$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json) Hash identifier: 1AA7eMW/jVvPwsE6N+nfQVqYUb0IyflhI31NJGcF6X0= Subject key identifier: 92:BB:97:60:C2:AF:6E:D4:27:D2:88:86:3A:52:D8:1E:33:E4:D8:9F Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft Manifest number: 0114 Signing time: Thu 03 Jul 2025 05:07:17 +0000 Manifest this update: Thu 03 Jul 2025 05:07:16 +0000 Manifest next update: Thu 10 Jul 2025 05:07:16 +0000 Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: J9jBhtFEkH13Gf7XVDi/7MFa3vU5t8fWESM8bGqnEEM=) 2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: VWW3LG8bH56OHxKp9a6acMJUcTvLWrd2aS1b8cisvbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Validity Not Before: Jul 3 05:07:16 2025 GMT Not After : Jul 10 05:07:16 2025 GMT Subject: CN=68661005-d09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:41:64:9c:2f:50:b7:8a:8a:ed:42:79:b6: 38:15:57:5e:c3:8a:8b:be:6f:7c:d5:30:bc:6b:c8: f2:69:66:8f:2e:44:55:4f:9a:a9:72:b2:c9:d3:bd: d9:69:90:92:6a:2b:d1:b6:cf:b5:db:f6:1a:7a:47: 3b:78:76:c0:29:c3:bb:fb:93:4d:c5:95:67:83:3d: 50:30:cb:5f:76:81:09:c1:a3:ab:0e:97:0f:81:5d: 68:fd:be:60:1e:88:4f:c6:1a:3b:3f:64:15:27:13: b8:cf:6f:e9:6b:02:f7:c7:04:df:50:70:3f:b5:d1: 12:7a:7c:48:9b:8b:9b:1d:c0:e3:05:ab:22:5d:f7: 97:d1:4e:58:52:39:12:52:e5:34:07:79:93:27:35: 65:87:b0:cd:d6:a8:a5:1e:2c:18:1d:42:83:50:85: 54:65:69:00:53:82:45:9a:e6:15:f5:52:f1:ee:40: b4:9c:2d:71:28:1e:96:ca:3b:0c:16:bc:bf:d4:9c: 61:78:13:15:d9:9d:16:9b:b9:06:62:5a:3c:aa:0f: 2a:46:97:59:4a:73:b7:8d:09:a0:bd:b9:5b:7a:ac: 9d:10:ba:54:95:d2:1f:10:3e:ff:9c:03:cf:36:ca: 36:1e:67:2c:03:00:d9:fb:54:96:e2:27:ac:9a:88: 33:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BB:97:60:C2:AF:6E:D4:27:D2:88:86:3A:52:D8:1E:33:E4:D8:9F X509v3 Authority Key Identifier: keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b6:56:9b:82:a5:a1:d9:6d:f2:f0:96:37:a9:77:bc:76:03: ed:0c:19:99:25:4e:83:e6:78:8f:a3:28:86:47:f3:65:ca:a7: cd:bd:0e:9d:08:6d:63:e5:50:b9:f9:a1:40:49:6e:aa:83:ab: 2a:3e:55:0d:aa:ae:93:71:49:c5:b4:66:99:fa:18:ef:28:8c: 3a:01:c5:8c:dd:b0:92:8a:af:05:fa:de:f1:dc:93:7f:77:84: a7:83:a2:93:12:32:96:6c:39:2c:39:33:d0:f8:40:59:cd:16: 83:ce:ab:ac:90:5c:dd:38:04:97:28:22:1e:e7:22:07:30:32: 81:18:be:f7:a6:95:da:e4:92:7b:15:0c:f5:14:3f:40:a7:54: 93:0c:c4:c5:14:43:61:21:de:d2:9f:e8:c4:67:f6:52:9e:d8: 36:eb:ab:85:45:e0:8d:8c:f6:de:21:11:df:10:d3:84:03:9f: a4:b6:ea:c7:79:c7:80:da:1f:15:c8:ea:a2:33:02:12:ae:8c: d8:a6:a2:a2:48:08:42:7f:92:e3:b9:32:6f:3c:2e:b5:fa:b8: 57:a6:da:c3:6e:b5:09:aa:3a:bd:4b:73:4f:4b:3a:e8:39:24: fc:dd:fa:46:34:5b:d8:91:de:53:2d:ed:c3:8d:1b:a0:d2:d0: e5:c0:9a:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDRBOEEzOTVFNTU2Q0M3RjE5QUFFNkFCMDZBRkYwNjc5 NDQ5NTZCNDYwHhcNMjUwNzAzMDUwNzE2WhcNMjUwNzEwMDUwNzE2WjAYMRYwFAYD VQQDEw02ODY2MTAwNS1kMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyC9BZJwvULeKiu1CebY4FVdew4qLvm981TC8a8jyaWaPLkRVT5qpcrLJ073Z aZCSaivRts+12/Yaekc7eHbAKcO7+5NNxZVngz1QMMtfdoEJwaOrDpcPgV1o/b5g HohPxho7P2QVJxO4z2/pawL3xwTfUHA/tdESenxIm4ubHcDjBasiXfeX0U5YUjkS UuU0B3mTJzVlh7DN1qilHiwYHUKDUIVUZWkAU4JFmuYV9VLx7kC0nC1xKB6WyjsM Fry/1JxheBMV2Z0Wm7kGYlo8qg8qRpdZSnO3jQmgvblbeqydELpUldIfED7/nAPP Nso2HmcsAwDZ+1SW4iesmogzpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJK7l2DC r27UJ9KIhjpS2B4z5NifMB8GA1UdIwQYMBaAFEqKOV5VbMfxmq5qsGr/BnlElWtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS8yMzc1QjMwNkI5 NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hfR2FybXF3YXY4R2VVU1Zh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvbzVYbFZzeF9HYXJtcXdhdjhHZVVTVmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS8yMzc1QjMwNkI5NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hf R2FybXF3YXY4R2VVU1ZhMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMtlabgqWh2W3y8JY3qXe8dgPtDBmZJU6D5niPoyiGR/NlyqfNvQ6d CG1j5VC5+aFASW6qg6sqPlUNqq6TcUnFtGaZ+hjvKIw6AcWM3bCSiq8F+t7x3JN/ d4Sng6KTEjKWbDksOTPQ+EBZzRaDzquskFzdOASXKCIe5yIHMDKBGL73ppXa5JJ7 FQz1FD9Ap1STDMTFFENhId7Sn+jEZ/ZSntg266uFReCNjPbeIRHfENOEA5+kturH eceA2h8VyOqiMwISrozYpqKiSAhCf5LjuTJvPC61+rhXptrDbrUJqjq9S3NPSzro OST83fpGNFvYkd5TLe3DjRug0tDlwJp4 -----END CERTIFICATE-----Generated at Fri Jul 4 22:00:38 2025 by rpki-client