$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json) Hash identifier: CAJWP8ew/Ll0cBohdk+9x4vSs/HTrlxISHANYbCPxa4= Subject key identifier: 81:22:57:E6:6A:08:7A:53:82:EE:61:07:49:A2:2D:0B:84:CC:45:44 Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft Manifest number: 014E Signing time: Fri 25 Apr 2025 03:22:23 +0000 Manifest this update: Fri 25 Apr 2025 03:22:23 +0000 Manifest next update: Fri 02 May 2025 03:22:23 +0000 Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: ERCUU99TxSek0hF+8WO8txyS0y60qG50xEJ5GQbH9CQ=) 2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 54qHC7QVMBwoC0O3cMcEci4Yy+Xl8hxRZfIa8v1MHj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Validity Not Before: Apr 25 03:22:23 2025 GMT Not After : May 2 03:22:23 2025 GMT Subject: CN=680affef-2b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:e3:3c:de:a7:e2:70:6d:36:fc:1b:b2:b5: 87:36:28:c7:eb:b1:31:f4:6a:ae:b2:6d:5c:50:18: eb:bd:b1:da:6e:6c:4c:ea:8f:32:34:7f:d3:75:af: f5:24:ac:27:17:c7:4d:c1:79:e0:ac:c5:a7:db:a8: 1a:1a:ae:6b:46:01:5c:4c:1b:36:6a:ea:25:05:f0: da:24:84:97:40:be:03:f7:aa:bb:b0:3d:7b:9d:40: f3:7d:8e:57:4c:27:01:36:eb:1b:3f:fc:7d:f4:58: ad:50:37:d1:bb:81:c7:6c:3e:51:d9:52:98:8a:f8: 48:02:9e:43:21:f1:43:ae:de:cc:b6:17:be:8b:ab: e0:5d:8c:1b:3f:7b:dd:ff:13:cd:9e:9f:71:19:f4: 43:03:66:55:1a:7d:73:c5:5e:89:62:63:e0:10:13: db:50:79:cb:0d:2e:62:a6:26:44:73:5f:e1:65:34: 21:22:d4:47:14:3d:02:b8:91:b5:ff:38:a0:4e:9d: f9:f9:d9:d8:1f:9f:d1:e9:21:64:a8:6a:ab:08:de: 23:30:c0:06:33:7f:fd:68:8c:86:9d:f0:1c:77:ea: 10:b3:ed:84:7c:99:f8:6d:89:66:b4:a6:25:8e:db: be:bf:b5:aa:f7:66:64:09:a6:01:07:a9:e6:25:de: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:22:57:E6:6A:08:7A:53:82:EE:61:07:49:A2:2D:0B:84:CC:45:44 X509v3 Authority Key Identifier: keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:52:cd:25:ee:78:dc:4c:25:87:ea:4b:27:e2:b3:ff:35:cd: 3f:bc:57:46:74:c5:0a:e9:46:35:c7:bc:e3:62:21:bb:17:17: 36:f2:1f:6b:89:3f:ec:dd:99:f4:64:0e:95:fc:1c:2a:ab:7d: da:1e:88:28:22:d9:ea:d2:6e:85:01:96:0b:7a:84:38:bd:54: 4b:d2:49:1c:28:1a:3a:e0:03:80:f0:60:85:35:1f:16:3a:72: 47:86:24:da:d3:f1:75:43:a8:d9:90:ba:71:92:22:ff:c9:7b: 01:1c:19:c7:92:23:39:42:6e:f1:1d:69:bb:c3:9a:f9:80:ac: 53:83:f9:30:c6:5a:eb:21:66:fc:c2:c9:c9:dd:5c:93:a0:3c: 75:b0:fa:d5:8b:b5:33:c7:92:77:3b:7d:81:16:a5:b4:14:d1: 4b:98:b9:25:a3:c0:9b:29:65:9d:95:23:19:28:c6:a6:3e:93: 1f:f9:b6:8b:27:40:00:8e:4a:fb:2c:fa:31:0f:18:47:33:d7: fa:2e:49:0e:a5:fa:10:02:a5:b2:12:a2:17:fe:d6:4f:2b:86: 1a:4f:95:7e:53:09:ce:e2:21:ce:45:d8:09:87:f1:60:87:79: 19:5b:a2:31:4c:e8:df:e2:7f:0b:34:0d:ac:38:b7:b7:ed:3c: d3:73:55:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD NEY4OTdCNzYwHhcNMjUwNDI1MDMyMjIzWhcNMjUwNTAyMDMyMjIzWjAYMRYwFAYD VQQDEw02ODBhZmZlZi0yYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtx3jPN6n4nBtNvwbsrWHNijH67Ex9Gqusm1cUBjrvbHabmxM6o8yNH/Tda/1 JKwnF8dNwXngrMWn26gaGq5rRgFcTBs2auolBfDaJISXQL4D96q7sD17nUDzfY5X TCcBNusbP/x99FitUDfRu4HHbD5R2VKYivhIAp5DIfFDrt7Mthe+i6vgXYwbP3vd /xPNnp9xGfRDA2ZVGn1zxV6JYmPgEBPbUHnLDS5ipiZEc1/hZTQhItRHFD0CuJG1 /zigTp35+dnYH5/R6SFkqGqrCN4jMMAGM3/9aIyGnfAcd+oQs+2EfJn4bYlmtKYl jtu+v7Wq92ZkCaYBB6nmJd5JCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEiV+Zq CHpTgu5hB0miLQuEzEVEMB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1 eHptLXBzMVo1NUxFLUplM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiUs0l7njcTCWH6ksn4rP/Nc0/vFdGdMUK6UY1x7zjYiG7Fxc28h9r iT/s3Zn0ZA6V/Bwqq33aHogoItnq0m6FAZYLeoQ4vVRL0kkcKBo64AOA8GCFNR8W OnJHhiTa0/F1Q6jZkLpxkiL/yXsBHBnHkiM5Qm7xHWm7w5r5gKxTg/kwxlrrIWb8 wsnJ3VyToDx1sPrVi7Uzx5J3O32BFqW0FNFLmLklo8CbKWWdlSMZKMamPpMf+baL J0AAjkr7LPoxDxhHM9f6LkkOpfoQAqWyEqIX/tZPK4YaT5V+UwnO4iHORdgJh/Fg h3kZW6IxTOjf4n8LNA2sOLe37TzTc1WM -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:19 2025 by rpki-client