$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json) Hash identifier: XZBTIbwUYBII6TBlFaq/O7VWzqeMGTyHEvJimT8XGaI= Subject key identifier: 1E:44:C6:E9:06:58:E7:81:1B:C3:35:3F:B6:A7:DF:26:CD:80:E1:A7 Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft Manifest number: 4E Signing time: Thu 15 May 2025 06:36:52 +0000 Manifest this update: Thu 15 May 2025 06:36:51 +0000 Manifest next update: Thu 22 May 2025 06:36:51 +0000 Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: KsTYYgbgOm9NvhBK8tzhnGStJAfEcXGbBugPYeEMVMo=) 2: 4965C7C02E4411F0B187B122C4F9AE02.roa (hash: vT0qzVdoUmxJ/TJ/AidkSPg3ugEyyFgQIDSZRoXd/0g=) 3: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: 8Lz3SihiRlFf9NOxeybLJutdQF61khJ8l8jmKMF421Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Validity Not Before: May 15 06:36:51 2025 GMT Not After : May 22 06:36:51 2025 GMT Subject: CN=68258b83-28d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:8e:f1:c5:2b:3e:37:32:7d:91:01:b7:01: ba:59:42:13:b7:aa:4b:94:02:3a:2a:43:7b:66:6d: c1:1f:3a:ef:b5:59:fa:78:f9:a7:46:ac:9e:37:62: ec:b2:0d:f9:16:a1:93:d7:48:67:65:61:5c:19:5c: f8:30:4e:43:f1:eb:16:f4:8d:dd:b1:2c:a1:4a:2a: a4:f1:fc:70:eb:c8:cb:a2:ca:fc:3d:74:1c:c4:a7: 7d:1c:c0:ea:81:8d:9c:e4:10:3b:f2:2e:bc:ba:b7: b4:29:9c:0d:ca:8f:a9:72:c6:1a:bd:b2:d2:de:88: ac:d0:5d:41:7f:9d:37:8b:6a:08:fa:6e:fe:41:7b: 72:5b:3e:e7:ee:1d:83:ee:6b:bc:da:0c:ca:3c:b7: c0:8b:81:9d:55:9d:53:d0:05:ba:ab:f1:3c:f6:00: d7:2e:13:08:2a:36:48:1a:db:aa:c1:6b:d6:2d:08: 0b:fa:07:87:1d:e6:df:0f:43:ee:31:f5:d7:88:72: a3:30:cd:f2:c7:5b:e6:42:9f:b3:3c:f3:87:2a:e3: d1:fd:8b:4d:1f:32:9f:c9:c0:df:fd:8d:2b:b0:d2: ca:b6:83:be:0b:ea:7b:59:00:56:97:fc:cd:6f:8f: 0b:23:6e:34:fd:6c:a6:c5:95:b4:dd:eb:89:51:29: 47:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:44:C6:E9:06:58:E7:81:1B:C3:35:3F:B6:A7:DF:26:CD:80:E1:A7 X509v3 Authority Key Identifier: keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:bf:76:8b:32:a4:25:aa:a3:74:aa:26:26:e6:aa:50:13:fc: 4e:f0:6a:c1:c9:02:ee:23:2a:9c:7d:e1:3e:e1:62:76:13:86: 81:f9:43:b7:88:cb:06:03:7e:7e:81:1e:39:a6:66:97:4d:3e: 36:86:14:3a:a7:3e:91:30:90:5e:65:f1:51:6c:87:7c:42:23: 07:29:df:d6:fb:e0:df:32:68:07:be:36:cb:20:4c:ab:ae:f1: 32:10:dd:93:03:35:27:82:c2:10:63:25:8e:7b:a4:65:cb:27: d5:74:9c:3c:3f:68:73:c0:13:aa:75:75:e0:33:cc:00:fa:da: 7f:fe:35:91:83:48:6c:a4:ca:cb:30:8d:66:6d:c7:41:24:c9: 25:e8:04:8d:14:58:ae:45:d6:27:31:6e:56:b0:c9:fc:ed:21: f1:0a:dd:06:7d:8b:f8:72:b1:f5:7e:47:23:22:f0:f6:7b:1e: 0f:cc:c5:54:7d:a0:b4:e5:1b:30:e5:f7:0e:18:72:5a:96:f2: ae:bf:0b:d8:18:bb:e7:22:12:92:e1:ac:9f:04:ad:da:3a:1c: d0:ef:1b:7f:84:53:9b:a7:84:67:7b:fd:83:90:8c:8e:17:d1: fc:84:f4:1e:63:4f:27:5d:d1:6a:d1:03:76:33:eb:ed:db:9b: 85:ed:eb:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEYzNDExMC8GA1UEBRMoNEIzMTA4QkM1NzU4ODQzRDYzREZGNkZDNjQwOTdGMkIx NjQ0Q0I4QTAeFw0yNTA1MTUwNjM2NTFaFw0yNTA1MjIwNjM2NTFaMBgxFjAUBgNV BAMTDTY4MjU4YjgzLTI4ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJDo7xxSs+NzJ9kQG3AbpZQhO3qkuUAjoqQ3tmbcEfOu+1Wfp4+adGrJ43Yuyy DfkWoZPXSGdlYVwZXPgwTkPx6xb0jd2xLKFKKqTx/HDryMuiyvw9dBzEp30cwOqB jZzkEDvyLry6t7QpnA3Kj6lyxhq9stLeiKzQXUF/nTeLagj6bv5Be3JbPufuHYPu a7zaDMo8t8CLgZ1VnVPQBbqr8Tz2ANcuEwgqNkga26rBa9YtCAv6B4cd5t8PQ+4x 9deIcqMwzfLHW+ZCn7M884cq49H9i00fMp/JwN/9jSuw0sq2g74L6ntZAFaX/M1v jwsjbjT9bKbFlbTd64lRKUdRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHkTG6QZY 54EbwzU/tqffJs2A4acwHwYDVR0jBBgwFoAUSzEIvFdYhD1j3/b8ZAl/KxZEy4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RjM0LzREMjJFRUUwQkRF OTExRUZCRkQ1Mzg4MkM0RjlBRTAyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3pFSXZGZFloRDFqM19iOFpBbF9LeFpFeTRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RjM0LzREMjJFRUUwQkRFOTExRUZCRkQ1Mzg4MkM0RjlBRTAyL1N6RUl2RmRZaEQx ajNfYjhaQWxfS3haRXk0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEe/dosypCWqo3SqJibmqlAT/E7wasHJAu4jKpx94T7hYnYThoH5Q7eI ywYDfn6BHjmmZpdNPjaGFDqnPpEwkF5l8VFsh3xCIwcp39b74N8yaAe+NssgTKuu 8TIQ3ZMDNSeCwhBjJY57pGXLJ9V0nDw/aHPAE6p1deAzzAD62n/+NZGDSGykyssw jWZtx0EkySXoBI0UWK5F1icxblawyfztIfEK3QZ9i/hysfV+RyMi8PZ7Hg/MxVR9 oLTlGzDl9w4YclqW8q6/C9gYu+ciEpLhrJ8Erdo6HNDvG3+EU5unhGd7/YOQjI4X 0fyE9B5jTydd0WrRA3Yz6+3bm4Xt6yM= -----END CERTIFICATE-----Generated at Fri May 16 09:36:47 2025 by rpki-client