$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft File: sboYaLp865TN1k8FdBOaAaULkNU.mft (raw, json) Hash identifier: CPJbY06TGdHjqI4PnBz+tgj8a1Et0Ld+MnwL5xaq0pk= Subject key identifier: 10:7F:66:5D:62:51:A5:AF:34:80:DD:6C:1B:13:6B:88:7F:E0:D9:86 Authority key identifier: B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5 Certificate issuer: /CN=A91DF233/serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft Manifest number: 4A Signing time: Fri 25 Apr 2025 06:21:29 +0000 Manifest this update: Fri 25 Apr 2025 06:21:29 +0000 Manifest next update: Fri 02 May 2025 06:21:28 +0000 Files and hashes: 1: sboYaLp865TN1k8FdBOaAaULkNU.crl (hash: hEOf0uunzWMamo8CC+gzKQS27Q1rVL4XwE1eISyPEbU=) 2: 386FD4FCB37D11EF8D6EAF63C4F9AE02.roa (hash: aJEyHw65stDKmv/A9AlKIYdtN6qUu7eSq0Nk49wiYVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF233, serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5 Validity Not Before: Apr 25 06:21:29 2025 GMT Not After : May 2 06:21:28 2025 GMT Subject: CN=680b29e9-5c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:ce:c3:bb:de:f0:cf:1a:6d:ea:c8:68:40: 12:99:2c:2a:14:f3:6a:3e:64:5f:48:4b:ec:56:38: 6b:73:d9:09:4f:83:74:6b:f3:b5:9e:4d:d9:8c:0b: ba:a8:89:47:1b:de:2c:27:b0:04:ce:35:72:b8:2c: 22:cf:d1:05:68:19:64:cb:bf:f5:b6:56:3a:db:8f: ba:79:7d:e2:f0:90:2a:6f:20:fa:00:0e:8c:51:73: 3c:7d:a0:bd:81:8f:1b:25:ea:f2:52:bd:f0:26:f8: 34:b4:67:ce:db:c0:90:af:2c:1e:ec:ef:4e:a4:23: 81:f9:70:dc:27:b1:4a:31:1c:cf:e0:90:19:21:e5: 70:16:a1:9c:3a:68:db:47:cf:6f:9d:59:e5:1e:3a: 50:2b:66:fe:a3:40:cd:ee:a4:cb:33:7e:a2:2a:09: 16:92:77:94:10:03:d0:be:d7:e8:44:32:c5:bc:7b: 24:28:10:09:8a:18:ac:ed:21:ab:64:46:28:6c:94: 80:01:05:71:f2:46:39:3f:b1:55:6a:ec:22:ae:9c: 29:d4:7b:6e:89:7d:0d:90:6f:25:c3:ee:a8:b7:d3: 8d:fd:78:ed:bd:da:93:0c:8b:c8:19:e7:57:24:a3: 18:d6:45:90:1f:d9:03:b6:37:78:9b:7b:65:b8:b9: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7F:66:5D:62:51:A5:AF:34:80:DD:6C:1B:13:6B:88:7F:E0:D9:86 X509v3 Authority Key Identifier: keyid:B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f3:d6:2d:83:c1:f6:20:4b:24:e5:ee:63:13:a8:ff:4e:8c: 34:8a:90:11:ad:ff:83:e3:d7:d8:f8:5c:87:cb:ae:57:5f:9b: 2c:07:05:45:d5:a2:d1:fc:8a:45:77:77:f5:f1:38:38:70:99: 10:a6:93:35:7a:41:74:ef:b9:5a:52:2f:26:82:0e:bb:4c:03: 4d:c3:b3:70:73:35:12:72:4d:b9:1e:71:14:c7:f2:cf:f0:77: 48:ad:4c:6f:ec:d0:b2:dc:35:90:a6:77:e9:a0:81:bf:cc:ca: 9d:ef:d3:a8:8a:b8:71:87:6b:8e:54:2a:c7:28:3b:90:bd:cd: 7f:5f:c8:13:c9:8a:53:d0:42:62:d3:89:9d:25:4e:73:0d:34: 22:5d:d4:5b:1c:bb:ec:50:03:0e:99:5d:ed:bb:dc:ce:89:64: 40:8c:10:e4:1c:f3:b6:fb:15:e5:c9:e2:56:2b:b3:d4:c0:c4: ac:b6:a9:d1:d4:ed:75:80:0b:7a:9a:4a:65:f1:71:a4:6a:20: e9:b9:36:27:b1:0c:63:0f:49:77:80:6f:13:f3:3d:3f:ec:74: eb:e6:35:89:22:8c:b1:a3:fc:d3:95:4a:d4:d3:b7:1a:4e:ec: 1a:74:23:51:9c:b7:6e:fd:b8:da:ef:f4:3e:d6:6d:fa:ea:68: d5:8d:c8:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjIzMzExMC8GA1UEBRMoQjFCQTE4NjhCQTdDRUI5NENERDY0RjA1NzQxMzlBMDFB NTBCOTBENTAeFw0yNTA0MjUwNjIxMjlaFw0yNTA1MDIwNjIxMjhaMBgxFjAUBgNV BAMTDTY4MGIyOWU5LTVjMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYfM7Du97wzxpt6shoQBKZLCoU82o+ZF9IS+xWOGtz2QlPg3Rr87WeTdmMC7qo iUcb3iwnsATONXK4LCLP0QVoGWTLv/W2Vjrbj7p5feLwkCpvIPoADoxRczx9oL2B jxsl6vJSvfAm+DS0Z87bwJCvLB7s706kI4H5cNwnsUoxHM/gkBkh5XAWoZw6aNtH z2+dWeUeOlArZv6jQM3upMszfqIqCRaSd5QQA9C+1+hEMsW8eyQoEAmKGKztIatk RihslIABBXHyRjk/sVVq7CKunCnUe26JfQ2QbyXD7qi30439eO292pMMi8gZ51ck oxjWRZAf2QO2N3ibe2W4uYoJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEH9mXWJR pa80gN1sGxNriH/g2YYwHwYDVR0jBBgwFoAUsboYaLp865TN1k8FdBOaAaULkNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMjMzLzExNEU3REJBQjM3 ODExRUY4ODMyMkIwRkM0RjlBRTAyL3Nib1lhTHA4NjVUTjFrOEZkQk9hQWFVTGtO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2JvWWFMcDg2NVROMWs4RmRCT2FBYVVMa05VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MjMzLzExNEU3REJBQjM3ODExRUY4ODMyMkIwRkM0RjlBRTAyL3Nib1lhTHA4NjVU TjFrOEZkQk9hQWFVTGtOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADjz1i2DwfYgSyTl7mMTqP9OjDSKkBGt/4Pj19j4XIfLrldfmywHBUXV otH8ikV3d/XxODhwmRCmkzV6QXTvuVpSLyaCDrtMA03Ds3BzNRJyTbkecRTH8s/w d0itTG/s0LLcNZCmd+mggb/Myp3v06iKuHGHa45UKscoO5C9zX9fyBPJilPQQmLT iZ0lTnMNNCJd1Fscu+xQAw6ZXe273M6JZECMEOQc87b7FeXJ4lYrs9TAxKy2qdHU 7XWAC3qaSmXxcaRqIOm5NiexDGMPSXeAbxPzPT/sdOvmNYkijLGj/NOVStTTtxpO 7Bp0I1Gct279uNrv9D7WbfrqaNWNyJ4= -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:34 2025 by rpki-client