$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft File: suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json) Hash identifier: W66RYVPsr4+MmPFGlcSpczJtS2FOg0bjLHBpe8nGUAQ= Subject key identifier: 0D:8B:E9:29:3F:7D:6E:0C:C9:51:13:06:06:D2:EC:99:3A:F8:2B:8C Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft Manifest number: 94 Signing time: Wed 09 Apr 2025 05:12:59 +0000 Manifest this update: Wed 09 Apr 2025 05:12:58 +0000 Manifest next update: Wed 16 Apr 2025 05:12:58 +0000 Files and hashes: 1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: TRv351NCRqD6UpuZBYi84fQVWXEsUrOcpMzlKOjCAmM=) 2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: lY5HgP2b+DiZvOALHw+tr2ZxBjEGaK357GqXMmb0Brk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F Validity Not Before: Apr 9 05:12:58 2025 GMT Not After : Apr 16 05:12:58 2025 GMT Subject: CN=67f601da-79c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:ce:e4:15:d8:6a:ee:74:e5:cc:a5:62:ff: e5:11:4f:87:95:54:15:fa:40:df:da:65:23:33:55: 68:1a:ec:07:78:b1:87:46:a1:44:0a:97:57:93:52: c2:81:18:70:41:22:01:53:86:51:9d:fc:7a:f5:98: 48:1d:c0:36:5a:73:ec:e9:ee:4b:31:88:1a:ac:8e: 76:ad:77:ae:f5:26:37:63:35:f0:92:3f:f1:a2:4d: 45:99:25:76:fd:fb:a2:aa:ef:6c:71:91:7a:95:58: ea:0d:07:ec:6f:46:df:46:2c:71:8b:45:b5:08:1a: 72:06:88:f2:7d:b0:d1:15:e9:97:19:3b:f0:77:30: ab:56:f6:f5:65:35:a0:12:98:3c:c4:a3:a5:5f:65: 4b:ad:6e:8d:7c:04:0b:7f:ee:77:a0:46:7e:da:6f: cc:22:55:75:dc:db:05:52:38:07:a7:29:a8:47:72: 0e:0a:d7:1a:45:47:fd:b2:22:02:9a:a8:78:9a:7c: bc:92:2c:1e:d3:0c:f7:0c:55:1b:d5:42:4d:53:0d: 92:4e:93:6a:e8:d3:6e:0f:1b:18:4a:0f:6a:79:ed: 1e:d7:fc:62:7b:4d:59:6a:ac:40:b6:65:de:3c:de: 10:89:e2:75:5d:0b:15:fb:55:dc:44:27:56:4d:2e: 7f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8B:E9:29:3F:7D:6E:0C:C9:51:13:06:06:D2:EC:99:3A:F8:2B:8C X509v3 Authority Key Identifier: keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f8:8b:4d:59:f1:4d:a0:c0:e8:10:29:ba:9d:15:c7:cf:f8: c5:72:52:35:ba:e4:3e:81:26:1a:d3:b2:15:63:5b:95:14:dd: 6a:c9:14:27:0d:d0:38:29:32:32:4f:7f:24:ae:90:1b:08:2d: b8:4b:11:e1:ff:57:3a:5a:4c:ea:fd:00:eb:55:f7:9b:03:fb: 02:e0:a6:1c:95:b2:30:42:f1:f7:a7:96:01:f0:95:eb:eb:06: 4f:74:d9:53:75:42:19:bf:45:c5:71:14:b3:e3:b2:e0:cf:f1: 77:9e:c4:16:33:80:f4:9e:e0:03:c2:c9:71:77:1a:5c:6a:9c: 32:09:07:ba:2b:8f:91:86:41:23:14:61:30:89:dc:29:08:c5: 90:10:cd:ba:73:0b:59:f3:20:44:06:24:60:c4:9f:62:54:36: 68:40:bc:4c:a6:78:8d:d8:f2:33:a8:07:68:77:05:12:cb:5f: 37:e0:a0:9d:c4:90:58:ca:f1:9a:57:af:ad:94:0e:0e:d2:2b: b4:f3:b6:59:2e:53:f6:0e:1c:ad:9d:a1:6a:a6:ab:72:57:a1: 7b:db:39:d1:30:64:b6:29:53:87:40:16:7a:a6:b9:74:46:2a: 1f:a6:f4:52:ac:4c:9d:d0:e6:78:ce:4e:8f:52:ea:ed:ea:3b: 87:9d:70:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKEIyRTg4RUREMzYxQkNDNjE5NEM5N0Y2OEM0NzI1MTgw RkYwMkY3MjQwHhcNMjUwNDA5MDUxMjU4WhcNMjUwNDE2MDUxMjU4WjAYMRYwFAYD VQQDEw02N2Y2MDFkYS03OWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBXO5BXYau505cylYv/lEU+HlVQV+kDf2mUjM1VoGuwHeLGHRqFECpdXk1LC gRhwQSIBU4ZRnfx69ZhIHcA2WnPs6e5LMYgarI52rXeu9SY3YzXwkj/xok1FmSV2 /fuiqu9scZF6lVjqDQfsb0bfRixxi0W1CBpyBojyfbDRFemXGTvwdzCrVvb1ZTWg Epg8xKOlX2VLrW6NfAQLf+53oEZ+2m/MIlV13NsFUjgHpymoR3IOCtcaRUf9siIC mqh4mny8kiwe0wz3DFUb1UJNUw2STpNq6NNuDxsYSg9qee0e1/xie01ZaqxAtmXe PN4QieJ1XQsV+1XcRCdWTS5/sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2L6Sk/ fW4MyVETBgbS7Jk6+CuMMB8GA1UdIwQYMBaAFLLojt02G8xhlMl/aMRyUYD/Avck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9CRDg1OUY5NjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpHR1V5WDlveEhKUmdQOEM5 eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1aU8zVFliekdHVXlYOW94SEpSZ1A4Qzl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9CRDg1OUY5NjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpH R1V5WDlveEhKUmdQOEM5eVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ+ItNWfFNoMDoECm6nRXHz/jFclI1uuQ+gSYa07IVY1uVFN1qyRQn DdA4KTIyT38krpAbCC24SxHh/1c6Wkzq/QDrVfebA/sC4KYclbIwQvH3p5YB8JXr 6wZPdNlTdUIZv0XFcRSz47Lgz/F3nsQWM4D0nuADwslxdxpcapwyCQe6K4+RhkEj FGEwidwpCMWQEM26cwtZ8yBEBiRgxJ9iVDZoQLxMpniN2PIzqAdodwUSy1834KCd xJBYyvGaV6+tlA4O0iu087ZZLlP2DhytnaFqpqtyV6F72znRMGS2KVOHQBZ6prl0 RiofpvRSrEyd0OZ4zk6PUurt6juHnXDH -----END CERTIFICATE-----Generated at Thu Apr 10 22:12:31 2025 by rpki-client