$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json) Hash identifier: chwj7IMlXBEFRIT4cK68vuwVGYW00om3oHAKuoNDfSM= Subject key identifier: 8B:70:24:17:F0:C2:33:7A:80:9B:7B:83:20:BE:95:E8:C3:32:58:EC Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft Manifest number: 0237 Signing time: Thu 03 Apr 2025 02:02:34 +0000 Manifest this update: Thu 03 Apr 2025 02:02:34 +0000 Manifest next update: Thu 10 Apr 2025 02:02:34 +0000 Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: qq9zhu6JBC9txTwWwSsU8doWJdmGlPXcMIsa5ifJzZA=) 2: E309B1883C9711EF88C2B284C4F9AE02.roa (hash: w51TUZ9aKXo3NJmk6dhABfqfugO3+EeHqPsN7Ek6pSc=) 3: 8673F05C816911EF9022F40CC4F9AE02.roa (hash: Lvob14CywzAMuxThU8EVo51F2cECjcbnduJBtYIJSBI=) 4: 4E65B594D35711EEB8F04828C4F9AE02.roa (hash: oF0KHM0s6qEdjrzJyCovkn3VK6S/rVe2wxmJbXBONNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366A Validity Not Before: Apr 3 02:02:34 2025 GMT Not After : Apr 10 02:02:34 2025 GMT Subject: CN=67edec3a-a528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:f6:53:98:43:50:82:aa:30:49:61:4b:c9: 5e:b6:6f:70:78:57:09:15:12:73:f7:d6:30:a2:9e: e0:ad:9d:a7:7c:4c:05:a0:c8:8c:7f:8b:db:14:e8: 30:40:02:8c:78:9e:f3:23:ea:52:29:ce:62:9c:e7: 70:0a:99:80:9c:b6:eb:56:a6:24:18:5b:ff:33:d8: b6:64:66:c1:bb:c6:af:3f:7f:54:c3:6f:2d:62:79: 26:d2:64:17:7d:32:1e:f2:e3:96:53:a5:a1:0e:40: 21:3a:aa:62:f4:4d:53:49:b9:00:4c:27:9b:1b:7f: e9:80:e2:39:b6:91:2b:7e:3c:70:93:88:7d:76:d8: c6:cd:64:7e:16:64:dc:2c:08:89:4e:86:a7:d0:c7: c7:1a:ec:dc:af:87:18:18:7a:45:69:f1:09:73:20: 9e:08:ca:a0:a4:7a:b6:1b:5f:1c:fb:1b:4f:9c:33: 27:c8:99:0d:fd:dd:73:6b:b8:b3:a5:b4:ae:d3:15: e7:87:1e:19:bf:5b:bb:9d:39:46:8d:5f:9d:64:61: c5:e7:a7:4d:40:62:ba:c3:73:cb:04:69:55:84:24: 29:c0:09:6d:43:29:82:30:e1:d7:96:19:da:98:a3: 36:8f:5c:a9:d4:3f:3c:13:f1:50:53:29:72:db:89: 56:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:70:24:17:F0:C2:33:7A:80:9B:7B:83:20:BE:95:E8:C3:32:58:EC X509v3 Authority Key Identifier: keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:07:d9:ae:b9:04:fa:bd:14:2b:09:95:51:0b:88:10:11:db: 03:08:fb:a1:f7:89:2f:cd:a3:13:8f:d9:de:25:00:44:c6:4a: b4:2b:46:32:df:06:af:71:76:ba:02:d6:13:c0:12:ad:3c:fe: 41:a4:1c:3f:c3:9e:6b:30:8d:a4:92:40:24:c1:18:ef:c2:6f: 40:f4:5e:03:58:e5:0f:3b:bd:7e:df:19:8d:ad:0f:a3:ba:13: 3f:73:57:74:6b:b9:f8:0c:1f:21:e7:a4:84:54:c5:16:b3:6b: 86:00:72:e2:6d:0a:61:ac:84:56:03:f9:88:a0:2b:72:80:48: 4b:28:1e:41:4b:c7:97:b9:cb:79:cf:14:cd:ab:ff:94:97:1a: c6:10:59:a9:b1:61:b3:1c:3c:9e:48:a9:8c:44:47:df:8f:6c: 98:d5:55:5c:27:b3:c0:97:48:b5:0e:2e:01:28:d0:07:ad:d2: 87:9a:5a:bb:11:d2:cd:f4:d3:7d:a1:10:a9:82:59:de:aa:8c: cb:b4:0c:24:2f:db:b5:9f:fb:fa:cd:72:ec:45:c6:a1:20:e6: e0:46:5c:ca:b5:87:43:53:70:b4:e7:32:b0:87:be:44:b0:01: a0:8a:cd:e6:2a:9b:fe:95:f2:ef:30:0d:6e:e4:3d:c6:e0:fb: 62:26:69:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkExMTAvBgNVBAUTKEIwNjdDNkJCNzBERjBEQzA0Q0U3N0Y3QzhENzY3MDZB NDlGNkNCODUwHhcNMjUwNDAzMDIwMjM0WhcNMjUwNDEwMDIwMjM0WjAYMRYwFAYD VQQDEw02N2VkZWMzYS1hNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxz2U5hDUIKqMElhS8letm9weFcJFRJz99Ywop7grZ2nfEwFoMiMf4vbFOgw QAKMeJ7zI+pSKc5inOdwCpmAnLbrVqYkGFv/M9i2ZGbBu8avP39Uw28tYnkm0mQX fTIe8uOWU6WhDkAhOqpi9E1TSbkATCebG3/pgOI5tpErfjxwk4h9dtjGzWR+FmTc LAiJToan0MfHGuzcr4cYGHpFafEJcyCeCMqgpHq2G18c+xtPnDMnyJkN/d1za7iz pbSu0xXnhx4Zv1u7nTlGjV+dZGHF56dNQGK6w3PLBGlVhCQpwAltQymCMOHXlhna mKM2j1yp1D88E/FQUyly24lWOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItwJBfw wjN6gJt7gyC+lejDMljsMB8GA1UdIwQYMBaAFLBnxrtw3w3ATOd/fI12cGpJ9suF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2QS9FQzA5QUE0QTMw N0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRjQk01Mzk4alhad2FrbjJ5 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHZkd1M0RmRGNCTTUzOThqWFp3YWtuMnk0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2QS9FQzA5QUE0QTMwN0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRj Qk01Mzk4alhad2FrbjJ5NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIB9muuQT6vRQrCZVRC4gQEdsDCPuh94kvzaMTj9neJQBExkq0K0Yy 3wavcXa6AtYTwBKtPP5BpBw/w55rMI2kkkAkwRjvwm9A9F4DWOUPO71+3xmNrQ+j uhM/c1d0a7n4DB8h56SEVMUWs2uGAHLibQphrIRWA/mIoCtygEhLKB5BS8eXuct5 zxTNq/+UlxrGEFmpsWGzHDyeSKmMREffj2yY1VVcJ7PAl0i1Di4BKNAHrdKHmlq7 EdLN9NN9oRCpglneqozLtAwkL9u1n/v6zXLsRcahIObgRlzKtYdDU3C05zKwh75E sAGgis3mKpv+lfLvMA1u5D3G4PtiJmm9 -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:31 2025 by rpki-client