$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: X+mIQktnniAcxnjQlsWP4gQwV5FHWmAubcIu1LVULcs= Subject key identifier: 4C:56:82:F7:F1:E3:41:4D:E1:BA:0A:D3:B4:F4:EC:F7:62:53:D2:1A Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 152D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 1524 Signing time: Fri 30 May 2025 16:59:21 +0000 Manifest this update: Fri 30 May 2025 16:59:20 +0000 Manifest next update: Fri 06 Jun 2025 16:59:20 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: F/FnSFJx9kg0BSdMwso0kjrffYJHqeYc05IEh08WX0s=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: UB3e/BzYZNzSWafIfT/8shx3CMwEAB4npfcc5DFGpRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5421 (0x152d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: May 30 16:59:20 2025 GMT Not After : Jun 6 16:59:20 2025 GMT Subject: CN=6839e3e8-dfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:12:d7:1c:f1:1c:29:12:7f:3a:0f:1c:51:10: c7:fe:05:57:7d:5b:ab:2f:01:76:f6:b2:ae:33:e1: be:1b:78:3a:9c:f6:9f:cf:79:a1:2d:b7:96:c7:7c: 49:81:49:2c:2e:16:ca:42:85:1c:13:e2:f2:bb:76: 19:62:1c:7c:0e:e9:90:67:63:6e:34:cd:ef:a1:71: 3f:84:09:57:44:21:2e:16:2e:8f:9d:bd:f7:75:6b: 86:c3:5f:f2:ef:4c:8b:10:4e:2c:d0:fc:23:2f:8b: fa:94:77:3a:24:1d:01:86:6a:6d:b7:df:ce:dc:da: ee:31:62:67:fd:3e:d0:c7:af:bf:8e:1e:ec:31:9e: 60:d0:1b:35:84:9c:fd:a5:0d:15:9d:91:f2:80:b0: ee:93:5b:3c:55:b4:7f:d2:7a:d2:ed:49:ce:00:eb: 8a:a5:9b:41:68:09:bd:25:e7:08:49:0a:8c:d2:30: d6:00:9e:0d:f3:98:88:c2:ca:71:5b:77:85:37:e5: d3:bd:2b:e8:54:ed:3d:f5:4a:89:77:41:35:e6:76: b8:50:21:bb:2c:a6:64:ee:58:94:e5:f7:7c:ba:c0: de:85:ec:a6:f5:ba:6c:a4:21:2c:95:15:01:15:ca: 26:20:e8:e7:16:d7:31:46:42:e8:91:33:c9:54:52: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:56:82:F7:F1:E3:41:4D:E1:BA:0A:D3:B4:F4:EC:F7:62:53:D2:1A X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:31:bf:34:15:48:e1:42:39:5e:95:a5:45:e2:4d:b0:04:b4: a2:2d:3d:ae:ad:be:45:49:e6:84:fd:c0:5d:f2:a6:f7:a2:7e: 44:b0:a4:35:15:cf:58:f2:f5:66:dc:4c:95:9c:15:ee:ba:8c: 65:8e:95:f5:86:6d:4a:6f:d2:4c:c6:b0:2a:50:f1:86:f8:3f: 8a:ce:f6:d3:e0:77:3f:a6:3f:89:d5:5f:ac:10:c8:e8:70:7c: a9:d4:ec:ea:34:14:2e:1f:21:e5:b0:90:f7:7b:f3:a1:bf:11: 1e:a2:19:4a:bc:03:72:0e:6e:17:8f:d1:a3:6c:ff:75:1b:b7: c4:19:f0:b1:3f:d7:c0:87:60:fc:f1:b2:ca:c0:c5:27:14:09: fb:c0:25:f8:af:93:5f:14:c2:a5:b3:40:dd:71:3f:39:8d:3d: a2:be:1a:9e:df:11:dc:e1:a2:3b:6d:22:f4:36:75:44:6e:92: a9:73:07:74:9c:84:2c:57:38:bd:9b:08:e8:44:96:b3:38:b1: a3:cc:36:22:ff:16:d9:eb:cd:a0:cb:19:d0:7c:49:1e:10:f3: d9:91:03:ea:64:9f:05:6b:64:a3:82:5f:bc:6b:e7:e9:71:75: 9c:41:fe:e9:ab:8f:52:b2:a5:b4:d0:ff:e3:23:60:e2:07:e4: 4e:70:85:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUwNTMwMTY1OTIwWhcNMjUwNjA2MTY1OTIwWjAYMRYwFAYD VQQDEw02ODM5ZTNlOC1kZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+xLXHPEcKRJ/Og8cURDH/gVXfVurLwF29rKuM+G+G3g6nPafz3mhLbeWx3xJ gUksLhbKQoUcE+Lyu3YZYhx8DumQZ2NuNM3voXE/hAlXRCEuFi6Pnb33dWuGw1/y 70yLEE4s0PwjL4v6lHc6JB0Bhmptt9/O3NruMWJn/T7Qx6+/jh7sMZ5g0Bs1hJz9 pQ0VnZHygLDuk1s8VbR/0nrS7UnOAOuKpZtBaAm9JecISQqM0jDWAJ4N85iIwspx W3eFN+XTvSvoVO099UqJd0E15na4UCG7LKZk7liU5fd8usDeheym9bpspCEslRUB FcomIOjnFtcxRkLokTPJVFLKPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExWgvfx 40FN4boK07T07PdiU9IaMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Mb80FUjhQjlelaVF4k2wBLSiLT2urb5FSeaE/cBd8qb3on5EsKQ1 Fc9Y8vVm3EyVnBXuuoxljpX1hm1Kb9JMxrAqUPGG+D+KzvbT4Hc/pj+J1V+sEMjo cHyp1OzqNBQuHyHlsJD3e/OhvxEeohlKvANyDm4Xj9GjbP91G7fEGfCxP9fAh2D8 8bLKwMUnFAn7wCX4r5NfFMKls0DdcT85jT2ivhqe3xHc4aI7bSL0NnVEbpKpcwd0 nIQsVzi9mwjoRJazOLGjzDYi/xbZ682gyxnQfEkeEPPZkQPqZJ8Fa2Sjgl+8a+fp cXWcQf7pq49SsqW00P/jI2DiB+ROcIV7 -----END CERTIFICATE-----Generated at Sat May 31 17:32:59 2025 by rpki-client