$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft File: SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json) Hash identifier: gVuEjHgBfi7ajRzvVGav5ahVYAKGmlPQ82fZdc10lV8= Subject key identifier: 3C:F2:74:2B:15:9F:7E:1A:4E:E3:61:C3:FE:41:5A:7B:A4:57:EE:ED Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft Manifest number: 021D Signing time: Tue 13 May 2025 01:46:08 +0000 Manifest this update: Tue 13 May 2025 01:46:08 +0000 Manifest next update: Tue 20 May 2025 01:46:08 +0000 Files and hashes: 1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: ImhEodv+JJaGbuFdyaxRDF7cDwPP9s0k9SzAq3SIxE4=) 2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: 98vVrHrPunOhqyUNT9wqul+NkLuBnWOfghiKhqlLWSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D167, serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Validity Not Before: May 13 01:46:08 2025 GMT Not After : May 20 01:46:08 2025 GMT Subject: CN=6822a460-2faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:62:b6:dc:c3:39:9b:19:9e:fe:10:81:bd: 92:57:3b:b5:84:80:14:e2:ab:4e:b9:52:a9:26:dd: 44:bc:ec:59:fc:98:58:3d:fa:7f:e2:90:60:2c:f0: 4e:62:99:eb:5d:e2:d9:a5:73:7c:55:ce:c8:a2:5f: ae:fa:cd:b7:cc:c4:7f:b9:98:da:a7:1e:1c:d3:42: 64:ca:0a:c2:94:d5:94:b0:5e:62:39:f1:fa:49:67: 6c:4f:01:a4:db:fa:3f:64:30:11:08:1a:2f:9c:64: ab:9a:8a:b5:f2:c8:a6:53:7c:11:f9:fe:58:c4:7d: b2:ed:4b:5e:c8:74:d2:53:21:98:43:ea:05:4b:f5: ba:3b:ba:b4:b9:e2:f4:72:f9:be:e4:15:55:93:b1: 0a:f8:b6:96:7f:3e:72:cb:69:cc:4d:0e:e0:77:12: 73:d0:6b:a7:89:9c:17:22:b9:7e:cb:c3:04:0d:eb: 91:bb:16:7e:24:d2:16:66:fb:33:89:1d:50:2f:c0: 65:5d:2c:e1:3d:dd:9f:68:6e:d0:5b:1b:c9:36:bd: 96:19:ca:22:ec:a2:65:9a:6f:7c:68:83:4e:50:c4: 1d:3a:f9:73:3f:bd:fc:4a:8a:d1:d5:3d:95:58:73: 68:ee:54:40:14:72:e2:a8:2d:9b:9f:15:e7:aa:a8: 87:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F2:74:2B:15:9F:7E:1A:4E:E3:61:C3:FE:41:5A:7B:A4:57:EE:ED X509v3 Authority Key Identifier: keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:68:12:fa:23:02:e2:a6:df:69:f3:ac:f3:d1:d1:83:96:c9: e4:ac:0c:98:e0:b3:52:d9:87:2e:43:30:ce:b8:42:82:e7:4a: 3c:ab:48:b7:14:49:71:9d:33:f9:dc:41:c3:34:d6:6f:20:24: f4:e0:99:12:7b:11:38:69:94:2b:f9:23:e2:bc:6e:9c:99:e4: 87:53:8e:b1:dd:2d:89:82:86:1d:24:88:97:f7:ab:4f:d8:1d: 35:c7:52:02:c9:f1:2c:93:28:9b:11:e8:67:47:27:2b:e4:15: 5b:ee:4f:e7:c8:51:43:15:83:a0:2e:fa:78:13:a5:ee:56:95: 32:5f:8c:dd:c9:f6:83:97:b8:75:19:d0:e2:04:12:c2:aa:15: 27:86:c7:26:98:fa:fb:4a:ee:39:7d:0d:95:e6:c6:5a:d6:08: 84:85:95:a6:71:76:51:74:27:61:ff:33:cb:9a:ca:49:5a:63: 6d:3c:29:90:d8:1a:1c:7a:6b:c5:bb:87:60:8f:cc:7b:32:c7: 00:e5:3d:e1:5f:cd:3b:0d:21:34:38:1a:bd:52:0b:f4:ad:0b: 56:d8:37:75:2f:03:c2:44:9f:13:f7:c2:92:1e:54:c3:9b:b8: 1b:d0:30:89:20:3d:7b:34:94:93:de:e7:3c:52:23:0c:9d:54: ba:f8:f8:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3 RDY5OTMyNDgwHhcNMjUwNTEzMDE0NjA4WhcNMjUwNTIwMDE0NjA4WjAYMRYwFAYD VQQDEw02ODIyYTQ2MC0yZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscxittzDOZsZnv4Qgb2SVzu1hIAU4qtOuVKpJt1EvOxZ/JhYPfp/4pBgLPBO YpnrXeLZpXN8Vc7Iol+u+s23zMR/uZjapx4c00JkygrClNWUsF5iOfH6SWdsTwGk 2/o/ZDARCBovnGSrmoq18simU3wR+f5YxH2y7UteyHTSUyGYQ+oFS/W6O7q0ueL0 cvm+5BVVk7EK+LaWfz5yy2nMTQ7gdxJz0GuniZwXIrl+y8MEDeuRuxZ+JNIWZvsz iR1QL8BlXSzhPd2faG7QWxvJNr2WGcoi7KJlmm98aINOUMQdOvlzP738SorR1T2V WHNo7lRAFHLiqC2bnxXnqqiHiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzydCsV n34aTuNhw/5BWnukV+7tMB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyaBL6IwLipt9p86zz0dGDlsnkrAyY4LNS2YcuQzDOuEKC50o8q0i3 FElxnTP53EHDNNZvICT04JkSexE4aZQr+SPivG6cmeSHU46x3S2JgoYdJIiX96tP 2B01x1ICyfEskyibEehnRycr5BVb7k/nyFFDFYOgLvp4E6XuVpUyX4zdyfaDl7h1 GdDiBBLCqhUnhscmmPr7Su45fQ2V5sZa1giEhZWmcXZRdCdh/zPLmspJWmNtPCmQ 2BocemvFu4dgj8x7MscA5T3hX807DSE0OBq9Ugv0rQtW2Dd1LwPCRJ8T98KSHlTD m7gb0DCJID17NJST3uc8UiMMnVS6+Pjh -----END CERTIFICATE-----Generated at Wed May 14 11:22:14 2025 by rpki-client