$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: wJcJEvqpQkXWdssKUsWrXYYwQyJIcxiDTeJQAtHXBfk= Subject key identifier: 8D:DC:9A:AB:9C:B6:A2:BA:47:51:35:5D:04:1E:72:48:F0:6A:01:54 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 0294 Signing time: Sat 05 Apr 2025 01:41:20 +0000 Manifest this update: Sat 05 Apr 2025 01:41:19 +0000 Manifest next update: Sat 12 Apr 2025 01:41:19 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: Oz4g3wWwO12kkc0iEOoduBo+S8j1vB+6hUGxJpTrrI0=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: OalalDzVyKhIKt/8JFaNCLlPQG9aL6loK7h8qfIQsmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017 Validity Not Before: Apr 5 01:41:19 2025 GMT Not After : Apr 12 01:41:19 2025 GMT Subject: CN=67f08a3f-c71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:0f:52:4b:cb:b6:8a:63:4e:3b:ea:eb:59: 33:5e:81:91:98:bf:9f:6e:db:6e:62:e9:27:d4:2e: d1:6e:10:ed:98:f9:d6:a5:69:8f:de:eb:4b:a6:3a: 90:90:32:67:5c:bb:af:60:5a:cd:18:62:a5:b1:4c: ea:58:c8:3f:52:0d:a3:c5:81:6b:ac:f5:40:7f:a2: e9:8d:43:38:b0:67:8a:be:8b:7b:3c:0a:b8:e0:7b: fc:35:8c:ab:3e:dc:55:34:c9:03:3b:b2:e8:ff:79: 22:1a:f7:c8:63:d0:a5:c5:88:a2:1f:b5:cd:a8:da: f9:09:39:0d:02:45:4c:19:a0:98:5a:be:d3:51:e0: 60:65:93:41:1d:e8:55:ff:b4:72:09:75:01:06:36: 9a:a8:f3:d4:e4:8f:26:78:52:65:16:23:f8:90:f3: 36:7d:bc:a2:15:f5:9d:5f:2a:c2:9f:27:e0:da:22: 84:8b:6e:9b:a1:68:48:02:39:8c:29:a1:bc:c7:e4: 50:b2:e2:90:be:fc:a5:eb:06:51:46:14:d5:67:55: bc:56:e5:3f:74:56:5e:11:61:90:df:1f:53:33:cb: 3f:ed:39:07:b6:70:fd:71:c1:a7:bb:ab:b9:ed:90: 28:b6:65:2c:2d:f2:b7:57:a3:62:a0:80:04:fb:14: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DC:9A:AB:9C:B6:A2:BA:47:51:35:5D:04:1E:72:48:F0:6A:01:54 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:00:21:4d:8a:cd:a0:a2:36:5b:b9:a2:6f:49:9d:07:aa:87: e7:b5:ed:45:d8:9d:f5:bd:ba:4e:31:ee:50:e7:f5:28:e3:17: 48:ca:d0:05:d0:97:c7:22:8a:c1:60:79:d0:e7:97:28:81:2f: 3d:b3:08:81:9c:21:75:7c:86:a7:21:78:f8:8e:f4:ee:df:c4: ae:b9:d6:88:45:c5:2a:7d:02:eb:af:97:6c:fa:83:bd:e9:e0: 50:d4:68:5f:11:29:e5:56:46:63:c5:5b:9b:3c:be:f6:22:95: 1b:d2:0e:e8:37:49:c2:7e:3e:df:57:1b:eb:f5:48:7f:c2:5c: 41:36:0b:36:3a:f7:78:98:b8:c7:71:96:63:3d:0a:74:ae:36: dd:6f:d4:bc:79:4f:f0:a5:f1:c7:d1:ab:32:ab:e5:b0:f5:a3: 42:ec:54:ea:ff:50:26:3b:39:c6:8d:83:f6:3d:6f:cd:a5:40: 9c:46:9c:81:c0:ae:ac:82:03:d8:6d:41:54:ab:e6:84:b6:1c: db:50:f4:3d:a0:f2:d4:87:49:e6:f9:b8:03:f1:e0:29:51:1b: 59:fc:98:b3:7b:00:3d:e0:02:9c:0a:e8:05:91:34:c4:40:f5: dd:c7:33:52:19:0c:5d:63:43:35:7a:a7:f7:92:74:71:e2:dd: be:70:4e:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjUwNDA1MDE0MTE5WhcNMjUwNDEyMDE0MTE5WjAYMRYwFAYD VQQDEw02N2YwOGEzZi1jNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mQPUkvLtopjTjvq61kzXoGRmL+fbttuYukn1C7RbhDtmPnWpWmP3utLpjqQ kDJnXLuvYFrNGGKlsUzqWMg/Ug2jxYFrrPVAf6LpjUM4sGeKvot7PAq44Hv8NYyr PtxVNMkDO7Lo/3kiGvfIY9ClxYiiH7XNqNr5CTkNAkVMGaCYWr7TUeBgZZNBHehV /7RyCXUBBjaaqPPU5I8meFJlFiP4kPM2fbyiFfWdXyrCnyfg2iKEi26boWhIAjmM KaG8x+RQsuKQvvyl6wZRRhTVZ1W8VuU/dFZeEWGQ3x9TM8s/7TkHtnD9ccGnu6u5 7ZAotmUsLfK3V6NioIAE+xSRCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3cmquc tqK6R1E1XQQeckjwagFUMB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTACFNis2gojZbuaJvSZ0Hqofnte1F2J31vbpOMe5Q5/Uo4xdIytAF 0JfHIorBYHnQ55cogS89swiBnCF1fIanIXj4jvTu38SuudaIRcUqfQLrr5ds+oO9 6eBQ1GhfESnlVkZjxVubPL72IpUb0g7oN0nCfj7fVxvr9Uh/wlxBNgs2Ovd4mLjH cZZjPQp0rjbdb9S8eU/wpfHH0asyq+Ww9aNC7FTq/1AmOznGjYP2PW/NpUCcRpyB wK6sggPYbUFUq+aEthzbUPQ9oPLUh0nm+bgD8eApURtZ/JizewA94AKcCugFkTTE QPXdxzNSGQxdY0M1eqf3knRx4t2+cE5I -----END CERTIFICATE-----Generated at Sat Apr 5 15:28:01 2025 by rpki-client