$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json) Hash identifier: XGBITNZHVjwB7VG4JdZBoRimh+VZmrZv+jf6Uk50abM= Subject key identifier: 2F:F6:05:D9:EC:EA:2D:AF:03:A4:E7:64:46:6D:9A:CE:9E:03:AF:75 Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft Manifest number: 3476 Signing time: Mon 28 Apr 2025 15:23:27 +0000 Manifest this update: Mon 28 Apr 2025 15:23:27 +0000 Manifest next update: Mon 05 May 2025 15:23:27 +0000 Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: w6/dzH4g8B1rvcdcuK7NYZ4P8qCsyqQcxsNJsRgvf+g=) 2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: rYc9zikfT0tRDa7zasMyBZpEVFa00oL4CS7Q4S+HlQg=) 3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: 0DLMcfV/Llm+3fYXZIJn54Ysw/AzVCrvYXgQgG2YQmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Validity Not Before: Apr 28 15:23:27 2025 GMT Not After : May 5 15:23:27 2025 GMT Subject: CN=680f9d6f-0144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:df:d0:ae:66:a1:ed:78:26:e7:b4:d9:7f:5d: c2:ae:b6:6f:c4:a2:07:d4:d9:c5:5e:9a:71:20:ff: 53:7d:f4:9f:6d:13:12:ce:b1:04:e2:66:cd:95:b6: 75:f1:4e:66:2d:16:8e:1b:af:5e:28:97:c9:45:db: 12:fa:94:7f:ee:66:1b:81:2c:a9:ff:49:d4:2c:50: 03:b7:65:f6:07:85:4c:5a:b3:06:bc:41:a5:ab:e3: 96:df:9c:16:48:f1:7e:a3:fd:72:e8:37:2c:2f:c4: cf:d5:e9:f1:39:57:1b:b6:14:f8:f8:cb:ce:c9:71: 2a:16:94:1f:41:c4:70:fd:c9:68:6e:ae:ff:cf:ed: f9:d4:43:73:03:45:3e:e1:77:e2:bb:28:b6:16:6a: a1:d0:74:b0:29:59:07:fe:55:8a:0c:fc:e2:6c:ed: 85:6e:8c:54:07:2e:7d:e3:67:25:08:b6:99:48:44: 38:85:40:ea:1a:94:36:0a:1e:86:9a:ae:e8:dc:ff: 7b:0e:da:61:ec:a5:f9:e6:92:19:06:b0:61:ed:f8: 9d:fe:32:0a:94:50:cc:8e:50:86:ef:bd:c4:ba:52: 93:84:a0:52:29:c3:df:f4:07:41:0a:02:a0:c7:e1: 4a:40:c4:e0:a7:05:b9:24:4f:f2:66:7e:b2:87:6b: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F6:05:D9:EC:EA:2D:AF:03:A4:E7:64:46:6D:9A:CE:9E:03:AF:75 X509v3 Authority Key Identifier: keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ff:83:a8:63:4f:3a:41:0e:23:79:dc:f6:5a:88:7d:75:04: 96:63:dc:d6:a4:b0:7b:68:4a:6d:3d:3a:b3:01:7a:59:77:7a: 55:70:55:df:1a:59:ab:cc:f8:8c:1a:bc:a2:b9:21:ef:a2:6b: be:fc:2a:ad:c7:80:f2:85:f7:68:02:b8:fa:72:7d:09:a6:47: 47:9e:2c:33:0d:2b:8d:27:b9:68:6a:1d:73:97:ba:84:60:b7: 4f:09:39:16:96:26:28:10:56:5f:79:9a:f2:33:dd:b3:b8:5a: f4:36:a8:0a:99:e0:41:3e:3f:b7:e9:e6:21:68:0c:0e:5b:6e: 3c:09:97:56:3d:9e:b4:94:fe:ed:98:88:4d:e4:ee:f4:34:c8: 26:e3:e2:90:0d:df:7f:95:3f:4f:ab:18:12:e2:10:71:2e:bc: 5e:17:91:34:99:1d:d3:e2:a2:36:3b:9e:15:76:31:3c:34:c2: 81:23:11:56:3b:42:f2:19:e2:45:16:e1:09:2f:45:ce:a5:e5: c5:ec:c0:f1:23:9d:61:d8:11:00:c2:d0:ea:0c:f7:8c:7c:d3: d6:00:3f:f4:ad:96:6b:42:df:5b:09:e0:4e:96:c6:d8:93:b8: 64:2a:a5:76:14:82:d8:ec:84:c3:29:5f:86:25:ea:50:03:23: 5a:89:3f:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkUxMTAvBgNVBAUTKDQ5N0IxQzRFQTZEQjE1QTgzMUZCQzE3MjJBMkY2MzQ3 NDUwQ0YzNDEwHhcNMjUwNDI4MTUyMzI3WhcNMjUwNTA1MTUyMzI3WjAYMRYwFAYD VQQDEw02ODBmOWQ2Zi0wMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3N/Qrmah7Xgm57TZf13CrrZvxKIH1NnFXppxIP9TffSfbRMSzrEE4mbNlbZ1 8U5mLRaOG69eKJfJRdsS+pR/7mYbgSyp/0nULFADt2X2B4VMWrMGvEGlq+OW35wW SPF+o/1y6DcsL8TP1enxOVcbthT4+MvOyXEqFpQfQcRw/clobq7/z+351ENzA0U+ 4Xfiuyi2Fmqh0HSwKVkH/lWKDPzibO2FboxUBy5942clCLaZSEQ4hUDqGpQ2Ch6G mq7o3P97Dtph7KX55pIZBrBh7fid/jIKlFDMjlCG773EulKThKBSKcPf9AdBCgKg x+FKQMTgpwW5JE/yZn6yh2uRFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/2Bdns 6i2vA6TnZEZtms6eA691MB8GA1UdIwQYMBaAFEl7HE6m2xWoMfvBciovY0dFDPNB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2RS9ERDQ1NUNEQTFE QTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZhZ3gtOEZ5S2k5alIwVU04 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYc2NUcWJiRmFneC04RnlLaTlqUjBVTTgwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2RS9ERDQ1NUNEQTFEQTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZh Z3gtOEZ5S2k5alIwVU04MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP/4OoY086QQ4jedz2Woh9dQSWY9zWpLB7aEptPTqzAXpZd3pVcFXf GlmrzPiMGryiuSHvomu+/Cqtx4DyhfdoArj6cn0JpkdHniwzDSuNJ7loah1zl7qE YLdPCTkWliYoEFZfeZryM92zuFr0NqgKmeBBPj+36eYhaAwOW248CZdWPZ60lP7t mIhN5O70NMgm4+KQDd9/lT9PqxgS4hBxLrxeF5E0mR3T4qI2O54VdjE8NMKBIxFW O0LyGeJFFuEJL0XOpeXF7MDxI51h2BEAwtDqDPeMfNPWAD/0rZZrQt9bCeBOlsbY k7hkKqV2FILY7ITDKV+GJepQAyNaiT80 -----END CERTIFICATE-----Generated at Tue Apr 29 11:30:59 2025 by rpki-client