$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json) Hash identifier: 0HxRZzvarV0A4A0hENnRMFFNYVmkAPTIdaPIdWiAKWw= Subject key identifier: 19:9D:2E:E9:6A:2B:63:F5:D0:0F:1E:1C:AD:12:05:FA:CB:50:94:D0 Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft Manifest number: 0AE9 Signing time: Mon 12 May 2025 19:16:44 +0000 Manifest this update: Mon 12 May 2025 19:16:44 +0000 Manifest next update: Mon 19 May 2025 19:16:44 +0000 Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: aUUQzw0HRabEcNihFR01hQsGCy/1TfRdqW8NB2lsC9I=) 2: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: Vs9WbC7+FXTpkpEtrPfe5o3W7t/VcDXrHl+kg25ZJHc=) 3: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: 6/Bcw5YjZPi9shssWW0OtrdPJZKAVnJFq1ohKYFJu8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Validity Not Before: May 12 19:16:44 2025 GMT Not After : May 19 19:16:44 2025 GMT Subject: CN=6822491c-46e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:fc:fb:80:0f:0a:55:dd:71:db:e4:5f:9e: 79:3c:53:18:6f:97:1a:23:4c:4f:7e:5e:4a:5a:5e: 25:87:70:71:ad:77:57:fa:37:b7:2f:cb:e5:f1:25: 4c:a8:4b:a8:93:47:1c:d9:2b:91:53:70:1d:06:4e: ee:04:5e:03:ea:5f:f3:e6:8f:82:42:e8:f5:e1:92: 18:f7:0e:ff:5f:68:50:2f:5e:b6:07:fa:ec:55:40: ce:f4:00:0e:a8:2f:e1:23:92:c8:d3:44:59:85:3d: e5:82:ac:1e:e1:af:8f:87:8a:a8:d9:ff:8d:30:a9: 44:cb:86:03:5a:d1:19:38:bc:03:52:9b:bb:67:8f: e4:16:e8:f5:fb:b8:37:f3:a5:07:31:59:42:5c:03: 52:5b:94:fa:b0:9a:cd:e3:b6:6f:68:c4:f5:15:13: dd:22:d3:bc:c2:48:18:76:ee:ba:dc:85:95:71:39: c4:c2:34:94:68:4a:bb:5c:0d:2a:a6:b6:df:de:76: 38:05:b8:84:b0:e9:e1:0a:ae:f8:08:85:c1:bc:be: 75:74:57:13:b5:c7:ca:41:f3:58:87:86:6d:ec:6f: d5:39:d7:fc:29:9a:9c:1d:29:71:c6:54:d3:76:86: 47:79:23:98:79:96:fd:f8:5d:c8:af:1f:db:d8:ea: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:2E:E9:6A:2B:63:F5:D0:0F:1E:1C:AD:12:05:FA:CB:50:94:D0 X509v3 Authority Key Identifier: keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:94:e2:70:22:15:c5:71:1b:d6:60:c0:2b:53:fe:e3:78:52: 2c:be:16:cc:0f:82:83:e0:ec:10:11:f1:88:2e:ee:51:a1:6e: d5:fa:74:20:72:bd:18:ec:43:a3:df:91:37:d2:b0:a7:f4:cf: 04:0b:86:10:ca:e0:81:44:d1:f3:a6:e2:0f:3b:69:7b:03:46: 62:e5:c0:b0:d0:b2:e2:bf:b9:e1:ad:0d:12:1b:01:59:92:e9: 48:14:af:52:f9:16:cf:27:7e:26:51:7a:8d:c9:d0:48:46:df: e8:f3:1b:ad:56:0e:f8:bb:9f:a4:b8:8f:b4:16:45:25:76:31: f1:43:a4:c9:d5:ed:c1:18:d9:6e:6c:52:cd:ab:b2:65:95:bb: d9:be:0e:b6:7a:67:9c:5f:9d:5c:34:00:d3:c4:3a:11:1f:07: 0a:bb:e7:d4:c5:53:10:c3:c1:da:a7:9e:cb:9b:d1:24:2e:66: e4:fa:b8:dd:7f:cd:97:1c:4b:db:2f:45:2a:7b:20:49:d0:c2: 13:1d:53:33:09:6f:d8:93:d8:2d:8b:b0:6f:18:58:04:32:97: 5b:c8:38:36:59:b6:68:32:09:fa:3b:55:97:3a:1c:c8:2f:4a: f4:28:02:0e:15:6b:d6:93:70:7f:4e:49:cf:63:3c:82:d1:d5: a4:fb:a8:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MjcxMTAvBgNVBAUTKDQ4NEFFOEMwRDE1Nzk5QjVGRjA4MUZFNDBDM0UxRTAw RTRFODk0NzgwHhcNMjUwNTEyMTkxNjQ0WhcNMjUwNTE5MTkxNjQ0WjAYMRYwFAYD VQQDEw02ODIyNDkxYy00NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTL8+4APClXdcdvkX555PFMYb5caI0xPfl5KWl4lh3BxrXdX+je3L8vl8SVM qEuok0cc2SuRU3AdBk7uBF4D6l/z5o+CQuj14ZIY9w7/X2hQL162B/rsVUDO9AAO qC/hI5LI00RZhT3lgqwe4a+Ph4qo2f+NMKlEy4YDWtEZOLwDUpu7Z4/kFuj1+7g3 86UHMVlCXANSW5T6sJrN47ZvaMT1FRPdItO8wkgYdu663IWVcTnEwjSUaEq7XA0q prbf3nY4BbiEsOnhCq74CIXBvL51dFcTtcfKQfNYh4Zt7G/VOdf8KZqcHSlxxlTT doZHeSOYeZb9+F3Irx/b2Op7iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmdLulq K2P10A8eHK0SBfrLUJTQMB8GA1UdIwQYMBaAFEhK6MDRV5m1/wgf5Aw+HgDk6JR4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyNy84ODg3MTkzNjQ5 MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1iWF9DQl9rREQ0ZUFPVG9s SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NFcm93TkZYbWJYX0NCX2tERDRlQU9Ub2xIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyNy84ODg3MTkzNjQ5MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1i WF9DQl9rREQ0ZUFPVG9sSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9lOJwIhXFcRvWYMArU/7jeFIsvhbMD4KD4OwQEfGILu5RoW7V+nQg cr0Y7EOj35E30rCn9M8EC4YQyuCBRNHzpuIPO2l7A0Zi5cCw0LLiv7nhrQ0SGwFZ kulIFK9S+RbPJ34mUXqNydBIRt/o8xutVg74u5+kuI+0FkUldjHxQ6TJ1e3BGNlu bFLNq7JllbvZvg62emecX51cNADTxDoRHwcKu+fUxVMQw8Hap57Lm9EkLmbk+rjd f82XHEvbL0UqeyBJ0MITHVMzCW/Yk9gti7BvGFgEMpdbyDg2WbZoMgn6O1WXOhzI L0r0KAIOFWvWk3B/TknPYzyC0dWk+6jw -----END CERTIFICATE-----Generated at Wed May 14 20:54:11 2025 by rpki-client