$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: Op2DAXdwANAwJmS9y3wHjVBpcS0kcoob7w6R1pdcyXQ= Subject key identifier: 93:32:24:10:DE:4A:CB:F6:D6:3D:5C:AB:84:0E:0A:E2:F8:41:6C:F4 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 04B2 Signing time: Sat 10 May 2025 23:33:55 +0000 Manifest this update: Sat 10 May 2025 23:33:54 +0000 Manifest next update: Sat 17 May 2025 23:33:54 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: yWREx4qEKCnQoed+GYdBb8t17RvEvk/MtRYbe0OjSD0=) 2: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: 00gQlkZJ/La3W11cygPUEyOgfEz6qTJK4E6QUbIb+4w=) 3: B1FD800CF32111EEB820DB5BC4F9AE02.roa (hash: h8Cn0q3McR7P4xiiOqk2s7pmYyQ4a4pHCFcF2i6fJFs=) 4: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: StmcDPPzK2yilWPNElLi3+ESljyQBtG5nEZLldO1WuA=) 5: E1B834D0F5D911EE878F7B7CC4F9AE02.roa (hash: AY+8DTHkr2vJtlLXSQfHDYYi6BNU94WVzll8RISRiyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: May 10 23:33:54 2025 GMT Not After : May 17 23:33:54 2025 GMT Subject: CN=681fe263-6e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:01:af:d8:a2:b5:07:3f:7d:84:6b:10:49:d0: ca:4d:a9:be:6c:f7:6a:4b:59:9e:b7:fb:ed:7b:d0: bf:4d:eb:73:72:5d:40:b9:c8:e0:eb:d7:05:6e:98: ae:e0:49:06:8e:a6:75:df:2f:63:c2:cc:ec:b2:d1: 50:89:b4:64:ea:57:fc:3a:b7:40:55:b5:6f:2a:ba: cb:64:11:7c:26:d9:d1:f9:4e:89:c6:3b:8e:e3:9c: 3d:af:f3:dd:3f:17:ea:6e:01:b9:92:3e:b8:ad:fd: 1e:ea:ef:f5:a4:e9:9a:a3:22:4f:9f:bc:d3:2b:17: 71:07:e2:0f:3e:7a:a6:60:eb:24:39:f4:0a:f3:da: bd:99:15:bd:2f:81:a7:31:13:14:c0:fb:53:b2:b9: 87:41:49:c1:43:ee:75:85:25:f3:44:82:18:52:1f: 91:51:b3:d6:c9:f4:f7:04:96:c1:bb:5a:e0:00:16: 12:ac:9c:8f:be:a2:10:f2:a8:62:ca:1d:d5:b7:47: 32:a9:19:3d:dd:a2:71:63:56:8c:f8:f6:3a:69:79: 13:23:46:43:21:ec:0c:d3:03:91:1a:b2:a6:b8:d6: dd:57:b4:8b:8d:9e:ff:d9:67:59:80:bd:33:f8:c9: b2:24:81:52:c6:d9:40:48:8a:80:e9:d9:35:25:27: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:32:24:10:DE:4A:CB:F6:D6:3D:5C:AB:84:0E:0A:E2:F8:41:6C:F4 X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7d:ce:e4:e4:55:ec:84:a5:98:8a:9e:fb:98:2a:4b:e0:0f: c5:90:b2:fb:96:9e:65:8d:37:44:0f:c2:7c:db:cd:19:01:52: c3:2a:ff:9d:12:42:00:7b:ee:f5:2e:b1:c8:80:45:41:f1:cd: ac:7a:48:c3:15:7a:72:af:cd:54:99:20:87:a8:58:43:a7:19: 6a:fd:26:2e:81:5d:ed:1c:1d:a7:c1:c0:56:f9:9a:ca:f7:66: 35:24:ff:d3:ab:26:1b:ac:95:36:b5:db:7b:66:40:a5:9f:c1: 24:b1:d5:d9:28:04:f7:57:18:34:ae:9c:de:42:04:4c:70:5f: eb:05:a5:24:be:3d:0e:93:4d:fa:6b:6a:77:35:9f:b1:81:04: 82:eb:28:cc:b0:f8:63:3b:b7:b5:7a:ce:70:35:d3:63:a6:4a: a8:f0:a4:19:8b:08:27:c8:21:fe:18:51:c0:75:01:73:66:34: 6b:96:1a:66:14:05:16:96:ed:46:82:ac:9d:b5:9b:77:32:d9: 36:82:24:e3:d6:5a:1a:4a:df:b2:f6:82:75:da:93:63:ef:86: 4d:1f:bb:42:6e:64:b7:2f:36:9e:a9:a0:f9:8d:09:0b:59:5e: 6c:b0:9f:eb:91:2c:7b:b0:59:89:db:cf:6f:57:19:a3:e1:9a: 01:34:47:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUwNTEwMjMzMzU0WhcNMjUwNTE3MjMzMzU0WjAYMRYwFAYD VQQDEw02ODFmZTI2My02ZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gGv2KK1Bz99hGsQSdDKTam+bPdqS1met/vte9C/Tetzcl1Aucjg69cFbpiu 4EkGjqZ13y9jwszsstFQibRk6lf8OrdAVbVvKrrLZBF8JtnR+U6JxjuO45w9r/Pd PxfqbgG5kj64rf0e6u/1pOmaoyJPn7zTKxdxB+IPPnqmYOskOfQK89q9mRW9L4Gn MRMUwPtTsrmHQUnBQ+51hSXzRIIYUh+RUbPWyfT3BJbBu1rgABYSrJyPvqIQ8qhi yh3Vt0cyqRk93aJxY1aM+PY6aXkTI0ZDIewM0wORGrKmuNbdV7SLjZ7/2WdZgL0z +MmyJIFSxtlASIqA6dk1JSfx0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMyJBDe Ssv21j1cq4QOCuL4QWz0MB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEfc7k5FXshKWYip77mCpL4A/FkLL7lp5ljTdED8J8280ZAVLDKv+d EkIAe+71LrHIgEVB8c2sekjDFXpyr81UmSCHqFhDpxlq/SYugV3tHB2nwcBW+ZrK 92Y1JP/TqyYbrJU2tdt7ZkCln8EksdXZKAT3Vxg0rpzeQgRMcF/rBaUkvj0Ok036 a2p3NZ+xgQSC6yjMsPhjO7e1es5wNdNjpkqo8KQZiwgnyCH+GFHAdQFzZjRrlhpm FAUWlu1GgqydtZt3Mtk2giTj1loaSt+y9oJ12pNj74ZNH7tCbmS3LzaeqaD5jQkL WV5ssJ/rkSx7sFmJ289vVxmj4ZoBNEdT -----END CERTIFICATE-----Generated at Sun May 11 09:37:13 2025 by rpki-client