$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json) Hash identifier: NildDe+/Km9MlJ44Iavv1kW1MRV8+sXMDZ/t5SIdaN4= Subject key identifier: 39:86:F1:75:76:6C:1A:A7:D4:92:9E:E0:5B:96:9C:74:CE:81:2E:4F Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft Manifest number: 3486 Signing time: Fri 30 May 2025 15:22:43 +0000 Manifest this update: Fri 30 May 2025 15:22:43 +0000 Manifest next update: Fri 06 Jun 2025 15:22:43 +0000 Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: l40d6s22GZEU2YZGH35SloZLECfJ+ar4l4Rqr7Zj+e4=) 2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: rYc9zikfT0tRDa7zasMyBZpEVFa00oL4CS7Q4S+HlQg=) 3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: 0DLMcfV/Llm+3fYXZIJn54Ysw/AzVCrvYXgQgG2YQmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Validity Not Before: May 30 15:22:43 2025 GMT Not After : Jun 6 15:22:43 2025 GMT Subject: CN=6839cd43-ccf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:ee:17:8d:db:14:70:f8:43:0d:ae:28:6e: c9:4c:8c:08:36:58:51:88:f9:2c:3d:1f:c4:61:49: b1:33:18:e6:18:58:40:d9:1d:4e:1c:4e:23:29:83: d2:60:9e:8a:90:69:7e:32:d4:15:01:e0:4a:fa:36: 24:93:0d:92:6c:37:f0:e1:0e:1b:e8:ee:61:75:0a: ff:0d:c8:b2:62:d3:36:4c:fa:aa:dc:67:84:d8:6b: ef:67:43:16:83:98:b3:29:85:62:6e:9c:91:8d:9c: f3:30:35:bd:b7:29:b1:fb:37:3f:05:68:e3:8a:31: 50:80:e5:e0:b5:83:93:eb:0a:ba:6a:61:ad:e3:e5: 5f:b4:1b:b8:26:fa:87:89:b7:3c:32:f1:9f:b6:52: e2:65:69:de:9f:03:cd:62:20:74:30:bc:25:dc:62: 1b:65:64:21:90:81:2a:e8:86:c8:c1:c9:44:23:5d: e3:35:9f:7e:9a:11:98:61:33:d0:33:2e:76:a9:20: 08:61:13:fe:ba:f8:c0:5e:bc:5e:be:a0:9b:53:cb: d9:08:c1:34:6f:ec:03:1b:d1:81:fc:ba:b4:71:96: 60:b1:9e:32:2f:d3:16:51:57:19:75:09:c1:b6:99: 75:3a:e5:92:d1:89:e1:80:18:a6:d0:8b:25:50:0a: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:86:F1:75:76:6C:1A:A7:D4:92:9E:E0:5B:96:9C:74:CE:81:2E:4F X509v3 Authority Key Identifier: keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:15:14:28:04:68:dc:48:83:f4:5c:74:d7:65:d1:2e:c8:ff: c6:41:35:29:8d:7e:3d:0b:2f:94:48:d6:98:1f:e7:cb:c8:cf: 6c:7c:ea:70:19:29:70:7a:56:08:f7:c7:5f:95:56:73:61:c2: 4d:48:d8:f8:f4:81:fd:a1:0a:9b:68:1d:26:73:51:6d:71:25: 8d:b4:a9:b5:be:7b:ef:c7:2d:a4:75:0a:0b:95:2a:d4:84:4f: 03:0d:41:7b:4c:2a:0f:6b:2f:9c:b9:dd:0f:7d:48:d6:4e:14: 4f:b4:b9:a4:f4:af:a7:f0:2f:8c:5f:34:d4:c6:2d:42:f8:37: 88:87:93:6f:95:86:b4:15:5c:7a:d6:2b:fa:84:98:5a:1d:a4: d9:e7:2d:33:17:0d:40:d6:81:7e:43:3e:5d:ab:db:1a:6f:8d: 78:ff:b5:1a:2f:af:f7:5b:f5:5d:6a:b9:7a:2e:db:ba:74:46: 62:0b:4b:6f:1c:57:89:ec:c7:9d:d5:7d:fe:d9:65:29:2a:84: 2d:7e:fa:3f:fa:99:c3:d3:cd:a0:34:5d:70:72:00:f0:c8:9c: 0b:4e:c2:18:5f:7e:60:ac:2c:91:2c:fc:5f:cc:51:52:3f:6c: 28:48:51:8c:11:cc:0e:88:0b:ed:ec:8b:cd:a0:05:ef:11:af: 42:d4:c1:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkUxMTAvBgNVBAUTKDQ5N0IxQzRFQTZEQjE1QTgzMUZCQzE3MjJBMkY2MzQ3 NDUwQ0YzNDEwHhcNMjUwNTMwMTUyMjQzWhcNMjUwNjA2MTUyMjQzWjAYMRYwFAYD VQQDEw02ODM5Y2Q0My1jY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk3uF43bFHD4Qw2uKG7JTIwINlhRiPksPR/EYUmxMxjmGFhA2R1OHE4jKYPS YJ6KkGl+MtQVAeBK+jYkkw2SbDfw4Q4b6O5hdQr/DciyYtM2TPqq3GeE2GvvZ0MW g5izKYVibpyRjZzzMDW9tymx+zc/BWjjijFQgOXgtYOT6wq6amGt4+VftBu4JvqH ibc8MvGftlLiZWnenwPNYiB0MLwl3GIbZWQhkIEq6IbIwclEI13jNZ9+mhGYYTPQ My52qSAIYRP+uvjAXrxevqCbU8vZCME0b+wDG9GB/Lq0cZZgsZ4yL9MWUVcZdQnB tpl1OuWS0YnhgBim0IslUArMZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmG8XV2 bBqn1JKe4FuWnHTOgS5PMB8GA1UdIwQYMBaAFEl7HE6m2xWoMfvBciovY0dFDPNB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2RS9ERDQ1NUNEQTFE QTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZhZ3gtOEZ5S2k5alIwVU04 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYc2NUcWJiRmFneC04RnlLaTlqUjBVTTgwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2RS9ERDQ1NUNEQTFEQTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZh Z3gtOEZ5S2k5alIwVU04MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbFRQoBGjcSIP0XHTXZdEuyP/GQTUpjX49Cy+USNaYH+fLyM9sfOpw GSlwelYI98dflVZzYcJNSNj49IH9oQqbaB0mc1FtcSWNtKm1vnvvxy2kdQoLlSrU hE8DDUF7TCoPay+cud0PfUjWThRPtLmk9K+n8C+MXzTUxi1C+DeIh5NvlYa0FVx6 1iv6hJhaHaTZ5y0zFw1A1oF+Qz5dq9sab414/7UaL6/3W/Vdarl6Ltu6dEZiC0tv HFeJ7Med1X3+2WUpKoQtfvo/+pnD082gNF1wcgDwyJwLTsIYX35grCyRLPxfzFFS P2woSFGMEcwOiAvt7IvNoAXvEa9C1MEN -----END CERTIFICATE-----Generated at Sat May 31 16:43:04 2025 by rpki-client