$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft File: snrsU_-6svW1vAy0fAhwbVBTMhA.mft (raw, json) Hash identifier: QN+vNjfmsjBK5bq8QDUah8pYbMqfebfqhg2iMtWPX1E= Subject key identifier: 6D:1D:7D:69:73:B6:D9:4A:05:76:C5:0F:7C:81:C9:B9:FE:5A:A8:BE Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10 Certificate issuer: /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210 Certificate serial: 04F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft Manifest number: 04EE Signing time: Tue 01 Jul 2025 00:13:40 +0000 Manifest this update: Tue 01 Jul 2025 00:13:40 +0000 Manifest next update: Tue 08 Jul 2025 00:13:40 +0000 Files and hashes: 1: snrsU_-6svW1vAy0fAhwbVBTMhA.crl (hash: ZIwaD5gPeBIkKAkj5k4kQPgI9+S+qTk4N1KD62QVxjk=) 2: 793A891A1EA111ECA967444FC4F9AE02.roa (hash: TuwY0bH/I8eBppDazNaeZzaGUKdY+8ax5yn8wmQ1iv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1269 (0x4f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210 Validity Not Before: Jul 1 00:13:40 2025 GMT Not After : Jul 8 00:13:40 2025 GMT Subject: CN=68632834-0041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:12:86:da:0a:7c:7d:5e:a7:af:9a:e5:d5:5e: 50:e5:e7:df:7c:38:02:ba:ce:aa:89:07:98:d8:82: 20:9f:49:c6:de:e3:ee:5e:ab:fc:d6:36:f3:34:1c: 72:39:60:0d:33:d9:bc:8a:05:34:3d:4f:56:ef:fd: 3f:65:9c:5d:3c:5b:22:86:54:ff:82:cc:ba:b3:d8: 29:23:ca:df:99:37:bb:a1:25:43:7e:42:ee:f9:c2: 9e:86:9d:02:02:ed:10:29:b3:9c:02:b2:57:8e:dd: 96:31:28:d8:b2:fa:58:e6:e2:a9:38:ff:0b:c4:01: db:2e:20:f2:43:cf:19:ef:09:a9:d6:da:3f:bf:cd: ee:bd:6f:28:dd:2c:3d:c9:34:fd:29:65:46:2b:c3: 26:0f:8e:a8:9a:c7:b8:b4:7d:c0:81:24:02:ff:f6: 96:2f:ef:ce:b8:28:b9:0f:2c:a9:81:78:38:93:2a: 93:b8:74:71:d6:fd:44:60:4a:5c:20:58:06:f1:e7: b3:0b:c6:9e:ab:3e:69:43:53:35:57:ad:11:98:f2: f9:aa:fa:36:fa:33:38:a3:96:43:b2:6a:59:37:35: b2:8e:e5:ba:42:c7:97:04:57:a1:c9:7f:d1:9f:6a: 8d:4d:64:18:0d:d7:33:ff:20:86:04:61:20:26:39: 79:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1D:7D:69:73:B6:D9:4A:05:76:C5:0F:7C:81:C9:B9:FE:5A:A8:BE X509v3 Authority Key Identifier: keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:2b:69:34:78:e4:50:34:11:eb:9b:96:3e:bf:c8:6d:14:f7: ab:bb:f4:2a:73:34:78:c7:28:70:40:0d:22:38:86:13:46:4e: f3:92:eb:78:16:a0:34:50:ad:8c:bd:d5:f8:7e:ca:09:ab:e9: 95:10:ef:9d:ea:c8:5a:82:1c:fd:08:08:81:46:fb:39:52:27: 3d:d1:3f:71:8f:d2:b6:6c:fe:35:81:68:d3:84:34:56:57:c9: ed:e0:c5:60:51:a5:fe:10:5a:49:b4:8b:97:45:d8:d1:e3:d5: 6b:c1:df:a5:b6:c4:6e:3a:e1:56:49:92:93:8a:fe:7a:d2:0d: 85:58:b2:08:b5:5c:c2:7d:c4:bb:1e:fd:b4:19:a4:83:ea:5b: 40:55:04:23:12:e4:75:13:59:41:2c:b6:d0:42:d4:b7:a2:c2: 39:1b:1f:ac:02:0e:65:39:64:92:51:6e:28:49:59:a8:dc:c6: 7d:72:7a:9c:69:a2:aa:0a:28:f3:c4:52:70:2c:b2:41:2b:ed: 16:d7:20:b2:5e:46:85:ca:ac:ba:69:ba:33:e1:9e:ff:50:f0: 91:2e:b0:da:a1:d7:bb:d6:35:96:5f:81:bb:5a:9f:c3:6c:a3: 6e:8b:49:7a:c4:60:25:91:a0:36:47:bf:3d:12:6f:9e:8a:54: 11:74:c7:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE3RDYxMTAvBgNVBAUTKEIyN0FFQzUzRkZCQUIyRjVCNUJDMENCNDdDMDg3MDZE NTA1MzMyMTAwHhcNMjUwNzAxMDAxMzQwWhcNMjUwNzA4MDAxMzQwWjAYMRYwFAYD VQQDEw02ODYzMjgzNC0wMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRKG2gp8fV6nr5rl1V5Q5efffDgCus6qiQeY2IIgn0nG3uPuXqv81jbzNBxy OWANM9m8igU0PU9W7/0/ZZxdPFsihlT/gsy6s9gpI8rfmTe7oSVDfkLu+cKehp0C Au0QKbOcArJXjt2WMSjYsvpY5uKpOP8LxAHbLiDyQ88Z7wmp1to/v83uvW8o3Sw9 yTT9KWVGK8MmD46omse4tH3AgSQC//aWL+/OuCi5DyypgXg4kyqTuHRx1v1EYEpc IFgG8eezC8aeqz5pQ1M1V60RmPL5qvo2+jM4o5ZDsmpZNzWyjuW6QseXBFehyX/R n2qNTWQYDdcz/yCGBGEgJjl5HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0dfWlz ttlKBXbFD3yBybn+Wqi+MB8GA1UdIwQYMBaAFLJ67FP/urL1tbwMtHwIcG1QUzIQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTdENi9ERDhFNTcyNDFF OUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2VzF2QXkwZkFod2JWQlRN aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NucnNVXy02c3ZXMXZBeTBmQWh3YlZCVE1oQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTdENi9ERDhFNTcyNDFFOUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2 VzF2QXkwZkFod2JWQlRNaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHK2k0eORQNBHrm5Y+v8htFPeru/QqczR4xyhwQA0iOIYTRk7zkut4 FqA0UK2MvdX4fsoJq+mVEO+d6shaghz9CAiBRvs5Uic90T9xj9K2bP41gWjThDRW V8nt4MVgUaX+EFpJtIuXRdjR49Vrwd+ltsRuOuFWSZKTiv560g2FWLIItVzCfcS7 Hv20GaSD6ltAVQQjEuR1E1lBLLbQQtS3osI5Gx+sAg5lOWSSUW4oSVmo3MZ9cnqc aaKqCijzxFJwLLJBK+0W1yCyXkaFyqy6aboz4Z7/UPCRLrDaode71jWWX4G7Wp/D bKNui0l6xGAlkaA2R789Em+eilQRdMem -----END CERTIFICATE-----Generated at Tue Jul 1 16:55:53 2025 by rpki-client