$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json) Hash identifier: nu9qcTlw6b6YJB62kzb+bWhJG5iD325apJEJfIXNih4= Subject key identifier: 5D:20:11:07:70:5A:4E:CF:2E:0E:01:60:76:FF:2E:4D:6B:84:9A:83 Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft Manifest number: 0103 Signing time: Sat 31 May 2025 04:45:43 +0000 Manifest this update: Sat 31 May 2025 04:45:42 +0000 Manifest next update: Sat 07 Jun 2025 04:45:42 +0000 Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: GPVyNVtXWXEyqm4uoPmIACKFhU+XXHE+pTIneHy9QAg=) 2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: VWW3LG8bH56OHxKp9a6acMJUcTvLWrd2aS1b8cisvbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Validity Not Before: May 31 04:45:42 2025 GMT Not After : Jun 7 04:45:42 2025 GMT Subject: CN=683a8976-7a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:8b:c9:1d:b3:92:d4:69:8c:f4:a5:a2:5c: 66:2f:5e:34:0d:46:f3:b5:17:a3:e9:c4:ec:a2:be: ad:e0:af:a6:fe:d8:3d:25:1f:d5:a9:a6:70:5c:54: 35:28:b6:3b:55:73:a2:3c:19:fb:d3:b3:aa:1d:cc: 05:4f:03:2a:ef:37:fd:f7:d7:07:99:24:df:53:5d: cf:a3:a1:cf:bb:e3:f6:23:dd:e2:d1:fc:79:01:74: d7:7d:1e:78:ea:23:09:1e:a4:f3:a0:1e:45:5d:47: 65:ba:90:3d:c8:88:5d:da:74:69:0c:c5:47:ab:1a: c5:b9:20:e1:6c:23:d5:83:c7:61:22:a8:f2:ab:1d: 99:ef:7c:d6:d4:4b:3a:bd:1c:fe:b0:7b:46:35:fb: 5c:8e:31:c9:e3:0f:cb:5a:f3:dd:6d:5f:c6:cd:cb: 0d:4f:0d:33:65:32:45:f3:73:da:57:ea:1c:20:dc: 98:d5:ad:5b:6f:bb:3f:dd:92:79:a3:72:f4:f7:e1: 5a:d6:22:78:49:2a:2f:0c:a0:08:10:8b:ae:9a:6e: aa:13:13:5e:37:bb:56:a3:91:b6:01:42:ec:dc:79: 32:19:fc:e5:e1:ac:13:9d:09:b2:e4:e2:90:76:ed: 79:48:02:ed:54:08:e0:d9:6e:0b:e9:9b:34:c0:68: 06:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:20:11:07:70:5A:4E:CF:2E:0E:01:60:76:FF:2E:4D:6B:84:9A:83 X509v3 Authority Key Identifier: keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:4f:e4:f8:fb:78:51:66:36:13:77:7f:25:e9:ee:3b:ba:39: 3b:41:df:b7:ff:28:44:0f:0d:bc:40:0f:0b:5d:9d:4b:83:e9: 1d:f9:54:33:2a:53:d6:d2:71:6d:30:8f:72:f3:de:fc:69:83: eb:33:54:b3:2d:6c:0f:26:62:7e:1a:10:5d:d1:88:e7:b6:52: 21:dc:6a:a2:c2:3b:29:19:83:47:07:76:36:ab:60:69:db:a4: 6f:22:45:f8:13:39:47:54:49:d0:a3:d4:6e:fd:71:a1:e7:7e: 30:72:49:8e:b9:cf:f0:3a:35:e3:8f:1f:93:a7:a1:46:a4:b5: 7a:24:59:85:c5:ea:cf:65:67:7e:76:d0:13:4f:f1:5e:f6:15: 7f:2b:0e:23:47:54:28:c1:0e:95:39:41:52:b9:db:c5:bd:03: 01:13:a1:d1:ec:27:6e:bc:42:a1:23:ff:b5:fd:5d:7a:70:fe: ff:62:29:32:3c:8c:5a:d8:53:f5:f7:f4:dd:1b:82:e1:51:69: 47:43:5a:60:be:22:07:b2:d7:6a:62:cf:16:c5:6f:c0:af:b2: c5:3d:11:b5:e1:cc:ba:e5:e9:59:65:06:ec:8c:94:88:e7:6e: 22:af:12:70:3e:57:a2:19:95:25:2c:aa:7d:1c:1d:34:03:87: da:4c:3e:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDRBOEEzOTVFNTU2Q0M3RjE5QUFFNkFCMDZBRkYwNjc5 NDQ5NTZCNDYwHhcNMjUwNTMxMDQ0NTQyWhcNMjUwNjA3MDQ0NTQyWjAYMRYwFAYD VQQDEw02ODNhODk3Ni03YTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6+LyR2zktRpjPSlolxmL140DUbztRej6cTsor6t4K+m/tg9JR/VqaZwXFQ1 KLY7VXOiPBn707OqHcwFTwMq7zf999cHmSTfU13Po6HPu+P2I93i0fx5AXTXfR54 6iMJHqTzoB5FXUdlupA9yIhd2nRpDMVHqxrFuSDhbCPVg8dhIqjyqx2Z73zW1Es6 vRz+sHtGNftcjjHJ4w/LWvPdbV/GzcsNTw0zZTJF83PaV+ocINyY1a1bb7s/3ZJ5 o3L09+Fa1iJ4SSovDKAIEIuumm6qExNeN7tWo5G2AULs3HkyGfzl4awTnQmy5OKQ du15SALtVAjg2W4L6Zs0wGgGgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0gEQdw Wk7PLg4BYHb/Lk1rhJqDMB8GA1UdIwQYMBaAFEqKOV5VbMfxmq5qsGr/BnlElWtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS8yMzc1QjMwNkI5 NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hfR2FybXF3YXY4R2VVU1Zh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvbzVYbFZzeF9HYXJtcXdhdjhHZVVTVmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS8yMzc1QjMwNkI5NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hf R2FybXF3YXY4R2VVU1ZhMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDET+T4+3hRZjYTd38l6e47ujk7Qd+3/yhEDw28QA8LXZ1Lg+kd+VQz KlPW0nFtMI9y8978aYPrM1SzLWwPJmJ+GhBd0YjntlIh3GqiwjspGYNHB3Y2q2Bp 26RvIkX4EzlHVEnQo9Ru/XGh534wckmOuc/wOjXjjx+Tp6FGpLV6JFmFxerPZWd+ dtATT/Fe9hV/Kw4jR1QowQ6VOUFSudvFvQMBE6HR7CduvEKhI/+1/V16cP7/Yiky PIxa2FP19/TdG4LhUWlHQ1pgviIHstdqYs8WxW/Ar7LFPRG14cy65elZZQbsjJSI 524irxJwPleiGZUlLKp9HB00A4faTD5F -----END CERTIFICATE-----Generated at Sat May 31 17:07:42 2025 by rpki-client