$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: 5Oam60Kpa08PYlpxS5nKgs32Cf3ovr+kDbHY9LXB+GY= Subject key identifier: 42:C9:2D:54:35:99:1C:D3:7B:EE:CA:D9:2E:F8:79:77:88:47:70:C3 Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 045D Signing time: Sat 17 May 2025 00:27:08 +0000 Manifest this update: Sat 17 May 2025 00:27:07 +0000 Manifest next update: Sat 24 May 2025 00:27:07 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: IvrjF59aQMI8vkghKvo0pEc4fgJzMkYDLC54pbPAzng=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: P2DNiNhjlpF64BsKz4nEdQOFVD1WxrPx8iOejuhEZGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 00:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: May 17 00:27:07 2025 GMT Not After : May 24 00:27:07 2025 GMT Subject: CN=6827d7dc-becd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:45:c7:2f:4a:f4:11:35:b4:b1:dc:f0:6f: 73:93:71:3e:a0:8f:1b:f4:ba:95:58:69:9f:75:84: 1d:fe:b7:a3:c1:0d:c2:36:41:78:e1:8f:9d:8a:23: 55:f7:17:a3:5b:f9:57:5b:22:b6:69:f9:18:eb:64: 36:97:36:84:39:4b:4e:89:1b:22:01:a7:03:8d:29: 6a:e1:c2:f1:4c:b4:52:3f:f1:77:93:07:63:97:96: 99:8c:38:2e:54:a7:f5:c9:e3:e6:d1:e9:64:94:23: a0:ab:00:4f:6a:9b:84:f2:2e:8c:bf:57:23:60:3a: 99:9e:dd:7f:76:0d:78:97:c2:fc:bf:2d:04:b4:9d: 64:7b:10:47:0b:03:f2:f1:49:d3:2c:b4:a4:f2:e9: 3b:73:0f:b2:66:4d:a8:be:b3:72:da:82:5c:2a:ee: 04:ca:8a:7e:7c:38:94:aa:b8:2d:d2:50:27:1a:15: 07:03:5b:dc:73:6d:b0:e1:6f:e3:e1:f3:70:c2:d6: 67:c1:37:2e:7b:a3:5d:48:4f:c4:14:d9:07:ad:07: 1a:87:d7:ae:3c:06:91:dc:6f:be:a8:39:7a:59:3a: 00:04:8d:46:88:0a:e2:93:11:a6:8c:76:fb:88:7b: 52:93:1c:96:67:6c:56:a9:e6:a5:d7:a3:a9:bf:b7: 9d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C9:2D:54:35:99:1C:D3:7B:EE:CA:D9:2E:F8:79:77:88:47:70:C3 X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:68:fa:91:bb:8a:66:04:00:cc:63:72:df:7c:f1:e8:ed:96: be:51:fd:f3:54:a8:27:cf:83:c7:2e:b4:fa:fa:f7:1d:48:d2: ff:04:3d:e9:15:80:31:c2:96:ab:88:21:b3:d7:50:61:60:c0: e1:ec:c4:fe:39:16:9c:ba:67:d2:7c:24:e4:7b:bc:be:91:5e: 05:35:c1:60:6e:33:72:1f:b6:21:81:18:f6:42:24:c1:cb:67: 53:ca:c8:88:0d:d3:c1:19:f0:05:36:0e:4b:43:81:62:28:fe: ff:20:27:4f:3a:f0:c2:21:9b:0d:81:c3:66:2d:87:cc:51:24: b8:d3:fc:36:26:8f:72:d1:1f:9e:04:b5:ed:6b:f3:ac:cc:fe: 69:83:e1:30:3b:0d:63:6d:1a:7d:27:13:5d:44:af:77:a2:18: fb:5a:78:a0:3d:91:94:d9:9f:b8:94:37:9b:d1:18:d5:06:83: 7d:3d:ec:2b:db:40:82:cf:f2:08:57:2c:bd:cf:70:23:d9:14: 7a:63:1f:11:2b:26:77:f7:04:98:ea:c2:f0:2b:1f:9b:e4:e8: d3:1b:74:01:ac:75:94:1e:ce:11:24:ab:66:22:1e:e2:fd:87: 59:82:54:60:8a:ed:6c:15:6c:4a:2a:d6:52:25:8e:8b:33:f8: 4d:7a:12:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjUwNTE3MDAyNzA3WhcNMjUwNTI0MDAyNzA3WjAYMRYwFAYD VQQDEw02ODI3ZDdkYy1iZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRFFxy9K9BE1tLHc8G9zk3E+oI8b9LqVWGmfdYQd/rejwQ3CNkF44Y+diiNV 9xejW/lXWyK2afkY62Q2lzaEOUtOiRsiAacDjSlq4cLxTLRSP/F3kwdjl5aZjDgu VKf1yePm0elklCOgqwBPapuE8i6Mv1cjYDqZnt1/dg14l8L8vy0EtJ1kexBHCwPy 8UnTLLSk8uk7cw+yZk2ovrNy2oJcKu4Eyop+fDiUqrgt0lAnGhUHA1vcc22w4W/j 4fNwwtZnwTcue6NdSE/EFNkHrQcah9euPAaR3G++qDl6WToABI1GiArikxGmjHb7 iHtSkxyWZ2xWqeal16Opv7edrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELJLVQ1 mRzTe+7K2S74eXeIR3DDMB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGaPqRu4pmBADMY3LffPHo7Za+Uf3zVKgnz4PHLrT6+vcdSNL/BD3p FYAxwpariCGz11BhYMDh7MT+ORacumfSfCTke7y+kV4FNcFgbjNyH7YhgRj2QiTB y2dTysiIDdPBGfAFNg5LQ4FiKP7/ICdPOvDCIZsNgcNmLYfMUSS40/w2Jo9y0R+e BLXta/OszP5pg+EwOw1jbRp9JxNdRK93ohj7WnigPZGU2Z+4lDeb0RjVBoN9Pewr 20CCz/IIVyy9z3Aj2RR6Yx8RKyZ39wSY6sLwKx+b5OjTG3QBrHWUHs4RJKtmIh7i /YdZglRgiu1sFWxKKtZSJY6LM/hNehIw -----END CERTIFICATE-----Generated at Sat May 17 05:44:25 2025 by rpki-client