$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json) Hash identifier: pAqHSPhfJgs9T4KlKN6XiukJcvrTyoRkcuZM5CvpXOY= Subject key identifier: 9E:DD:CA:DC:52:72:0A:17:7E:85:CF:5C:A4:AC:A9:3B:73:DB:B4:89 Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 0AB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft Manifest number: 0AA9 Signing time: Fri 30 May 2025 19:43:42 +0000 Manifest this update: Fri 30 May 2025 19:43:42 +0000 Manifest next update: Fri 06 Jun 2025 19:43:42 +0000 Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: S8TxAgIMjBL9B+jQ2No3MziwWa1BStEN4GrvKlCYX54=) 2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: azG9+zsiLDhAUqM7p+rm2GUFPqeXgedKf8uLYwG6GGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2741 (0xab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: May 30 19:43:42 2025 GMT Not After : Jun 6 19:43:42 2025 GMT Subject: CN=683a0a6e-5397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:6c:e9:f1:e4:f6:bd:f5:63:4f:bd:83:26: 76:27:f9:1a:60:58:e1:87:84:80:b6:ca:c2:83:9d: 92:a3:7b:40:ea:dc:2b:e0:2e:af:39:29:b8:85:31: 51:38:7b:c3:ff:39:ed:92:57:90:fd:7d:d5:a9:e7: 06:9c:dc:54:e4:9a:2c:f0:80:68:6a:70:ad:bf:26: 8c:b8:89:34:a7:fc:33:52:6c:0c:48:06:9a:a2:d2: fc:32:0a:02:ac:3f:cc:53:96:9b:f8:d8:e5:6b:13: 0b:38:1c:04:c9:64:da:29:1b:75:c1:d6:76:1d:ca: bf:c9:71:8d:4f:ef:13:6d:99:4a:b4:35:6a:29:f1: aa:4e:26:bf:c8:d2:0b:37:91:1f:12:b9:e1:25:0c: 2e:53:24:e4:f3:61:59:8c:73:01:69:87:ab:d2:88: 36:b9:a0:c7:57:61:8d:ea:cb:a3:d4:63:9e:5e:81: 00:a8:c0:67:9f:2b:f9:0f:db:9a:72:cd:0e:97:7e: 2b:e9:bb:a1:78:5d:04:4b:fb:f8:d5:30:47:5b:14: ae:fe:05:d7:75:e9:64:e2:b4:25:0a:66:6d:14:6d: 27:58:88:6b:42:35:09:ed:d3:06:03:94:b9:d7:39: 74:6f:38:36:82:54:bd:aa:b8:b1:2b:1b:b5:82:ae: 56:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DD:CA:DC:52:72:0A:17:7E:85:CF:5C:A4:AC:A9:3B:73:DB:B4:89 X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:6c:78:53:a4:f7:e8:25:8b:57:65:da:78:63:5d:38:c9:3c: d7:02:30:91:87:eb:e5:9a:d5:0b:28:f4:ce:af:f3:de:8f:5d: 44:2a:b3:a9:4c:2f:57:f4:7f:ef:0a:47:81:9c:92:db:98:3d: 42:43:b0:12:5b:7e:91:cd:10:9a:bb:ff:56:84:2b:75:60:4a: 5a:cd:46:f3:68:72:a7:a5:04:32:f8:ea:52:0e:95:84:7f:8f: dc:9b:a5:b2:3f:f8:0e:1d:5c:66:23:be:b0:98:fe:33:43:a3: 6f:d1:da:6e:1f:1e:fe:4e:eb:1b:88:d3:ae:e9:38:5b:94:00: d0:84:ba:1f:2d:dd:3d:9c:02:11:8d:3d:03:5c:0b:55:97:d0: c8:53:5b:99:ab:62:a2:d8:d0:45:d9:d2:23:96:e8:90:2a:d2: ab:9e:d2:7c:89:4d:b1:98:a1:38:4f:4c:99:ed:9d:a8:45:f1: a4:7b:11:2d:93:89:35:e4:aa:25:44:e6:ab:1b:57:43:b6:7d: 6c:f9:ec:69:c8:46:0d:a7:60:c3:96:e6:87:8e:03:0f:d9:ab: 51:d8:47:a7:89:48:da:b7:27:33:b8:a5:88:37:ed:91:99:9b: 82:e3:1e:85:dd:12:ed:ab:f3:82:e3:92:12:18:17:45:ae:ee: ef:41:5b:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjUwNTMwMTk0MzQyWhcNMjUwNjA2MTk0MzQyWjAYMRYwFAYD VQQDEw02ODNhMGE2ZS01Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUFs6fHk9r31Y0+9gyZ2J/kaYFjhh4SAtsrCg52So3tA6twr4C6vOSm4hTFR OHvD/zntkleQ/X3VqecGnNxU5Jos8IBoanCtvyaMuIk0p/wzUmwMSAaaotL8MgoC rD/MU5ab+NjlaxMLOBwEyWTaKRt1wdZ2Hcq/yXGNT+8TbZlKtDVqKfGqTia/yNIL N5EfErnhJQwuUyTk82FZjHMBaYer0og2uaDHV2GN6suj1GOeXoEAqMBnnyv5D9ua cs0Ol34r6buheF0ES/v41TBHWxSu/gXXdelk4rQlCmZtFG0nWIhrQjUJ7dMGA5S5 1zl0bzg2glS9qrixKxu1gq5WbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7dytxS cgoXfoXPXKSsqTtz27SJMB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzE2NS8yMTVGRUZCNDU1QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpH WGI4dl9BS3R1T05VQTJ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHbHhTpPfoJYtXZdp4Y104yTzXAjCRh+vlmtULKPTOr/Pej11EKrOp TC9X9H/vCkeBnJLbmD1CQ7ASW36RzRCau/9WhCt1YEpazUbzaHKnpQQy+OpSDpWE f4/cm6WyP/gOHVxmI76wmP4zQ6Nv0dpuHx7+TusbiNOu6ThblADQhLofLd09nAIR jT0DXAtVl9DIU1uZq2Ki2NBF2dIjluiQKtKrntJ8iU2xmKE4T0yZ7Z2oRfGkexEt k4k15KolROarG1dDtn1s+expyEYNp2DDluaHjgMP2atR2EeniUjatyczuKWIN+2R mZuC4x6F3RLtq/OC45ISGBdFru7vQVu2 -----END CERTIFICATE-----Generated at Sat May 31 17:57:49 2025 by rpki-client