$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: ZtZGOWbj7ePiIVvvA72kezFO6+PNG1UG4QGTpMxxIvs= Subject key identifier: EA:5C:50:AF:E4:37:5F:A5:47:AA:1B:C5:30:F7:6E:6D:71:51:76:7E Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 0463 Signing time: Sat 31 May 2025 00:22:08 +0000 Manifest this update: Sat 31 May 2025 00:22:08 +0000 Manifest next update: Sat 07 Jun 2025 00:22:08 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: 5LLcw1qIauhwHZhvUAwhYv6/1Hsp7vaPF5c6qBZxxmM=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: P2DNiNhjlpF64BsKz4nEdQOFVD1WxrPx8iOejuhEZGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: May 31 00:22:08 2025 GMT Not After : Jun 7 00:22:08 2025 GMT Subject: CN=683a4bb0-3a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:67:26:18:1c:86:8e:d5:da:70:3a:0c:9a:f5: 81:66:02:f4:e1:73:bb:aa:b1:36:37:99:e7:ed:15: c4:7f:c6:27:dd:2e:67:17:dc:42:4f:15:9b:5f:b8: b4:6f:b8:c0:78:66:c0:69:f5:0f:03:95:fd:db:03: 2a:40:0e:7e:bf:74:75:2e:bd:83:a2:f6:8f:f8:3f: de:ae:6a:db:ab:77:9e:91:cd:60:a5:00:c5:68:1f: e0:5b:9c:3d:d4:49:ee:83:ee:7e:e9:0d:fa:3f:e5: c7:c9:58:39:dc:6e:eb:c4:61:f0:1f:b0:13:11:85: 3d:43:eb:c1:4d:0c:86:1d:30:b0:71:06:6c:b4:6f: 22:62:1b:94:5f:81:f6:f4:b0:c1:39:8c:42:96:01: a4:35:66:7c:18:bf:66:78:36:94:fc:4b:e9:a9:e4: 79:b1:8c:e5:b5:9c:80:e3:7f:3b:83:cf:be:f3:d0: a3:28:9a:11:34:d6:32:44:6c:9e:15:da:b8:82:08: 01:37:fe:6d:d7:59:b2:f7:b2:59:f3:8d:b2:52:d5: 2e:03:4f:6b:da:f3:13:91:c2:24:da:85:24:bf:07: bf:45:3c:48:e0:f3:4c:9f:2f:6a:e3:d4:e0:55:4e: b5:f7:a1:d5:6c:07:3b:b4:13:9b:ca:21:be:65:27: 0b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5C:50:AF:E4:37:5F:A5:47:AA:1B:C5:30:F7:6E:6D:71:51:76:7E X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d2:ed:39:86:98:78:7d:90:45:19:9e:0b:31:56:3a:90:1a: c6:8e:2e:f7:02:3b:67:10:0a:7c:f6:62:13:d0:32:25:84:62: 28:67:a5:c2:0d:51:96:b7:5b:48:04:2f:0f:36:4d:37:e2:1e: 7f:8e:52:fc:e7:93:32:bb:3c:10:e2:79:16:37:35:1a:5f:65: 02:2f:d2:26:f6:ab:3b:51:2b:f8:a3:7d:28:45:5a:ee:93:16: 9b:d4:28:68:fa:aa:49:5c:c7:c3:1c:ea:0c:43:56:ef:71:b0: c0:32:df:09:78:07:2f:fc:9a:1e:7d:f0:a5:2c:8f:b3:e8:9c: 4c:df:2f:29:44:e9:32:4a:d2:90:fd:b9:98:2d:d8:d9:04:93: 1f:93:0c:04:bf:74:e4:18:e9:3c:56:19:f4:5b:e5:50:b9:8b: c6:3c:27:46:83:5e:b8:3f:78:63:c2:f3:d8:20:a3:01:0d:ad: 8d:26:79:0b:92:a8:9d:c6:31:0c:33:20:30:cb:a7:77:56:4d: 88:e5:7c:b5:b9:9b:e2:e2:65:42:94:73:0f:6e:b7:ea:e7:38: 87:66:2b:51:46:c7:a3:80:27:c3:f6:1f:dc:8a:4f:11:d9:36: 56:03:6d:65:fa:09:22:2b:4c:83:ed:db:06:cd:b3:0c:e2:7b: 83:bc:ce:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjUwNTMxMDAyMjA4WhcNMjUwNjA3MDAyMjA4WjAYMRYwFAYD VQQDEw02ODNhNGJiMC0zYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6mcmGByGjtXacDoMmvWBZgL04XO7qrE2N5nn7RXEf8Yn3S5nF9xCTxWbX7i0 b7jAeGbAafUPA5X92wMqQA5+v3R1Lr2DovaP+D/ermrbq3eekc1gpQDFaB/gW5w9 1Enug+5+6Q36P+XHyVg53G7rxGHwH7ATEYU9Q+vBTQyGHTCwcQZstG8iYhuUX4H2 9LDBOYxClgGkNWZ8GL9meDaU/EvpqeR5sYzltZyA4387g8++89CjKJoRNNYyRGye Fdq4gggBN/5t11my97JZ842yUtUuA09r2vMTkcIk2oUkvwe/RTxI4PNMny9q49Tg VU6196HVbAc7tBObyiG+ZScLoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpcUK/k N1+lR6obxTD3bm1xUXZ+MB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA00u05hph4fZBFGZ4LMVY6kBrGji73AjtnEAp89mIT0DIlhGIoZ6XC DVGWt1tIBC8PNk034h5/jlL855MyuzwQ4nkWNzUaX2UCL9Im9qs7USv4o30oRVru kxab1Cho+qpJXMfDHOoMQ1bvcbDAMt8JeAcv/JoeffClLI+z6JxM3y8pROkyStKQ /bmYLdjZBJMfkwwEv3TkGOk8Vhn0W+VQuYvGPCdGg164P3hjwvPYIKMBDa2NJnkL kqidxjEMMyAwy6d3Vk2I5Xy1uZvi4mVClHMPbrfq5ziHZitRRsejgCfD9h/cik8R 2TZWA21l+gkiK0yD7dsGzbMM4nuDvM6G -----END CERTIFICATE-----Generated at Sat May 31 17:47:21 2025 by rpki-client