$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft File: SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json) Hash identifier: gYHP2QQxTbmg4hP9BVyq/8sw6jxxNV2wt7qBLNnsKGo= Subject key identifier: EF:BF:13:7A:8F:36:77:9B:AE:2D:05:C4:77:70:D2:98:8A:5E:5A:E8 Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A Certificate issuer: /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft Manifest number: 0153 Signing time: Thu 15 May 2025 03:29:57 +0000 Manifest this update: Thu 15 May 2025 03:29:56 +0000 Manifest next update: Thu 22 May 2025 03:29:56 +0000 Files and hashes: 1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: tD6XU2wHCAQb+PgWYLCx+morEvTQ3s52JQpCQjVINhk=) 2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: u5XCjKJ3dW4XeKjruW6bKKkvEYHMaTHcPhAzry86YE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Validity Not Before: May 15 03:29:56 2025 GMT Not After : May 22 03:29:56 2025 GMT Subject: CN=68255fb4-278f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:31:69:7a:64:ca:43:19:63:9a:1f:9d:83: ba:d0:cb:05:39:ee:24:36:5f:ac:6c:40:65:25:7b: f0:c8:eb:da:cf:72:a7:26:cc:f1:b6:6d:58:bd:8a: ca:97:79:0c:a5:91:12:28:36:0e:f7:1a:51:98:c5: 69:29:9b:ea:53:a1:d7:7c:a3:b3:f8:b7:86:f8:2a: 59:b4:7d:69:37:4c:40:36:69:1e:d7:04:ae:4d:65: 16:43:9b:9e:12:a6:ce:4b:69:44:da:62:0a:54:c2: d1:ff:76:95:5c:5d:95:0c:d6:93:c3:ca:9f:c4:36: b1:f9:d7:23:c3:16:61:e8:49:a6:41:ca:2d:b3:66: 8e:f7:a8:c6:5e:cd:81:0e:57:be:55:4c:93:28:a0: 3e:43:0e:17:dc:75:59:8d:b2:3e:00:ad:e4:13:dd: ab:de:c9:d1:3a:b7:e7:52:88:7a:8a:9d:ca:01:c4: 81:68:bc:53:41:c9:79:f3:73:ca:e0:6a:34:31:4d: a1:4c:dc:de:b0:3b:ba:1f:87:78:cc:64:5c:7d:60: 67:ab:b7:b5:ab:b2:b5:e9:2e:49:1b:08:c9:92:2a: 3a:4d:33:00:53:be:79:e2:fe:25:90:3e:ee:04:e3: 12:ec:80:c1:bd:0e:cd:ca:a4:ff:e0:3b:df:46:be: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BF:13:7A:8F:36:77:9B:AE:2D:05:C4:77:70:D2:98:8A:5E:5A:E8 X509v3 Authority Key Identifier: keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ba:df:53:30:00:11:ad:6d:1b:a7:48:25:eb:aa:d6:a6:49: 7f:77:15:f3:95:65:48:ee:74:56:7f:c5:7d:22:ae:06:c1:98: be:48:7e:58:ff:e6:a8:1b:fd:98:98:08:b4:75:73:33:11:61: 23:76:46:50:d2:4c:77:0a:73:ea:21:52:19:5b:19:25:c9:f2: 5f:b7:8f:74:0a:b8:9e:c0:83:85:09:54:dc:27:7d:6e:21:a9: 98:66:27:fe:a0:45:e5:ca:e7:4c:ee:44:61:a8:6b:d7:ec:d3: 20:3a:cf:20:5c:40:8e:8f:d6:e4:a5:d8:07:4e:07:f5:2c:cd: 44:b7:7b:61:9a:a5:06:47:68:48:9a:b8:6f:d5:af:0d:8a:bb: 62:38:83:64:cb:21:bb:89:ab:1e:58:10:7e:7f:08:02:5b:96: 90:7a:79:fb:9d:16:be:fb:32:3b:2d:ed:b7:07:72:73:c3:03: f7:e0:f4:40:e6:95:6f:08:4d:e7:c0:98:e4:73:f4:53:fc:fc: 21:de:9a:01:4a:15:12:69:91:de:b7:4c:0f:8a:5d:22:c5:ea: e7:83:17:5c:e7:47:c8:3e:f0:c7:90:c2:12:8f:14:92:3e:6a: 7c:17:50:20:f4:1b:e4:5a:ce:c7:f5:2d:80:0d:d4:97:46:a1: 33:15:73:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I2NzUxMTAvBgNVBAUTKDRBQjVDQTEwQzJBQzIyMjgyQTk5QUU2QkY2MjRGOTM3 NTY4NDNGOEEwHhcNMjUwNTE1MDMyOTU2WhcNMjUwNTIyMDMyOTU2WjAYMRYwFAYD VQQDEw02ODI1NWZiNC0yNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3oxaXpkykMZY5ofnYO60MsFOe4kNl+sbEBlJXvwyOvaz3KnJszxtm1YvYrK l3kMpZESKDYO9xpRmMVpKZvqU6HXfKOz+LeG+CpZtH1pN0xANmke1wSuTWUWQ5ue EqbOS2lE2mIKVMLR/3aVXF2VDNaTw8qfxDax+dcjwxZh6EmmQcots2aO96jGXs2B Dle+VUyTKKA+Qw4X3HVZjbI+AK3kE92r3snROrfnUoh6ip3KAcSBaLxTQcl583PK 4Go0MU2hTNzesDu6H4d4zGRcfWBnq7e1q7K16S5JGwjJkio6TTMAU7554v4lkD7u BOMS7IDBvQ7NyqT/4DvfRr7OAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+/E3qP Nnebri0FxHdw0piKXlroMB8GA1UdIwQYMBaAFEq1yhDCrCIoKpmua/Yk+TdWhD+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjY3NS9EQ0FEMjdGQzJB MDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lpZ3FtYTVyOWlUNU4xYUVQ NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyWEtFTUtzSWlncW1hNXI5aVQ1TjFhRVA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjY3NS9EQ0FEMjdGQzJBMDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lp Z3FtYTVyOWlUNU4xYUVQNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbut9TMAARrW0bp0gl66rWpkl/dxXzlWVI7nRWf8V9Iq4GwZi+SH5Y /+aoG/2YmAi0dXMzEWEjdkZQ0kx3CnPqIVIZWxklyfJft490CriewIOFCVTcJ31u IamYZif+oEXlyudM7kRhqGvX7NMgOs8gXECOj9bkpdgHTgf1LM1Et3thmqUGR2hI mrhv1a8NirtiOINkyyG7iaseWBB+fwgCW5aQenn7nRa++zI7Le23B3JzwwP34PRA 5pVvCE3nwJjkc/RT/Pwh3poBShUSaZHet0wPil0ixerngxdc50fIPvDHkMISjxSS Pmp8F1Ag9BvkWs7H9S2ADdSXRqEzFXPp -----END CERTIFICATE-----Generated at Sat May 17 02:32:26 2025 by rpki-client