$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json) Hash identifier: uccj43wLL7sHQIUjvIypm0lQFsYlSLjLOu3w6Fs1hpQ= Subject key identifier: 49:C8:DC:C8:83:93:9B:0C:16:FE:E4:B7:3F:6D:68:2D:28:30:14:BC Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Certificate serial: 0913 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft Manifest number: 090D Signing time: Fri 04 Apr 2025 20:29:48 +0000 Manifest this update: Fri 04 Apr 2025 20:29:48 +0000 Manifest next update: Fri 11 Apr 2025 20:29:48 +0000 Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: V/BdvJVnPhRr8hclXi0/RNfwuPbgmLStlI6NQtZCI/8=) 2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: kT9n+KoUVrMxTcDdDdchHMpGKJgB1YHqyxZ9/EDRDrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2323 (0x913) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF364 Validity Not Before: Apr 4 20:29:48 2025 GMT Not After : Apr 11 20:29:48 2025 GMT Subject: CN=67f0413c-9c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:83:11:ec:bb:2f:e3:62:17:a7:a5:e6:c8: f5:6c:be:d5:09:68:c0:b3:c5:30:43:2a:4d:f3:3e: db:a2:9c:0e:ed:c4:a0:04:41:c4:b8:a8:39:ce:38: cb:3d:18:6f:18:fa:a4:04:0c:af:15:0e:c1:e2:5e: 49:e1:1a:d5:6c:d0:27:85:2a:9d:2d:ff:f6:cf:a6: 87:da:90:c8:fd:0b:3a:55:03:21:98:9a:cf:b3:e2: 6a:bb:91:74:8a:5e:e1:12:32:0a:30:97:2b:5c:37: 30:af:ad:e6:cd:c3:24:23:06:d1:1f:93:d6:01:07: 1c:dd:83:e6:9b:99:2a:7d:aa:fc:37:a9:5a:6f:57: ba:be:d6:7d:21:48:05:13:6e:b0:31:97:82:b4:e1: 1c:eb:1c:f7:8c:a8:da:e5:46:eb:13:90:f7:b3:fe: d9:e6:c8:f0:9d:10:dc:50:c5:2f:66:15:21:fe:f5: 4d:c2:e8:72:d5:19:8a:23:43:91:11:4e:dd:e5:f0: 57:a3:48:11:61:ca:74:74:81:53:01:51:7a:fe:4f: 7c:f6:52:7a:73:af:78:77:89:4a:8f:20:77:5a:57: 4f:3e:2b:78:e9:a4:6a:02:f7:44:96:a2:e0:49:44: 6c:17:e8:84:6b:4f:da:0e:33:d8:fa:53:b3:16:31: ae:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C8:DC:C8:83:93:9B:0C:16:FE:E4:B7:3F:6D:68:2D:28:30:14:BC X509v3 Authority Key Identifier: keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:12:43:2d:1e:b3:67:25:fc:78:ce:c3:09:61:2b:4c:5c:a9: a1:04:d1:42:3e:0b:e1:cb:9e:21:ae:c7:7a:05:0a:be:8b:ef: 03:32:0e:23:c2:26:10:c8:70:c0:b0:75:01:6e:e1:3f:fe:ed: a3:ee:63:e0:b2:5b:54:68:c4:49:0b:3d:d1:fb:d5:97:46:8c: ce:61:44:c2:f2:a2:cd:b8:52:13:24:39:a4:c2:92:19:af:8e: 74:15:7e:da:6c:b0:4c:9e:fa:ff:77:52:05:2d:03:a9:d2:d8: 73:a1:a3:10:36:f1:8f:24:96:16:cb:ea:29:0a:f4:96:b3:fd: f8:8c:c0:ac:57:78:2e:2e:62:a8:4e:72:10:92:1d:62:51:b5: dd:e7:7a:ad:a9:25:b1:83:75:81:65:29:c2:63:1c:d3:45:09: 52:b5:91:92:4b:7d:ac:81:f7:ff:c2:b0:17:77:d6:e1:02:de: b9:17:60:2b:a7:9d:c0:10:54:30:27:84:03:5e:79:37:32:0e: e0:0b:b4:70:95:83:87:11:cc:0d:87:49:09:59:50:9d:b4:38: 87:d3:5b:1c:5f:1b:88:7d:3f:45:80:29:f4:86:d4:86:b8:65: 35:6c:3e:dd:04:8e:77:89:86:f5:12:63:30:67:24:81:9e:08: d4:47:d8:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4 OTA1M0Q0MzYwHhcNMjUwNDA0MjAyOTQ4WhcNMjUwNDExMjAyOTQ4WjAYMRYwFAYD VQQDEw02N2YwNDEzYy05YzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6aDEey7L+NiF6el5sj1bL7VCWjAs8UwQypN8z7bopwO7cSgBEHEuKg5zjjL PRhvGPqkBAyvFQ7B4l5J4RrVbNAnhSqdLf/2z6aH2pDI/Qs6VQMhmJrPs+Jqu5F0 il7hEjIKMJcrXDcwr63mzcMkIwbRH5PWAQcc3YPmm5kqfar8N6lab1e6vtZ9IUgF E26wMZeCtOEc6xz3jKja5UbrE5D3s/7Z5sjwnRDcUMUvZhUh/vVNwuhy1RmKI0OR EU7d5fBXo0gRYcp0dIFTAVF6/k989lJ6c694d4lKjyB3WldPPit46aRqAvdElqLg SURsF+iEa0/aDjPY+lOzFjGuhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnI3MiD k5sMFv7ktz9taC0oMBS8MB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj MU1QOEM5WVFrY1NKQlQxRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfEkMtHrNnJfx4zsMJYStMXKmhBNFCPgvhy54hrsd6BQq+i+8DMg4j wiYQyHDAsHUBbuE//u2j7mPgsltUaMRJCz3R+9WXRozOYUTC8qLNuFITJDmkwpIZ r450FX7abLBMnvr/d1IFLQOp0thzoaMQNvGPJJYWy+opCvSWs/34jMCsV3guLmKo TnIQkh1iUbXd53qtqSWxg3WBZSnCYxzTRQlStZGSS32sgff/wrAXd9bhAt65F2Ar p53AEFQwJ4QDXnk3Mg7gC7RwlYOHEcwNh0kJWVCdtDiH01scXxuIfT9FgCn0htSG uGU1bD7dBI53iYb1EmMwZySBngjUR9iw -----END CERTIFICATE-----Generated at Sun Apr 6 01:44:14 2025 by rpki-client