$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft File: SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json) Hash identifier: 5omUCD5EiwNR/9NIy+V3WEO5e16ZCXFWjEHgXQfDNTg= Subject key identifier: D1:F5:B0:4E:AD:8C:19:77:2E:5E:43:E2:97:FA:C8:52:9E:7E:E9:C4 Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F Certificate issuer: /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Certificate serial: 1FB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft Manifest number: 1FAC Signing time: Thu 24 Apr 2025 16:00:28 +0000 Manifest this update: Thu 24 Apr 2025 16:00:27 +0000 Manifest next update: Thu 01 May 2025 16:00:27 +0000 Files and hashes: 1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: 5SxmFxaSo0G3eBPpJQr591cVp+c+F0k1q1yp/FpccMM=) 2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: Tkmf4L8GEt+Ymff0VMzuLeDCbIi7tjYtfIPQH26ZWWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8120 (0x1fb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Validity Not Before: Apr 24 16:00:27 2025 GMT Not After : May 1 16:00:27 2025 GMT Subject: CN=680a601c-91a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:fb:8b:b8:c6:ff:54:a8:0c:64:67:83:d8: 0e:f5:24:0c:7c:9d:81:f7:5f:35:d9:d0:62:5e:b8: a3:e4:04:30:04:cc:59:e9:62:6e:62:e7:b8:f2:7f: 5a:74:5c:4c:2d:4a:6d:b9:42:f8:ea:da:b8:f7:f1: c8:fc:aa:50:b7:6b:b0:64:43:56:43:05:3e:a1:21: 17:f3:07:6e:25:ab:aa:10:6b:08:63:f2:ee:7a:7b: c7:68:bc:61:05:ae:a1:24:6e:d2:6b:39:30:50:b0: 80:27:58:3e:cf:b2:d2:96:a6:00:52:ae:d9:2d:20: 47:b8:e2:11:6c:79:3e:ad:3b:b6:d0:1c:a0:35:e2: d1:d4:66:4e:b1:2d:54:b2:9f:70:5b:54:39:b8:b5: d8:19:67:21:f3:41:06:47:6b:86:e0:cc:23:c8:df: c0:53:1c:23:8c:de:24:58:a9:e7:a1:47:a6:65:4e: 29:a0:4f:c9:0a:8e:f1:41:a2:1b:5c:22:1e:ba:b9: b5:24:8f:50:56:cf:82:0e:9c:1b:c6:54:f4:08:42: da:50:d3:32:72:27:b6:28:b0:7b:0b:c9:75:40:16: de:df:85:f4:2d:69:9f:86:5a:35:60:4c:e9:2e:5b: 05:27:3e:35:60:e2:d6:9f:7a:b0:ae:36:3b:8e:3a: 6a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F5:B0:4E:AD:8C:19:77:2E:5E:43:E2:97:FA:C8:52:9E:7E:E9:C4 X509v3 Authority Key Identifier: keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:90:8c:a5:13:09:41:2b:b1:03:da:d4:f3:eb:b6:fe:8e:cc: 37:0b:15:71:1d:d3:9a:f5:6a:84:3d:ea:d1:fc:5f:be:06:13: 57:56:b5:a1:4c:00:b3:32:cf:ec:9a:d5:26:92:fa:eb:c8:9f: 91:5c:32:ce:3b:f1:fd:30:81:71:27:7a:ad:56:b6:4a:1f:e7: 92:f6:f6:07:3b:33:7a:75:7b:df:0c:1e:4d:7a:86:3d:ff:df: 38:49:c6:50:b9:d2:4a:87:52:45:ba:99:2a:02:14:19:fa:4f: 07:f5:69:50:5d:76:e8:49:20:a3:c5:cc:e9:0b:06:37:63:57: e8:91:52:41:13:2d:f8:b0:10:97:cb:7d:ab:19:af:56:74:5b: bd:28:14:96:eb:7b:42:f0:79:4a:8b:c5:61:ed:76:a8:d6:23: ce:4e:ac:7d:59:5b:60:b5:bb:ef:7d:0f:58:27:6c:1a:4f:5d: 4a:44:13:a1:0e:0b:e1:ea:b4:3c:81:5e:90:eb:63:b9:3b:70: 83:b6:a8:36:5e:f0:75:94:3b:a6:f1:11:b0:dd:62:7b:33:e2: 6f:d9:15:78:c4:bf:eb:5d:46:ac:06:01:6b:ec:76:dd:59:7a: 0a:39:be:ac:3f:5a:06:b0:c7:f1:b3:1e:a3:15:1a:04:39:1a: 9d:ae:d6:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQTkxMTAvBgNVBAUTKDRBNTc1RjJCRjMzMTI0NjJGODU2NDYxQUU5REREMEEz ODQ0QUJEMkYwHhcNMjUwNDI0MTYwMDI3WhcNMjUwNTAxMTYwMDI3WjAYMRYwFAYD VQQDEw02ODBhNjAxYy05MWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kf7i7jG/1SoDGRng9gO9SQMfJ2B91812dBiXrij5AQwBMxZ6WJuYue48n9a dFxMLUptuUL46tq49/HI/KpQt2uwZENWQwU+oSEX8wduJauqEGsIY/LuenvHaLxh Ba6hJG7SazkwULCAJ1g+z7LSlqYAUq7ZLSBHuOIRbHk+rTu20BygNeLR1GZOsS1U sp9wW1Q5uLXYGWch80EGR2uG4MwjyN/AUxwjjN4kWKnnoUemZU4poE/JCo7xQaIb XCIeurm1JI9QVs+CDpwbxlT0CELaUNMycie2KLB7C8l1QBbe34X0LWmfhlo1YEzp LlsFJz41YOLWn3qwrjY7jjpqXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH1sE6t jBl3Ll5D4pf6yFKefunEMB8GA1UdIwQYMBaAFEpXXyvzMSRi+FZGGund0KOESr0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBOS84M0MzMTEwODMz NUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpHTDRWa1lhNmQzUW80Ukt2 UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NsZGZLX014SkdMNFZrWWE2ZDNRbzRSS3ZTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBOS84M0MzMTEwODMzNUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpH TDRWa1lhNmQzUW80Ukt2UzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvkIylEwlBK7ED2tTz67b+jsw3CxVxHdOa9WqEPerR/F++BhNXVrWh TACzMs/smtUmkvrryJ+RXDLOO/H9MIFxJ3qtVrZKH+eS9vYHOzN6dXvfDB5NeoY9 /984ScZQudJKh1JFupkqAhQZ+k8H9WlQXXboSSCjxczpCwY3Y1fokVJBEy34sBCX y32rGa9WdFu9KBSW63tC8HlKi8Vh7Xao1iPOTqx9WVtgtbvvfQ9YJ2waT11KRBOh Dgvh6rQ8gV6Q62O5O3CDtqg2XvB1lDum8RGw3WJ7M+Jv2RV4xL/rXUasBgFr7Hbd WXoKOb6sP1oGsMfxsx6jFRoEORqdrtbt -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:56 2025 by rpki-client