$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft File: sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json) Hash identifier: ja696pcL1fEXNX607U9KM/c7taFfhyqgeYfwNF7ULl4= Subject key identifier: 53:45:46:31:5A:68:95:0D:25:AD:A0:79:AA:B3:80:70:B9:09:13:76 Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 Certificate issuer: /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Certificate serial: 346A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft Manifest number: 3468 Signing time: Fri 04 Apr 2025 15:08:11 +0000 Manifest this update: Fri 04 Apr 2025 15:08:11 +0000 Manifest next update: Fri 11 Apr 2025 15:08:11 +0000 Files and hashes: 1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: EObKdC2WqRlJfiZwTLNIeHj4jWom86xCA+RisQ7e/oU=) 2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: t0r89bYo/YLfBIznDm5VJcksHUIZupXS77KseDePVYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13418 (0x346a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62A9 Validity Not Before: Apr 4 15:08:11 2025 GMT Not After : Apr 11 15:08:11 2025 GMT Subject: CN=67eff5db-3494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:05:f5:33:6c:77:10:c2:68:ba:52:59:e4: 1e:14:f4:52:56:c9:be:e5:30:08:8c:e8:4c:8d:fc: 4f:65:9e:16:c3:79:45:5e:cd:ff:65:a0:28:f2:8c: 8d:f9:fc:8a:12:52:d4:5f:87:0f:68:cc:2b:66:d5: d5:a1:50:c5:be:01:bf:85:84:21:38:29:5c:76:f1: 7d:3d:35:6c:1a:c0:83:4e:85:8e:9e:52:b9:11:5f: f7:9a:c3:e8:02:65:55:81:6e:9d:f4:44:6b:43:29: 42:2e:19:9f:c2:1e:16:a1:b0:8d:a0:77:c1:84:85: 90:61:73:f1:07:81:74:0d:37:d1:af:05:d7:13:60: 23:87:8a:96:a9:1b:b3:8b:39:85:55:77:b2:db:49: a7:e6:3f:b5:6c:b2:77:05:51:53:c6:2d:14:1e:c2: 95:58:7f:70:c1:33:64:9f:83:84:58:de:9e:2a:32: ed:41:f5:aa:32:c7:48:01:a3:ca:f6:30:8e:41:8d: 43:36:c0:22:2c:04:97:ad:88:08:20:51:5d:dd:e3: e4:ab:0c:ce:c6:57:54:1c:20:7b:41:d7:58:93:3d: 8a:79:9c:e5:b3:4d:97:c0:d3:c5:6a:2e:07:92:e7: d5:ae:ac:cc:8a:be:1c:23:9e:a9:c7:9a:ca:44:40: 02:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:45:46:31:5A:68:95:0D:25:AD:A0:79:AA:B3:80:70:B9:09:13:76 X509v3 Authority Key Identifier: keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:71:a2:cf:cd:dd:55:fd:3d:f7:0b:c7:ef:3f:47:d3:55:d4: 98:8b:35:c6:2b:e1:bc:bd:05:d4:bb:58:26:b4:2e:4a:73:29: 64:ed:db:c2:98:92:2c:95:62:6c:89:b2:d5:4c:19:cc:a3:38: ef:26:ae:58:08:08:e2:9f:83:27:b8:91:6e:29:8d:9b:3f:e7: 45:46:56:0a:6d:53:bf:14:ec:68:d6:74:fa:10:a5:37:46:1a: 74:46:dd:9a:7e:aa:13:2f:ad:a3:b8:eb:fe:e4:87:7d:55:b0: 44:d4:5a:c7:d7:e0:36:c1:4b:7f:d5:46:04:0b:bf:ce:59:33: 3c:a9:36:ea:33:b4:07:ec:58:e0:52:51:fd:ce:22:6e:25:28: 52:2f:27:08:21:0b:0c:41:b2:38:9e:e4:0e:d0:54:46:02:37: b5:59:cb:16:00:f8:83:1a:03:04:17:68:fc:cf:b1:73:1e:00: cc:63:da:de:de:71:69:a5:11:6a:f7:6c:57:14:57:91:de:7f: 6e:41:94:bf:af:d6:65:36:c8:0c:c1:50:03:f9:dd:60:a5:53: 6a:71:5b:b1:64:c4:26:cb:68:bf:45:b5:0f:c3:f2:f3:19:7f: 8c:7d:82:d9:a0:4e:80:1e:d5:14:64:f2:b2:c5:b9:53:24:15: 9d:1c:17:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQTkxMTAvBgNVBAUTKEIwQjg4RUVFOTEzQjJBQThEN0I1OTUzNzE1M0VGQ0Q4 NzAwQTkxNDAwHhcNMjUwNDA0MTUwODExWhcNMjUwNDExMTUwODExWjAYMRYwFAYD VQQDEw02N2VmZjVkYi0zNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8oF9TNsdxDCaLpSWeQeFPRSVsm+5TAIjOhMjfxPZZ4Ww3lFXs3/ZaAo8oyN +fyKElLUX4cPaMwrZtXVoVDFvgG/hYQhOClcdvF9PTVsGsCDToWOnlK5EV/3msPo AmVVgW6d9ERrQylCLhmfwh4WobCNoHfBhIWQYXPxB4F0DTfRrwXXE2Ajh4qWqRuz izmFVXey20mn5j+1bLJ3BVFTxi0UHsKVWH9wwTNkn4OEWN6eKjLtQfWqMsdIAaPK 9jCOQY1DNsAiLASXrYgIIFFd3ePkqwzOxldUHCB7QddYkz2KeZzls02XwNPFai4H kufVrqzMir4cI56px5rKREACIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNFRjFa aJUNJa2geaqzgHC5CRN2MB8GA1UdIwQYMBaAFLC4ju6ROyqo17WVNxU+/NhwCpFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJBOS9ENzdGOTE0MjFE QTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0txalh0WlUzRlQ3ODJIQUtr VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMaU83cEU3S3FqWHRaVTNGVDc4MkhBS2tVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJBOS9ENzdGOTE0MjFEQTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0tx alh0WlUzRlQ3ODJIQUtrVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCacaLPzd1V/T33C8fvP0fTVdSYizXGK+G8vQXUu1gmtC5Kcylk7dvC mJIslWJsibLVTBnMozjvJq5YCAjin4MnuJFuKY2bP+dFRlYKbVO/FOxo1nT6EKU3 Rhp0Rt2afqoTL62juOv+5Id9VbBE1FrH1+A2wUt/1UYEC7/OWTM8qTbqM7QH7Fjg UlH9ziJuJShSLycIIQsMQbI4nuQO0FRGAje1WcsWAPiDGgMEF2j8z7FzHgDMY9re 3nFppRFq92xXFFeR3n9uQZS/r9ZlNsgMwVAD+d1gpVNqcVuxZMQmy2i/RbUPw/Lz GX+MfYLZoE6AHtUUZPKyxblTJBWdHBeJ -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:21 2025 by rpki-client