$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft File: snbxWm1Kl8SBkekr0WYfNovvIeQ.mft (raw, json) Hash identifier: EN+70w6fmCefzaL9tOkr2GuH40SMhcqdmpj097HqWn4= Subject key identifier: 62:85:ED:93:6E:1E:84:89:E6:59:EF:3D:1A:7F:BB:9E:D9:B7:20:A1 Authority key identifier: B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4 Certificate issuer: /CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft Manifest number: 5C Signing time: Thu 03 Apr 2025 06:23:36 +0000 Manifest this update: Thu 03 Apr 2025 06:23:35 +0000 Manifest next update: Thu 10 Apr 2025 06:23:35 +0000 Files and hashes: 1: snbxWm1Kl8SBkekr0WYfNovvIeQ.crl (hash: 90pLmILale5ZcjoHp8lcwxRU/udRm3wmBWhJemQsGiw=) 2: 3E4B01008BDA11EFA4A11684C4F9AE02.roa (hash: zwx+U9J08Id0maPwN81wQAKGfgxb2cKuo5oynZYPQgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37C4 Validity Not Before: Apr 3 06:23:35 2025 GMT Not After : Apr 10 06:23:35 2025 GMT Subject: CN=67ee2968-a47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:34:43:4b:90:c2:29:b5:a3:b3:70:90:ac: 8e:55:12:f9:ff:0b:e8:2f:96:4a:b5:fd:20:da:f9: e8:ac:92:05:5a:03:7c:bd:29:73:57:e3:b4:53:bb: 67:52:4e:db:88:80:9b:c0:30:5f:13:44:cf:a4:5b: 2c:55:f7:c7:a7:22:85:f0:24:a9:5c:fc:21:03:94: 87:5e:cb:6d:f4:2d:6c:a2:d4:16:2b:b2:44:2e:b1: fb:52:4e:80:9d:4d:6c:f4:ed:17:a0:58:7b:0d:a6: 5a:ca:72:42:8d:01:ef:ff:4e:13:b9:ab:18:39:c9: 57:61:62:18:ae:92:a2:1b:c5:40:80:b5:86:d2:0b: b5:f0:af:34:4f:3a:08:15:79:44:ae:6d:1b:f3:52: 8c:b0:a8:45:f8:b3:c1:42:7d:c8:90:11:79:ef:4e: a0:a7:b7:10:c4:6a:06:19:53:cd:ab:69:49:6c:91: 83:1e:f6:5a:45:58:49:84:61:75:34:59:73:a1:d2: cc:88:7d:6a:4a:77:5a:83:d2:01:8c:5b:06:f9:0b: 43:a5:af:5c:2d:93:0b:66:1c:7f:06:bb:4d:3a:9b: bc:21:b9:a8:f5:07:2b:3e:c1:36:49:4c:36:8b:d5: bb:a6:2f:1d:e6:24:19:94:fe:1f:b2:67:db:ee:a3: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:85:ED:93:6E:1E:84:89:E6:59:EF:3D:1A:7F:BB:9E:D9:B7:20:A1 X509v3 Authority Key Identifier: keyid:B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0c:ed:c0:1f:67:2e:69:a5:58:14:c3:7f:e5:59:00:b8:00: b7:41:92:b1:fa:81:d8:85:c8:85:df:52:45:98:8f:eb:86:62: 3e:e9:63:be:bf:4e:6b:31:b8:99:83:c1:59:38:b1:b3:fb:e6: 81:8b:0c:8b:58:38:da:74:2f:a2:53:b6:08:85:9a:68:75:26: c0:d3:6d:8b:15:b2:cb:71:62:ba:cd:11:4c:d6:65:48:e1:e7: 0d:5b:7f:9b:b6:4e:30:f3:c7:68:80:52:72:2e:4c:e7:df:7d: c7:ad:34:42:60:a0:56:de:63:2e:ee:ca:39:b5:2b:6c:7b:6c: 86:49:c7:2c:12:3f:7a:6d:0d:b2:c3:a0:f6:85:b2:6b:89:bc: fd:46:6f:06:22:e2:c9:dc:64:b2:8a:06:10:e3:b3:76:c2:4d: a9:18:3a:a3:a9:2d:bd:6e:c6:2d:de:f3:90:19:6f:db:a2:d7: 47:9f:0a:7b:85:a0:39:6a:97:d8:82:3d:c4:1a:78:23:d7:64: de:44:bf:24:5d:b8:d4:58:b4:5b:8f:5b:14:c8:75:fe:24:b2: 4b:b1:b9:a6:e7:12:a7:4b:41:21:c7:6f:da:62:83:e9:77:66: 0d:1e:22:be:fe:b0:7c:4d:65:3c:5b:ab:42:17:fa:99:b1:d7: c1:42:6f:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzdDNDExMC8GA1UEBRMoQjI3NkYxNUE2RDRBOTdDNDgxOTFFOTJCRDE2NjFGMzY4 QkVGMjFFNDAeFw0yNTA0MDMwNjIzMzVaFw0yNTA0MTAwNjIzMzVaMBgxFjAUBgNV BAMTDTY3ZWUyOTY4LWE0N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChjTRDS5DCKbWjs3CQrI5VEvn/C+gvlkq1/SDa+eiskgVaA3y9KXNX47RTu2dS TtuIgJvAMF8TRM+kWyxV98enIoXwJKlc/CEDlIdey230LWyi1BYrskQusftSToCd TWz07RegWHsNplrKckKNAe//ThO5qxg5yVdhYhiukqIbxUCAtYbSC7XwrzRPOggV eUSubRvzUoywqEX4s8FCfciQEXnvTqCntxDEagYZU82raUlskYMe9lpFWEmEYXU0 WXOh0syIfWpKd1qD0gGMWwb5C0Olr1wtkwtmHH8Gu006m7whuaj1Bys+wTZJTDaL 1bumLx3mJBmU/h+yZ9vuo0WnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYoXtk24e hInmWe89Gn+7ntm3IKEwHwYDVR0jBBgwFoAUsnbxWm1Kl8SBkekr0WYfNovvIeQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzN0M0L0EyQUJBNzJDOEJE OTExRUY5Rjk2QkE0RUM0RjlBRTAyL3NuYnhXbTFLbDhTQmtla3IwV1lmTm92dkll US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc25ieFdtMUtsOFNCa2VrcjBXWWZOb3Z2SWVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz N0M0L0EyQUJBNzJDOEJEOTExRUY5Rjk2QkE0RUM0RjlBRTAyL3NuYnhXbTFLbDhT Qmtla3IwV1lmTm92dkllUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC0M7cAfZy5ppVgUw3/lWQC4ALdBkrH6gdiFyIXfUkWYj+uGYj7pY76/ TmsxuJmDwVk4sbP75oGLDItYONp0L6JTtgiFmmh1JsDTbYsVsstxYrrNEUzWZUjh 5w1bf5u2TjDzx2iAUnIuTOfffcetNEJgoFbeYy7uyjm1K2x7bIZJxywSP3ptDbLD oPaFsmuJvP1GbwYi4sncZLKKBhDjs3bCTakYOqOpLb1uxi3e85AZb9ui10efCnuF oDlql9iCPcQaeCPXZN5EvyRduNRYtFuPWxTIdf4kskuxuabnEqdLQSHHb9pig+l3 Zg0eIr7+sHxNZTxbq0IX+pmx18FCb0E= -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:57 2025 by rpki-client