$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft File: sboYaLp865TN1k8FdBOaAaULkNU.mft (raw, json) Hash identifier: 0EMdvQJJN2Iu0kWoKjZmBMAmbIi1/1GX3BhbOcegRM0= Subject key identifier: 53:1D:37:F9:F0:B6:73:7B:70:4F:36:4C:ED:61:90:C5:41:45:F5:EE Authority key identifier: B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5 Certificate issuer: /CN=A91DF233/serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft Manifest number: 5D Signing time: Tue 03 Jun 2025 06:57:28 +0000 Manifest this update: Tue 03 Jun 2025 06:57:27 +0000 Manifest next update: Tue 10 Jun 2025 06:57:27 +0000 Files and hashes: 1: sboYaLp865TN1k8FdBOaAaULkNU.crl (hash: DgXv0WC3Z0At4eNosIHR2WHHAz3w+GG81d8ObINPD3g=) 2: 386FD4FCB37D11EF8D6EAF63C4F9AE02.roa (hash: aJEyHw65stDKmv/A9AlKIYdtN6qUu7eSq0Nk49wiYVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF233, serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5 Validity Not Before: Jun 3 06:57:27 2025 GMT Not After : Jun 10 06:57:27 2025 GMT Subject: CN=683e9cd8-cc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:58:77:4f:98:5a:93:01:66:b0:8d:87:88: d7:ef:c4:01:04:70:da:68:d7:9e:91:8f:18:2e:ee: ab:c2:ed:dc:46:cb:a3:53:c5:cd:7f:50:4f:73:f2: 28:ff:01:02:c8:bd:2e:b3:91:e9:09:cc:73:28:e0: ee:8f:73:f7:b7:a4:76:10:36:6b:16:74:0e:bb:ce: 52:21:c0:d2:f6:32:e5:8f:3c:7b:cf:ac:d3:f1:e0: 25:fe:6e:d9:e1:af:6e:e3:6e:f8:37:ce:c1:97:91: 41:6f:d8:69:91:06:b5:14:31:d6:1e:90:1b:8d:85: 4e:3c:27:e6:ea:43:42:0e:e3:b7:ee:be:27:e6:2a: d6:ed:56:55:bf:ac:5b:6c:4e:df:16:32:44:04:b3: ec:6f:4f:90:62:c5:d6:45:24:b9:c2:19:ae:27:48: cf:ad:c1:2c:57:e6:45:38:db:74:11:a2:6e:7b:47: 08:44:fc:7a:2b:12:fa:9e:99:ff:94:62:c7:12:ba: 15:5f:3a:be:ef:14:a0:c9:c6:71:10:a0:ec:25:3d: 76:27:44:d4:e2:4a:a6:aa:be:ac:46:e9:34:27:ae: a5:6a:ec:62:bf:3a:d9:d7:30:1f:ce:c6:12:13:ed: 56:43:96:69:d7:7d:bb:2f:7f:f2:97:0e:ba:a8:38: c6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1D:37:F9:F0:B6:73:7B:70:4F:36:4C:ED:61:90:C5:41:45:F5:EE X509v3 Authority Key Identifier: keyid:B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:6c:d2:dc:56:b8:84:fe:8d:37:5e:b1:fb:6c:a0:9b:33:8b: e1:f1:9f:8d:b3:72:d8:1d:c5:29:d6:84:15:ce:59:a1:7a:8d: 44:60:65:b9:79:80:39:15:5a:14:c0:8a:bf:b4:68:b0:20:ef: ea:9e:f7:35:41:82:15:8d:68:7a:89:82:d6:38:16:ef:21:f4: 53:11:2e:09:aa:c9:8b:b0:f9:45:ca:b4:8a:df:98:fb:5d:43: 8b:b9:da:84:1c:e3:01:4f:a2:2d:d9:a4:9a:c8:3e:1a:64:54: 09:40:22:df:92:0c:be:f9:fa:6c:29:a2:89:c6:90:0c:0f:77: 8b:b9:d4:03:71:0d:36:04:c2:d1:cc:e9:87:72:67:5d:ec:ea: d8:33:84:dd:94:a0:82:25:f0:d6:96:59:85:86:05:fa:d4:71: e1:f9:48:d1:26:79:1a:58:d3:36:1c:8d:d3:27:4d:c5:e7:be: 71:ab:0e:0b:10:5d:6e:23:1d:41:d1:e2:60:59:29:b6:bf:e3: dc:c6:8c:2f:74:75:fe:73:61:8a:b3:6d:42:61:78:7d:a9:a1: e3:67:b6:f7:02:92:cf:67:2a:db:05:2c:a6:20:e8:64:b6:33: 6c:7b:29:ad:5a:3b:34:f4:3e:e7:56:04:42:06:7d:dc:08:75: bb:cd:d3:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjIzMzExMC8GA1UEBRMoQjFCQTE4NjhCQTdDRUI5NENERDY0RjA1NzQxMzlBMDFB NTBCOTBENTAeFw0yNTA2MDMwNjU3MjdaFw0yNTA2MTAwNjU3MjdaMBgxFjAUBgNV BAMTDTY4M2U5Y2Q4LWNjMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOOFh3T5hakwFmsI2HiNfvxAEEcNpo156Rjxgu7qvC7dxGy6NTxc1/UE9z8ij/ AQLIvS6zkekJzHMo4O6Pc/e3pHYQNmsWdA67zlIhwNL2MuWPPHvPrNPx4CX+btnh r27jbvg3zsGXkUFv2GmRBrUUMdYekBuNhU48J+bqQ0IO47fuvifmKtbtVlW/rFts Tt8WMkQEs+xvT5BixdZFJLnCGa4nSM+twSxX5kU423QRom57RwhE/HorEvqemf+U YscSuhVfOr7vFKDJxnEQoOwlPXYnRNTiSqaqvqxG6TQnrqVq7GK/OtnXMB/OxhIT 7VZDlmnXfbsvf/KXDrqoOMZTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUx03+fC2 c3twTzZM7WGQxUFF9e4wHwYDVR0jBBgwFoAUsboYaLp865TN1k8FdBOaAaULkNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMjMzLzExNEU3REJBQjM3 ODExRUY4ODMyMkIwRkM0RjlBRTAyL3Nib1lhTHA4NjVUTjFrOEZkQk9hQWFVTGtO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2JvWWFMcDg2NVROMWs4RmRCT2FBYVVMa05VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MjMzLzExNEU3REJBQjM3ODExRUY4ODMyMkIwRkM0RjlBRTAyL3Nib1lhTHA4NjVU TjFrOEZkQk9hQWFVTGtOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALls0txWuIT+jTdesftsoJszi+Hxn42zctgdxSnWhBXOWaF6jURgZbl5 gDkVWhTAir+0aLAg7+qe9zVBghWNaHqJgtY4Fu8h9FMRLgmqyYuw+UXKtIrfmPtd Q4u52oQc4wFPoi3ZpJrIPhpkVAlAIt+SDL75+mwpoonGkAwPd4u51ANxDTYEwtHM 6YdyZ13s6tgzhN2UoIIl8NaWWYWGBfrUceH5SNEmeRpY0zYcjdMnTcXnvnGrDgsQ XW4jHUHR4mBZKba/49zGjC90df5zYYqzbUJheH2poeNntvcCks9nKtsFLKYg6GS2 M2x7Ka1aOzT0PudWBEIGfdwIdbvN08E= -----END CERTIFICATE-----Generated at Tue Jun 3 23:46:45 2025 by rpki-client