$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft File: SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json) Hash identifier: 3TXeGzps0mblQg0yELKdrot5JdfQ273/ownT2Vw8iF8= Subject key identifier: AD:64:F5:1F:A6:4E:8D:81:86:F3:D3:51:96:63:14:0D:EC:2A:B6:29 Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 Certificate issuer: /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft Manifest number: 011B Signing time: Fri 25 Apr 2025 03:53:59 +0000 Manifest this update: Fri 25 Apr 2025 03:53:59 +0000 Manifest next update: Fri 02 May 2025 03:53:59 +0000 Files and hashes: 1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: RxP4dquFqp6lm+7Yt96a60IqGOQd9rbS46hoFjQ9k9Y=) 2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: 1J6SBhKfyTeug2CS1rB/AAJ6IDeL/Dzh4xQR/iFRSiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD2E3, serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Validity Not Before: Apr 25 03:53:59 2025 GMT Not After : May 2 03:53:59 2025 GMT Subject: CN=680b0757-a1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:ec:84:d8:08:b4:e0:62:d1:ec:d7:ef:49: 6e:10:aa:5e:6b:fc:ea:57:5e:a7:b7:7f:83:0f:c8: 23:3b:cc:f7:ff:99:6a:5a:32:82:5d:6e:01:fd:98: b3:1a:42:6b:b8:3f:c3:98:db:0d:45:59:0f:8f:ee: 25:77:ea:a6:56:35:7a:02:a8:4b:28:1b:fb:3f:69: a6:12:77:fb:9c:01:6c:32:49:f4:2c:d1:27:ef:43: 17:aa:50:9e:ee:f8:22:db:36:c5:ab:23:80:5f:19: 44:1c:13:b3:76:83:8a:5c:5f:86:21:c4:0f:16:2c: 0c:c0:af:3d:ad:9b:c4:df:3f:3a:2b:f2:43:a6:70: 91:d9:f3:a3:5f:9f:32:52:81:fb:a3:c8:8b:b4:fc: 29:ea:ad:af:7f:f3:88:97:31:ec:69:96:9d:14:72: bb:4f:8f:71:ed:23:96:a8:21:97:f2:36:23:67:7d: 45:1d:da:3a:4a:9b:bf:05:9a:d8:d0:3a:89:0f:18: be:fd:ff:c9:e7:bc:c2:7b:31:7d:10:2b:20:c8:fa: 11:cb:52:c6:ad:5f:ae:50:82:27:03:e2:c9:bc:c5: 32:69:6a:53:d5:c7:c1:e9:69:5d:58:62:1f:da:f3: 1f:ab:aa:aa:d1:ba:21:ee:a9:28:eb:58:24:56:6d: 24:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:64:F5:1F:A6:4E:8D:81:86:F3:D3:51:96:63:14:0D:EC:2A:B6:29 X509v3 Authority Key Identifier: keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:09:d3:6b:b4:c0:07:a4:8c:00:be:3e:e8:99:33:96:ff:ea: 24:b8:61:a1:09:44:c6:5f:96:ef:ea:e6:cd:c2:04:d0:8c:3a: 0a:37:20:bf:7a:bd:7c:3d:08:6f:76:10:25:9a:9b:45:1a:d8: a5:ad:5b:fb:26:bb:26:16:f4:b4:74:04:54:32:61:0e:c2:ef: 15:73:7b:41:23:16:28:c1:7f:83:77:5e:49:0f:bf:8f:de:b9: 4a:8e:f0:5e:be:f6:51:1e:35:57:39:cb:fc:dd:a5:c3:5c:f7: ea:60:5e:61:4b:22:c5:bc:3a:ce:e9:35:f0:c1:72:94:e9:a7: 87:0d:a6:eb:75:be:6a:f4:ea:88:7c:65:b2:91:cb:5e:96:ff: 2c:ec:8e:8d:93:61:6a:67:27:db:7b:04:24:4c:cb:05:26:43: 56:58:78:fa:31:c7:1e:bb:c4:0d:4b:5f:23:ca:e4:74:a1:fc: d8:f2:9c:8b:be:a3:44:34:2e:eb:c4:4b:53:ce:cf:02:a1:dc: 51:89:15:b9:3b:6f:11:e7:d6:98:8f:13:8a:fa:1d:0f:b3:51: 0a:61:f1:26:5d:4e:0e:2e:85:41:b8:ad:5e:55:e9:9a:e2:1c: 12:c7:61:64:7c:5f:c6:c0:68:2c:82:da:02:ca:a3:5e:79:b0: 6a:4c:68:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyRTMxMTAvBgNVBAUTKDQ4MTcyMEEyQzhFRTZDRUM5MjQ3Nzc2MTkzMjk5QzEw RkVCN0NBNDQwHhcNMjUwNDI1MDM1MzU5WhcNMjUwNTAyMDM1MzU5WjAYMRYwFAYD VQQDEw02ODBiMDc1Ny1hMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybvshNgItOBi0ezX70luEKpea/zqV16nt3+DD8gjO8z3/5lqWjKCXW4B/Ziz GkJruD/DmNsNRVkPj+4ld+qmVjV6AqhLKBv7P2mmEnf7nAFsMkn0LNEn70MXqlCe 7vgi2zbFqyOAXxlEHBOzdoOKXF+GIcQPFiwMwK89rZvE3z86K/JDpnCR2fOjX58y UoH7o8iLtPwp6q2vf/OIlzHsaZadFHK7T49x7SOWqCGX8jYjZ31FHdo6Spu/BZrY 0DqJDxi+/f/J57zCezF9ECsgyPoRy1LGrV+uUIInA+LJvMUyaWpT1cfB6WldWGIf 2vMfq6qq0boh7qko61gkVm0ktQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1k9R+m To2BhvPTUZZjFA3sKrYpMB8GA1UdIwQYMBaAFEgXIKLI7mzskkd3YZMpnBD+t8pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDJFMy80RjQxNzlBNDcz QzAxMUVFQjgyN0Y0NDRDNEY5QUUwMi9TQmNnb3NqdWJPeVNSM2Roa3ltY0VQNjN5 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NCY2dvc2p1Yk95U1IzZGhreW1jRVA2M3lrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDJFMy80RjQxNzlBNDczQzAxMUVFQjgyN0Y0NDRDNEY5QUUwMi9TQmNnb3NqdWJP eVNSM2Roa3ltY0VQNjN5a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVCdNrtMAHpIwAvj7omTOW/+okuGGhCUTGX5bv6ubNwgTQjDoKNyC/ er18PQhvdhAlmptFGtilrVv7JrsmFvS0dARUMmEOwu8Vc3tBIxYowX+Dd15JD7+P 3rlKjvBevvZRHjVXOcv83aXDXPfqYF5hSyLFvDrO6TXwwXKU6aeHDabrdb5q9OqI fGWykctelv8s7I6Nk2FqZyfbewQkTMsFJkNWWHj6Mcceu8QNS18jyuR0ofzY8pyL vqNENC7rxEtTzs8CodxRiRW5O28R59aYjxOK+h0Ps1EKYfEmXU4OLoVBuK1eVema 4hwSx2FkfF/GwGgsgtoCyqNeebBqTGiG -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:13 2025 by rpki-client