$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: l7ratUzR6odC7tBTCVChpTY2eQ5iYwYRACwAwbQLcYQ= Subject key identifier: 10:6F:D1:C7:7A:07:C5:9A:95:B0:A1:91:C9:9D:66:8B:07:1C:6D:8A Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 08AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 08AD Signing time: Fri 30 May 2025 20:43:52 +0000 Manifest this update: Fri 30 May 2025 20:43:52 +0000 Manifest next update: Fri 06 Jun 2025 20:43:52 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: fClj/5/14OvbUTySghbpWVq3jeN9uKFaGZfhfSj+TgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: May 30 20:43:52 2025 GMT Not After : Jun 6 20:43:52 2025 GMT Subject: CN=683a1888-3283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:fc:22:2f:88:21:db:eb:46:c6:aa:a8:bb: 69:4f:14:dd:24:14:ef:e5:f3:18:e2:a1:ee:3b:4e: e7:36:ee:d0:90:e5:92:47:c5:3b:04:02:63:4d:55: ee:90:51:28:14:39:5f:2a:2f:36:50:de:4b:3e:6c: e9:3e:e9:10:c5:f8:6d:f5:43:2d:29:7c:f1:86:88: 19:a9:ab:6e:91:a4:19:35:1a:52:b6:06:3f:1c:f3: 3e:ce:e6:fa:cf:0d:81:39:1f:ad:ab:3f:d2:8d:a8: f1:fb:9c:e6:4c:8c:72:e5:01:34:d8:0e:b1:31:18: e2:90:72:dc:4c:b4:52:59:19:a2:cc:d1:fe:d0:e3: 1f:f8:ae:02:b2:49:0d:d7:f8:9d:0f:bf:ae:f9:5e: 14:45:e0:0d:fc:ba:78:a8:38:66:3b:b0:86:e4:75: 17:fd:d1:1b:a7:8e:55:b8:5d:8f:db:83:82:27:d7: 6c:dc:28:bd:fe:3a:f8:c8:ab:db:31:b3:15:ef:69: cc:c4:ff:bf:fe:8e:dd:63:dc:f2:74:93:40:b9:7d: a9:47:3d:df:96:e0:a1:eb:fb:3a:48:aa:71:0d:75: 08:09:84:99:b4:7f:a6:46:43:80:02:2c:1f:96:ae: 28:81:89:a4:b2:a8:ac:68:e3:2b:6a:3c:3b:7c:bf: cc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6F:D1:C7:7A:07:C5:9A:95:B0:A1:91:C9:9D:66:8B:07:1C:6D:8A X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:9e:2b:b8:2e:3f:d8:f4:0e:de:f5:c3:cb:c9:f6:62:6d:15: 69:8e:cf:c1:3d:13:3e:fe:f4:56:03:7d:ef:26:70:79:b9:94: af:f7:b9:0f:a5:96:20:0c:85:6a:c4:19:56:fd:b2:96:46:8b: 80:69:7c:f6:40:48:8c:e1:4c:34:66:bf:b1:78:ba:d5:ab:8e: 68:12:b6:d4:e7:ec:1f:18:3c:20:24:f8:d2:8c:97:fe:c7:b7: 87:95:a8:d4:f6:ee:41:87:16:9d:e5:1e:35:c9:30:38:db:7f: 27:41:d2:c5:ab:30:8d:25:61:e4:0e:2f:64:98:cb:9f:5b:cf: 0d:61:44:45:cf:30:23:c1:0c:0f:4f:d8:7b:70:39:5f:86:7e: 42:de:b4:0a:45:cd:37:30:5b:39:83:01:67:64:59:df:3e:f9: 46:84:87:59:06:71:27:f5:e4:41:de:f4:28:6c:12:b3:04:ed: 03:da:79:ec:de:49:0b:09:83:77:67:21:d6:43:95:4a:4d:92: 19:a3:ff:a5:38:15:5a:33:c1:1a:82:79:43:66:ed:2a:c7:b7: fe:3b:47:48:da:5e:7d:33:b4:d3:74:68:12:ca:b9:54:02:6c: 94:e5:cc:b5:87:d7:2b:c8:3d:4d:33:6e:34:ca:60:64:92:60: 62:57:c9:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUwNTMwMjA0MzUyWhcNMjUwNjA2MjA0MzUyWjAYMRYwFAYD VQQDEw02ODNhMTg4OC0zMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQ/8Ii+IIdvrRsaqqLtpTxTdJBTv5fMY4qHuO07nNu7QkOWSR8U7BAJjTVXu kFEoFDlfKi82UN5LPmzpPukQxfht9UMtKXzxhogZqatukaQZNRpStgY/HPM+zub6 zw2BOR+tqz/Sjajx+5zmTIxy5QE02A6xMRjikHLcTLRSWRmizNH+0OMf+K4CskkN 1/idD7+u+V4UReAN/Lp4qDhmO7CG5HUX/dEbp45VuF2P24OCJ9ds3Ci9/jr4yKvb MbMV72nMxP+//o7dY9zydJNAuX2pRz3fluCh6/s6SKpxDXUICYSZtH+mRkOAAiwf lq4ogYmksqisaOMrajw7fL/MxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBv0cd6 B8WalbChkcmdZosHHG2KMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClniu4Lj/Y9A7e9cPLyfZibRVpjs/BPRM+/vRWA33vJnB5uZSv97kP pZYgDIVqxBlW/bKWRouAaXz2QEiM4Uw0Zr+xeLrVq45oErbU5+wfGDwgJPjSjJf+ x7eHlajU9u5Bhxad5R41yTA4238nQdLFqzCNJWHkDi9kmMufW88NYURFzzAjwQwP T9h7cDlfhn5C3rQKRc03MFs5gwFnZFnfPvlGhIdZBnEn9eRB3vQobBKzBO0D2nns 3kkLCYN3ZyHWQ5VKTZIZo/+lOBVaM8EagnlDZu0qx7f+O0dI2l59M7TTdGgSyrlU AmyU5cy1h9cryD1NM240ymBkkmBiV8lk -----END CERTIFICATE-----Generated at Sat May 31 17:56:18 2025 by rpki-client