$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json) Hash identifier: 2BUC3RrgOUuHBhVcd5Ptpidw7N4n8qYTSlSh2r20LgM= Subject key identifier: 33:00:31:D1:9B:29:79:2F:54:A0:59:15:3A:B9:70:B1:A2:24:73:A0 Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft Manifest number: 0131 Signing time: Tue 13 May 2025 03:46:31 +0000 Manifest this update: Tue 13 May 2025 03:46:30 +0000 Manifest next update: Tue 20 May 2025 03:46:30 +0000 Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: SFcoLmTJ5vSUoqsGOE3KhQnKB+1MPwzXek1XB5VaE+I=) 2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: aw8y769dbHtoKJEd8vQWlpw8CKdXEBliY+eMjR7xPWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: May 13 03:46:30 2025 GMT Not After : May 20 03:46:30 2025 GMT Subject: CN=6822c096-3a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3e:9d:69:9d:83:8f:79:f5:8d:00:ec:ab:50: 71:6e:cb:3c:ec:18:f3:56:a7:0e:df:73:c7:9d:a1: 0e:59:e6:a6:90:4e:da:bb:90:a3:8c:16:05:ec:e4: 1e:e4:83:2d:c7:9d:b8:ae:c5:25:39:a8:a9:b9:00: d7:c2:be:95:77:c0:5e:33:3f:29:70:62:aa:9b:3f: 5d:07:60:6f:ab:96:e3:f6:3e:77:78:29:92:3e:1e: b6:dd:6a:02:7b:56:b5:85:4e:33:18:17:3c:cc:a4: f3:e1:01:ee:59:1c:d7:f0:de:87:56:61:fe:4c:0b: d7:f2:0c:9a:d9:5b:a6:71:1c:c6:70:d7:a3:27:51: 34:a2:10:c6:70:82:85:f2:85:ca:66:99:03:39:0c: 78:44:d4:a1:6c:83:9d:bd:e8:3b:c4:bc:58:9b:c6: 34:2b:48:c3:55:5a:c2:fc:17:f5:b9:38:7b:8f:13: 52:bb:a1:04:8a:49:17:c8:fe:a4:d3:f5:de:6e:5b: 54:2f:6d:b6:70:ca:06:65:de:cf:50:e2:03:1c:65: d1:cc:43:74:75:58:b3:8d:af:e4:b7:69:1c:c1:28: ce:b1:98:a1:2b:ec:c5:e8:fd:d4:36:6a:f0:3e:9d: 69:49:9c:21:83:0d:16:38:62:6c:57:96:58:f2:f8: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:31:D1:9B:29:79:2F:54:A0:59:15:3A:B9:70:B1:A2:24:73:A0 X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:75:c3:66:49:4b:7a:0a:8e:d2:29:62:45:f5:83:90:a4:91: 26:31:2c:a2:d0:69:e8:87:cc:88:48:0f:cb:5c:da:d8:bf:51: 80:d1:99:ce:e1:39:68:35:28:55:95:c4:9f:cb:36:43:35:ea: eb:ff:c7:23:fb:7c:e2:3d:73:2a:33:35:d0:e1:f1:2e:38:fb: fd:1a:ab:dd:45:6d:de:88:78:71:57:ef:76:55:d4:a9:e6:2c: a1:c9:b4:28:5e:c7:51:f4:c2:a7:a8:71:c5:71:b5:c7:68:bf: 27:58:fa:35:65:8a:88:aa:3c:1f:5e:e1:b5:8e:e0:fc:0c:35: 40:43:93:0d:58:0d:a0:c7:14:a3:87:70:b3:47:86:15:bb:c4: 20:4a:c5:7b:78:29:4c:3e:a0:f2:cb:67:c6:05:1a:c2:ad:a3: 12:bf:72:d2:0a:32:71:a7:de:1a:ea:58:bd:69:44:89:fb:93: e3:fa:0a:1d:d9:cd:cd:25:f6:44:6d:cd:03:32:b6:31:5a:cc: 97:d8:ba:f4:11:bc:e4:d4:db:6e:81:b2:74:f2:ac:86:ee:3e: c5:bf:5b:0f:9e:dd:72:99:5a:33:f7:82:b7:6b:34:1c:d4:1f: fe:40:f0:06:f9:fd:6d:a6:58:3f:f9:35:04:eb:83:8c:98:85: 32:3f:c3:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3QzQxMTAvBgNVBAUTKDQ5REI2MUZGMDNDNTUxNjc5NUNGNzg1MDlFQTM3QTA2 MEY0NTQ3QkYwHhcNMjUwNTEzMDM0NjMwWhcNMjUwNTIwMDM0NjMwWjAYMRYwFAYD VQQDEw02ODIyYzA5Ni0zYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4z6daZ2Dj3n1jQDsq1Bxbss87BjzVqcO33PHnaEOWeamkE7au5CjjBYF7OQe 5IMtx524rsUlOaipuQDXwr6Vd8BeMz8pcGKqmz9dB2Bvq5bj9j53eCmSPh623WoC e1a1hU4zGBc8zKTz4QHuWRzX8N6HVmH+TAvX8gya2VumcRzGcNejJ1E0ohDGcIKF 8oXKZpkDOQx4RNShbIOdveg7xLxYm8Y0K0jDVVrC/Bf1uTh7jxNSu6EEikkXyP6k 0/XebltUL222cMoGZd7PUOIDHGXRzEN0dVizja/kt2kcwSjOsZihK+zF6P3UNmrw Pp1pSZwhgw0WOGJsV5ZY8vizOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMAMdGb KXkvVKBZFTq5cLGiJHOgMB8GA1UdIwQYMBaAFEnbYf8DxVFnlc94UJ6jegYPRUe/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDdDNC81OTVCRTgyQzYz NUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVXZVZ6M2hRbnFONkJnOUZS NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDdDNC81OTVCRTgyQzYzNUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVX ZVZ6M2hRbnFONkJnOUZSNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApdcNmSUt6Co7SKWJF9YOQpJEmMSyi0Gnoh8yISA/LXNrYv1GA0ZnO 4TloNShVlcSfyzZDNerr/8cj+3ziPXMqMzXQ4fEuOPv9GqvdRW3eiHhxV+92VdSp 5iyhybQoXsdR9MKnqHHFcbXHaL8nWPo1ZYqIqjwfXuG1juD8DDVAQ5MNWA2gxxSj h3CzR4YVu8QgSsV7eClMPqDyy2fGBRrCraMSv3LSCjJxp94a6li9aUSJ+5Pj+god 2c3NJfZEbc0DMrYxWsyX2Lr0Ebzk1NtugbJ08qyG7j7Fv1sPnt1ymVoz94K3azQc 1B/+QPAG+f1tplg/+TUE64OMmIUyP8PE -----END CERTIFICATE-----Generated at Tue May 13 06:20:31 2025 by rpki-client