$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: w5q3FrXjUdjgt9NfPK1/u24NVkrHKPj4JFRUVs6tGyA= Subject key identifier: 74:F8:09:DB:10:7C:43:B5:91:36:C5:B0:43:76:5E:45:D5:33:D8:87 Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 08A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 08A6 Signing time: Fri 16 May 2025 20:49:22 +0000 Manifest this update: Fri 16 May 2025 20:49:21 +0000 Manifest next update: Fri 23 May 2025 20:49:21 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: aOAw18Yp9S2rVaNdvsaCHD03cY2tRgbaucvgOvzHWMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2215 (0x8a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: May 16 20:49:21 2025 GMT Not After : May 23 20:49:21 2025 GMT Subject: CN=6827a4d2-d21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:bb:1b:5a:33:dd:ff:3b:7b:7d:1b:65:18: 13:ce:fd:22:9b:a8:e1:4b:07:c5:bf:c2:22:51:d9: f5:65:a7:13:66:1c:ca:a1:bb:5d:45:9e:1b:d9:90: 66:1f:ea:f5:ae:4f:ee:cd:ce:39:c9:31:06:d5:11: af:05:43:2e:04:b6:7f:0e:e8:e6:f9:0c:8a:78:f7: 1f:d1:4c:73:40:4e:25:e8:3a:cd:af:e7:e5:ad:62: 6a:19:b6:14:73:e8:0f:01:dd:67:1f:9c:9a:94:15: 83:02:89:86:63:83:66:b3:01:ef:ec:95:20:05:3c: e1:f0:2c:22:00:3a:f7:2b:66:76:b6:f3:bf:48:9f: 70:d8:f6:b7:b8:c0:75:7e:01:a3:92:61:62:85:ab: 3d:e4:a3:04:b8:07:df:bd:b8:86:12:95:40:b8:1f: 36:81:21:49:f5:10:6e:69:fd:e5:d9:da:2c:94:ff: e7:20:7e:eb:56:ec:2d:08:24:5d:f3:69:03:39:ab: bb:02:d3:30:4e:68:6a:bf:53:b2:d0:10:82:c1:e2: 15:ba:13:2c:4a:3f:19:1b:d4:ae:4e:ed:4c:4c:77: ad:a2:34:95:1b:7a:a1:3d:b6:b4:fa:3e:20:c3:f4: d1:75:49:7b:02:bf:d2:98:b1:75:3c:c1:ec:08:dc: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F8:09:DB:10:7C:43:B5:91:36:C5:B0:43:76:5E:45:D5:33:D8:87 X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5c:ac:b6:19:dc:7d:8d:00:dd:ae:c5:fd:f0:12:a0:54:2c: 52:6b:7a:ea:58:10:5a:73:38:6e:e2:42:10:b9:f9:20:70:57: b8:eb:c8:7e:50:2c:4b:e8:79:4c:5b:f4:03:00:ad:21:cd:0c: a4:40:e4:46:da:1c:22:5d:e6:e8:32:90:3b:76:f3:ce:2b:93: c0:f0:80:d3:a7:d0:11:db:05:22:b5:e8:e9:be:fc:fa:e6:3f: 80:c8:f0:bf:0b:1a:ba:4f:71:86:94:d2:29:88:37:d4:e4:50: 1a:a3:38:ff:44:97:81:0e:64:d7:f8:8d:99:57:63:b3:4b:96: 88:b0:f5:80:64:b3:ae:33:5b:9c:30:c0:2b:e2:98:3e:36:c3: 70:21:e8:79:0c:f7:e5:d6:19:33:63:f1:cd:c6:4f:dd:72:c8: 03:27:26:3e:c8:df:f2:95:10:08:28:01:16:0f:60:c2:36:0a: 6c:b6:ce:95:d5:62:c0:b5:d7:77:ab:06:7d:39:d8:83:bb:54: 96:9d:31:d5:16:e8:d8:7f:04:59:44:a3:4b:f9:80:cb:38:22: 00:8a:26:c3:7b:64:d6:d8:35:c8:f7:cb:c4:5f:df:d4:41:63: 76:9c:74:54:61:6b:e7:af:5c:be:3e:a9:16:1d:1e:fa:fb:82: da:37:fd:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUwNTE2MjA0OTIxWhcNMjUwNTIzMjA0OTIxWjAYMRYwFAYD VQQDEw02ODI3YTRkMi1kMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApM27G1oz3f87e30bZRgTzv0im6jhSwfFv8IiUdn1ZacTZhzKobtdRZ4b2ZBm H+r1rk/uzc45yTEG1RGvBUMuBLZ/Dujm+QyKePcf0UxzQE4l6DrNr+flrWJqGbYU c+gPAd1nH5yalBWDAomGY4NmswHv7JUgBTzh8CwiADr3K2Z2tvO/SJ9w2Pa3uMB1 fgGjkmFihas95KMEuAffvbiGEpVAuB82gSFJ9RBuaf3l2doslP/nIH7rVuwtCCRd 82kDOau7AtMwTmhqv1Oy0BCCweIVuhMsSj8ZG9SuTu1MTHetojSVG3qhPba0+j4g w/TRdUl7Ar/SmLF1PMHsCNxkgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHT4CdsQ fEO1kTbFsEN2XkXVM9iHMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtXKy2Gdx9jQDdrsX98BKgVCxSa3rqWBBaczhu4kIQufkgcFe468h+ UCxL6HlMW/QDAK0hzQykQORG2hwiXeboMpA7dvPOK5PA8IDTp9AR2wUitejpvvz6 5j+AyPC/Cxq6T3GGlNIpiDfU5FAaozj/RJeBDmTX+I2ZV2OzS5aIsPWAZLOuM1uc MMAr4pg+NsNwIeh5DPfl1hkzY/HNxk/dcsgDJyY+yN/ylRAIKAEWD2DCNgpsts6V 1WLAtdd3qwZ9OdiDu1SWnTHVFujYfwRZRKNL+YDLOCIAiibDe2TW2DXI98vEX9/U QWN2nHRUYWvnr1y+PqkWHR76+4LaN/2l -----END CERTIFICATE-----Generated at Sat May 17 21:51:56 2025 by rpki-client