$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json) Hash identifier: cfiMNzoPKiecpRkJ8NzyQRD8owbbD2O4DwFqtyg8G9Y= Subject key identifier: 1E:89:EE:31:20:37:A8:0D:11:66:54:68:2B:7A:CC:53:28:DB:47:F5 Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft Manifest number: 01E5 Signing time: Sun 11 May 2025 01:41:29 +0000 Manifest this update: Sun 11 May 2025 01:41:28 +0000 Manifest next update: Sun 18 May 2025 01:41:28 +0000 Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: DPYatuVIxmTKMghaPmAGTvYjsWyZYhXxoeQuxBlI5Rg=) 2: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 88kWEiY/06EoXdAjoPmCFzf4ibe9Kqek376AzBNc9lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: May 11 01:41:28 2025 GMT Not After : May 18 01:41:28 2025 GMT Subject: CN=68200048-d283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:53:8d:98:ab:3b:d9:ad:6d:18:6c:37:b6: 41:ea:73:eb:f9:68:bb:84:cc:bc:08:67:58:67:4a: 3c:d7:c0:74:57:58:92:fd:da:2f:6f:4f:da:5f:d8: a9:36:7f:e0:a5:54:ad:a4:98:f3:4e:e0:53:7d:87: d1:79:7d:0a:9f:68:24:78:60:b5:e2:f8:7f:9c:7a: b0:2a:ea:1e:c2:48:2e:e5:21:57:c9:7a:cf:d5:03: 5c:34:05:85:83:a6:f5:75:cf:02:41:47:37:1f:f5: 37:5a:9e:02:2a:6f:56:73:45:de:0c:94:8c:86:79: 2d:c1:49:2e:5e:a5:62:94:1e:a6:31:ea:c0:bc:12: 97:b9:9d:b6:c9:c3:a9:7c:fa:84:ca:a5:ab:6a:04: 05:4f:43:9b:a8:c3:dc:1d:49:66:19:5a:e4:08:19: 58:4e:af:eb:a0:c8:a2:71:85:94:5b:e5:e7:d8:9b: c6:90:a4:bb:9a:69:7a:99:9c:ea:30:f7:0c:76:da: aa:ee:d9:bd:84:0f:bc:a1:e5:72:34:b5:8f:cf:21: 88:90:26:d6:6b:d7:b4:48:85:bf:b2:15:f9:be:bf: 58:73:01:ef:f8:4f:5e:95:a5:b5:0a:a9:d2:be:3f: 14:b5:5a:fa:3b:90:21:66:df:3b:7b:aa:4e:78:1e: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:89:EE:31:20:37:A8:0D:11:66:54:68:2B:7A:CC:53:28:DB:47:F5 X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:19:1e:7c:2b:87:55:9b:a0:26:9d:31:98:73:78:6c:be:94: 63:2e:45:bc:ab:b8:ac:5f:c7:13:86:d0:5e:66:5c:90:f0:ad: 04:c9:33:4a:b6:ec:db:b5:17:a5:65:13:c6:a3:b4:9f:51:61: be:2a:c3:3c:58:5b:1a:77:cf:27:97:16:2e:a0:88:5e:21:66: b7:ca:21:fd:8c:50:3f:7b:33:c6:dd:1e:b2:59:6d:d6:df:20: e6:38:a2:ea:d3:d8:db:fb:1e:bc:96:fb:72:72:22:b5:1a:20: e8:8a:1c:ea:99:d0:67:7e:b1:a2:fb:5e:30:f2:8a:32:96:0a: cd:76:a4:c5:cc:0b:36:cc:49:40:62:7a:1d:68:1e:57:3f:4e: 31:09:58:a0:39:9e:2f:36:df:91:a0:45:d2:1b:11:42:35:f4: fa:10:ee:03:b7:15:62:25:ec:88:d6:2c:e6:44:35:16:09:80: 28:ae:82:78:70:d2:4f:04:a0:f0:01:34:23:33:f1:2b:7c:8b: 03:fd:5e:ec:13:d4:f7:78:8b:b1:0c:08:f3:f8:54:ca:e6:8c: 60:15:7d:c1:10:ce:78:6e:40:62:20:c7:dc:0a:e5:88:d5:1f: 5b:b2:c5:9f:10:fa:b9:42:a0:6b:34:c5:e0:6b:70:04:cc:a5: ee:0e:63:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjUwNTExMDE0MTI4WhcNMjUwNTE4MDE0MTI4WjAYMRYwFAYD VQQDEw02ODIwMDA0OC1kMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqNTjZirO9mtbRhsN7ZB6nPr+Wi7hMy8CGdYZ0o818B0V1iS/dovb0/aX9ip Nn/gpVStpJjzTuBTfYfReX0Kn2gkeGC14vh/nHqwKuoewkgu5SFXyXrP1QNcNAWF g6b1dc8CQUc3H/U3Wp4CKm9Wc0XeDJSMhnktwUkuXqVilB6mMerAvBKXuZ22ycOp fPqEyqWragQFT0ObqMPcHUlmGVrkCBlYTq/roMiicYWUW+Xn2JvGkKS7mml6mZzq MPcMdtqq7tm9hA+8oeVyNLWPzyGIkCbWa9e0SIW/shX5vr9YcwHv+E9elaW1CqnS vj8UtVr6O5AhZt87e6pOeB6RWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6J7jEg N6gNEWZUaCt6zFMo20f1MB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzQ4RS80RDc4OTI2QTRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3 VmtMU1NFdF9BZ1d1ZmN4MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvGR58K4dVm6AmnTGYc3hsvpRjLkW8q7isX8cThtBeZlyQ8K0EyTNK tuzbtRelZRPGo7SfUWG+KsM8WFsad88nlxYuoIheIWa3yiH9jFA/ezPG3R6yWW3W 3yDmOKLq09jb+x68lvtyciK1GiDoihzqmdBnfrGi+14w8ooylgrNdqTFzAs2zElA YnodaB5XP04xCVigOZ4vNt+RoEXSGxFCNfT6EO4DtxViJeyI1izmRDUWCYAoroJ4 cNJPBKDwATQjM/ErfIsD/V7sE9T3eIuxDAjz+FTK5oxgFX3BEM54bkBiIMfcCuWI 1R9bssWfEPq5QqBrNMXga3AEzKXuDmO8 -----END CERTIFICATE-----Generated at Sun May 11 14:43:11 2025 by rpki-client