$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: 4Ord1bjYlogUfGw/1VKYVh6MQrgG8L/ow6CPtB71etA= Subject key identifier: EB:63:48:B4:BB:9A:AB:D0:AF:EC:5E:5F:37:BF:FC:34:D1:31:F2:B6 Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 1522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 151A Signing time: Wed 14 May 2025 16:53:29 +0000 Manifest this update: Wed 14 May 2025 16:53:29 +0000 Manifest next update: Wed 21 May 2025 16:53:29 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: 56jd6bV5xR5OmSeWTP6i5K0h9tZPFHg7OamgYGFql/I=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: Yhfg4YvQQZjhY3KRsDWyz6hCLcA/Ph/uJc8vvKK428M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5410 (0x1522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: May 14 16:53:29 2025 GMT Not After : May 21 16:53:29 2025 GMT Subject: CN=6824ca89-b582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ca:da:9e:99:8d:ad:b8:f3:73:33:03:34:3e: f5:eb:2e:d7:94:8b:f2:cb:0a:08:75:b2:29:c9:c1: e5:1d:54:c6:12:c2:d2:3c:fa:62:53:cb:84:21:c8: 58:72:25:ba:9b:42:60:05:96:68:35:e0:40:d4:2e: 14:7f:0e:03:2a:5b:9e:8d:d2:19:6c:e0:03:1f:c6: ac:ee:be:f3:27:10:7c:b9:77:98:9e:80:fa:3e:00: 10:97:88:28:66:11:ea:09:5e:d0:8a:b4:c0:74:b4: b5:b9:f9:2e:0e:4c:6d:06:4c:9c:89:fa:12:f7:96: 98:23:69:cf:a2:e8:cb:df:c9:01:85:4c:e7:a9:82: ca:50:6b:81:94:8f:1e:3a:76:b5:a7:f0:e3:90:f2: 37:28:f5:34:e5:b6:58:15:e9:d1:5f:03:70:67:08: c0:7d:19:e0:43:71:e5:e0:73:b5:e3:f2:63:79:d0: bc:09:52:7f:ab:d9:cd:36:cc:23:3f:a3:9e:ae:f0: a3:a9:cd:02:4f:76:f6:02:e9:63:5f:ef:b0:1a:03: 31:04:a5:c1:b0:4b:e6:55:55:b2:9d:24:f4:5f:6e: df:fc:52:0b:61:21:ba:05:95:29:3c:03:9c:a3:cc: 86:64:c3:e3:58:a7:6a:df:9a:b9:fb:83:91:d9:ad: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:63:48:B4:BB:9A:AB:D0:AF:EC:5E:5F:37:BF:FC:34:D1:31:F2:B6 X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:03:c9:56:93:1c:fc:8b:fd:e2:28:06:f3:30:db:ea:d7:b6: 0a:78:80:97:97:7c:56:16:eb:3e:24:e1:98:14:fe:cc:11:72: fd:c6:18:6c:76:75:e1:54:c2:0f:37:87:3a:26:59:a0:aa:7d: 1a:f4:a1:be:61:7a:fe:89:7e:45:51:0e:09:49:b1:39:33:d1: 39:93:d0:bf:22:ba:b0:69:c1:74:b2:0a:b2:ec:77:d1:1d:aa: f9:5b:8a:ad:1f:4e:46:c7:85:e6:7a:b3:79:2c:6a:f3:da:77: 6e:08:0c:82:86:2f:af:48:51:04:bb:88:57:8c:7c:43:fb:23: b4:fa:31:06:7b:d3:95:b6:64:6e:30:2d:0e:26:0d:2e:fe:da: 3f:a6:be:56:75:b3:1d:4a:a0:eb:0f:7f:a7:54:db:c5:61:ac: 5b:53:52:2a:5e:b0:f9:71:96:11:ae:ad:39:8f:e0:4c:03:1f: f2:55:84:21:b3:3c:8e:ea:99:e5:26:66:0e:db:62:51:42:db: 6f:3f:7d:9f:ca:11:dc:e9:6c:1a:fa:5b:01:83:70:c3:28:18: 04:75:c6:7d:85:2b:ad:28:ce:80:e4:26:72:94:1a:01:2a:fe: ec:6c:45:3e:2e:51:dd:05:09:3c:a3:fa:a2:bf:f5:a6:13:71: cb:44:96:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUwNTE0MTY1MzI5WhcNMjUwNTIxMTY1MzI5WjAYMRYwFAYD VQQDEw02ODI0Y2E4OS1iNTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7sranpmNrbjzczMDND716y7XlIvyywoIdbIpycHlHVTGEsLSPPpiU8uEIchY ciW6m0JgBZZoNeBA1C4Ufw4DKluejdIZbOADH8as7r7zJxB8uXeYnoD6PgAQl4go ZhHqCV7QirTAdLS1ufkuDkxtBkycifoS95aYI2nPoujL38kBhUznqYLKUGuBlI8e Ona1p/DjkPI3KPU05bZYFenRXwNwZwjAfRngQ3Hl4HO14/JjedC8CVJ/q9nNNswj P6OervCjqc0CT3b2AuljX++wGgMxBKXBsEvmVVWynST0X27f/FILYSG6BZUpPAOc o8yGZMPjWKdq35q5+4OR2a3H7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtjSLS7 mqvQr+xeXze//DTRMfK2MB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzA8lWkxz8i/3iKAbzMNvq17YKeICXl3xWFus+JOGYFP7MEXL9xhhs dnXhVMIPN4c6Jlmgqn0a9KG+YXr+iX5FUQ4JSbE5M9E5k9C/IrqwacF0sgqy7HfR Har5W4qtH05Gx4XmerN5LGrz2nduCAyChi+vSFEEu4hXjHxD+yO0+jEGe9OVtmRu MC0OJg0u/to/pr5WdbMdSqDrD3+nVNvFYaxbU1IqXrD5cZYRrq05j+BMAx/yVYQh szyO6pnlJmYO22JRQttvP32fyhHc6Wwa+lsBg3DDKBgEdcZ9hSutKM6A5CZylBoB Kv7sbEU+LlHdBQk8o/qiv/WmE3HLRJZc -----END CERTIFICATE-----Generated at Thu May 15 13:22:17 2025 by rpki-client