$ rpki-client -vvf rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft File: stpsovF-3e60xFAzYfTYgigLyog.mft (raw, json) Hash identifier: 9ehQOSJzCA9ui1fQ0dsLnqmtjE/9nhD/RhZQHs3bJP4= Subject key identifier: 21:9D:E6:FF:25:7A:AC:AE:CE:CE:D4:C4:3C:B1:62:62:19:F4:D3:F3 Authority key identifier: B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88 Certificate issuer: /CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88 Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft Manifest number: 07DE Signing time: Tue 06 May 2025 20:50:47 +0000 Manifest this update: Tue 06 May 2025 20:50:47 +0000 Manifest next update: Tue 13 May 2025 20:50:47 +0000 Files and hashes: 1: stpsovF-3e60xFAzYfTYgigLyog.crl (hash: ZiHQjPp72pIil0QFBw7lhW5LvBS4D4Z4WXTaq+dDNiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122FD2, serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88 Validity Not Before: May 6 20:50:47 2025 GMT Not After : May 13 20:50:47 2025 GMT Subject: CN=681a7627-5cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ad:06:7f:d6:0e:12:23:4c:1c:e5:69:24:90: 6f:34:73:f1:ec:0f:c2:e1:cd:6f:ca:f3:7f:49:60: 68:8e:bf:fe:2e:04:7d:74:26:3e:17:dc:3a:41:c3: 32:7c:37:e1:74:70:d3:f1:ac:32:49:a3:90:3c:40: 23:70:97:39:4d:60:fc:e9:81:19:fd:5b:f9:ad:c1: c2:b1:db:7b:9d:ca:ff:da:89:07:ea:d9:21:02:09: c5:f9:a7:08:d7:ab:ef:a6:77:0b:95:4c:a2:ea:92: 19:a8:45:44:6e:46:58:1f:dc:d6:6c:55:b2:a3:85: 81:7b:88:e7:d4:c0:b7:be:67:a8:11:df:8a:5f:da: b6:65:a5:96:81:81:64:40:f1:3b:ba:fc:be:fa:43: 60:00:82:42:d8:8b:db:25:e9:07:ad:b1:f8:49:2e: 85:ac:a9:f4:f2:59:a2:1c:d2:82:bc:ac:57:72:3e: 94:6e:45:6f:ac:9b:c8:94:ed:b4:13:aa:b6:7b:bd: d8:1a:dd:34:ac:fe:de:68:d6:63:f7:32:73:f3:f8: 49:f9:d8:0c:35:44:cf:4e:22:41:b9:ec:58:16:d6: 86:27:9f:0d:f6:98:c4:57:fe:9f:cf:9a:87:6a:44: a4:d7:41:00:1b:86:27:10:a8:a7:a3:7f:87:81:18: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9D:E6:FF:25:7A:AC:AE:CE:CE:D4:C4:3C:B1:62:62:19:F4:D3:F3 X509v3 Authority Key Identifier: keyid:B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:74:a8:bb:81:55:91:62:bd:d2:1a:ef:0f:3a:6f:f8:51:71: f6:fe:6c:cd:af:f8:22:7b:e6:b2:6e:f7:e4:6a:ee:70:86:27: ce:35:e2:e9:66:d6:3d:39:e8:19:a8:09:81:09:5a:75:55:dc: e6:99:78:91:a1:66:2b:fb:42:67:84:58:71:62:6c:7c:92:57: a0:2a:ab:b8:65:fc:c6:17:7a:47:90:50:75:c3:ec:06:02:66: a7:a5:63:e9:f2:36:2c:a3:50:44:7d:95:63:85:45:7b:23:a9: 09:c7:50:14:25:c4:93:d8:97:55:3e:15:57:b7:e4:8d:e4:df: cf:23:59:42:5a:16:1c:af:c9:6e:6e:f0:18:8b:10:a4:6c:ef: ee:3b:14:f1:9a:e1:81:49:8a:eb:15:cd:d3:c5:e7:74:31:05: 42:16:b4:51:73:b4:8b:80:76:bb:ad:c3:86:34:70:1c:71:49: c0:9a:39:10:1d:18:b2:24:6c:65:ea:11:cc:50:bd:9b:43:91: 2d:e5:f7:7c:3f:0f:0e:47:f4:0a:05:0e:83:38:ff:bc:ec:be: 61:24:79:71:c8:64:48:1e:6a:98:7d:ac:52:33:d7:2d:56:62: 9e:f5:3b:38:85:7b:1c:a1:35:3c:9b:b2:fa:87:36:26:ec:8d: 0e:7d:2b:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJGRDIxMTAvBgNVBAUTKEIyREE2Q0EyRjE3RURERUVCNEM0NTAzMzYxRjREODgy MjgwQkNBODgwHhcNMjUwNTA2MjA1MDQ3WhcNMjUwNTEzMjA1MDQ3WjAYMRYwFAYD VQQDEw02ODFhNzYyNy01Y2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2a0Gf9YOEiNMHOVpJJBvNHPx7A/C4c1vyvN/SWBojr/+LgR9dCY+F9w6QcMy fDfhdHDT8awySaOQPEAjcJc5TWD86YEZ/Vv5rcHCsdt7ncr/2okH6tkhAgnF+acI 16vvpncLlUyi6pIZqEVEbkZYH9zWbFWyo4WBe4jn1MC3vmeoEd+KX9q2ZaWWgYFk QPE7uvy++kNgAIJC2IvbJekHrbH4SS6FrKn08lmiHNKCvKxXcj6UbkVvrJvIlO20 E6q2e73YGt00rP7eaNZj9zJz8/hJ+dgMNUTPTiJBuexYFtaGJ58N9pjEV/6fz5qH akSk10EAG4YnEKino3+HgRh2sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGd5v8l eqyuzs7UxDyxYmIZ9NPzMB8GA1UdIwQYMBaAFLLabKLxft3utMRQM2H02IIoC8qI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkZEMi9DODFCMjYyOEU1 RkIxMUVBODQ1NDRBNzRDNEY5QUUwMi9zdHBzb3ZGLTNlNjB4RkF6WWZUWWdpZ0x5 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0cHNvdkYtM2U2MHhGQXpZZlRZZ2lnTHlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkZEMi9DODFCMjYyOEU1RkIxMUVBODQ1NDRBNzRDNEY5QUUwMi9zdHBzb3ZGLTNl NjB4RkF6WWZUWWdpZ0x5b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIdKi7gVWRYr3SGu8POm/4UXH2/mzNr/gie+aybvfkau5whifONeLp ZtY9OegZqAmBCVp1VdzmmXiRoWYr+0JnhFhxYmx8klegKqu4ZfzGF3pHkFB1w+wG AmanpWPp8jYso1BEfZVjhUV7I6kJx1AUJcST2JdVPhVXt+SN5N/PI1lCWhYcr8lu bvAYixCkbO/uOxTxmuGBSYrrFc3Txed0MQVCFrRRc7SLgHa7rcOGNHAccUnAmjkQ HRiyJGxl6hHMUL2bQ5Et5fd8Pw8OR/QKBQ6DOP+87L5hJHlxyGRIHmqYfaxSM9ct VmKe9Ts4hXscoTU8m7L6hzYm7I0OfStc -----END CERTIFICATE-----Generated at Wed May 7 22:10:51 2025 by rpki-client