$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: caNCi9eJnPhsygHPRj4ONKyQhojbYP3D6vOpoPNrxOM= Subject key identifier: C9:4E:47:CD:AC:EB:D7:48:E0:84:CE:29:AE:31:A8:B4:26:37:98:E1 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 080C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 07E1 Signing time: Sat 10 May 2025 20:44:32 +0000 Manifest this update: Sat 10 May 2025 20:44:32 +0000 Manifest next update: Sat 17 May 2025 20:44:32 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: Vj0uaGw4ezOrLmPfk7zdcXlGqUzj8Mp+H0uAGFeDFtQ=) 2: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: ruDiWo0iJ1IzCL54D+qZ/5Sx7ttq9JDNgJ3Itzo1mtM=) 3: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: szuCGA/YKFnqAyQx0YvfNE1CLpywYPi051pqX/mLZ+o=) 4: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: DRibOliaFFpVDYBNRPwSwfeFfAK79Ag7KRQOfCVsri4=) 5: 67FF0960076911EF8569F157C4F9AE02.roa (hash: Dvs5DAUQ59zCBbfUhpGLPZgVQyIVukk8Lis+ely0rgs=) 6: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: v8LvkvkZCh7/PfCtacYxlPwc3beChOibWsCiDIXZqaM=) 7: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: tsvfq1JS/MiwyfU6/6stmHXHI8bkcGx85DGNDrytcZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: May 10 20:44:32 2025 GMT Not After : May 17 20:44:32 2025 GMT Subject: CN=681fbab0-397a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:7e:1f:08:ec:5d:31:4c:43:34:7d:51:e7: 76:16:eb:22:f5:0a:4a:8c:2a:7e:7a:78:87:b2:aa: 1b:7d:70:19:88:f6:07:da:0e:b0:69:fe:e9:b0:a5: 95:59:2c:50:3f:72:91:b1:62:bd:1b:9b:61:d5:ea: 31:50:c0:09:1e:6e:aa:69:3e:3a:b8:a5:24:c4:5b: 41:f9:b8:31:1f:82:e5:91:0e:8d:b4:da:bc:4a:2f: e7:ef:b7:75:03:3f:79:b7:50:68:78:54:d9:aa:08: b0:10:51:32:25:3d:d2:33:73:e0:b0:a2:53:a6:d2: 14:94:52:b6:f6:26:da:59:28:90:a9:2b:d5:b9:72: b8:39:a8:21:5a:73:b1:8d:f9:95:4f:1e:78:4f:f6: 0b:f5:75:ec:7c:da:ad:33:c5:36:4c:fd:b6:1e:b4: be:7e:ec:a8:cd:ac:a3:eb:1a:2e:76:72:73:03:98: b0:d7:2d:bf:f4:76:a4:5c:4b:68:4d:cc:84:a4:53: 7a:97:d0:ce:e3:3f:dd:21:9c:1e:d4:61:6b:b3:83: 8c:98:6f:1b:07:f2:9e:12:84:12:cb:ff:14:76:5d: 2f:8f:b4:da:81:ad:5a:ed:0a:4c:8f:5f:19:2b:63: 93:d7:09:66:87:4e:2d:88:e3:98:71:e7:09:aa:51: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4E:47:CD:AC:EB:D7:48:E0:84:CE:29:AE:31:A8:B4:26:37:98:E1 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b5:30:cf:02:2c:bd:fa:b8:1d:73:f0:79:58:65:32:68:ef: b4:49:48:be:4c:ce:27:36:6d:3e:87:5a:86:6f:88:34:1a:ba: e2:db:5f:aa:e9:0b:d5:78:b3:ec:b3:b1:9b:12:5a:29:b6:b8: 08:d6:50:47:e8:b2:3e:62:7f:25:9e:d9:7c:77:e2:09:24:e0: f5:4c:c5:f9:68:6a:76:da:5f:c5:fb:30:ec:47:bb:08:cc:62: 15:12:4d:bb:b7:1d:47:b2:c9:95:c3:0c:6b:4f:ea:bc:94:1e: 31:06:0c:4f:50:e2:1e:ea:8b:66:06:da:94:9a:ae:3c:82:fb: c9:ee:e4:7a:8b:65:12:a8:24:56:49:e6:ca:c4:71:f3:c6:36: 4c:48:1f:a6:71:2c:a3:16:bd:fd:78:2f:4f:85:e9:61:17:b9: bf:b4:ab:90:94:39:14:a1:42:59:b8:b9:96:0e:db:a5:97:d3: f1:c0:0a:11:a6:13:1c:6a:e5:5a:2e:d5:d3:6d:e8:13:c6:94: bd:6b:cd:5a:14:01:f6:89:95:ee:cb:e2:25:ff:9d:23:43:eb: c6:a7:dd:65:29:34:ad:b9:ad:de:d0:d0:4c:17:63:d6:01:8d: 80:c6:18:a2:6d:11:f0:6e:e3:27:df:82:ac:a7:c1:b8:76:80: bb:55:7d:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjUwNTEwMjA0NDMyWhcNMjUwNTE3MjA0NDMyWjAYMRYwFAYD VQQDEw02ODFmYmFiMC0zOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D1+HwjsXTFMQzR9Ued2Fusi9QpKjCp+eniHsqobfXAZiPYH2g6waf7psKWV WSxQP3KRsWK9G5th1eoxUMAJHm6qaT46uKUkxFtB+bgxH4LlkQ6NtNq8Si/n77d1 Az95t1BoeFTZqgiwEFEyJT3SM3PgsKJTptIUlFK29ibaWSiQqSvVuXK4OaghWnOx jfmVTx54T/YL9XXsfNqtM8U2TP22HrS+fuyozayj6xoudnJzA5iw1y2/9HakXEto TcyEpFN6l9DO4z/dIZwe1GFrs4OMmG8bB/KeEoQSy/8Udl0vj7Taga1a7QpMj18Z K2OT1wlmh04tiOOYcecJqlF87wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlOR82s 69dI4ITOKa4xqLQmN5jhMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQtTDPAiy9+rgdc/B5WGUyaO+0SUi+TM4nNm0+h1qGb4g0Grri21+q 6QvVeLPss7GbEloptrgI1lBH6LI+Yn8lntl8d+IJJOD1TMX5aGp22l/F+zDsR7sI zGIVEk27tx1HssmVwwxrT+q8lB4xBgxPUOIe6otmBtqUmq48gvvJ7uR6i2USqCRW SebKxHHzxjZMSB+mcSyjFr39eC9PhelhF7m/tKuQlDkUoUJZuLmWDtull9PxwAoR phMcauVaLtXTbegTxpS9a81aFAH2iZXuy+Il/50jQ+vGp91lKTStua3e0NBMF2PW AY2AxhiibRHwbuMn34Ksp8G4doC7VX38 -----END CERTIFICATE-----Generated at Sun May 11 13:25:43 2025 by rpki-client