$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json) Hash identifier: bgtgSroO5D9+9ie/Dgc8/uNXw7GC16BgB/Ge2K54ZwY= Subject key identifier: 20:4D:95:7A:1C:5F:31:11:37:B2:92:C8:73:28:A1:41:A8:96:12:95 Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Certificate serial: 109B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft Manifest number: 1082 Signing time: Fri 30 May 2025 17:31:47 +0000 Manifest this update: Fri 30 May 2025 17:31:47 +0000 Manifest next update: Fri 06 Jun 2025 17:31:47 +0000 Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: fsMYxye5p6CTF0WwQeXKkZqg8AVZYZm1lJfyhHs5IJU=) 2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: Ur8W3C7QgJQkw3BnGAD55weFMOItsdqD/26WShAlLaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4251 (0x109b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE096, serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Validity Not Before: May 30 17:31:47 2025 GMT Not After : Jun 6 17:31:47 2025 GMT Subject: CN=6839eb83-2234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:44:b7:02:55:93:91:46:87:7a:4a:87:1e: ee:6d:28:e5:a5:79:47:2f:22:e8:18:a4:39:8f:05: b1:b1:fd:d0:14:76:f0:21:a6:39:42:45:1b:97:92: 81:20:65:a8:e6:ca:bb:a8:66:45:e6:02:d7:8f:ac: aa:9c:90:6a:81:11:5f:61:cc:72:02:b2:68:34:e0: 24:bb:e6:9e:c7:ca:19:94:f7:9c:49:89:c8:0e:d8: 87:5f:6a:5d:5b:28:a5:80:98:c2:a0:b5:b5:af:3c: 48:fb:9f:12:76:cf:99:ae:76:79:d3:7f:9f:6e:21: 0b:4b:ff:3b:f8:b0:ef:f5:cb:42:59:2b:aa:40:51: 6f:c3:5c:51:d5:d7:db:6a:40:c6:a3:47:bb:2d:93: de:37:8c:4c:9c:3f:f8:50:92:90:df:f2:c5:e7:b7: 3c:37:fa:af:b7:fb:8c:e4:3e:a4:64:f0:6a:9d:4f: 3c:90:2c:d7:85:5d:aa:17:2f:ed:3b:62:0c:2a:cf: 5d:d9:a5:7b:f0:aa:3e:85:02:17:47:cd:05:7b:18: 21:47:c7:a7:ed:ec:56:dd:41:5e:c7:5f:45:fc:a0: fe:53:a0:1f:fd:89:a6:4f:30:b5:f5:61:df:d2:02: 29:19:e9:56:3e:01:d5:05:97:9c:2c:88:f2:fa:c8: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4D:95:7A:1C:5F:31:11:37:B2:92:C8:73:28:A1:41:A8:96:12:95 X509v3 Authority Key Identifier: keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:69:a5:9e:aa:bf:0f:66:f4:72:fd:7e:d7:33:54:79:b6:4b: d0:e7:9e:5d:34:b6:a8:09:05:fd:63:2c:8e:10:6f:db:4f:21: 15:49:6e:06:28:d4:ea:14:27:16:e6:90:94:a7:c1:d2:7c:8b: ce:be:66:e4:98:88:12:95:0c:12:8b:0c:f2:b2:4c:67:dd:48: ed:4a:ea:f4:08:11:46:03:cd:14:ca:9c:8a:15:61:69:9e:23: a0:ee:7f:a2:46:8e:89:4a:5d:7b:11:d9:64:42:0a:3a:e1:49: 13:87:dd:9c:da:35:42:5a:9a:9f:4f:fc:79:58:a5:bd:2e:a9: a0:1b:e2:2b:cd:6c:24:92:b6:a9:5b:3c:bd:ff:33:f5:20:a4: e8:5b:48:45:cf:e2:72:c3:5c:47:56:b3:a9:0a:41:6c:8c:82: 8b:95:67:6c:2f:4e:e3:01:51:fa:9b:e3:c1:fd:e1:15:01:51: 8f:2b:19:b2:b7:9d:2a:45:7d:41:f2:94:fe:a3:36:e9:9e:80: ea:17:e0:b1:99:1d:90:d6:69:30:09:21:28:b7:0e:9d:46:4c: ab:55:de:10:b1:d1:96:d8:34:bc:8b:dd:a8:89:84:7e:52:75: d7:08:d1:3e:fa:59:c5:cd:57:b9:16:b9:fc:2a:8e:e0:b6:3a: f2:a9:3a:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwOTYxMTAvBgNVBAUTKDRBQkRBMjRBRDdCRDlFOEQ5Q0VGQjM1OTM4RDBBODc4 ODA0QzYyRTQwHhcNMjUwNTMwMTczMTQ3WhcNMjUwNjA2MTczMTQ3WjAYMRYwFAYD VQQDEw02ODM5ZWI4My0yMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJlEtwJVk5FGh3pKhx7ubSjlpXlHLyLoGKQ5jwWxsf3QFHbwIaY5QkUbl5KB IGWo5sq7qGZF5gLXj6yqnJBqgRFfYcxyArJoNOAku+aex8oZlPecSYnIDtiHX2pd WyilgJjCoLW1rzxI+58Sds+ZrnZ503+fbiELS/87+LDv9ctCWSuqQFFvw1xR1dfb akDGo0e7LZPeN4xMnD/4UJKQ3/LF57c8N/qvt/uM5D6kZPBqnU88kCzXhV2qFy/t O2IMKs9d2aV78Ko+hQIXR80FexghR8en7exW3UFex19F/KD+U6Af/YmmTzC19WHf 0gIpGelWPgHVBZecLIjy+shcpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBNlXoc XzERN7KSyHMooUGolhKVMB8GA1UdIwQYMBaAFEq9okrXvZ6NnO+zWTjQqHiATGLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA5Ni8yRkJCNDQwRTMz NDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5vMmM3N05aT05Db2VJQk1Z dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyMmlTdGU5bm8yYzc3TlpPTkNvZUlCTVl1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA5Ni8yRkJCNDQwRTMzNDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5v MmM3N05aT05Db2VJQk1ZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPaaWeqr8PZvRy/X7XM1R5tkvQ555dNLaoCQX9YyyOEG/bTyEVSW4G KNTqFCcW5pCUp8HSfIvOvmbkmIgSlQwSiwzyskxn3UjtSur0CBFGA80UypyKFWFp niOg7n+iRo6JSl17EdlkQgo64UkTh92c2jVCWpqfT/x5WKW9LqmgG+IrzWwkkrap Wzy9/zP1IKToW0hFz+Jyw1xHVrOpCkFsjIKLlWdsL07jAVH6m+PB/eEVAVGPKxmy t50qRX1B8pT+ozbpnoDqF+CxmR2Q1mkwCSEotw6dRkyrVd4QsdGW2DS8i92oiYR+ UnXXCNE++lnFzVe5Frn8Ko7gtjryqToR -----END CERTIFICATE-----Generated at Sat May 31 17:04:58 2025 by rpki-client