$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: wDYHy9V06rxpl0SQ2KItEX5yhnbb4G/srg7k+2twrLs= Subject key identifier: AF:F1:D3:5A:0B:F9:03:A1:AB:6B:20:DD:A8:7A:7C:17:C7:6C:72:C1 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 02A9 Signing time: Sat 17 May 2025 01:42:56 +0000 Manifest this update: Sat 17 May 2025 01:42:56 +0000 Manifest next update: Sat 24 May 2025 01:42:56 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: rYc6+w+cBALTm9f/FyLWez6GNlhObTn88ai3k6KdyhY=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: OalalDzVyKhIKt/8JFaNCLlPQG9aL6loK7h8qfIQsmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 01:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: May 17 01:42:56 2025 GMT Not After : May 24 01:42:56 2025 GMT Subject: CN=6827e9a0-8562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:4a:fb:02:82:7d:ca:ef:4c:34:62:3a:29: 60:f7:d6:fa:d9:75:41:98:77:2f:09:e9:20:6d:7f: fc:4b:05:24:70:80:96:71:4c:7b:90:4b:ae:8c:33: 72:ef:c4:00:df:ae:1a:a0:c1:31:8c:36:34:67:90: 41:10:3f:32:5a:54:12:19:fe:a1:12:56:d5:c7:b7: de:66:08:30:45:69:56:21:ad:63:f4:c7:33:31:02: 54:ea:49:b2:8f:55:f4:67:dc:5f:36:89:8c:c4:b2: df:b5:8d:72:75:96:96:5e:f6:83:8a:73:be:2d:68: f3:fc:50:83:ff:31:ee:75:9e:4b:af:45:81:c4:0e: 41:d5:79:bd:ec:29:9c:82:3f:c5:16:59:9a:13:de: 1d:aa:f0:73:d2:a4:3c:d5:1a:24:aa:16:26:bc:d0: 7c:4b:7e:a7:01:4b:cd:93:2e:36:96:f2:47:8d:ad: 6e:1d:b8:c7:4a:89:2e:69:b1:82:f9:06:f8:e7:67: 5b:ce:73:1e:62:0a:22:50:e3:ed:7a:e1:0f:fe:15: c2:91:cd:23:34:21:7c:77:2c:b3:f1:ef:47:5d:1d: ce:70:06:dd:e4:ac:75:8a:d0:4c:46:5a:7d:cf:8e: 84:a4:69:1e:0d:db:fe:98:9e:f4:90:28:0e:da:ba: cb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F1:D3:5A:0B:F9:03:A1:AB:6B:20:DD:A8:7A:7C:17:C7:6C:72:C1 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:33:58:5d:d2:6c:9e:e4:19:c4:89:3d:12:0b:55:4a:41:e1: 2e:fe:f8:e6:8e:ac:49:df:21:a4:0e:8b:b3:3f:76:14:85:86: 4e:01:2a:d3:04:68:80:d9:5f:2f:ca:77:2a:59:bd:8f:9c:92: df:44:a1:6c:f2:fe:bd:e7:53:21:29:b3:56:8d:6e:75:f1:9c: 5a:89:1c:09:e3:c4:c0:fa:d8:45:fd:be:0b:15:d1:53:01:e4: b1:ae:06:a9:61:a3:6f:74:2e:1a:63:51:1a:f1:39:5a:75:c5: 32:11:43:14:0c:57:3d:d1:96:18:d9:35:04:43:cb:ef:70:69: 48:cd:1f:d7:08:e4:4b:6a:f1:ca:a8:24:ea:70:b6:18:24:cc: ac:33:07:0e:cb:eb:70:cd:d5:4b:08:f8:80:12:ba:ba:8c:df: 31:45:35:08:d5:6c:12:6c:54:77:c2:c6:db:84:91:35:59:88: f7:f3:ce:b1:17:85:24:0e:81:00:df:15:49:c7:e5:cf:08:40: 3b:0b:00:ae:9e:79:b4:39:71:89:c6:44:09:4f:26:62:f0:ce: f6:42:11:5d:a5:7e:11:e1:2d:06:c5:48:f6:ad:72:57:28:74: 11:90:46:5a:6f:fd:ac:4e:d6:11:ce:c8:43:8f:cd:94:a3:9d: d5:eb:bc:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjUwNTE3MDE0MjU2WhcNMjUwNTI0MDE0MjU2WjAYMRYwFAYD VQQDEw02ODI3ZTlhMC04NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSdK+wKCfcrvTDRiOilg99b62XVBmHcvCekgbX/8SwUkcICWcUx7kEuujDNy 78QA364aoMExjDY0Z5BBED8yWlQSGf6hElbVx7feZggwRWlWIa1j9MczMQJU6kmy j1X0Z9xfNomMxLLftY1ydZaWXvaDinO+LWjz/FCD/zHudZ5Lr0WBxA5B1Xm97Cmc gj/FFlmaE94dqvBz0qQ81RokqhYmvNB8S36nAUvNky42lvJHja1uHbjHSokuabGC +Qb452dbznMeYgoiUOPteuEP/hXCkc0jNCF8dyyz8e9HXR3OcAbd5Kx1itBMRlp9 z46EpGkeDdv+mJ70kCgO2rrLtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/x01oL +QOhq2sg3ah6fBfHbHLBMB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYM1hd0mye5BnEiT0SC1VKQeEu/vjmjqxJ3yGkDouzP3YUhYZOASrT BGiA2V8vyncqWb2PnJLfRKFs8v6951MhKbNWjW518ZxaiRwJ48TA+thF/b4LFdFT AeSxrgapYaNvdC4aY1Ea8TladcUyEUMUDFc90ZYY2TUEQ8vvcGlIzR/XCORLavHK qCTqcLYYJMysMwcOy+twzdVLCPiAErq6jN8xRTUI1WwSbFR3wsbbhJE1WYj3886x F4UkDoEA3xVJx+XPCEA7CwCunnm0OXGJxkQJTyZi8M72QhFdpX4R4S0GxUj2rXJX KHQRkEZab/2sTtYRzshDj82Uo53V67y0 -----END CERTIFICATE-----Generated at Sat May 17 16:59:47 2025 by rpki-client