$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: uY2pVxpONTTLuxp8B+o097mIbRLs7FkbXKP1yPhYaWM= Subject key identifier: D9:DD:9B:BE:D5:30:90:62:76:2A:53:F8:89:14:5C:96:66:0C:34:1D Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 029E Signing time: Fri 25 Apr 2025 01:16:22 +0000 Manifest this update: Fri 25 Apr 2025 01:16:22 +0000 Manifest next update: Fri 02 May 2025 01:16:22 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: MW6F8gBtsiMm8lhcn3mGGYwvXGX4IHgUBYrVbT+Krr4=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: OalalDzVyKhIKt/8JFaNCLlPQG9aL6loK7h8qfIQsmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: Apr 25 01:16:22 2025 GMT Not After : May 2 01:16:22 2025 GMT Subject: CN=680ae266-0ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:80:17:15:d1:96:b2:bc:05:45:f7:cf:e5: 33:5f:45:50:29:53:ef:6b:45:ca:07:8d:59:ed:d9: 02:bc:f2:c6:79:f1:a4:20:61:53:fc:a5:e0:06:33: 54:a5:8e:30:62:ef:fc:17:30:6b:f3:1f:81:bb:29: f0:34:10:36:ca:c1:44:c1:15:ad:85:8c:e8:5b:85: 34:d4:c8:21:01:ee:08:00:87:44:b9:97:64:cb:fb: ea:ba:74:e4:99:aa:40:30:e6:0b:60:e3:d8:17:e9: f8:47:2a:7e:87:1a:86:1c:a8:c7:27:d7:f3:3f:4d: 1c:9b:aa:e4:04:26:79:b3:70:b4:c0:60:d2:7e:39: f2:91:96:ca:a4:8e:49:ad:48:17:84:eb:65:ad:da: 24:5f:84:e3:09:e5:73:66:5f:cf:92:ef:32:06:32: b3:65:4b:80:76:cb:0e:35:8e:1f:14:73:cb:13:32: 0f:6f:ba:ef:0b:0b:2a:d2:68:8a:c2:73:01:c6:4c: 44:5e:f4:ad:08:f2:9e:a7:bc:27:a0:dc:49:9f:6b: b8:d4:7f:87:41:77:ed:44:b2:18:1e:44:46:2b:4b: 95:a2:c7:a4:7d:80:6c:38:c4:dd:a5:c8:8c:b8:e6: 6b:3e:88:48:5b:c6:be:b0:4c:8b:89:6b:54:b4:5f: 28:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DD:9B:BE:D5:30:90:62:76:2A:53:F8:89:14:5C:96:66:0C:34:1D X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ea:4d:87:b9:41:eb:e8:1a:4f:0f:e0:9c:31:cb:b4:f2:3f: c7:aa:82:7c:7e:5e:9f:ff:d4:22:af:0e:a9:fd:bc:77:dd:20: 69:fa:0b:a5:fc:32:b1:5c:52:61:c2:81:e4:37:8e:a0:cd:9a: db:aa:6d:3f:2a:af:18:3f:3a:75:f2:dc:0d:a7:b3:f1:d2:44: e1:82:55:a8:ba:ff:b3:82:d7:1f:7c:fc:7e:22:5f:3b:2e:bc: 5e:18:de:37:81:1b:02:cc:7a:cf:73:de:5f:b2:28:24:5b:ca: d4:ce:c4:43:75:31:a8:83:b6:45:ab:36:80:df:bf:85:38:32: 78:63:d6:e0:28:14:4e:f5:b9:c5:79:dd:e6:d4:fd:cc:52:38: 71:d0:62:c2:10:94:9b:54:70:64:2c:b2:df:ff:2a:80:f0:70: a5:af:3c:a7:6a:cb:cf:fb:c3:1c:8b:28:bb:a4:eb:fe:52:72: 84:3b:55:48:6f:78:6c:32:29:87:35:17:9d:bc:c7:ed:05:b9: c3:49:d4:75:78:6f:d8:a1:f2:1e:59:ef:55:df:8b:5c:c6:c0: 07:5b:4b:77:81:b6:2c:f5:bd:3d:3f:6e:5c:d8:1e:0a:3d:e6: d0:8e:d9:a2:49:a1:f6:55:7a:54:b7:b8:98:e9:8e:5b:ed:aa: e5:e4:d7:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjUwNDI1MDExNjIyWhcNMjUwNTAyMDExNjIyWjAYMRYwFAYD VQQDEw02ODBhZTI2Ni0wZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PqAFxXRlrK8BUX3z+UzX0VQKVPva0XKB41Z7dkCvPLGefGkIGFT/KXgBjNU pY4wYu/8FzBr8x+BuynwNBA2ysFEwRWthYzoW4U01MghAe4IAIdEuZdky/vqunTk mapAMOYLYOPYF+n4Ryp+hxqGHKjHJ9fzP00cm6rkBCZ5s3C0wGDSfjnykZbKpI5J rUgXhOtlrdokX4TjCeVzZl/Pku8yBjKzZUuAdssONY4fFHPLEzIPb7rvCwsq0miK wnMBxkxEXvStCPKep7wnoNxJn2u41H+HQXftRLIYHkRGK0uVosekfYBsOMTdpciM uOZrPohIW8a+sEyLiWtUtF8otQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNndm77V MJBidipT+IkUXJZmDDQdMB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk6k2HuUHr6BpPD+CcMcu08j/HqoJ8fl6f/9Qirw6p/bx33SBp+gul /DKxXFJhwoHkN46gzZrbqm0/Kq8YPzp18twNp7Px0kThglWouv+zgtcffPx+Il87 LrxeGN43gRsCzHrPc95fsigkW8rUzsRDdTGog7ZFqzaA37+FODJ4Y9bgKBRO9bnF ed3m1P3MUjhx0GLCEJSbVHBkLLLf/yqA8HClrzynasvP+8Mciyi7pOv+UnKEO1VI b3hsMimHNRedvMftBbnDSdR1eG/YofIeWe9V34tcxsAHW0t3gbYs9b09P25c2B4K PebQjtmiSaH2VXpUt7iY6Y5b7arl5NeE -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:39 2025 by rpki-client