$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json) Hash identifier: 7IEF/bKer3ufTlzWCQKZdXnkY+0iXPUoyRN6WTFnNT8= Subject key identifier: 1D:2D:58:8D:0D:9A:11:A0:82:D1:5D:5B:57:FE:63:E8:FC:30:6D:35 Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft Manifest number: 04AB Signing time: Sat 10 May 2025 23:33:34 +0000 Manifest this update: Sat 10 May 2025 23:33:34 +0000 Manifest next update: Sat 17 May 2025 23:33:34 +0000 Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: 9SdZeFdOztwbG7/i1ZcF6CNGoOQf8xwrfTy6DEqltTI=) 2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: OEZzXzknZfZ5+s266LCfZPiCa3g7F7GJ2hmeU6hbgO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Validity Not Before: May 10 23:33:34 2025 GMT Not After : May 17 23:33:34 2025 GMT Subject: CN=681fe24e-7458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:f5:59:a2:ec:00:6a:da:89:9e:36:89:f6: 3f:b8:c1:31:10:a1:36:55:e0:37:10:a0:e2:5f:dd: b9:50:76:a9:0d:61:62:4a:29:9b:57:3e:8f:6a:bc: c6:ef:b3:dc:34:38:4a:fe:48:5b:82:6e:56:b9:fc: f6:5c:9a:31:b0:d7:54:a5:2d:1d:51:1f:85:77:8e: 26:7a:6f:43:3e:95:62:b2:4a:ba:fa:f3:b8:f1:e2: 32:81:7b:4a:b3:df:fe:21:43:71:a8:b4:a7:c7:be: ce:46:45:de:99:b2:7a:73:70:f6:1b:fc:bb:94:ce: e5:6e:5a:b2:b0:cd:19:58:57:30:1a:56:74:06:19: 3b:0b:4a:02:c0:13:db:2c:cd:89:65:0c:41:9e:47: 90:91:eb:1f:38:be:69:8a:a1:b4:d0:17:e6:72:bb: 54:1d:fa:f3:b3:db:a4:62:1d:04:d6:46:1b:ba:0d: 48:c9:cf:37:3b:80:d9:fe:d0:f9:25:4c:11:d4:aa: 85:c5:d0:39:71:f5:f4:56:2e:3b:a6:c6:db:2b:9a: a2:61:4f:39:38:41:fb:85:96:f4:67:ed:10:0f:7a: c3:ad:5c:03:2c:ca:07:dd:ca:28:cc:f0:14:d2:8a: 93:aa:12:54:a3:8a:c5:9a:bb:ba:d8:0b:19:b9:60: a5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2D:58:8D:0D:9A:11:A0:82:D1:5D:5B:57:FE:63:E8:FC:30:6D:35 X509v3 Authority Key Identifier: keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a6:6b:e9:61:8c:3e:26:aa:00:88:fe:25:bb:94:e8:2e:9d: 97:84:d3:8f:10:af:bb:1b:cc:5e:ce:08:aa:c6:66:75:71:32: d2:7b:65:c4:28:cd:f3:65:31:7a:a2:e4:22:fc:b0:ba:40:42: 45:b3:c2:b8:a5:8a:99:3a:b1:10:a3:7a:49:6c:ae:7e:54:c2: f1:db:69:ff:3e:e4:52:65:0f:c5:72:f8:cd:4a:71:b2:d7:62: 56:1b:70:cd:1c:eb:82:60:37:92:ae:5b:6a:d3:d5:11:9f:6e: 88:98:5c:b6:b1:d9:37:ce:18:7d:ae:aa:04:0f:c2:c1:be:07: 7f:19:aa:ed:26:66:75:aa:70:af:79:b0:f2:d7:a6:f0:a3:fe: ea:67:41:c8:bf:c1:39:de:2a:9d:93:9c:9e:c6:99:75:01:3f: 7a:e3:52:7c:3f:0e:a0:a6:3f:33:dd:6e:17:78:2d:6b:d4:b0: e8:e6:20:8f:8f:57:b6:ce:74:22:80:1b:c0:9e:d7:b2:e7:6c: 2b:d9:9a:bb:a0:29:19:ca:10:37:a7:f7:88:9f:fe:9d:14:e2: 8a:4a:86:83:5e:c3:10:34:07:df:2f:e6:c9:49:5c:2d:68:39: 7a:61:ef:7d:ee:c2:fe:36:19:21:15:61:a8:f1:ae:d0:d9:7b: b1:05:81:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwOTkxMTAvBgNVBAUTKEIwRjQ3QTY5NkFDRDc3Qzc0QTM0NzNDNENEMTcxREEz NzIxQ0VDRDAwHhcNMjUwNTEwMjMzMzM0WhcNMjUwNTE3MjMzMzM0WjAYMRYwFAYD VQQDEw02ODFmZTI0ZS03NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3H1WaLsAGraiZ42ifY/uMExEKE2VeA3EKDiX925UHapDWFiSimbVz6ParzG 77PcNDhK/khbgm5Wufz2XJoxsNdUpS0dUR+Fd44mem9DPpViskq6+vO48eIygXtK s9/+IUNxqLSnx77ORkXembJ6c3D2G/y7lM7lblqysM0ZWFcwGlZ0Bhk7C0oCwBPb LM2JZQxBnkeQkesfOL5piqG00BfmcrtUHfrzs9ukYh0E1kYbug1Iyc83O4DZ/tD5 JUwR1KqFxdA5cfX0Vi47psbbK5qiYU85OEH7hZb0Z+0QD3rDrVwDLMoH3coozPAU 0oqTqhJUo4rFmru62AsZuWCljwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0tWI0N mhGggtFdW1f+Y+j8MG01MB8GA1UdIwQYMBaAFLD0emlqzXfHSjRzxM0XHaNyHOzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA5OS9FQjRFRkJDNjMx NUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4ZEtOSFBFelJjZG8zSWM3 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NQUjZhV3JOZDhkS05IUEV6UmNkbzNJYzdOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA5OS9FQjRFRkJDNjMxNUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4 ZEtOSFBFelJjZG8zSWM3TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXpmvpYYw+JqoAiP4lu5ToLp2XhNOPEK+7G8xezgiqxmZ1cTLSe2XE KM3zZTF6ouQi/LC6QEJFs8K4pYqZOrEQo3pJbK5+VMLx22n/PuRSZQ/FcvjNSnGy 12JWG3DNHOuCYDeSrltq09URn26ImFy2sdk3zhh9rqoED8LBvgd/GartJmZ1qnCv ebDy16bwo/7qZ0HIv8E53iqdk5yexpl1AT9641J8Pw6gpj8z3W4XeC1r1LDo5iCP j1e2znQigBvAntey52wr2Zq7oCkZyhA3p/eIn/6dFOKKSoaDXsMQNAffL+bJSVwt aDl6Ye997sL+NhkhFWGo8a7Q2XuxBYGS -----END CERTIFICATE-----Generated at Mon May 12 04:31:54 2025 by rpki-client