$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft File: -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json) Hash identifier: jVohstBj+SDMWjcpAClJPZVnoWhSkh+GwiF5GJ+dxtc= Subject key identifier: 39:15:D3:F6:2D:32:1B:89:E9:B7:66:C4:24:9A:EC:99:30:34:C7:31 Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB Certificate issuer: /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft Manifest number: 9C Signing time: Fri 25 Apr 2025 05:21:33 +0000 Manifest this update: Fri 25 Apr 2025 05:21:33 +0000 Manifest next update: Fri 02 May 2025 05:21:33 +0000 Files and hashes: 1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: q8pjAbOGd4vs9PsKBkOae5UyfPKLSWGT0Q50rBF8Rmw=) 2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: 8zOiXd3kRlQoiz32Gjahx1aoeuvy3cZGr/aU3t8eEp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB Validity Not Before: Apr 25 05:21:33 2025 GMT Not After : May 2 05:21:33 2025 GMT Subject: CN=680b1bdd-32b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b6:85:36:67:b8:fb:bd:9b:19:c8:20:6c:62: c8:78:2a:e1:89:37:37:85:12:18:18:46:d8:8f:eb: e9:5d:51:bb:01:a8:d5:ee:3d:c2:d9:cd:52:72:32: 80:8e:f9:49:c3:0b:40:cf:bb:2a:7e:e3:5d:6b:d7: 9a:23:0a:db:06:6b:39:9d:72:db:75:2c:33:21:50: fc:b1:bc:91:ee:8c:9f:4c:f6:44:96:a4:d9:ca:17: 47:93:de:4c:f2:82:ad:5f:15:5f:23:57:da:2e:d1: 6c:ff:1a:c1:91:e8:3f:ed:da:9b:d7:f3:ba:e5:b6: b0:e1:23:f7:bb:10:b7:75:de:35:f0:a0:54:57:b4: 95:d7:8e:7f:2f:02:aa:2b:0f:9c:3f:d5:18:6b:19: 89:db:3c:28:bd:64:d5:ad:67:b1:5d:4a:3f:fe:6f: 9c:28:62:47:1a:34:70:d7:c0:38:9c:38:bd:d0:5f: 64:20:71:47:a6:c7:14:c9:20:e0:a8:43:c5:b8:34: 7f:54:fe:51:47:7e:e7:0f:4e:38:49:0a:b1:28:19: f0:23:d6:01:59:bf:25:fd:42:f0:c5:7f:00:05:e0: 1a:2c:a7:19:c0:d2:55:47:7e:c6:99:d7:33:62:a4: f0:f5:6e:56:f5:7f:ca:19:b0:25:a7:c0:95:26:96: 7d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:15:D3:F6:2D:32:1B:89:E9:B7:66:C4:24:9A:EC:99:30:34:C7:31 X509v3 Authority Key Identifier: keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:3b:cc:1b:5f:d6:c4:72:76:98:bc:24:2e:27:8a:66:1e:00: a1:f7:7b:a6:aa:26:ad:2b:b4:7c:00:52:e3:5e:5e:fb:94:8d: ed:2a:b4:c3:a7:62:81:0c:7c:3a:19:cd:81:9b:35:a7:19:a5: dd:70:87:5c:7d:94:61:a0:a6:5b:1c:d9:bd:40:c2:b3:cc:6f: bf:3e:ac:75:16:af:d4:e4:77:86:73:00:b4:35:30:08:31:52: 6b:c1:bf:41:b9:bc:fa:ef:83:b5:07:5b:3e:7e:57:4f:ab:ac: 10:03:72:74:93:06:97:69:1d:bb:20:07:ec:00:46:67:e9:f4: 64:90:e4:72:e3:6b:d4:6e:6f:1b:e2:31:2b:62:37:1e:d9:48: 11:7b:81:fb:36:6a:2b:93:30:89:23:52:92:ae:d4:13:c4:d4: ad:72:60:a0:26:35:0a:ca:67:ea:b5:fa:49:39:6d:0f:91:9b: 75:34:0a:1f:fb:79:58:ef:d4:cc:cf:87:05:27:a7:b0:4b:57: 85:c9:e7:f8:31:2f:68:8f:46:0c:f5:6f:26:6a:32:54:c4:c9: a9:c3:92:09:9f:d8:94:06:65:32:ab:54:f0:94:66:ea:1f:f3: b9:7a:b6:84:a0:5f:11:85:6f:34:f8:43:72:cb:8f:a3:2c:dc: 64:96:ac:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjExRUUxMTAvBgNVBAUTKEZBQzJCMkU1NDE0NDVCNUI0N0M1OURBRTFERTJEREU4 ODc5QUI4QkIwHhcNMjUwNDI1MDUyMTMzWhcNMjUwNTAyMDUyMTMzWjAYMRYwFAYD VQQDEw02ODBiMWJkZC0zMmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27aFNme4+72bGcggbGLIeCrhiTc3hRIYGEbYj+vpXVG7AajV7j3C2c1ScjKA jvlJwwtAz7sqfuNda9eaIwrbBms5nXLbdSwzIVD8sbyR7oyfTPZElqTZyhdHk95M 8oKtXxVfI1faLtFs/xrBkeg/7dqb1/O65baw4SP3uxC3dd418KBUV7SV145/LwKq Kw+cP9UYaxmJ2zwovWTVrWexXUo//m+cKGJHGjRw18A4nDi90F9kIHFHpscUySDg qEPFuDR/VP5RR37nD044SQqxKBnwI9YBWb8l/ULwxX8ABeAaLKcZwNJVR37Gmdcz YqTw9W5W9X/KGbAlp8CVJpZ9+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkV0/Yt MhuJ6bdmxCSa7JkwNMcxMB8GA1UdIwQYMBaAFPrCsuVBRFtbR8Wdrh3i3eiHmri7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTFFRS9FOThBNDY1MjNF ODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcxdEh4WjJ1SGVMZDZJZWF1 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1zS3k1VUZFVzF0SHhaMnVIZUxkNkllYXVMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTFFRS9FOThBNDY1MjNFODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcx dEh4WjJ1SGVMZDZJZWF1THMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGO8wbX9bEcnaYvCQuJ4pmHgCh93umqiatK7R8AFLjXl77lI3tKrTD p2KBDHw6Gc2BmzWnGaXdcIdcfZRhoKZbHNm9QMKzzG+/Pqx1Fq/U5HeGcwC0NTAI MVJrwb9Bubz674O1B1s+fldPq6wQA3J0kwaXaR27IAfsAEZn6fRkkORy42vUbm8b 4jErYjce2UgRe4H7NmorkzCJI1KSrtQTxNStcmCgJjUKymfqtfpJOW0PkZt1NAof +3lY79TMz4cFJ6ewS1eFyef4MS9oj0YM9W8majJUxMmpw5IJn9iUBmUyq1TwlGbq H/O5eraEoF8RhW80+ENyy4+jLNxklqx8 -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:46 2025 by rpki-client