$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: MHGWgG0/AyTIDT3PUECbpdVZhHc7HYJGU0h/zYcSFZ8= Subject key identifier: CB:54:0C:5D:2D:CA:CF:26:9E:9D:9D:2D:F3:0E:A5:35:D8:78:7D:E4 Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 0135 Signing time: Tue 13 May 2025 03:42:45 +0000 Manifest this update: Tue 13 May 2025 03:42:44 +0000 Manifest next update: Tue 20 May 2025 03:42:44 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: OPNQ9N2ajwws1J3Qowrjlo/iRbufgP5Dddba1gORK2s=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: May 13 03:42:44 2025 GMT Not After : May 20 03:42:44 2025 GMT Subject: CN=6822bfb4-a883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:13:3e:fe:cf:c9:00:23:12:39:6e:aa:b1: 12:11:3e:30:93:36:01:dc:15:a0:37:00:1b:da:5c: 7b:ce:6b:99:02:ce:e8:34:28:ba:d7:97:86:43:06: 6b:d2:8b:73:0f:51:1c:10:a8:e1:21:d6:b9:11:41: 31:ff:89:58:b8:a5:26:10:e2:9f:ef:70:b9:8f:98: 34:3c:f6:07:41:47:a4:2e:ea:e3:04:4f:32:1f:4c: 95:b5:bd:86:f3:de:34:b5:fd:e1:28:b5:3a:52:46: e2:46:fa:d6:83:d4:76:0f:c5:53:a1:6e:e3:5b:ff: 93:b4:ea:15:f2:fd:19:33:2b:1f:d7:d6:b2:10:5c: f5:ba:7e:ad:03:51:bb:84:7b:fb:cd:63:93:13:13: 84:b5:67:41:c7:eb:61:f5:f9:4e:90:36:98:7e:8d: 35:87:6a:d3:26:01:0a:e2:b9:bd:67:e0:e8:3f:e7: 5a:21:a9:e6:7c:7d:4c:b2:53:e7:7e:6c:b6:3e:c4: 11:e2:c9:17:65:0c:0a:7c:e1:d6:ab:92:78:0d:64: 86:c8:16:57:60:b0:7f:6c:2a:37:a5:b0:78:0f:9e: 86:6a:21:cd:6c:88:52:d8:5c:6c:95:5f:8f:91:bd: 21:c0:07:29:d4:9e:68:79:c3:44:aa:1b:e1:2e:96: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:54:0C:5D:2D:CA:CF:26:9E:9D:9D:2D:F3:0E:A5:35:D8:78:7D:E4 X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5c:c0:4f:12:06:9c:d8:20:22:9c:58:f0:1b:88:d6:7d:d5: 9d:3c:45:ab:14:c6:60:0b:2f:18:01:c7:4d:5b:b6:d8:5a:84: a4:09:24:3b:9c:8d:ef:c2:de:1b:fd:64:01:e4:5c:7d:ef:31: c0:5e:2d:d5:cc:13:da:2f:a7:f3:86:af:55:d7:32:79:64:a1: 15:62:19:8f:76:c2:3b:0c:3d:44:49:90:86:ee:1e:44:e2:62: de:7f:d0:bb:f8:ce:78:dd:70:a4:69:3c:d7:22:4d:d2:55:e9: cb:ce:b5:e3:65:45:07:4f:6e:4c:b0:96:62:a9:8b:ee:e5:86: 44:ae:cf:6d:0c:fc:bf:38:79:4a:92:77:2f:44:e1:8b:ed:b0: eb:53:33:2f:5a:bb:e5:63:4e:7d:b8:3c:c1:38:e9:fd:e1:d1: d1:92:31:4f:86:d3:02:08:ca:78:75:e4:63:9d:d3:ce:7f:20: cc:af:e1:b8:fc:33:1a:2b:34:1b:b6:b3:fd:23:12:ff:44:4d: b3:5d:ee:17:94:6b:d9:e6:fe:1a:55:9a:3d:83:8a:6d:b9:e7: 9d:60:cb:1f:af:1e:30:c8:e1:c6:eb:9c:41:85:d8:d7:d0:f0: be:a5:fb:cc:f1:c7:0f:ae:d1:35:ba:10:74:51:f6:b5:f8:39: 10:d3:5e:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjUwNTEzMDM0MjQ0WhcNMjUwNTIwMDM0MjQ0WjAYMRYwFAYD VQQDEw02ODIyYmZiNC1hODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAot0TPv7PyQAjEjluqrESET4wkzYB3BWgNwAb2lx7zmuZAs7oNCi615eGQwZr 0otzD1EcEKjhIda5EUEx/4lYuKUmEOKf73C5j5g0PPYHQUekLurjBE8yH0yVtb2G 8940tf3hKLU6UkbiRvrWg9R2D8VToW7jW/+TtOoV8v0ZMysf19ayEFz1un6tA1G7 hHv7zWOTExOEtWdBx+th9flOkDaYfo01h2rTJgEK4rm9Z+DoP+daIanmfH1MslPn fmy2PsQR4skXZQwKfOHWq5J4DWSGyBZXYLB/bCo3pbB4D56GaiHNbIhS2FxslV+P kb0hwAcp1J5oecNEqhvhLpZZAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtUDF0t ys8mnp2dLfMOpTXYeH3kMB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjXMBPEgac2CAinFjwG4jWfdWdPEWrFMZgCy8YAcdNW7bYWoSkCSQ7 nI3vwt4b/WQB5Fx97zHAXi3VzBPaL6fzhq9V1zJ5ZKEVYhmPdsI7DD1ESZCG7h5E 4mLef9C7+M543XCkaTzXIk3SVenLzrXjZUUHT25MsJZiqYvu5YZErs9tDPy/OHlK kncvROGL7bDrUzMvWrvlY059uDzBOOn94dHRkjFPhtMCCMp4deRjndPOfyDMr+G4 /DMaKzQbtrP9IxL/RE2zXe4XlGvZ5v4aVZo9g4ptueedYMsfrx4wyOHG65xBhdjX 0PC+pfvM8ccPrtE1uhB0Ufa1+DkQ015V -----END CERTIFICATE-----Generated at Wed May 14 06:38:04 2025 by rpki-client