$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft File: SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json) Hash identifier: ksGkwL+Qo/1XyBBVnN+v4bMzkE/bmteGavFWA03V/50= Subject key identifier: 61:EB:0C:0C:00:FB:A0:03:0E:43:AA:34:24:9C:CB:8C:01:68:C5:30 Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 Certificate issuer: /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft Manifest number: 02ED Signing time: Thu 15 May 2025 01:19:08 +0000 Manifest this update: Thu 15 May 2025 01:19:08 +0000 Manifest next update: Thu 22 May 2025 01:19:08 +0000 Files and hashes: 1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: bQ9D9LMNwYmOctT7wi/MKITrZwgARdfagX5zvXXcygc=) 2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: IM38OEcY+pvCX+wnXvhRbSuzND147HKpkLnhoMrBbCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Validity Not Before: May 15 01:19:08 2025 GMT Not After : May 22 01:19:08 2025 GMT Subject: CN=6825410c-8eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fe:ca:97:df:d1:9c:e2:3b:c3:2a:e8:1e:a9: 54:61:21:96:a0:5a:f4:1c:0d:d1:5e:aa:b7:05:e2: 61:db:2e:c5:b7:9d:eb:b3:24:d3:94:ae:f7:71:7d: d6:0b:82:46:ed:70:94:d5:e0:3c:7b:fc:d9:f9:08: 99:b6:c2:81:1d:3b:fd:01:e8:26:59:14:0d:89:70: 2c:71:1a:da:a4:1b:2f:3c:84:89:c7:61:89:23:61: 8e:69:76:2e:80:15:34:3e:e0:d3:45:f3:46:9a:8b: e0:0f:51:43:25:98:49:04:25:11:f2:d2:28:a6:a5: 8c:87:3a:6c:64:7d:82:5c:99:bf:7d:e7:fc:3b:39: 9a:b9:94:53:e5:18:48:31:a4:3d:18:0d:c9:ca:f3: bc:ed:f2:df:c7:7d:8c:ee:62:8f:cf:3b:16:9c:0e: 65:e7:98:18:8e:ec:54:49:a6:d2:8b:29:16:7c:5c: a6:3c:1a:62:4a:6f:c9:30:5c:18:34:8c:3b:55:94: d9:89:cc:4a:bb:78:8b:b5:55:a2:f0:3c:93:c4:06: 30:e3:3c:45:f7:e3:43:69:1d:7d:0a:1f:94:c2:fb: d9:c9:70:ba:11:c4:7e:6c:f3:54:e1:05:c7:bd:59: 58:c7:92:48:1b:65:a0:fb:e5:2d:ee:18:8a:81:85: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EB:0C:0C:00:FB:A0:03:0E:43:AA:34:24:9C:CB:8C:01:68:C5:30 X509v3 Authority Key Identifier: keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:f6:d4:47:89:e6:07:f4:b4:44:a3:52:63:0d:51:61:56:a8: db:0f:1a:28:c1:5e:7f:c1:ae:f8:89:df:e8:34:14:e6:9a:0e: dc:54:08:65:60:69:83:6f:9a:7e:37:9a:75:41:71:11:bf:11: a2:ed:5d:c4:70:08:3c:9f:7a:fe:73:98:bf:4a:77:25:0a:a4: b1:75:ed:5e:62:78:19:7e:02:7c:76:92:05:98:b4:8d:dc:0d: af:c3:81:d8:4b:fb:fe:b8:29:2c:11:d8:60:e1:9d:13:4a:6e: 1e:62:82:2d:a0:fd:83:c8:53:28:b5:b8:cd:18:cc:ef:e6:4d: 47:3c:3c:0c:b6:5f:19:3f:24:26:d3:83:89:43:12:f6:21:a6: f2:84:6a:2d:c4:43:b2:f0:e0:99:18:cf:15:ac:b8:50:64:ed: ba:5d:e7:5a:e2:03:0d:42:6a:90:30:c5:3d:62:1a:16:df:33: bb:d2:1e:8e:32:05:e4:0d:09:4e:79:9f:29:db:d3:84:b3:71: 8f:40:a8:10:90:04:bc:d9:87:da:06:02:34:7d:f4:72:06:33: a7:0b:28:86:fd:f7:2f:57:9f:c6:20:89:48:01:f2:5b:98:6e: e1:a2:fb:68:9b:fc:96:07:3a:ee:9a:57:7f:99:a3:e6:e2:16: b2:12:d2:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwRDAxMTAvBgNVBAUTKDRCM0M2OTU2QjA0NDkwMDEwMDg1OEMwREU1MEVCOUE0 NjJCMDhDQzcwHhcNMjUwNTE1MDExOTA4WhcNMjUwNTIyMDExOTA4WjAYMRYwFAYD VQQDEw02ODI1NDEwYy04ZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/7Kl9/RnOI7wyroHqlUYSGWoFr0HA3RXqq3BeJh2y7Ft53rsyTTlK73cX3W C4JG7XCU1eA8e/zZ+QiZtsKBHTv9AegmWRQNiXAscRrapBsvPISJx2GJI2GOaXYu gBU0PuDTRfNGmovgD1FDJZhJBCUR8tIopqWMhzpsZH2CXJm/fef8OzmauZRT5RhI MaQ9GA3JyvO87fLfx32M7mKPzzsWnA5l55gYjuxUSabSiykWfFymPBpiSm/JMFwY NIw7VZTZicxKu3iLtVWi8DyTxAYw4zxF9+NDaR19Ch+UwvvZyXC6EcR+bPNU4QXH vVlYx5JIG2Wg++Ut7hiKgYVfnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHrDAwA +6ADDkOqNCScy4wBaMUwMB8GA1UdIwQYMBaAFEs8aVawRJABAIWMDeUOuaRisIzH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjBEMC85M0ZCN0Y0RURC RjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtBRUFoWXdONVE2NXBHS3dq TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6eHBWckJFa0FFQWhZd041UTY1cEdLd2pNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjBEMC85M0ZCN0Y0RURCRjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtB RUFoWXdONVE2NXBHS3dqTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY9tRHieYH9LREo1JjDVFhVqjbDxoowV5/wa74id/oNBTmmg7cVAhl YGmDb5p+N5p1QXERvxGi7V3EcAg8n3r+c5i/SnclCqSxde1eYngZfgJ8dpIFmLSN 3A2vw4HYS/v+uCksEdhg4Z0TSm4eYoItoP2DyFMotbjNGMzv5k1HPDwMtl8ZPyQm 04OJQxL2IabyhGotxEOy8OCZGM8VrLhQZO26Xeda4gMNQmqQMMU9YhoW3zO70h6O MgXkDQlOeZ8p29OEs3GPQKgQkAS82YfaBgI0ffRyBjOnCyiG/fcvV5/GIIlIAfJb mG7hovtom/yWBzrumld/maPm4hayEtJz -----END CERTIFICATE-----Generated at Thu May 15 12:20:25 2025 by rpki-client