$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft File: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft (raw, json) Hash identifier: TUwjK3Th9bK08/eIhTsmNXIH7Wh2zWfX+/j+0R4zNoE= Subject key identifier: 86:35:B1:94:57:2E:D2:5B:C9:CF:86:BE:5B:51:AF:98:C8:9B:4C:98 Authority key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 Certificate issuer: /CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620 Certificate serial: 0778 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft Manifest number: 0773 Signing time: Wed 14 May 2025 21:33:02 +0000 Manifest this update: Wed 14 May 2025 21:33:01 +0000 Manifest next update: Wed 21 May 2025 21:33:01 +0000 Files and hashes: 1: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl (hash: z+NsH7mEoLTXUSP/RBW+tY48E13hbZvc+4OT/JTQTpU=) 2: 65D706B213FA11EB92A6FE61C4F9AE02.roa (hash: HDw255HT5Qq+WExObAcGQTxVC/IMJorhiCibpd+wpAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1912 (0x778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC52, serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620 Validity Not Before: May 14 21:33:01 2025 GMT Not After : May 21 21:33:01 2025 GMT Subject: CN=68250c0d-067c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ad:01:ed:e0:04:55:53:54:01:3a:ef:01:d6: a9:ea:83:3c:7e:f5:e5:f8:92:9d:62:0c:6d:f0:1d: b0:c5:f6:1e:ba:90:2e:33:1f:0e:b6:08:ce:70:eb: 31:9a:8e:45:75:b6:3d:ec:01:18:03:8c:6e:68:9c: a1:b3:3e:d4:fa:c2:66:53:7d:58:ae:13:72:86:3e: 24:75:08:ad:50:e8:ec:0a:33:fa:0d:fe:03:48:45: 15:0d:15:95:ba:30:54:78:a3:06:27:da:2f:6c:f6: 48:d8:3e:db:db:cb:8b:b3:97:1b:f8:5d:8b:7c:00: f9:5d:4d:2a:4c:0d:83:d0:b6:d0:27:97:73:4a:2f: 93:6a:af:cc:31:c6:6e:a7:13:59:ef:c3:9e:17:76: 37:39:ce:c4:3d:8b:76:78:41:e1:e4:74:6b:19:87: 45:93:0a:91:90:26:41:c7:fa:f5:07:f5:50:e9:ed: 34:c2:1d:60:e5:1e:d0:6a:f4:21:ff:77:b3:f7:b1: 15:c1:14:d8:55:ef:38:aa:db:f5:b7:cb:39:56:6d: d2:d4:33:cc:10:a3:e8:f5:05:e4:86:5b:a2:6f:96: 0d:6a:dc:ad:4b:78:0e:37:47:db:56:4e:1c:6a:26: 4a:70:4a:b0:91:85:a5:06:f4:a0:25:2e:c3:35:20: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:35:B1:94:57:2E:D2:5B:C9:CF:86:BE:5B:51:AF:98:C8:9B:4C:98 X509v3 Authority Key Identifier: keyid:4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:6c:e8:43:08:f0:dd:bd:b5:7b:c0:7f:ba:52:c5:84:7b:7f: 3e:48:ed:34:48:14:2d:a8:1f:d3:fb:99:29:be:5e:01:53:d5: 2b:59:8a:18:19:58:23:8d:45:58:88:b7:11:bb:23:a5:f5:af: 12:70:fb:89:19:51:01:79:f7:93:99:9e:d2:4e:86:95:16:36: f7:c2:6a:98:6e:a6:38:d0:d9:fc:24:9b:3f:72:49:8f:20:87: ef:8e:2e:e7:33:3f:08:d1:63:5a:13:38:22:8a:a6:da:b9:1c: 70:20:ca:c7:1e:ae:e5:8e:73:0b:a9:5e:10:45:26:ad:f8:f6: f6:ef:f0:68:7a:a2:80:4a:83:05:ad:04:8e:b3:e0:d8:07:aa: ee:8e:62:5a:f9:9d:d0:22:f7:17:20:3a:1c:d5:ce:89:a9:50: 73:37:ef:0a:8a:8c:9f:06:df:dc:b7:1d:5d:36:0c:d7:c0:43: c5:fa:db:02:4b:cb:60:e4:e1:d2:36:3f:ad:a6:32:ee:5a:7d: 5b:6c:9b:f7:92:88:f8:dc:96:4e:94:6d:3f:9b:0d:a2:9f:a7: b9:e1:13:d1:8c:45:7a:28:47:ac:e6:ce:ae:ab:16:f9:23:59: 74:f6:6b:00:80:ae:f9:d7:61:d5:71:dc:a3:70:86:85:22:9a: 70:7e:ec:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDNTIxMTAvBgNVBAUTKDRCODU2N0ZCMzg3QkZENzQwNzZCNTA5NzcwMDEzMkM3 QUM4NkU2MjAwHhcNMjUwNTE0MjEzMzAxWhcNMjUwNTIxMjEzMzAxWjAYMRYwFAYD VQQDEw02ODI1MGMwZC0wNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5q0B7eAEVVNUATrvAdap6oM8fvXl+JKdYgxt8B2wxfYeupAuMx8OtgjOcOsx mo5FdbY97AEYA4xuaJyhsz7U+sJmU31YrhNyhj4kdQitUOjsCjP6Df4DSEUVDRWV ujBUeKMGJ9ovbPZI2D7b28uLs5cb+F2LfAD5XU0qTA2D0LbQJ5dzSi+Taq/MMcZu pxNZ78OeF3Y3Oc7EPYt2eEHh5HRrGYdFkwqRkCZBx/r1B/VQ6e00wh1g5R7QavQh /3ez97EVwRTYVe84qtv1t8s5Vm3S1DPMEKPo9QXkhluib5YNatytS3gON0fbVk4c aiZKcEqwkYWlBvSgJS7DNSDk/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIY1sZRX LtJbyc+GvltRr5jIm0yYMB8GA1UdIwQYMBaAFEuFZ/s4e/10B2tQl3ABMseshuYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0M1Mi82NTI4MzZFODEz OEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpoN19YUUhhMUNYY0FFeXg2eUc1 aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M0Vm4temg3X1hRSGExQ1hjQUV5eDZ5RzVpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0M1Mi82NTI4MzZFODEzOEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpoN19Y UUhhMUNYY0FFeXg2eUc1aUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmbOhDCPDdvbV7wH+6UsWEe38+SO00SBQtqB/T+5kpvl4BU9UrWYoY GVgjjUVYiLcRuyOl9a8ScPuJGVEBefeTmZ7SToaVFjb3wmqYbqY40Nn8JJs/ckmP IIfvji7nMz8I0WNaEzgiiqbauRxwIMrHHq7ljnMLqV4QRSat+Pb27/BoeqKASoMF rQSOs+DYB6rujmJa+Z3QIvcXIDoc1c6JqVBzN+8KioyfBt/ctx1dNgzXwEPF+tsC S8tg5OHSNj+tpjLuWn1bbJv3koj43JZOlG0/mw2in6e54RPRjEV6KEes5s6uqxb5 I1l09msAgK7512HVcdyjcIaFIppwfuzZ -----END CERTIFICATE-----Generated at Thu May 15 00:13:28 2025 by rpki-client