$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json) Hash identifier: GWNSIQvDWkvqZcffNBU9PpTPpAtHjN+1J4ImsIZ5Afw= Subject key identifier: F3:DF:D5:4C:71:7F:39:FE:18:91:CA:45:B8:65:F8:46:E9:49:38:0C Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft Manifest number: FA Signing time: Sun 11 May 2025 04:04:56 +0000 Manifest this update: Sun 11 May 2025 04:04:55 +0000 Manifest next update: Sun 18 May 2025 04:04:55 +0000 Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: GMNF3BTBjGF44WArYXQhr9JSZVa+1Zk9V+KkqH9Ja0Q=) 2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: VWW3LG8bH56OHxKp9a6acMJUcTvLWrd2aS1b8cisvbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Validity Not Before: May 11 04:04:55 2025 GMT Not After : May 18 04:04:55 2025 GMT Subject: CN=682021e8-aa3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:e9:c8:38:4b:a1:06:2d:c0:cd:cb:1b:6b: 04:ad:5a:7a:88:5c:06:a1:bb:a7:3b:20:29:52:b0: cc:23:e2:12:9a:0d:6f:64:7c:ce:73:39:26:ef:5f: c8:7d:18:4f:3e:fe:0a:55:50:7f:1b:84:77:a5:de: af:9e:8c:eb:e1:74:55:ad:61:de:7a:e1:91:c8:99: b2:0d:66:a1:d3:63:99:91:a4:ce:6a:d3:78:ce:b1: fb:47:65:68:3d:43:83:78:5e:eb:2d:67:11:d9:3c: 5f:78:c8:52:dc:1a:36:22:01:d8:e2:0a:80:69:fc: 25:b3:c6:9d:ed:ad:c8:e1:d8:21:b7:5d:ae:57:80: 24:02:a5:ef:17:06:bf:d9:e4:70:db:aa:8d:44:c4: f5:ed:10:68:e7:89:58:b9:c1:17:9b:8d:c0:84:ee: 90:8d:4b:17:0f:29:fc:41:5e:f4:90:a7:3d:79:b6: 8c:36:82:e6:bb:7a:52:74:9d:14:d4:7d:b4:98:43: fc:6a:31:dc:4f:e4:15:8c:b5:44:a2:ab:66:f7:f7: c8:d2:e9:4b:19:1a:e8:ac:a9:1a:d9:3b:7c:cc:49: 03:49:25:8f:c1:1d:d6:53:6e:7c:9b:e5:e4:88:f2: 02:e6:ef:b2:51:99:b9:24:05:09:3b:55:5a:76:c1: 21:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DF:D5:4C:71:7F:39:FE:18:91:CA:45:B8:65:F8:46:E9:49:38:0C X509v3 Authority Key Identifier: keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:59:94:1c:14:ba:e2:18:cd:78:12:bc:55:c9:93:d1:19:e6: 84:e4:6c:06:71:58:5d:f9:13:c1:89:d9:b0:1a:70:93:2f:a5: b5:be:f1:6d:1a:b9:67:35:c2:2b:90:d8:f6:e6:bb:4f:8a:f8: 7d:dc:ff:50:13:08:25:4d:5e:3c:dc:9a:69:44:95:c9:8e:bb: f0:c5:8f:7a:bd:35:bb:6c:c2:3c:99:4c:9d:14:79:e7:47:76: c7:1e:9b:27:2f:62:cd:38:68:b6:21:6a:1f:23:29:6d:5a:a7: 54:35:e0:30:bb:f9:62:c1:41:36:7c:f0:dc:98:d1:56:9f:94: 53:93:c1:75:52:de:a8:72:17:65:cc:8d:fe:df:16:c5:3a:49: a8:c8:c2:35:f8:69:7e:e8:1b:4d:b3:d3:02:60:5e:4a:ba:d4: aa:d0:9e:66:61:30:54:71:4e:37:e8:8c:9f:31:f3:e7:86:46: 89:97:c5:aa:44:e1:b6:6c:b4:da:be:98:ac:f9:36:96:3d:ab: 1c:72:8f:02:e9:b8:1a:67:17:81:bf:0f:1b:09:3b:e5:16:fe: 0c:65:9b:bf:f3:1b:54:9f:20:81:00:10:44:a5:d1:10:08:64: cb:36:73:e6:11:44:48:82:68:be:32:6f:c0:85:96:d7:99:41: c5:fa:56:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDRBOEEzOTVFNTU2Q0M3RjE5QUFFNkFCMDZBRkYwNjc5 NDQ5NTZCNDYwHhcNMjUwNTExMDQwNDU1WhcNMjUwNTE4MDQwNDU1WjAYMRYwFAYD VQQDEw02ODIwMjFlOC1hYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotXpyDhLoQYtwM3LG2sErVp6iFwGobunOyApUrDMI+ISmg1vZHzOczkm71/I fRhPPv4KVVB/G4R3pd6vnozr4XRVrWHeeuGRyJmyDWah02OZkaTOatN4zrH7R2Vo PUODeF7rLWcR2TxfeMhS3Bo2IgHY4gqAafwls8ad7a3I4dght12uV4AkAqXvFwa/ 2eRw26qNRMT17RBo54lYucEXm43AhO6QjUsXDyn8QV70kKc9ebaMNoLmu3pSdJ0U 1H20mEP8ajHcT+QVjLVEoqtm9/fI0ulLGRrorKka2Tt8zEkDSSWPwR3WU258m+Xk iPIC5u+yUZm5JAUJO1VadsEh7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPf1Uxx fzn+GJHKRbhl+EbpSTgMMB8GA1UdIwQYMBaAFEqKOV5VbMfxmq5qsGr/BnlElWtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS8yMzc1QjMwNkI5 NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hfR2FybXF3YXY4R2VVU1Zh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvbzVYbFZzeF9HYXJtcXdhdjhHZVVTVmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS8yMzc1QjMwNkI5NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hf R2FybXF3YXY4R2VVU1ZhMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjWZQcFLriGM14ErxVyZPRGeaE5GwGcVhd+RPBidmwGnCTL6W1vvFt GrlnNcIrkNj25rtPivh93P9QEwglTV483JppRJXJjrvwxY96vTW7bMI8mUydFHnn R3bHHpsnL2LNOGi2IWofIyltWqdUNeAwu/liwUE2fPDcmNFWn5RTk8F1Ut6ochdl zI3+3xbFOkmoyMI1+Gl+6BtNs9MCYF5KutSq0J5mYTBUcU436IyfMfPnhkaJl8Wq ROG2bLTavpis+TaWPascco8C6bgaZxeBvw8bCTvlFv4MZZu/8xtUnyCBABBEpdEQ CGTLNnPmEURIgmi+Mm/AhZbXmUHF+laL -----END CERTIFICATE-----Generated at Tue May 13 05:04:20 2025 by rpki-client