPNJ/nsWWx0eaWAckTHQ68OWWQ4EaMZMOAZte 6oa36d7RDpg8GMB8HbmTs8C1HotFKvoi87c2pAqt/EnM6no5Xv+DITTMOg80VsCz Pe8S0mVfqhGbktJyR3AeUdVzmPoXHs7nWAae5j+6WS/4fkSIdaatVVDGAFvm5g58 FCvlPm23f4uBgANqqJqtR1Bkb3kh71a7D8TQLtk7d/unCylNNY/McjSevar+yVvm LR8NF/wUk5iZxh//alP2B+d5NnvC9QX0EwTo7PCjnBFOjOgzOfKIHBpEHqYTMVIH w14QpdTRaKaWQ1E4YS8tcsaOniECeBMm -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:13 2025 by rpki-client