$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: SlbEDdKEQEFLWnSNBkAnHGQnFe8L0vYas5U1f9zpqV4= Subject key identifier: 8E:39:0A:36:FE:24:CF:71:F8:E7:4C:43:8D:D8:BD:DC:25:EB:10:16 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 04D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 04BB Signing time: Sat 31 May 2025 00:09:11 +0000 Manifest this update: Sat 31 May 2025 00:09:10 +0000 Manifest next update: Sat 07 Jun 2025 00:09:10 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: 6NlJfLi1YfpTeVbyEtf7uj2FPxpF5ZLyBdvzi9oE1I8=) 2: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: 00gQlkZJ/La3W11cygPUEyOgfEz6qTJK4E6QUbIb+4w=) 3: B1FD800CF32111EEB820DB5BC4F9AE02.roa (hash: h8Cn0q3McR7P4xiiOqk2s7pmYyQ4a4pHCFcF2i6fJFs=) 4: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: StmcDPPzK2yilWPNElLi3+ESljyQBtG5nEZLldO1WuA=) 5: E1B834D0F5D911EE878F7B7CC4F9AE02.roa (hash: AY+8DTHkr2vJtlLXSQfHDYYi6BNU94WVzll8RISRiyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: May 31 00:09:10 2025 GMT Not After : Jun 7 00:09:10 2025 GMT Subject: CN=683a48a7-c7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:8a:1d:8a:71:5d:73:c7:74:cc:bd:85:61: 41:c7:44:0c:11:55:c4:7c:9d:54:31:80:35:7c:02: de:c9:4f:ad:d4:d0:80:03:70:a2:3a:ec:78:23:10: 41:74:05:d6:50:de:f4:fa:fe:f8:1e:de:1f:59:5c: 87:39:28:30:5c:ce:cd:a4:5e:a4:1a:0b:67:30:b3: 7e:f3:e9:26:09:ef:38:66:45:c1:fb:99:c4:37:b1: d1:32:13:9d:9e:be:15:51:cc:13:ff:4c:f1:ab:97: 15:21:ae:ad:9c:f3:7e:e6:8d:90:fa:09:21:cf:99: f1:35:c1:3f:a0:d2:be:9f:73:a6:04:80:d9:92:42: 55:47:1f:cd:2a:0e:fa:f5:70:a7:65:72:22:e9:e4: 25:9b:4e:bf:a2:91:86:08:8c:6e:a2:70:e7:b5:3e: 94:cb:b7:b4:cf:c5:8c:64:6d:fb:6d:d4:4c:be:68: 1c:c0:f9:bb:cc:90:0f:bd:70:72:a3:e0:c2:4a:cd: 0b:ba:50:6c:2c:c4:a2:1a:fa:df:fb:34:ac:95:a4: 3d:b1:b6:67:d1:73:2d:57:b6:10:4d:e5:58:03:a3: 71:cc:ab:37:29:0f:3a:47:ec:dd:f1:36:f3:f8:95: 56:64:0c:4b:56:e8:3f:a0:24:a1:ca:0f:1a:19:a8: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:39:0A:36:FE:24:CF:71:F8:E7:4C:43:8D:D8:BD:DC:25:EB:10:16 X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ab:7f:2a:1a:2b:62:dd:9e:46:eb:17:d2:19:85:6d:f3:b1: 60:24:09:1b:5a:bb:3b:4c:d4:58:f4:5c:9a:ad:e9:b4:e1:9e: 58:15:5f:90:bf:7e:6e:c8:23:d0:7f:f0:06:47:ea:c6:e5:8c: 5a:96:02:3a:68:c6:46:a6:d6:9c:72:f9:49:78:ff:10:a9:9d: aa:b8:81:ab:4f:00:ee:2b:63:01:09:3e:23:8a:66:cb:ea:55: 21:e6:33:43:bd:98:f0:d0:cc:04:b1:fc:0e:29:c5:ca:9b:34: 07:11:fa:30:d9:e4:bc:14:ce:96:15:0b:94:79:fa:2d:15:d4: af:d5:48:95:30:f3:da:eb:4d:78:cb:9e:b0:80:15:77:56:ac: 8e:48:e0:74:fc:b8:44:10:ab:4e:52:d0:f2:be:da:0f:9f:5a: 96:64:cf:55:8a:23:6f:28:ba:50:20:f7:40:d0:d6:34:c3:86: ac:8f:b4:72:b8:a4:1d:00:78:ec:ad:12:b2:3d:cc:8c:28:3f: de:24:80:6f:b9:b2:c7:1f:30:31:df:f6:ff:0a:3c:c2:87:a9: d6:9b:92:95:ef:a8:e1:8b:ef:e1:6a:d5:2e:3f:89:e7:08:7a: b9:bf:8b:6a:c0:03:50:60:6b:bd:f7:4b:7c:46:a9:db:55:08: 01:84:77:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUwNTMxMDAwOTEwWhcNMjUwNjA3MDAwOTEwWjAYMRYwFAYD VQQDEw02ODNhNDhhNy1jN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aOKHYpxXXPHdMy9hWFBx0QMEVXEfJ1UMYA1fALeyU+t1NCAA3CiOux4IxBB dAXWUN70+v74Ht4fWVyHOSgwXM7NpF6kGgtnMLN+8+kmCe84ZkXB+5nEN7HRMhOd nr4VUcwT/0zxq5cVIa6tnPN+5o2Q+gkhz5nxNcE/oNK+n3OmBIDZkkJVRx/NKg76 9XCnZXIi6eQlm06/opGGCIxuonDntT6Uy7e0z8WMZG37bdRMvmgcwPm7zJAPvXBy o+DCSs0LulBsLMSiGvrf+zSslaQ9sbZn0XMtV7YQTeVYA6NxzKs3KQ86R+zd8Tbz +JVWZAxLVug/oCShyg8aGaj4oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI45Cjb+ JM9x+OdMQ43Yvdwl6xAWMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgq38qGiti3Z5G6xfSGYVt87FgJAkbWrs7TNRY9Fyarem04Z5YFV+Q v35uyCPQf/AGR+rG5YxalgI6aMZGptaccvlJeP8QqZ2quIGrTwDuK2MBCT4jimbL 6lUh5jNDvZjw0MwEsfwOKcXKmzQHEfow2eS8FM6WFQuUefotFdSv1UiVMPPa6014 y56wgBV3VqyOSOB0/LhEEKtOUtDyvtoPn1qWZM9ViiNvKLpQIPdA0NY0w4asj7Ry uKQdAHjsrRKyPcyMKD/eJIBvubLHHzAx3/b/CjzCh6nWm5KV76jhi+/hatUuP4nn CHq5v4tqwANQYGu990t8RqnbVQgBhHdG -----END CERTIFICATE-----Generated at Sat May 31 16:38:57 2025 by rpki-client