$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft File: SLmUWYf2drRs7T3hKEmoo49AaLU.mft (raw, json) Hash identifier: V++3cTZFgB0fSLQlduFqKGpyhrx5GnvIAsGlGIEGcik= Subject key identifier: 8A:6E:EC:43:C2:27:EA:26:41:8B:58:42:01:07:FB:48:BA:A7:8A:2F Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 Certificate issuer: /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Certificate serial: 07DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft Manifest number: 07C9 Signing time: Thu 24 Apr 2025 20:59:22 +0000 Manifest this update: Thu 24 Apr 2025 20:59:22 +0000 Manifest next update: Thu 01 May 2025 20:59:21 +0000 Files and hashes: 1: SLmUWYf2drRs7T3hKEmoo49AaLU.crl (hash: T/4d7e/dlyBmXaqYlW8qZfS+C8W0Dp8yJuAVCM7xtv4=) 2: 37A46070F6F211EA922F482BC4F9AE02.roa (hash: ulbSY28XJFQuMyMRnX4bdktKm/xcu3tL1ZMG0ew7F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2012 (0x7dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BAB, serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Validity Not Before: Apr 24 20:59:22 2025 GMT Not After : May 1 20:59:21 2025 GMT Subject: CN=680aa62a-fdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:fa:b4:7e:f9:8b:cd:bd:21:9b:3f:f4:24: 2d:55:2f:2d:fa:1d:95:7a:89:c7:ac:48:0f:fa:41: 60:69:6b:a5:4a:cd:61:a8:ad:77:49:ae:ec:be:5a: d0:c7:c0:f7:12:59:1b:99:56:dc:ec:0c:c3:ab:b6: 88:48:c1:7a:47:09:49:9d:dc:ba:e2:7d:44:5b:b6: b4:64:c2:90:97:5c:f1:c1:16:79:e9:ac:b0:84:77: a7:40:d5:61:be:47:1e:f6:72:85:b2:e6:9f:a8:e8: 6b:cc:f6:78:85:f1:d2:83:99:43:d9:02:4c:6d:a5: 1e:68:02:df:bc:42:6a:ba:54:e7:32:9a:3b:de:60: 88:32:f3:ce:d9:91:cf:4a:df:55:45:51:ba:8e:1b: 83:87:37:e8:7e:66:f8:ba:b0:f8:55:ca:14:a5:dc: c8:9b:fb:3f:c9:b8:e5:9c:e9:2c:88:52:c0:d8:ff: 90:52:a9:81:a1:8d:8b:5e:e9:c0:59:ee:3f:d2:39: 48:c2:78:28:54:48:d3:b6:e2:20:08:86:30:d7:68: 47:68:6a:92:88:c2:25:f6:ce:98:16:9f:fd:1c:bd: e7:da:91:ee:5d:0d:8d:98:a3:b3:6e:08:6d:ba:9e: 1d:6b:12:24:14:9e:5e:3a:b8:2a:85:d7:7c:53:05: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6E:EC:43:C2:27:EA:26:41:8B:58:42:01:07:FB:48:BA:A7:8A:2F X509v3 Authority Key Identifier: keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:d1:00:66:a4:5b:00:4f:bc:5b:cc:41:81:70:69:d5:66:65: f2:dc:cc:b5:7d:7e:7f:a4:77:89:51:69:3a:35:97:f6:3f:fa: d1:ce:79:9b:e5:8d:a2:b3:39:1f:8b:79:bd:5f:4e:e7:10:a9: f5:aa:d0:4a:12:a1:09:aa:fa:07:3e:43:93:58:90:da:8b:54: 03:ce:e7:de:57:6d:49:6a:2e:77:96:bf:53:af:54:6b:ba:3d: 4a:49:85:42:c4:fd:6f:b0:bd:3f:27:fa:48:1e:9a:47:73:7c: 8c:72:b4:f5:3f:4e:61:71:90:f6:f6:c4:b0:2a:8b:15:58:85: 5a:3c:e8:07:a6:04:6c:0f:f1:04:06:5a:10:72:6e:73:28:76: cc:f7:71:52:02:57:14:10:49:97:d5:1d:82:f3:e3:45:48:59: f6:50:f0:d9:9b:8a:46:34:3d:43:4d:2b:79:06:16:c2:8b:17: f0:b1:e9:15:f4:85:a1:09:e6:dd:46:5d:1d:b8:e5:42:0b:d7: f5:ab:2a:e3:b8:b8:93:75:41:93:c4:a6:9c:80:54:cf:2d:f4: 08:2a:d1:0c:dd:c9:08:67:a3:ca:86:f1:5a:b2:6b:ce:65:be: 31:53:fa:24:20:0e:a8:0e:57:98:9e:40:4d:0b:fa:26:5a:37: 44:64:10:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCQUIxMTAvBgNVBAUTKDQ4Qjk5NDU5ODdGNjc2QjQ2Q0VEM0RFMTI4NDlBOEEz OEY0MDY4QjUwHhcNMjUwNDI0MjA1OTIyWhcNMjUwNTAxMjA1OTIxWjAYMRYwFAYD VQQDEw02ODBhYTYyYS1mZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxML6tH75i829IZs/9CQtVS8t+h2VeonHrEgP+kFgaWulSs1hqK13Sa7svlrQ x8D3ElkbmVbc7AzDq7aISMF6RwlJndy64n1EW7a0ZMKQl1zxwRZ56aywhHenQNVh vkce9nKFsuafqOhrzPZ4hfHSg5lD2QJMbaUeaALfvEJqulTnMpo73mCIMvPO2ZHP St9VRVG6jhuDhzfofmb4urD4VcoUpdzIm/s/ybjlnOksiFLA2P+QUqmBoY2LXunA We4/0jlIwngoVEjTtuIgCIYw12hHaGqSiMIl9s6YFp/9HL3n2pHuXQ2NmKOzbght up4daxIkFJ5eOrgqhdd8UwXMcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpu7EPC J+omQYtYQgEH+0i6p4ovMB8GA1UdIwQYMBaAFEi5lFmH9na0bO094ShJqKOPQGi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUJBQi8wQjk3NjAxQUY2 NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRyUnM3VDNoS0Vtb280OUFh TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMbVVXWWYyZHJSczdUM2hLRW1vbzQ5QWFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUJBQi8wQjk3NjAxQUY2NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRy UnM3VDNoS0Vtb280OUFhTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo0QBmpFsAT7xbzEGBcGnVZmXy3My1fX5/pHeJUWk6NZf2P/rRznmb 5Y2iszkfi3m9X07nEKn1qtBKEqEJqvoHPkOTWJDai1QDzufeV21Jai53lr9Tr1Rr uj1KSYVCxP1vsL0/J/pIHppHc3yMcrT1P05hcZD29sSwKosVWIVaPOgHpgRsD/EE BloQcm5zKHbM93FSAlcUEEmX1R2C8+NFSFn2UPDZm4pGND1DTSt5BhbCixfwsekV 9IWhCebdRl0duOVCC9f1qyrjuLiTdUGTxKacgFTPLfQIKtEM3ckIZ6PKhvFasmvO Zb4xU/okIA6oDleYnkBNC/omWjdEZBAL -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:59 2025 by rpki-client