$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json) Hash identifier: 9K0anQHC6tRE1SHjkd6wXpTRrXrNiBy+66GkiVkFdik= Subject key identifier: F5:48:FF:2D:6C:32:2C:45:3F:1D:3E:C5:CC:BC:D5:D6:24:87:8C:7E Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft Manifest number: 073C Signing time: Thu 10 Apr 2025 21:37:41 +0000 Manifest this update: Thu 10 Apr 2025 21:37:41 +0000 Manifest next update: Thu 17 Apr 2025 21:37:41 +0000 Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: rdRXiaxE6PGi8dHLzzzO/ZXf7Kq69peQ4iBFirpMMDg=) 2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 21:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Validity Not Before: Apr 10 21:37:41 2025 GMT Not After : Apr 17 21:37:41 2025 GMT Subject: CN=67f83a25-19cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:a9:ae:d2:31:79:47:29:99:f2:2d:a2:32: c7:6a:84:34:de:e8:77:63:5b:c5:f7:3d:57:a7:2e: 4a:b3:8a:58:57:58:13:29:fd:f7:92:4d:08:91:0d: e9:cc:0b:6b:1c:ee:e7:c2:11:1a:a6:d0:0b:01:d9: 23:df:28:25:33:5a:e0:5f:1d:eb:1c:a7:8c:3d:04: bb:01:f8:68:d8:29:0d:34:6f:4a:ed:95:13:34:5a: 69:01:4e:01:6b:1d:e4:9c:c7:33:0f:13:c4:eb:c6: c1:12:b9:34:ab:13:0f:c7:b6:f4:51:92:5b:db:6b: 2f:43:35:b7:03:2f:35:ea:70:62:81:51:b9:2e:4b: b7:f5:ab:5e:44:c4:f8:ce:07:da:16:c1:76:9f:4d: f5:8a:0a:cf:af:d6:8b:d4:4e:a9:71:9d:a5:9a:f5: f5:fc:bc:c4:2a:1b:50:30:34:27:23:1a:84:3f:fe: ae:0c:28:3d:83:31:6a:81:85:35:12:8b:7a:c6:ce: 12:7c:71:32:62:69:85:e3:c9:db:f8:1b:e0:ef:43: d9:ea:ad:c0:f2:eb:a3:40:88:aa:20:72:ae:b3:b8: 10:31:b0:e2:d0:e5:d0:38:d1:99:33:7c:1e:28:4a: d8:ae:e1:bf:00:9e:ee:c0:d9:71:b8:ab:e4:0d:5e: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:48:FF:2D:6C:32:2C:45:3F:1D:3E:C5:CC:BC:D5:D6:24:87:8C:7E X509v3 Authority Key Identifier: keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:50:14:d5:9d:b9:cd:76:0e:52:9e:47:22:cc:4d:e2:48:02: e5:26:5e:94:82:9d:95:d0:b3:78:7e:63:9d:12:23:e3:0a:3e: 40:a5:61:66:9d:42:ff:45:a1:32:fb:11:a8:d3:ed:8f:25:1f: 94:a5:b7:44:91:21:83:f6:90:84:05:5e:8a:7e:10:1f:5a:fa: 7e:18:3e:1e:6d:da:9f:c3:c5:90:26:5a:a9:d7:0d:e4:13:70: 2b:2e:90:b8:5d:b5:de:a4:f8:88:e5:89:09:1c:62:6f:b4:e2: 21:57:b3:71:82:12:28:47:5d:32:28:de:2c:8c:d3:2b:ce:ce: d5:9b:69:4c:93:fa:e8:d7:2c:63:27:98:fd:f0:02:06:2b:73: 1c:2a:25:55:59:98:72:9a:de:a1:87:1d:f2:90:65:d1:b6:83: f0:c3:fb:3d:68:50:3a:9f:4a:17:8b:b2:0d:e9:67:b3:43:0c: 37:b5:c1:0f:eb:65:e6:93:05:ce:f0:58:8c:69:b5:71:b5:dc: 33:e8:a8:50:9c:52:fb:b7:51:69:ee:71:df:09:a3:c7:48:89: 49:83:4b:5f:06:c0:80:67:d4:b0:43:df:da:19:fc:01:82:fe: fa:13:65:97:c0:af:06:d4:40:19:c1:4c:73:b8:4c:45:45:25: c4:75:61:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1 Qjg4MDk4RDEwHhcNMjUwNDEwMjEzNzQxWhcNMjUwNDE3MjEzNzQxWjAYMRYwFAYD VQQDEw02N2Y4M2EyNS0xOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswqprtIxeUcpmfItojLHaoQ03uh3Y1vF9z1Xpy5Ks4pYV1gTKf33kk0IkQ3p zAtrHO7nwhEaptALAdkj3yglM1rgXx3rHKeMPQS7Afho2CkNNG9K7ZUTNFppAU4B ax3knMczDxPE68bBErk0qxMPx7b0UZJb22svQzW3Ay816nBigVG5Lku39ateRMT4 zgfaFsF2n031igrPr9aL1E6pcZ2lmvX1/LzEKhtQMDQnIxqEP/6uDCg9gzFqgYU1 Eot6xs4SfHEyYmmF48nb+Bvg70PZ6q3A8uujQIiqIHKus7gQMbDi0OXQONGZM3we KErYruG/AJ7uwNlxuKvkDV4a8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVI/y1s MixFPx0+xcy81dYkh4x+MB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASUBTVnbnNdg5SnkcizE3iSALlJl6Ugp2V0LN4fmOdEiPjCj5ApWFm nUL/RaEy+xGo0+2PJR+UpbdEkSGD9pCEBV6KfhAfWvp+GD4ebdqfw8WQJlqp1w3k E3ArLpC4XbXepPiI5YkJHGJvtOIhV7NxghIoR10yKN4sjNMrzs7Vm2lMk/ro1yxj J5j98AIGK3McKiVVWZhymt6hhx3ykGXRtoPww/s9aFA6n0oXi7IN6WezQww3tcEP 62XmkwXO8FiMabVxtdwz6KhQnFL7t1Fp7nHfCaPHSIlJg0tfBsCAZ9SwQ9/aGfwB gv76E2WXwK8G1EAZwUxzuExFRSXEdWHB -----END CERTIFICATE-----Generated at Sat Apr 12 19:12:01 2025 by rpki-client