$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json) Hash identifier: 2u6Za8F7UB3erAEeelazC1Glak6IwJcEKAAOW0nCYxY= Subject key identifier: 85:0C:82:05:68:5A:2C:03:5D:F6:F7:81:AA:81:7E:5A:43:AF:19:8B Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Certificate serial: 0751 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft Manifest number: 074C Signing time: Mon 12 May 2025 21:26:23 +0000 Manifest this update: Mon 12 May 2025 21:26:22 +0000 Manifest next update: Mon 19 May 2025 21:26:22 +0000 Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: kaODzu9PU9BLOUVOHmlWs1J4BoePEA0TENITJm5onxE=) 2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1873 (0x751) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Validity Not Before: May 12 21:26:22 2025 GMT Not After : May 19 21:26:22 2025 GMT Subject: CN=6822677e-8d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:db:1a:87:26:6b:07:b2:85:06:35:94:9f:72: 91:f9:c9:99:45:32:a2:b5:2c:b6:36:58:97:86:c7: 84:27:c6:fb:20:f7:20:56:65:29:c7:83:d4:33:d3: ad:22:fe:61:1b:8f:4d:57:5b:d3:75:2e:51:a1:f8: 45:00:51:e8:0e:cb:67:27:98:ce:fd:65:72:d9:74: d0:a2:6c:56:d5:95:a8:90:74:d6:3b:b1:3a:e7:87: 07:1b:df:f9:24:20:c5:d1:53:78:48:6c:89:53:15: 77:df:4e:f4:48:e7:a3:9c:71:8d:81:94:c5:dd:6b: 0c:b3:4d:87:9f:fc:b7:ce:95:ee:b8:bb:e4:e0:f0: 82:f3:e1:28:48:df:41:60:71:dd:32:00:53:16:2f: f8:54:a7:b1:59:e6:ea:9a:95:95:30:f1:63:e3:ac: 95:fa:37:5a:ee:ac:5e:9f:0d:6f:c6:cf:77:de:de: f5:00:6a:01:f5:1f:29:02:f3:d9:87:bc:ad:d7:27: 57:62:7c:65:77:c3:fe:87:64:d8:fa:bb:89:63:1e: fa:2a:b5:15:d5:3e:a1:a4:e0:2d:07:7a:0b:bc:d6: 15:55:c4:cc:4e:3c:d4:4a:9c:2a:86:ff:76:75:70: cc:e7:37:ea:44:96:70:bc:49:39:0e:0c:6f:76:49: 93:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0C:82:05:68:5A:2C:03:5D:F6:F7:81:AA:81:7E:5A:43:AF:19:8B X509v3 Authority Key Identifier: keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:25:c1:d9:27:23:6c:aa:e8:7b:bb:fa:de:e8:3a:8d:d9:40: 4e:88:bf:ab:51:bc:fd:68:f1:0c:b0:86:65:3e:38:34:70:47: cd:32:32:46:78:93:97:a9:d7:75:96:0b:c2:35:02:93:09:c6: 73:32:68:33:c9:1f:3f:1f:3d:c2:b2:ae:63:2c:7e:c6:9c:53: c0:e6:a7:33:00:e8:98:bb:16:e0:88:d4:91:ce:0c:92:82:4f: 53:02:d1:d6:83:75:ff:0b:0d:7b:d3:e0:05:8e:f6:13:5d:7e: bf:4e:18:b9:74:8f:13:00:d4:97:62:87:db:92:d4:26:5f:f2: 11:e3:7a:3a:d3:c9:47:da:78:6f:e8:ce:e7:04:7f:01:fd:90: aa:dd:be:85:95:0b:40:cc:76:35:22:a2:7c:e9:27:f6:05:da: 1e:6e:7a:ec:4c:82:4c:ef:49:46:78:0f:3f:f2:c8:1e:59:e0: 3d:6b:3c:cf:9f:b4:1f:0d:03:39:69:41:53:0e:36:98:f2:96: 8a:9a:c3:51:d4:94:0b:e3:53:3f:59:ce:3b:23:c2:c8:b9:82: 02:c4:e9:46:d2:a6:f0:ab:f5:c5:4f:43:61:46:c0:4f:3f:c6: a2:db:36:ea:18:52:5d:7b:1f:eb:02:2a:16:1c:69:93:0c:f7: 0e:f6:8c:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1 Qjg4MDk4RDEwHhcNMjUwNTEyMjEyNjIyWhcNMjUwNTE5MjEyNjIyWjAYMRYwFAYD VQQDEw02ODIyNjc3ZS04ZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9sahyZrB7KFBjWUn3KR+cmZRTKitSy2NliXhseEJ8b7IPcgVmUpx4PUM9Ot Iv5hG49NV1vTdS5RofhFAFHoDstnJ5jO/WVy2XTQomxW1ZWokHTWO7E654cHG9/5 JCDF0VN4SGyJUxV33070SOejnHGNgZTF3WsMs02Hn/y3zpXuuLvk4PCC8+EoSN9B YHHdMgBTFi/4VKexWebqmpWVMPFj46yV+jda7qxenw1vxs933t71AGoB9R8pAvPZ h7yt1ydXYnxld8P+h2TY+ruJYx76KrUV1T6hpOAtB3oLvNYVVcTMTjzUSpwqhv92 dXDM5zfqRJZwvEk5DgxvdkmTqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUMggVo WiwDXfb3gaqBflpDrxmLMB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOJcHZJyNsquh7u/re6DqN2UBOiL+rUbz9aPEMsIZlPjg0cEfNMjJG eJOXqdd1lgvCNQKTCcZzMmgzyR8/Hz3Csq5jLH7GnFPA5qczAOiYuxbgiNSRzgyS gk9TAtHWg3X/Cw170+AFjvYTXX6/Thi5dI8TANSXYofbktQmX/IR43o608lH2nhv 6M7nBH8B/ZCq3b6FlQtAzHY1IqJ86Sf2BdoebnrsTIJM70lGeA8/8sgeWeA9azzP n7QfDQM5aUFTDjaY8paKmsNR1JQL41M/Wc47I8LIuYICxOlG0qbwq/XFT0NhRsBP P8ai2zbqGFJdex/rAioWHGmTDPcO9oyH -----END CERTIFICATE-----Generated at Tue May 13 05:43:40 2025 by rpki-client