$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft File: sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json) Hash identifier: hUtOmBBrMhW0UTc4gqSKASZGjbsLtPmkkPpDgK75SYc= Subject key identifier: 63:E7:D4:AB:C3:06:5F:B7:A8:9B:79:63:DA:72:10:01:F1:4B:43:2C Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Certificate serial: 0771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft Manifest number: 0769 Signing time: Thu 24 Apr 2025 21:21:37 +0000 Manifest this update: Thu 24 Apr 2025 21:21:37 +0000 Manifest next update: Thu 01 May 2025 21:21:37 +0000 Files and hashes: 1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: mY6peckIDfCPMDBlwsDUZ1Cwl2rufGadRApKk4447SY=) 2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: 1PaL5t22VHHOGdbUhH+qGnaUlXQ1MvnbAc80idZHNIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1905 (0x771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Validity Not Before: Apr 24 21:21:37 2025 GMT Not After : May 1 21:21:37 2025 GMT Subject: CN=680aab61-60d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:e1:d8:97:0a:aa:65:4c:55:1c:4b:04:f9: e9:0d:70:f8:f5:60:f3:c8:da:f8:46:c3:f7:2d:a4: 02:51:4c:ed:9a:6e:b0:1b:b4:e4:ba:8c:64:2d:c9: 35:27:47:b5:87:2e:6b:ee:e6:30:d7:27:a8:fd:d3: 6d:0b:8b:62:c4:6f:4b:1a:1b:91:17:5e:5e:9a:2c: d6:b1:62:73:90:4b:73:82:e1:bf:ac:68:de:9e:b6: e0:f0:b5:bd:28:92:45:53:5b:4e:42:83:01:85:b0: 27:70:38:fa:c1:b4:2f:76:62:aa:52:49:c8:5c:18: 6e:c1:b3:c3:70:4a:d3:75:fd:a1:8f:38:38:07:56: 04:c8:48:7a:31:56:cd:3d:79:fe:a0:1f:80:26:45: 30:ad:8b:b0:0a:14:6d:4c:82:9b:86:9f:96:4c:31: 25:da:18:56:20:e8:c3:14:44:c3:ce:02:ec:06:ee: 69:dc:ae:6f:17:70:7f:1e:a6:53:77:90:42:41:65: 93:a8:32:1b:ee:b4:d1:bf:31:35:8c:bc:a5:0d:59: cf:6b:85:e8:bd:9e:07:98:c4:ec:8a:5e:bc:c9:38: 93:8b:89:9c:95:ff:fc:ff:98:ab:02:d3:da:ec:8f: 14:b2:d8:ea:f8:5c:77:d9:c4:b1:b3:66:8c:22:25: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E7:D4:AB:C3:06:5F:B7:A8:9B:79:63:DA:72:10:01:F1:4B:43:2C X509v3 Authority Key Identifier: keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:8e:f6:46:01:b2:ff:fc:4d:8b:84:81:2d:c7:d2:8d:09:8f: 46:cf:25:89:0f:70:9e:9c:ee:a9:a5:a8:69:fe:54:1c:7a:d6: 08:6b:bb:df:be:b6:5d:d2:25:f8:01:c4:21:ce:d7:97:f9:9f: a9:69:2b:24:7e:de:f2:8d:40:5f:ad:0d:e0:45:94:96:de:9d: f9:9d:8a:9c:02:00:e7:4a:47:63:4d:21:ff:9b:ed:b8:02:4b: d2:fa:41:7b:31:60:38:b7:64:49:2b:fe:02:f4:7c:78:4f:7d: 87:38:c1:22:76:9f:76:15:d0:5f:a1:a6:e6:84:ad:83:c0:a1: ce:3b:65:6a:c8:b4:57:2f:f2:ee:41:03:92:fb:a0:2a:c0:8e: b5:96:9b:18:6c:3f:de:a1:88:f5:5c:a0:d4:db:46:e6:4f:87: 94:78:a8:13:43:34:77:5d:ee:07:33:65:c8:3d:47:17:39:de: 46:30:56:84:8f:e9:00:23:7f:5c:05:6d:31:0c:87:2a:df:c0: df:f6:98:90:58:08:8c:5b:56:4d:ff:2c:42:03:23:bb:85:68: cf:10:1b:84:1d:da:55:fa:7f:da:a2:97:20:9c:87:ef:ad:ec: c5:1e:64:76:2e:e7:66:a2:e6:d7:bf:3f:df:6e:4d:bf:39:3c: 72:f6:66:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3QTExMTAvBgNVBAUTKEIyRTk5Mzg5QzRBQzAzNDhEOEFFQzg3NUI3NDY4OUQw NEU3MEM4M0EwHhcNMjUwNDI0MjEyMTM3WhcNMjUwNTAxMjEyMTM3WjAYMRYwFAYD VQQDEw02ODBhYWI2MS02MGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8Ph2JcKqmVMVRxLBPnpDXD49WDzyNr4RsP3LaQCUUztmm6wG7TkuoxkLck1 J0e1hy5r7uYw1yeo/dNtC4tixG9LGhuRF15emizWsWJzkEtzguG/rGjenrbg8LW9 KJJFU1tOQoMBhbAncDj6wbQvdmKqUknIXBhuwbPDcErTdf2hjzg4B1YEyEh6MVbN PXn+oB+AJkUwrYuwChRtTIKbhp+WTDEl2hhWIOjDFETDzgLsBu5p3K5vF3B/HqZT d5BCQWWTqDIb7rTRvzE1jLylDVnPa4XovZ4HmMTsil68yTiTi4mclf/8/5irAtPa 7I8Ustjq+Fx32cSxs2aMIiVewQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPn1KvD Bl+3qJt5Y9pyEAHxS0MsMB8GA1UdIwQYMBaAFLLpk4nErANI2K7IdbdGidBOcMg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdBMS9CNUMyN0E4QzE2 OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ewallyc2gxdDBhSjBFNXd5 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1bVRpY1NzQTBqWXJzaDF0MGFKMEU1d3lEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdBMS9CNUMyN0E4QzE2OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ew allyc2gxdDBhSjBFNXd5RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRjvZGAbL//E2LhIEtx9KNCY9GzyWJD3CenO6ppahp/lQcetYIa7vf vrZd0iX4AcQhzteX+Z+paSskft7yjUBfrQ3gRZSW3p35nYqcAgDnSkdjTSH/m+24 AkvS+kF7MWA4t2RJK/4C9Hx4T32HOMEidp92FdBfoabmhK2DwKHOO2VqyLRXL/Lu QQOS+6AqwI61lpsYbD/eoYj1XKDU20bmT4eUeKgTQzR3Xe4HM2XIPUcXOd5GMFaE j+kAI39cBW0xDIcq38Df9piQWAiMW1ZN/yxCAyO7hWjPEBuEHdpV+n/aopcgnIfv rezFHmR2LudmoubXvz/fbk2/OTxy9mZq -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:54 2025 by rpki-client