$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json) Hash identifier: sg2n205vqEMREY+mnA2vDk0BNO/z0BzE7j2Wc5PiWSY= Subject key identifier: D9:F6:DB:58:22:53:18:A5:01:52:BA:3D:03:EE:66:81:71:80:5E:A0 Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Certificate serial: 06D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft Manifest number: 06CB Signing time: Thu 24 Apr 2025 21:51:35 +0000 Manifest this update: Thu 24 Apr 2025 21:51:35 +0000 Manifest next update: Thu 01 May 2025 21:51:35 +0000 Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: iI7raaA8Y3dzdyQDFuc5eFNEgW6wyWTDf6suYT03ycA=) 2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=) 3: 56617572537F11EB9C970658C4F9AE02.roa (hash: xS7amPwlmGL+CP12HQjnbonilF649h5RUnRZcUUg8FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Validity Not Before: Apr 24 21:51:35 2025 GMT Not After : May 1 21:51:35 2025 GMT Subject: CN=680ab267-e57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:8e:09:8d:e1:a6:99:19:9a:bb:b8:06:24: 4d:02:f0:09:72:a4:d9:a5:57:8a:fb:74:79:35:fe: 99:b4:2c:83:20:70:e5:d5:f5:bd:a8:fa:c8:78:ca: dd:f7:27:b6:e1:d2:15:73:f8:1b:0c:cf:7a:d6:9b: d9:42:8e:e8:23:67:6c:11:53:85:e3:cd:f5:a4:2d: d6:70:a2:30:e4:7a:b3:1c:48:11:95:8e:38:ad:42: b5:46:37:c2:14:f2:1a:2f:18:00:11:db:1d:88:99: 5e:61:07:a2:1e:c2:f2:ba:a6:4f:da:6e:af:10:7a: cd:ae:f5:27:71:69:d9:f3:bf:f2:42:99:e5:40:2c: f5:4e:76:a0:9a:e4:bc:19:a9:e9:47:df:a9:8f:cd: 8c:37:04:63:c9:a8:45:ac:d1:17:18:19:3f:d0:24: 8a:4b:98:77:ee:07:f7:cd:b3:f6:0a:32:76:62:b9: 3f:ee:2f:50:ef:8e:ee:b9:bd:72:65:1e:61:a2:03: f7:d5:55:58:72:cf:ea:24:73:f5:1d:fa:2d:8c:92: d0:d9:ff:29:9d:18:79:18:fd:05:ca:55:19:aa:7f: 6b:44:30:67:70:78:17:45:bb:e0:8e:93:97:d6:20: 1d:4d:80:c5:c2:70:49:59:6d:a2:fc:d7:1b:6e:67: 74:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F6:DB:58:22:53:18:A5:01:52:BA:3D:03:EE:66:81:71:80:5E:A0 X509v3 Authority Key Identifier: keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b6:86:e6:f3:d0:a7:18:84:c5:e0:d0:5f:3b:fb:46:21:bb: 93:52:c6:2a:34:f5:17:00:85:f0:82:c5:c1:3b:5c:32:ca:ea: 23:ae:1c:9c:51:51:7b:9c:4c:36:92:9d:7c:a7:dc:e9:4a:7d: 42:8a:ee:90:e9:1b:37:10:26:a1:2c:95:96:e2:44:74:93:cd: d8:30:f8:a3:2a:3c:f6:d1:7d:d5:2d:b7:43:99:66:15:70:05: 36:74:92:9d:00:ef:9c:43:ef:c9:f0:12:1f:dc:34:d3:29:46: 68:32:94:dc:6d:b5:9d:4d:b2:49:f7:b1:25:f0:56:52:37:ab: 3e:f4:ad:f5:20:6d:7c:29:d8:47:99:81:e4:ed:cc:6a:14:2f: aa:9f:ec:e6:2a:0b:a3:5d:98:7d:a6:61:1b:0f:d2:6b:a3:29: 4f:7e:84:3f:6e:e9:38:dd:2a:02:2e:6e:5d:b7:02:8d:b7:03: 71:c5:2d:03:d7:74:02:67:09:a0:dd:04:cd:f5:3a:8e:4f:64: 47:0e:13:b2:be:ab:07:d4:40:7a:bb:f4:b9:a5:ae:fc:0d:e9: 1b:a4:0c:f2:77:61:02:42:13:38:41:3f:34:ff:ce:6c:e2:cf: 57:34:cc:18:e0:c1:92:2c:78:e6:09:2a:bf:b5:64:28:44:1d: 05:d2:e0:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD OUM3OTNCMUUwHhcNMjUwNDI0MjE1MTM1WhcNMjUwNTAxMjE1MTM1WjAYMRYwFAYD VQQDEw02ODBhYjI2Ny1lNTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsaOCY3hppkZmru4BiRNAvAJcqTZpVeK+3R5Nf6ZtCyDIHDl1fW9qPrIeMrd 9ye24dIVc/gbDM961pvZQo7oI2dsEVOF4831pC3WcKIw5HqzHEgRlY44rUK1RjfC FPIaLxgAEdsdiJleYQeiHsLyuqZP2m6vEHrNrvUncWnZ87/yQpnlQCz1TnagmuS8 GanpR9+pj82MNwRjyahFrNEXGBk/0CSKS5h37gf3zbP2CjJ2Yrk/7i9Q747uub1y ZR5hogP31VVYcs/qJHP1HfotjJLQ2f8pnRh5GP0FylUZqn9rRDBncHgXRbvgjpOX 1iAdTYDFwnBJWW2i/Ncbbmd0AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn221gi UxilAVK6PQPuZoFxgF6gMB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm SjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8tobm89CnGITF4NBfO/tGIbuTUsYqNPUXAIXwgsXBO1wyyuojrhyc UVF7nEw2kp18p9zpSn1Ciu6Q6Rs3ECahLJWW4kR0k83YMPijKjz20X3VLbdDmWYV cAU2dJKdAO+cQ+/J8BIf3DTTKUZoMpTcbbWdTbJJ97El8FZSN6s+9K31IG18KdhH mYHk7cxqFC+qn+zmKgujXZh9pmEbD9JroylPfoQ/buk43SoCLm5dtwKNtwNxxS0D 13QCZwmg3QTN9TqOT2RHDhOyvqsH1EB6u/S5pa78DekbpAzyd2ECQhM4QT80/85s 4s9XNMwY4MGSLHjmCSq/tWQoRB0F0uBj -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:54 2025 by rpki-client