$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json) Hash identifier: nO6qL4bsZKN6EGr8z82Ncu0a9oRHR+ZfNvkl+JBpGuQ= Subject key identifier: 15:90:D7:0E:BB:76:47:FB:C9:A9:66:B8:7C:66:0C:8A:78:FF:29:7A Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft Manifest number: 1B Signing time: Thu 15 May 2025 07:17:26 +0000 Manifest this update: Thu 15 May 2025 07:17:25 +0000 Manifest next update: Thu 22 May 2025 07:17:25 +0000 Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: Nbuhkof8gnuv9is8zWGworHN07kshm2nOZekRvHrB68=) 2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Validity Not Before: May 15 07:17:25 2025 GMT Not After : May 22 07:17:25 2025 GMT Subject: CN=68259506-7711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:39:34:e1:30:16:f5:5c:c4:a9:12:97:89:55: eb:7b:71:17:0c:d6:aa:de:46:3c:7f:4a:d8:6e:ef: b9:5b:1e:ef:cc:31:3e:c0:86:f1:9d:80:6e:4c:2f: 8f:9e:56:49:84:e0:3a:64:2b:80:f7:cb:6e:f2:2b: 7e:f8:d6:ae:6e:0a:f3:f0:70:3d:b0:1d:36:84:f1: 25:fb:be:bb:c4:20:1a:0b:ac:5b:ef:01:a1:42:45: fd:d4:29:4b:9b:e9:f0:cf:fb:38:c2:8b:0b:9f:1a: d0:d6:d5:85:65:2e:57:38:a4:96:e3:b9:b6:8a:dd: 7c:3e:eb:e2:11:87:0e:1f:69:2d:6d:0c:fb:44:3f: 4d:99:98:ff:d5:e8:9f:46:78:67:31:e5:dc:9f:c1: 1f:bb:27:b2:1e:79:1b:2d:01:5e:f1:de:67:16:bb: 6b:bf:07:15:f4:c6:6d:3a:6e:6a:c2:98:8a:e7:5b: 1b:d2:2b:e1:ca:28:39:7f:ee:a9:31:a2:a1:e8:20: c4:da:85:9c:d6:b7:42:75:81:b0:44:ba:0b:4e:f9: e6:02:f3:f6:35:1b:45:d0:6c:c9:0d:3a:d5:3e:a0: ce:34:a9:2c:87:08:91:75:66:6a:b7:74:6b:8b:ff: 94:03:49:26:6d:5a:d7:92:6c:e6:51:14:73:e6:98: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:90:D7:0E:BB:76:47:FB:C9:A9:66:B8:7C:66:0C:8A:78:FF:29:7A X509v3 Authority Key Identifier: keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:58:ec:20:dc:06:9b:21:30:b6:b6:e9:66:47:fd:eb:7d:19: c9:cb:5d:2d:96:c9:a4:8e:54:b5:40:bf:c1:82:2a:98:10:db: d5:e0:74:8b:6d:23:5a:15:01:a0:32:cd:f1:81:d2:fa:73:7d: 85:2c:25:e1:a4:5d:0f:a1:74:6c:09:25:20:7d:95:e8:6f:fd: 11:38:cc:7c:af:35:f2:b4:34:f8:61:93:21:0a:30:16:c8:85: 26:ac:68:19:6e:c3:ce:ed:ac:53:14:1c:f9:5b:52:b6:22:f5: c7:30:43:3e:f1:73:c9:b1:6f:92:b6:43:3c:5e:99:13:7f:94: 07:8d:7a:69:aa:bd:3b:93:55:19:a8:48:98:fc:e8:07:0d:a9: b0:dd:7d:dc:09:07:80:bf:be:01:c5:e6:fd:88:f7:2f:9e:56: 5f:fa:da:f1:0f:c5:e1:7a:f9:5f:70:8a:84:2d:9a:5d:3a:76: e7:54:a1:ec:56:7b:31:6c:90:8b:15:d6:2b:fe:fe:b8:a3:b9: de:f0:fb:9d:81:4f:db:50:bc:44:d1:91:af:ee:79:23:75:90: 10:38:2b:42:28:fc:3e:be:29:77:bf:a7:85:50:28:48:98:00: af:62:4a:62:39:45:75:ec:10:e0:18:71:ce:6c:b3:ec:fb:46: 30:77:32:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDEwRTExMC8GA1UEBRMoNDg5QTZGQ0VEN0RDNjNCN0FCMzY2NkUzNUJENTA5RDlF QTE1NzVFMDAeFw0yNTA1MTUwNzE3MjVaFw0yNTA1MjIwNzE3MjVaMBgxFjAUBgNV BAMTDTY4MjU5NTA2LTc3MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0OTThMBb1XMSpEpeJVet7cRcM1qreRjx/Sthu77lbHu/MMT7AhvGdgG5ML4+e VkmE4DpkK4D3y27yK3741q5uCvPwcD2wHTaE8SX7vrvEIBoLrFvvAaFCRf3UKUub 6fDP+zjCiwufGtDW1YVlLlc4pJbjubaK3Xw+6+IRhw4faS1tDPtEP02ZmP/V6J9G eGcx5dyfwR+7J7IeeRstAV7x3mcWu2u/BxX0xm06bmrCmIrnWxvSK+HKKDl/7qkx oqHoIMTahZzWt0J1gbBEugtO+eYC8/Y1G0XQbMkNOtU+oM40qSyHCJF1Zmq3dGuL /5QDSSZtWteSbOZRFHPmmP4tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFZDXDrt2 R/vJqWa4fGYMinj/KXowHwYDVR0jBBgwFoAUSJpvztfcY7erNmbjW9UJ2eoVdeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MTBFLzJGMDMyOThBMTA4 NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdlck5tYmpXOVVKMmVvVmRl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0pwdnp0ZmNZN2VyTm1ialc5VUoyZW9WZGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MTBFLzJGMDMyOThBMTA4NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdl ck5tYmpXOVVKMmVvVmRlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGFY7CDcBpshMLa26WZH/et9GcnLXS2WyaSOVLVAv8GCKpgQ29XgdItt I1oVAaAyzfGB0vpzfYUsJeGkXQ+hdGwJJSB9lehv/RE4zHyvNfK0NPhhkyEKMBbI hSasaBluw87trFMUHPlbUrYi9ccwQz7xc8mxb5K2QzxemRN/lAeNemmqvTuTVRmo SJj86AcNqbDdfdwJB4C/vgHF5v2I9y+eVl/62vEPxeF6+V9wioQtml06dudUoexW ezFskIsV1iv+/rijud7w+52BT9tQvETRka/ueSN1kBA4K0Io/D6+KXe/p4VQKEiY AK9iSmI5RXXsEOAYcc5ss+z7RjB3MtI= -----END CERTIFICATE-----Generated at Fri May 16 11:52:39 2025 by rpki-client