$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json) Hash identifier: gyDHvGlSd3ixePwKU+ob/WvlDy7C97fMam/OxrJ/LlM= Subject key identifier: 8A:E6:6E:03:E2:78:B9:96:11:1F:0A:B3:E3:81:21:35:04:09:E8:D5 Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 0A8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft Manifest number: 0A86 Signing time: Wed 02 Jul 2025 19:48:01 +0000 Manifest this update: Wed 02 Jul 2025 19:48:00 +0000 Manifest next update: Wed 09 Jul 2025 19:48:00 +0000 Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: kiBHPTjtZ5Qz1CZ3MA+1fis+cYxXcGCwaBTGsMkkn+w=) 2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 0MEjUCGRzvjz5epLH1Yc0e31fL5fFdQ31GIxJUqAOEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2700 (0xa8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: Jul 2 19:48:00 2025 GMT Not After : Jul 9 19:48:00 2025 GMT Subject: CN=68658cf1-de2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:29:19:59:d6:53:e7:2b:2c:8b:05:ca:dc: c1:dd:36:12:57:33:f4:57:72:16:af:62:8f:1b:98: cb:22:e4:c2:b8:3b:01:23:d9:f1:9b:be:bd:9d:e0: 3f:9d:1d:81:e1:b3:6d:35:6d:fa:14:75:29:68:14: 47:8d:0f:6b:b1:72:e3:a4:12:21:84:32:5e:fe:ef: c5:d0:e7:47:33:1a:b7:67:38:cc:70:de:31:c5:e6: d8:89:d1:a7:6a:d1:1b:7a:1b:d5:95:97:cd:a4:2f: 2a:79:d7:38:50:8c:cc:85:6c:b0:bd:6f:d8:d0:6f: 28:57:f4:88:0f:fa:c0:c5:42:36:da:81:0b:fe:d7: e4:b5:ae:53:b5:55:51:31:df:04:81:b9:ae:73:e4: 43:ec:db:7c:94:82:60:e9:96:f5:84:7d:78:2e:1e: 30:ad:ce:eb:62:95:42:f7:84:b5:bc:64:4b:1d:67: 6f:ef:87:78:5f:07:9f:dd:82:27:fc:b3:8d:94:03: d3:03:76:35:39:cc:a6:41:3b:db:21:7a:ad:48:4c: b5:a4:db:14:b1:0c:a7:55:4f:1e:01:57:5e:65:58: 26:52:41:25:aa:d8:99:30:93:d5:37:d9:d0:2a:86: 68:1c:99:33:fe:fb:36:2f:fc:49:15:e1:eb:ef:31: 0a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E6:6E:03:E2:78:B9:96:11:1F:0A:B3:E3:81:21:35:04:09:E8:D5 X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:dc:51:fa:ba:b4:d4:3b:ab:6a:c4:77:26:09:a1:04:10:e5: 2b:31:76:af:5c:45:eb:d0:5d:8c:2e:63:97:1d:da:4b:fb:72: 85:34:c7:fb:87:1e:1f:99:a2:68:69:cb:18:e8:8f:ed:d5:c3: 3e:ba:a2:17:a1:b6:a4:6f:ae:45:cb:04:57:2d:a5:17:db:07: 0e:5a:1e:f1:88:9c:78:55:01:13:3a:0c:f2:7e:f7:de:ee:83: ba:01:27:ff:94:60:99:9b:bc:ef:b1:0d:48:0a:73:8f:a6:e7: eb:7a:57:b7:7f:5c:1f:32:bb:c0:dc:fd:d5:8a:11:f6:76:20: 4d:eb:d5:e4:6d:ee:79:6a:de:17:4e:1b:d4:ec:1b:dd:0c:aa: 0c:d6:e9:55:ce:bb:e3:e7:9c:c7:ef:76:d5:45:4a:9b:0e:4b: 28:a6:9a:45:04:96:55:83:09:90:58:23:d0:c7:07:29:b4:0d: 9e:92:fd:f8:be:f1:46:e2:80:0c:d5:b7:ed:46:7c:f1:22:73: 3a:09:47:ae:80:7d:05:eb:21:33:fa:e6:e9:d3:cb:37:fa:1c: 85:3e:32:cf:ea:04:76:dd:d9:d3:24:10:f3:52:49:22:6b:eb: 42:bb:48:8b:a8:78:22:52:f9:47:27:a0:c5:74:d6:11:6e:3f: 3a:42:55:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjUwNzAyMTk0ODAwWhcNMjUwNzA5MTk0ODAwWjAYMRYwFAYD VQQDEw02ODY1OGNmMS1kZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvMpGVnWU+crLIsFytzB3TYSVzP0V3IWr2KPG5jLIuTCuDsBI9nxm769neA/ nR2B4bNtNW36FHUpaBRHjQ9rsXLjpBIhhDJe/u/F0OdHMxq3ZzjMcN4xxebYidGn atEbehvVlZfNpC8qedc4UIzMhWywvW/Y0G8oV/SID/rAxUI22oEL/tfkta5TtVVR Md8Egbmuc+RD7Nt8lIJg6Zb1hH14Lh4wrc7rYpVC94S1vGRLHWdv74d4Xwef3YIn /LONlAPTA3Y1OcymQTvbIXqtSEy1pNsUsQynVU8eAVdeZVgmUkElqtiZMJPVN9nQ KoZoHJkz/vs2L/xJFeHr7zEKCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrmbgPi eLmWER8Ks+OBITUECejVMB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3 UmtiSHZBYmlZajRXdm5rRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq3FH6urTUO6tqxHcmCaEEEOUrMXavXEXr0F2MLmOXHdpL+3KFNMf7 hx4fmaJoacsY6I/t1cM+uqIXobakb65FywRXLaUX2wcOWh7xiJx4VQETOgzyfvfe 7oO6ASf/lGCZm7zvsQ1ICnOPpufrele3f1wfMrvA3P3VihH2diBN69Xkbe55at4X ThvU7BvdDKoM1ulVzrvj55zH73bVRUqbDksopppFBJZVgwmQWCPQxwcptA2ekv34 vvFG4oAM1bftRnzxInM6CUeugH0F6yEz+ubp08s3+hyFPjLP6gR23dnTJBDzUkki a+tCu0iLqHgiUvlHJ6DFdNYRbj86QlUJ -----END CERTIFICATE-----Generated at Thu Jul 3 12:23:53 2025 by rpki-client