$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft File: Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json) Hash identifier: BhFNoWzdYzyWN1GtVFoGHC2AB1tcv7bCzDaUW4GZmeE= Subject key identifier: 90:F4:17:69:8A:26:0E:17:D7:74:3D:E1:72:23:E6:27:61:0E:11:09 Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 Certificate issuer: /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft Manifest number: 57 Signing time: Fri 09 May 2025 06:12:01 +0000 Manifest this update: Fri 09 May 2025 06:12:01 +0000 Manifest next update: Fri 16 May 2025 06:12:01 +0000 Files and hashes: 1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: udOfts/Bsa4/VuwRJ9OZJLpMY7IatYx6agqY/ONpRPM=) 2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: Buuzt0i/kKtBaGkDf9aAUjvIwcQJfDzcstPOVS8Jm/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Validity Not Before: May 9 06:12:01 2025 GMT Not After : May 16 06:12:01 2025 GMT Subject: CN=681d9cb1-81ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:86:38:93:ef:39:4d:51:c8:33:c7:63:86: b8:a0:13:7a:26:90:6f:f7:fb:d5:97:61:06:8a:1b: 97:d3:ed:7d:ee:3b:64:ad:2c:05:c0:af:cf:0e:f6: 63:be:b9:7f:66:8b:83:48:41:c8:39:36:12:c8:4c: 6a:46:02:42:85:1b:bf:4d:77:75:5c:5f:e3:11:0a: 48:4b:cd:fe:ba:27:0c:4d:e0:79:3a:86:9e:f2:42: 6e:2f:a3:43:72:75:40:58:98:37:f3:30:98:43:1d: 13:6a:fe:82:5f:41:66:67:89:57:c4:9f:94:62:28: 10:6a:c6:46:5b:7d:04:95:1e:ee:f4:5a:a2:c4:dc: 6f:b6:34:cb:2b:fd:90:e6:de:84:88:7e:7a:c0:ea: a8:b2:60:2d:0d:8d:b3:cf:4f:15:74:9b:5a:44:ed: 4c:7d:6b:60:f2:bf:ee:3a:73:9a:22:46:2c:dd:ce: cc:ed:22:5b:af:2d:28:31:9d:5e:37:33:71:c4:2e: c1:d2:f2:3b:2a:da:20:6e:eb:02:5d:7e:77:4e:b3: 92:40:a8:7f:48:ea:e0:88:5e:d9:a0:f1:19:aa:06: 14:c6:88:e7:02:f8:b1:09:3f:2b:ca:4d:ba:db:d7: 24:25:bd:5d:d2:99:e4:58:ca:d3:01:59:d6:2b:5e: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F4:17:69:8A:26:0E:17:D7:74:3D:E1:72:23:E6:27:61:0E:11:09 X509v3 Authority Key Identifier: keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:14:e6:d0:cf:35:8a:86:ac:9b:6c:8c:8d:e9:25:6f:82:e9: 51:36:69:32:62:e5:19:19:18:bc:9a:cb:5a:63:3b:2a:91:7e: 30:c1:44:e9:63:f8:1a:f0:7b:cd:df:2b:2a:21:ed:ec:3e:c5: a0:4c:0f:ac:90:a4:af:97:d5:ea:0b:2a:5e:31:3e:ec:6e:3c: 38:48:d2:b3:e3:44:aa:86:76:ac:e4:c7:3a:5e:1b:df:a7:e5: 87:f0:04:e4:dc:9b:84:b4:51:72:97:b6:16:0b:63:ba:56:62: 9e:a1:69:a4:da:9c:1a:e5:4d:dc:92:df:9c:9b:c3:ff:05:bb: f7:44:6f:e7:a3:65:d3:ff:b4:66:c7:ca:09:fe:f4:a8:af:f0: a7:a9:a2:e6:d3:41:58:ed:18:05:bf:4c:00:e0:58:de:a6:05: 40:a1:fe:32:c8:56:ef:89:2a:b7:64:8e:cf:55:2d:13:e0:92: 84:2b:53:a2:22:e8:85:20:93:a2:38:c2:62:36:73:6e:39:38: 37:13:9d:bd:e8:14:32:cf:26:b2:b4:63:7f:5b:80:5e:d8:df: 87:3e:a3:90:2a:e6:74:78:0b:0c:2a:cd:57:5a:86:11:dd:3d: 4c:3e:0f:66:30:c8:91:e2:85:5a:c8:a1:07:96:c0:9d:cc:18: 62:aa:fe:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzlDRjExMC8GA1UEBRMoNEE3RDI2QzRDQkYxNjcwMDI0NUQ2N0ZCRjY5NTBCNzEy OTE4OTkzOTAeFw0yNTA1MDkwNjEyMDFaFw0yNTA1MTYwNjEyMDFaMBgxFjAUBgNV BAMTDTY4MWQ5Y2IxLTgxZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1ToY4k+85TVHIM8djhrigE3omkG/3+9WXYQaKG5fT7X3uO2StLAXAr88O9mO+ uX9mi4NIQcg5NhLITGpGAkKFG79Nd3VcX+MRCkhLzf66JwxN4Hk6hp7yQm4vo0Ny dUBYmDfzMJhDHRNq/oJfQWZniVfEn5RiKBBqxkZbfQSVHu70WqLE3G+2NMsr/ZDm 3oSIfnrA6qiyYC0NjbPPTxV0m1pE7Ux9a2Dyv+46c5oiRizdzsztIluvLSgxnV43 M3HELsHS8jsq2iBu6wJdfndOs5JAqH9I6uCIXtmg8RmqBhTGiOcC+LEJPyvKTbrb 1yQlvV3SmeRYytMBWdYrXnJVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkPQXaYom DhfXdD3hciPmJ2EOEQkwHwYDVR0jBBgwFoAUSn0mxMvxZwAkXWf79pULcSkYmTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzOUNGLzRERjJCRTUyQTk4 QzExRUZCQTA2ODg2NEM0RjlBRTAyL1NuMG14TXZ4WndBa1hXZjc5cFVMY1NrWW1U ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU24wbXhNdnhad0FrWFdmNzlwVUxjU2tZbVRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz OUNGLzRERjJCRTUyQTk4QzExRUZCQTA2ODg2NEM0RjlBRTAyL1NuMG14TXZ4WndB a1hXZjc5cFVMY1NrWW1Uay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFkU5tDPNYqGrJtsjI3pJW+C6VE2aTJi5RkZGLyay1pjOyqRfjDBROlj +Brwe83fKyoh7ew+xaBMD6yQpK+X1eoLKl4xPuxuPDhI0rPjRKqGdqzkxzpeG9+n 5YfwBOTcm4S0UXKXthYLY7pWYp6haaTanBrlTdyS35ybw/8Fu/dEb+ejZdP/tGbH ygn+9Kiv8KepoubTQVjtGAW/TADgWN6mBUCh/jLIVu+JKrdkjs9VLRPgkoQrU6Ii 6IUgk6I4wmI2c245ODcTnb3oFDLPJrK0Y39bgF7Y34c+o5Aq5nR4CwwqzVdahhHd PUw+D2YwyJHihVrIoQeWwJ3MGGKq/rk= -----END CERTIFICATE-----Generated at Sun May 11 01:22:09 2025 by rpki-client