$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: CU7f0N1xs2okhrqSFdRhGZYDuevdkFcyBq4fqSh7mrU= Subject key identifier: A1:1D:4D:0A:0A:A5:19:66:B3:9E:CD:02:AD:AE:C5:F5:61:0D:33:1B Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 150E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 1506 Signing time: Fri 04 Apr 2025 16:54:00 +0000 Manifest this update: Fri 04 Apr 2025 16:53:59 +0000 Manifest next update: Fri 11 Apr 2025 16:53:59 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: w3WuENTuOAHYwxPGCzp9e80Jt6cijEn7eVw2aSQs4tE=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: Yhfg4YvQQZjhY3KRsDWyz6hCLcA/Ph/uJc8vvKK428M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5390 (0x150e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6 Validity Not Before: Apr 4 16:53:59 2025 GMT Not After : Apr 11 16:53:59 2025 GMT Subject: CN=67f00ea7-cf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:11:53:29:94:18:8a:51:21:05:24:3e:ac: db:35:81:0f:4b:c4:2f:92:09:2c:6c:78:b5:87:e9: e1:ea:e0:de:a9:91:d9:63:11:3e:50:dc:20:f4:6f: bc:9e:fb:a7:3b:c9:37:0e:24:3f:96:8e:23:c3:1a: 4d:39:ba:20:38:6e:ea:c0:ab:c9:04:2d:5a:f0:60: 93:92:b4:75:8b:eb:07:0d:5e:58:72:fe:e4:13:36: 68:a9:75:4c:e8:c0:d3:4e:f3:f2:e5:3f:47:1b:ab: c1:46:25:cd:bc:d4:8a:20:34:88:f9:46:43:ba:6e: a3:73:10:bf:c8:67:f2:5f:ce:96:ac:9e:d9:a2:cd: ca:8e:87:b2:fd:1b:93:34:eb:4f:ae:14:72:8f:6d: 4f:28:e0:c8:52:0b:0c:ab:88:0a:f4:6f:c5:f7:58: 2f:5a:34:94:38:21:09:70:4f:ef:ea:dd:0a:db:9b: 34:a7:46:11:39:86:72:dd:35:60:8b:ff:38:ab:e4: aa:2b:3e:90:5e:da:4d:24:68:3c:e6:43:ce:d1:8c: 26:b5:30:ff:42:72:05:ad:9c:43:22:4a:d8:0f:06: 88:7d:ce:f7:6a:c9:96:9d:2a:2f:b3:d7:06:d5:a0: 01:34:14:a9:8a:dd:ad:dc:86:2d:1f:88:73:e5:17: f1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1D:4D:0A:0A:A5:19:66:B3:9E:CD:02:AD:AE:C5:F5:61:0D:33:1B X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:43:78:3b:85:ba:20:38:44:75:c9:94:f5:71:94:13:3e:37: 03:b6:ea:6d:42:1d:e2:68:f1:9f:39:fb:70:c2:f5:b3:92:99: 22:48:a3:30:bf:4c:24:c6:c4:13:de:fa:64:fd:35:98:3a:2c: c3:f3:29:94:4f:7d:2a:23:4a:b3:c2:36:17:32:d5:86:f7:eb: a4:9d:f3:6a:b1:02:9c:69:e2:d7:3c:34:f2:da:26:1c:b2:20: 4b:04:36:9e:ef:17:ce:4c:95:e1:86:ef:a0:7b:d5:5d:ba:26: a3:70:2f:0e:7a:dc:b2:d9:35:24:18:c9:51:ed:7d:be:4c:f4: 20:e9:20:20:28:64:82:9f:a6:b6:4f:2b:ec:45:39:67:56:79: 31:50:a5:24:08:9d:86:87:14:72:07:15:63:12:b1:f3:bf:16: 8d:ac:b5:59:11:02:07:27:bf:13:b0:5c:51:85:00:b0:a6:3f: a9:2b:51:44:f9:2a:a2:a1:bd:98:00:96:09:c9:d9:d1:5d:01: 19:4b:98:4f:7c:08:82:79:33:38:3e:22:6e:18:49:56:1f:2e: ba:0b:3e:76:d8:c8:81:2f:25:c7:83:c8:15:39:b3:12:a1:73: 5f:fa:8e:dc:cd:7d:8b:4f:d0:1d:97:53:3c:ec:61:21:5c:fb: 1a:05:b5:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUwNDA0MTY1MzU5WhcNMjUwNDExMTY1MzU5WjAYMRYwFAYD VQQDEw02N2YwMGVhNy1jZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx98RUymUGIpRIQUkPqzbNYEPS8QvkgksbHi1h+nh6uDeqZHZYxE+UNwg9G+8 nvunO8k3DiQ/lo4jwxpNObogOG7qwKvJBC1a8GCTkrR1i+sHDV5Ycv7kEzZoqXVM 6MDTTvPy5T9HG6vBRiXNvNSKIDSI+UZDum6jcxC/yGfyX86WrJ7Zos3Kjoey/RuT NOtPrhRyj21PKODIUgsMq4gK9G/F91gvWjSUOCEJcE/v6t0K25s0p0YROYZy3TVg i/84q+SqKz6QXtpNJGg85kPO0YwmtTD/QnIFrZxDIkrYDwaIfc73asmWnSovs9cG 1aABNBSpit2t3IYtH4hz5RfxtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEdTQoK pRlms57NAq2uxfVhDTMbMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoQ3g7hbogOER1yZT1cZQTPjcDtuptQh3iaPGfOftwwvWzkpkiSKMw v0wkxsQT3vpk/TWYOizD8ymUT30qI0qzwjYXMtWG9+uknfNqsQKcaeLXPDTy2iYc siBLBDae7xfOTJXhhu+ge9VduiajcC8Oetyy2TUkGMlR7X2+TPQg6SAgKGSCn6a2 TyvsRTlnVnkxUKUkCJ2GhxRyBxVjErHzvxaNrLVZEQIHJ78TsFxRhQCwpj+pK1FE +Sqiob2YAJYJydnRXQEZS5hPfAiCeTM4PiJuGElWHy66Cz522MiBLyXHg8gVObMS oXNf+o7czX2LT9Adl1M87GEhXPsaBbW+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:19 2025 by rpki-client