$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json) Hash identifier: wR0Vyk+cRwgs0ibJA97R9SR7mpxa1h+he6SaWUgshkg= Subject key identifier: 04:27:AC:2F:1A:B8:19:88:35:15:51:C0:9B:53:B6:4C:7C:6A:FD:9C Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft Manifest number: 0754 Signing time: Fri 30 May 2025 21:50:41 +0000 Manifest this update: Fri 30 May 2025 21:50:41 +0000 Manifest next update: Fri 06 Jun 2025 21:50:41 +0000 Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: XZ0r+uKE+KbF4e0+iN2tQKPrFkef2/WtYTcZrK8qWhw=) 2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Validity Not Before: May 30 21:50:41 2025 GMT Not After : Jun 6 21:50:41 2025 GMT Subject: CN=683a2831-41b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:f4:b8:b8:84:6b:d6:82:8d:b6:ce:e7:dd: 67:9b:ab:81:33:8f:f4:66:bb:09:b2:8e:72:8c:8e: 24:0b:af:a4:8e:27:62:37:a6:1f:b0:57:3b:fb:12: af:13:ea:db:01:1a:d8:c8:ff:87:4a:f6:f6:1c:88: 78:51:ce:8c:5a:74:05:7d:0a:b1:ee:01:0c:1d:92: 9a:e6:19:f8:29:2a:53:2c:5a:00:85:70:d7:21:af: 17:25:f2:29:ba:9e:a5:b8:c6:d0:87:5f:eb:11:d2: cd:3f:65:03:96:47:6c:54:a8:0b:21:43:da:85:63: c9:0b:3b:d1:39:b1:5f:a4:36:0d:9d:b2:a7:96:65: 8e:93:72:af:4e:13:a5:26:fd:c6:c4:69:54:b6:9d: 22:47:73:19:fa:96:78:a2:cc:36:ed:63:06:6b:17: bd:43:05:83:38:a6:ef:0a:60:6d:84:db:68:69:5a: 77:8d:72:3e:11:3c:ad:a8:16:33:5e:c1:5b:d1:0b: 0e:bd:09:4a:1b:32:fd:65:8c:df:5b:d8:38:87:98: 2a:16:8e:b0:5d:b2:5a:4a:f2:0a:6f:c2:0b:cf:1a: 05:7d:de:3d:79:58:d4:f0:d5:ad:1d:40:24:ef:08: 43:34:47:f4:70:44:59:d6:c2:24:35:56:9e:2e:e6: ec:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:27:AC:2F:1A:B8:19:88:35:15:51:C0:9B:53:B6:4C:7C:6A:FD:9C X509v3 Authority Key Identifier: keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:43:5c:63:33:75:a2:4b:d7:f3:c1:84:83:24:bd:18:29:57: 40:0a:18:9d:0e:2e:1d:d8:61:d2:73:54:6f:00:32:72:1e:96: 3f:64:81:14:5f:28:6e:ab:36:73:f8:4e:69:6d:68:e5:6e:3a: b6:d0:ec:68:cc:1f:1b:cc:81:03:20:83:33:d7:c2:ff:aa:a3: 42:9c:70:f5:f7:12:3f:2b:c3:ea:23:d2:34:dd:8c:d2:7d:d3: c5:c0:4b:f1:b9:d2:28:f7:e2:e9:ff:29:d8:f8:64:71:e7:a6: f9:ec:e4:fa:41:5f:64:e3:4a:d1:93:0a:a5:f9:88:1a:b5:08: 38:03:05:19:47:d0:1e:cc:19:c2:c6:f3:cc:d8:ba:41:68:d3: 1f:29:fb:6b:71:89:77:22:28:b6:0a:69:11:2a:1e:68:7a:74: 06:b3:ac:98:95:be:2f:18:99:cd:87:67:9d:66:0d:57:9f:fe: b6:c3:26:2e:9b:24:d1:9c:b0:a0:57:66:0c:b8:fe:0b:10:94: 42:76:2c:13:e3:6f:9b:df:f0:b5:a5:0a:6f:31:ce:06:a7:a4: e5:00:de:a2:d8:6d:49:06:24:80:c3:45:7d:cf:0d:83:2f:81: 9b:8d:04:6c:fd:21:12:1c:54:3b:c1:81:7f:25:e1:b8:fe:20: 7f:2f:50:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1 Qjg4MDk4RDEwHhcNMjUwNTMwMjE1MDQxWhcNMjUwNjA2MjE1MDQxWjAYMRYwFAYD VQQDEw02ODNhMjgzMS00MWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0v0uLiEa9aCjbbO591nm6uBM4/0ZrsJso5yjI4kC6+kjidiN6YfsFc7+xKv E+rbARrYyP+HSvb2HIh4Uc6MWnQFfQqx7gEMHZKa5hn4KSpTLFoAhXDXIa8XJfIp up6luMbQh1/rEdLNP2UDlkdsVKgLIUPahWPJCzvRObFfpDYNnbKnlmWOk3KvThOl Jv3GxGlUtp0iR3MZ+pZ4osw27WMGaxe9QwWDOKbvCmBthNtoaVp3jXI+ETytqBYz XsFb0QsOvQlKGzL9ZYzfW9g4h5gqFo6wXbJaSvIKb8ILzxoFfd49eVjU8NWtHUAk 7whDNEf0cERZ1sIkNVaeLubswwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQnrC8a uBmINRVRwJtTtkx8av2cMB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiQ1xjM3WiS9fzwYSDJL0YKVdAChidDi4d2GHSc1RvADJyHpY/ZIEU XyhuqzZz+E5pbWjlbjq20OxozB8bzIEDIIMz18L/qqNCnHD19xI/K8PqI9I03YzS fdPFwEvxudIo9+Lp/ynY+GRx56b57OT6QV9k40rRkwql+YgatQg4AwUZR9AezBnC xvPM2LpBaNMfKftrcYl3Iii2CmkRKh5oenQGs6yYlb4vGJnNh2edZg1Xn/62wyYu myTRnLCgV2YMuP4LEJRCdiwT42+b3/C1pQpvMc4Gp6TlAN6i2G1JBiSAw0V9zw2D L4GbjQRs/SESHFQ7wYF/JeG4/iB/L1Bd -----END CERTIFICATE-----Generated at Sat May 31 17:03:34 2025 by rpki-client