$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft File: SLmUWYf2drRs7T3hKEmoo49AaLU.mft (raw, json) Hash identifier: XafV/TsjW8dVPxqv2nMAwrATcm+FDpVqVRwbJu+FtwQ= Subject key identifier: ED:0E:78:5B:5D:2E:6D:F7:6C:2B:1C:DC:AE:DB:20:43:04:8E:02:43 Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 Certificate issuer: /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Certificate serial: 07E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft Manifest number: 07D1 Signing time: Sat 10 May 2025 20:48:19 +0000 Manifest this update: Sat 10 May 2025 20:48:18 +0000 Manifest next update: Sat 17 May 2025 20:48:18 +0000 Files and hashes: 1: SLmUWYf2drRs7T3hKEmoo49AaLU.crl (hash: LFLYVgsznzA7ey4Y5UuB27VAHAR5Fb22Z97IqMCHRmw=) 2: 37A46070F6F211EA922F482BC4F9AE02.roa (hash: ulbSY28XJFQuMyMRnX4bdktKm/xcu3tL1ZMG0ew7F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2020 (0x7e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BAB, serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Validity Not Before: May 10 20:48:18 2025 GMT Not After : May 17 20:48:18 2025 GMT Subject: CN=681fbb92-c9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:74:5b:ad:99:5c:b7:58:81:c6:71:99:96: 78:d6:c3:bb:f9:6d:1d:c8:cc:87:aa:45:c3:8d:24: ce:f3:ea:25:3b:21:e4:c0:f3:fc:6a:4d:5e:69:7f: 6f:f4:8e:64:0f:39:30:9a:69:46:2c:e1:bc:5a:98: 3e:de:a1:dd:0d:d6:04:dd:78:89:db:8a:a1:7e:4c: b0:c7:19:a0:5a:27:83:83:1c:ac:a3:9e:3f:16:a7: 98:1c:21:ee:3a:fe:cf:a5:0d:b5:a7:82:23:d1:1f: ea:90:ec:e8:3e:ac:5d:c3:b6:55:3f:1f:b9:d7:d3: 1d:22:ef:ff:84:04:b8:8c:0e:7a:39:ad:ad:b4:17: c2:92:47:a8:b4:7c:e4:98:bc:8c:aa:31:ac:a8:8c: c5:b2:2a:cd:66:4c:15:c8:ef:70:09:25:11:b7:bf: 38:9d:00:d2:07:6e:88:b7:c6:25:41:00:ad:a8:f0: 34:3a:f1:b4:11:4c:47:05:65:90:85:a3:78:47:c6: c2:f9:f3:e9:77:f1:ba:20:36:99:38:92:92:fd:38: 83:a1:fd:c4:1e:a4:83:6a:45:48:c1:3a:21:7e:0b: 03:6f:14:35:e9:72:69:1d:10:f1:d0:e1:c4:04:96: 00:a5:ae:47:6b:f6:e1:45:84:50:ba:45:5f:2c:d6: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0E:78:5B:5D:2E:6D:F7:6C:2B:1C:DC:AE:DB:20:43:04:8E:02:43 X509v3 Authority Key Identifier: keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6c:0d:7c:82:38:8a:1f:58:d4:79:b5:c1:cc:a7:11:a3:a3: 68:1d:0d:b3:ef:d8:4f:27:7b:fb:c8:f8:c3:eb:f9:80:c8:b4: 3d:3f:c1:ec:1f:cc:1b:c7:79:2b:3c:95:cb:5a:c2:59:5d:03: 16:98:ab:aa:10:03:b1:a3:d9:cd:d0:d5:c5:a4:2f:91:02:45: 7c:b8:e9:8a:17:4c:73:eb:50:35:6e:41:b1:3b:99:51:5e:b8: 06:bc:38:ca:8d:68:cf:1c:65:68:8d:4b:9a:9c:94:1f:54:3a: e5:78:ab:42:eb:4f:82:0b:a7:06:d8:5f:0f:c9:20:24:2f:58: 0d:3f:56:60:a6:c6:c5:44:c4:d2:30:fa:7c:97:01:93:f1:85: 23:e6:b7:26:8e:06:54:c9:54:07:d9:f2:2e:95:5f:f3:f8:f4: 16:f8:78:63:28:4e:7d:ac:43:a8:9e:4d:22:4c:04:8e:46:cd: 3d:81:dd:38:4b:21:bd:c2:71:8b:5f:5f:a6:e9:4c:dd:29:55: 36:e9:de:0b:4d:81:96:a3:20:63:47:79:30:0a:c5:70:17:13: a0:fc:d4:c8:89:e2:06:c9:3c:c8:67:49:16:22:b2:e5:30:20: 0c:e8:f0:54:ab:92:3b:bb:70:e5:ec:05:f5:24:22:93:f7:f6: 3c:2d:6b:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCQUIxMTAvBgNVBAUTKDQ4Qjk5NDU5ODdGNjc2QjQ2Q0VEM0RFMTI4NDlBOEEz OEY0MDY4QjUwHhcNMjUwNTEwMjA0ODE4WhcNMjUwNTE3MjA0ODE4WjAYMRYwFAYD VQQDEw02ODFmYmI5Mi1jOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8N0W62ZXLdYgcZxmZZ41sO7+W0dyMyHqkXDjSTO8+olOyHkwPP8ak1eaX9v 9I5kDzkwmmlGLOG8Wpg+3qHdDdYE3XiJ24qhfkywxxmgWieDgxyso54/FqeYHCHu Ov7PpQ21p4Ij0R/qkOzoPqxdw7ZVPx+519MdIu//hAS4jA56Oa2ttBfCkkeotHzk mLyMqjGsqIzFsirNZkwVyO9wCSURt784nQDSB26It8YlQQCtqPA0OvG0EUxHBWWQ haN4R8bC+fPpd/G6IDaZOJKS/TiDof3EHqSDakVIwTohfgsDbxQ16XJpHRDx0OHE BJYApa5Ha/bhRYRQukVfLNY/9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0OeFtd Lm33bCsc3K7bIEMEjgJDMB8GA1UdIwQYMBaAFEi5lFmH9na0bO094ShJqKOPQGi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUJBQi8wQjk3NjAxQUY2 NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRyUnM3VDNoS0Vtb280OUFh TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMbVVXWWYyZHJSczdUM2hLRW1vbzQ5QWFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUJBQi8wQjk3NjAxQUY2NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRy UnM3VDNoS0Vtb280OUFhTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAobA18gjiKH1jUebXBzKcRo6NoHQ2z79hPJ3v7yPjD6/mAyLQ9P8Hs H8wbx3krPJXLWsJZXQMWmKuqEAOxo9nN0NXFpC+RAkV8uOmKF0xz61A1bkGxO5lR XrgGvDjKjWjPHGVojUuanJQfVDrleKtC60+CC6cG2F8PySAkL1gNP1ZgpsbFRMTS MPp8lwGT8YUj5rcmjgZUyVQH2fIulV/z+PQW+HhjKE59rEOonk0iTASORs09gd04 SyG9wnGLX1+m6UzdKVU26d4LTYGWoyBjR3kwCsVwFxOg/NTIieIGyTzIZ0kWIrLl MCAM6PBUq5I7u3Dl7AX1JCKT9/Y8LWv3 -----END CERTIFICATE-----Generated at Sun May 11 18:29:51 2025 by rpki-client