$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: 4QSvrYM0fO0fq+UlV/dnColGmJw1AiNEt5iAmN/ly5E= Subject key identifier: E3:57:74:60:A4:E7:76:D6:28:84:CB:93:A6:C4:25:55:49:01:FE:75 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 04B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 049E Signing time: Sat 05 Apr 2025 00:08:07 +0000 Manifest this update: Sat 05 Apr 2025 00:08:06 +0000 Manifest next update: Sat 12 Apr 2025 00:08:06 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: m0zvB/PtHImimw/6/cB3q0vPgG7PHgBmGiq7sCu+icc=) 2: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: 00gQlkZJ/La3W11cygPUEyOgfEz6qTJK4E6QUbIb+4w=) 3: B1FD800CF32111EEB820DB5BC4F9AE02.roa (hash: h8Cn0q3McR7P4xiiOqk2s7pmYyQ4a4pHCFcF2i6fJFs=) 4: E1B834D0F5D911EE878F7B7CC4F9AE02.roa (hash: AY+8DTHkr2vJtlLXSQfHDYYi6BNU94WVzll8RISRiyA=) 5: 242EC19CCA6C11EEA57DF83EC4F9AE02.roa (hash: 2qXlPaFenQASAW3HlIN5Ug8FhCiSb/b8zKcXYOGxOb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B Validity Not Before: Apr 5 00:08:06 2025 GMT Not After : Apr 12 00:08:06 2025 GMT Subject: CN=67f07466-b857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:95:19:df:52:0f:e9:e4:2a:7d:bf:65:1a: 15:ed:fa:80:e8:16:17:94:13:aa:b4:48:3e:75:58: b2:c7:6d:31:e9:d9:52:b6:71:21:ed:ce:b9:f5:3e: 0e:b2:ee:ad:7a:ee:ff:8c:5f:c4:01:a5:4e:23:a8: 87:cd:41:f6:10:ea:f9:ef:76:9b:ed:91:a8:9d:a0: cf:d4:8f:37:5e:d8:bb:1d:b7:2b:ee:90:e2:a0:39: 10:41:28:8e:8b:e4:2c:18:c5:c9:73:97:94:99:4f: 33:e4:9d:c4:18:03:29:e5:3d:ac:99:af:ac:2b:47: a8:35:e2:c4:72:bf:60:2e:4b:76:3f:10:48:b4:2b: 35:7c:9e:56:12:c5:41:42:08:79:72:9b:64:47:a1: 68:f8:af:7b:3e:b4:86:ab:0d:0f:3d:41:b8:10:44: 03:0a:3a:34:1e:8b:3e:39:35:d6:79:bb:b1:d3:24: 9b:d9:d2:ea:47:3e:28:94:c3:59:be:b2:50:5c:80: 7d:1a:cc:f3:67:db:d6:b6:38:6a:1c:6d:21:50:a4: b8:5a:a6:ff:05:25:a9:12:2d:28:14:3e:e2:d2:6d: a7:dc:12:ce:7d:61:3c:7a:53:3e:27:34:af:05:16: 74:06:8b:17:61:f2:1c:d7:19:2b:85:d6:f6:68:05: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:57:74:60:A4:E7:76:D6:28:84:CB:93:A6:C4:25:55:49:01:FE:75 X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1e:01:4b:97:cc:7c:ff:87:f8:46:28:bb:4d:0e:f3:6f:eb: c8:9d:3f:bf:45:58:ce:d4:51:96:7d:7a:03:01:03:01:66:12: f3:f0:b6:e2:8c:dd:fb:0c:15:f0:35:6a:13:95:66:5c:15:1d: 5a:c4:c0:ee:63:87:39:61:38:a7:59:97:8f:fa:e2:c4:8f:85: 17:e2:8d:11:d1:f6:aa:03:ee:3b:16:61:d2:4d:e5:91:81:bb: 12:80:5b:c5:33:b7:8a:45:1b:a5:f2:22:8b:a2:3e:7d:3e:a4: d4:46:8f:90:bf:30:56:94:da:14:b5:8c:89:36:fa:5e:b9:23: 7f:83:10:1f:1e:18:6e:eb:09:63:b6:b1:f9:f8:6d:6a:cc:aa: a3:b0:d6:d9:44:08:51:9f:ff:ee:74:cd:96:56:5e:71:65:c9: 83:66:ae:0c:c9:40:a9:69:d1:56:ed:5c:32:76:03:59:cd:a1: 90:07:d3:dd:fb:51:19:e0:a5:b8:06:7c:53:5b:34:50:e4:1d: f7:66:93:43:48:80:0d:48:a0:bf:17:8d:ec:e7:57:53:32:42: fb:3e:27:63:52:d1:13:d4:da:72:58:3b:bb:24:aa:6d:79:33: c6:d9:fa:32:2d:31:46:ff:6a:4f:6e:15:9e:e4:ec:1d:7c:82: a4:27:8a:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUwNDA1MDAwODA2WhcNMjUwNDEyMDAwODA2WjAYMRYwFAYD VQQDEw02N2YwNzQ2Ni1iODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQiVGd9SD+nkKn2/ZRoV7fqA6BYXlBOqtEg+dViyx20x6dlStnEh7c659T4O su6teu7/jF/EAaVOI6iHzUH2EOr573ab7ZGonaDP1I83Xti7Hbcr7pDioDkQQSiO i+QsGMXJc5eUmU8z5J3EGAMp5T2sma+sK0eoNeLEcr9gLkt2PxBItCs1fJ5WEsVB Qgh5cptkR6Fo+K97PrSGqw0PPUG4EEQDCjo0Hos+OTXWebux0ySb2dLqRz4olMNZ vrJQXIB9GszzZ9vWtjhqHG0hUKS4Wqb/BSWpEi0oFD7i0m2n3BLOfWE8elM+JzSv BRZ0BosXYfIc1xkrhdb2aAXXXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONXdGCk 53bWKITLk6bEJVVJAf51MB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGHgFLl8x8/4f4Rii7TQ7zb+vInT+/RVjO1FGWfXoDAQMBZhLz8Lbi jN37DBXwNWoTlWZcFR1axMDuY4c5YTinWZeP+uLEj4UX4o0R0faqA+47FmHSTeWR gbsSgFvFM7eKRRul8iKLoj59PqTURo+QvzBWlNoUtYyJNvpeuSN/gxAfHhhu6wlj trH5+G1qzKqjsNbZRAhRn//udM2WVl5xZcmDZq4MyUCpadFW7VwydgNZzaGQB9Pd +1EZ4KW4BnxTWzRQ5B33ZpNDSIANSKC/F43s51dTMkL7PidjUtET1NpyWDu7JKpt eTPG2foyLTFG/2pPbhWe5OwdfIKkJ4qh -----END CERTIFICATE-----Generated at Sun Apr 6 11:13:29 2025 by rpki-client