$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json) Hash identifier: xmaYTono/nRWQZsm8W6RfRDv+V7manKzN+85QQAOle0= Subject key identifier: 2B:9D:00:4A:BC:38:B4:F6:D1:58:70:B1:3E:00:63:3D:4E:29:FC:47 Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft Manifest number: 0250 Signing time: Fri 25 Apr 2025 01:36:24 +0000 Manifest this update: Fri 25 Apr 2025 01:36:23 +0000 Manifest next update: Fri 02 May 2025 01:36:23 +0000 Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: jk7fpx9MelEkFs6gZfGcbno1xe/6o6BlzU3qxlO2LvE=) 2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Validity Not Before: Apr 25 01:36:23 2025 GMT Not After : May 2 01:36:23 2025 GMT Subject: CN=680ae718-aa0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:4d:ae:f9:5c:b8:72:f7:a4:a3:74:e7:03: f6:27:a8:af:94:c1:77:4e:fb:7d:00:cd:d4:fb:68: a8:90:47:b3:6b:61:e1:9c:91:0c:a3:0e:d0:48:d2: bd:84:2a:37:ec:28:91:c6:48:28:2a:51:7a:a4:3f: c4:a1:d6:9a:7c:6d:1b:6f:29:4a:f8:cc:ec:20:b7: 9d:fb:42:03:38:d2:83:63:64:f0:26:e6:ae:6f:ac: 6a:18:17:3b:5f:3e:44:c0:83:2a:1a:ea:ab:49:f5: 33:7a:7a:5e:fc:d9:44:39:f3:39:b6:b7:16:35:31: 60:ca:82:31:c7:cf:c7:f3:cd:9b:79:60:22:43:30: be:1d:e4:58:dc:39:e4:39:1e:5b:6b:b2:5f:52:df: 78:f4:01:0c:bf:cb:95:b2:80:85:3d:72:89:3d:05: 63:35:62:d7:a5:35:bc:8e:fd:97:a3:3c:2f:3b:7c: b7:78:30:7d:0c:9f:c4:b3:92:7a:3c:55:ef:5b:4a: 2a:71:82:99:56:cc:3b:43:d0:99:48:4e:16:ea:e9: c0:8c:9a:6d:92:b3:e0:75:ad:8d:07:86:7e:57:c6: 8b:6b:47:fb:87:91:80:4b:ce:83:f8:a0:22:0e:e0: bd:42:22:29:3e:94:51:d7:6d:2b:80:46:d2:6e:a4: 51:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9D:00:4A:BC:38:B4:F6:D1:58:70:B1:3E:00:63:3D:4E:29:FC:47 X509v3 Authority Key Identifier: keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:33:49:08:f5:b8:05:53:78:ff:97:26:de:d0:93:92:50:00: 92:94:70:ed:f1:73:9d:db:8f:a4:e1:29:1e:40:4e:3c:2a:d8: 5a:52:ec:43:41:42:f0:92:f2:61:aa:4a:17:0f:2b:f4:e5:63: bb:0e:b8:b8:5a:07:da:2e:4a:63:00:da:08:a0:54:ce:76:29: 31:f7:77:47:ea:73:0f:60:3c:7f:97:c2:8c:d0:f7:97:fd:e2: a4:fe:95:ce:85:14:6d:e2:6a:7d:f3:1e:a7:73:59:af:09:22: 8f:41:3c:bc:a1:3f:cd:52:2d:c3:2d:81:c3:ae:f3:eb:fb:35: f9:13:8d:fd:bd:ab:3d:06:50:b1:9a:ba:34:ca:bc:b7:da:45: ec:97:6d:c1:be:f5:78:df:f0:e9:95:86:73:55:b1:4f:a3:9d: e3:58:59:52:42:9f:be:ff:48:ff:e1:41:f6:4c:e2:9d:f6:34: 37:f1:48:90:e1:fb:2c:54:2c:cd:34:e6:03:5b:fc:ba:ad:d8: 7b:5f:13:b9:cd:41:33:da:91:e9:0b:1b:12:49:18:31:8f:d0: 6f:3b:b0:89:f9:36:dc:c9:34:77:d5:7b:92:57:2c:ba:9f:c1: 6d:df:07:69:00:4e:62:84:22:6f:55:29:3c:18:c2:ff:d4:ba: 25:60:26:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz QjIyMDE4OUQwHhcNMjUwNDI1MDEzNjIzWhcNMjUwNTAyMDEzNjIzWjAYMRYwFAYD VQQDEw02ODBhZTcxOC1hYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc1NrvlcuHL3pKN05wP2J6ivlMF3Tvt9AM3U+2iokEeza2HhnJEMow7QSNK9 hCo37CiRxkgoKlF6pD/EodaafG0bbylK+MzsILed+0IDONKDY2TwJuaub6xqGBc7 Xz5EwIMqGuqrSfUzenpe/NlEOfM5trcWNTFgyoIxx8/H882beWAiQzC+HeRY3Dnk OR5ba7JfUt949AEMv8uVsoCFPXKJPQVjNWLXpTW8jv2XozwvO3y3eDB9DJ/Es5J6 PFXvW0oqcYKZVsw7Q9CZSE4W6unAjJptkrPgda2NB4Z+V8aLa0f7h5GAS86D+KAi DuC9QiIpPpRR120rgEbSbqRRKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCudAEq8 OLT20VhwsT4AYz1OKfxHMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2 QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9M0kI9bgFU3j/lybe0JOSUACSlHDt8XOd24+k4SkeQE48KthaUuxD QULwkvJhqkoXDyv05WO7Dri4WgfaLkpjANoIoFTOdikx93dH6nMPYDx/l8KM0PeX /eKk/pXOhRRt4mp98x6nc1mvCSKPQTy8oT/NUi3DLYHDrvPr+zX5E439vas9BlCx mro0yry32kXsl23BvvV43/DplYZzVbFPo53jWFlSQp++/0j/4UH2TOKd9jQ38UiQ 4fssVCzNNOYDW/y6rdh7XxO5zUEz2pHpCxsSSRgxj9BvO7CJ+TbcyTR31XuSVyy6 n8Ft3wdpAE5ihCJvVSk8GML/1LolYCZp -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:02 2025 by rpki-client