$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: 87pksWTMZUHPAz0dksDrjREONcjVNE3/6yoRrkZKLPo= Subject key identifier: DF:B4:FA:0A:25:F6:A2:88:F2:57:0F:B9:58:A9:BE:D8:25:1E:F1:C2 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0C98 Signing time: Fri 16 May 2025 18:26:49 +0000 Manifest this update: Fri 16 May 2025 18:26:48 +0000 Manifest next update: Fri 23 May 2025 18:26:48 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: pDDpeCL7oXnYvugLxXqdijAHjPBhEc0qiu3fcEj6/84=) 2: 7A89B302E7E511EFA8BD237AC4F9AE02.roa (hash: UCWjaCqEsXVhT35xitXZIRxEvFr2BDAPH30xrreLvIA=) 3: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: 0yGPdzFunQ5T02jKLxMdi+Rjr7DQq/Vj6dobHVz6yro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: May 16 18:26:48 2025 GMT Not After : May 23 18:26:48 2025 GMT Subject: CN=68278369-aa72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:71:bb:2c:ef:4c:46:03:1b:44:94:a2:27: 0c:5c:cc:33:cb:58:47:ff:ac:c0:bd:73:eb:45:75: f4:3d:9f:fd:9f:06:6f:ca:aa:ef:ad:81:46:ff:7a: 34:d1:6f:24:59:a6:98:7e:b9:e6:c4:cb:42:0d:b7: 18:c4:de:29:5f:ec:77:5d:2f:e5:40:f0:fd:25:ea: 87:15:ee:e8:c5:f0:00:b1:9d:cf:73:82:70:a8:6f: e4:aa:f4:2d:8a:35:21:0f:ef:3b:4a:3f:47:f9:f0: 0c:4b:b7:e3:27:ca:74:3e:7b:b5:01:8d:d8:cb:f6: 2d:08:b9:d7:48:ba:86:c5:9d:5e:c8:b2:b7:1b:5f: b8:c0:a1:c2:81:c0:70:fc:0a:e3:22:4b:f1:c4:95: 70:0e:ee:b5:d8:5a:a5:15:64:92:6c:be:75:c7:67: a2:99:49:ef:01:fe:f4:9a:7e:0d:97:f3:0d:55:e5: 8b:53:ed:8a:8e:04:5d:62:fc:6b:4a:c9:47:e4:bb: 2a:69:cd:dd:48:40:8b:25:66:d3:63:06:0d:6a:6b: 79:d1:e3:26:42:2c:4e:60:6d:a6:78:c6:96:0f:0e: 55:68:1c:ca:59:9b:60:fc:81:82:79:56:ef:fe:db: f3:3d:ea:3c:c0:ab:07:df:68:f6:27:fa:9f:7e:92: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B4:FA:0A:25:F6:A2:88:F2:57:0F:B9:58:A9:BE:D8:25:1E:F1:C2 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:56:c3:14:82:e5:89:af:35:7e:d0:8a:84:a2:45:2b:40:e7: c0:68:e0:ba:92:6f:04:7f:33:4f:ba:cc:40:73:ef:be:4b:3a: 09:1a:52:f8:86:49:6c:cf:0a:7d:a7:22:ca:28:66:a2:ff:0b: fa:36:b6:87:70:78:13:b8:a7:96:67:fa:10:76:14:0f:21:a6: 54:d5:75:4e:46:bc:5f:ac:8b:80:e3:b7:a5:9e:de:b5:49:e3: 1e:d2:f2:de:c5:0c:16:f4:a7:ac:45:cd:3f:c8:d4:78:2d:e6: 08:d6:98:68:cf:fc:2b:1e:de:7f:03:c1:d6:86:90:00:91:93: f4:da:f0:c3:05:f9:7d:f8:3f:02:9b:d5:4c:4c:6e:e8:17:5b: 6e:8f:04:7d:a4:c5:e5:fd:ff:2f:a3:56:52:0b:c4:18:f0:4d: fb:6a:ad:8f:5b:07:40:57:fd:c7:37:2c:50:65:e8:81:aa:9b: e3:c7:0e:c9:b0:a7:65:06:b0:e7:34:7a:f0:f5:7a:71:79:47: 7c:ab:f5:18:cd:26:96:e3:77:34:4a:1d:03:7c:18:ab:17:62: c8:fe:06:bc:70:fa:69:37:1b:39:e6:63:e9:32:89:7b:c8:e4: 20:38:69:6d:d4:a1:14:96:a7:a1:43:42:4a:02:1f:79:c8:f8: 22:62:18:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwNTE2MTgyNjQ4WhcNMjUwNTIzMTgyNjQ4WjAYMRYwFAYD VQQDEw02ODI3ODM2OS1hYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqRxuyzvTEYDG0SUoicMXMwzy1hH/6zAvXPrRXX0PZ/9nwZvyqrvrYFG/3o0 0W8kWaaYfrnmxMtCDbcYxN4pX+x3XS/lQPD9JeqHFe7oxfAAsZ3Pc4JwqG/kqvQt ijUhD+87Sj9H+fAMS7fjJ8p0Pnu1AY3Yy/YtCLnXSLqGxZ1eyLK3G1+4wKHCgcBw /ArjIkvxxJVwDu612FqlFWSSbL51x2eimUnvAf70mn4Nl/MNVeWLU+2KjgRdYvxr SslH5Lsqac3dSECLJWbTYwYNamt50eMmQixOYG2meMaWDw5VaBzKWZtg/IGCeVbv /tvzPeo8wKsH32j2J/qffpJv9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+0+gol 9qKI8lcPuVipvtglHvHCMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrVsMUguWJrzV+0IqEokUrQOfAaOC6km8EfzNPusxAc+++SzoJGlL4 hklszwp9pyLKKGai/wv6NraHcHgTuKeWZ/oQdhQPIaZU1XVORrxfrIuA47elnt61 SeMe0vLexQwW9KesRc0/yNR4LeYI1phoz/wrHt5/A8HWhpAAkZP02vDDBfl9+D8C m9VMTG7oF1tujwR9pMXl/f8vo1ZSC8QY8E37aq2PWwdAV/3HNyxQZeiBqpvjxw7J sKdlBrDnNHrw9XpxeUd8q/UYzSaW43c0Sh0DfBirF2LI/ga8cPppNxs55mPpMol7 yOQgOGlt1KEUlqehQ0JKAh95yPgiYhiJ -----END CERTIFICATE-----Generated at Sat May 17 04:22:33 2025 by rpki-client