$ rpki-client -vvf rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft File: sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft (raw, json) Hash identifier: wP7tdRbUYkqbP4OxhjdzxNtpVhvipc0GBVhkQ4n8eRM= Subject key identifier: 9B:36:3A:7B:58:3C:90:CC:53:2B:26:B3:F4:9E:6C:5F:FA:77:5D:62 Authority key identifier: B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 Certificate issuer: /CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Certificate serial: 0320 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft Manifest number: 031C Signing time: Sun 11 May 2025 00:43:55 +0000 Manifest this update: Sun 11 May 2025 00:43:54 +0000 Manifest next update: Sun 18 May 2025 00:43:54 +0000 Files and hashes: 1: sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl (hash: 0aylTKv3ClkPXdatZg893ss8neEcqkwNNA2kAEBWqYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 800 (0x320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919456E, serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Validity Not Before: May 11 00:43:54 2025 GMT Not After : May 18 00:43:54 2025 GMT Subject: CN=681ff2ca-cf1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:23:bf:93:f7:c9:24:bc:c7:cd:33:58:c7: 4a:56:75:fa:d7:89:4c:7d:50:5d:24:a2:a7:8b:9a: 2e:9d:b6:df:c3:94:4c:11:e2:b8:94:32:56:f3:36: 75:c1:38:41:5e:2b:e3:ba:57:b7:12:00:0b:9c:3c: ab:ac:4f:6f:87:e8:db:99:97:e5:26:d2:24:76:57: 04:a4:61:53:8c:c4:e5:3a:ab:dc:44:75:f2:d8:e5: e3:86:b0:57:ca:6b:ed:bd:7c:a6:d8:79:31:53:7c: 91:68:f5:a3:44:c8:b2:92:84:91:71:e6:7f:86:d6: d4:dd:80:c2:30:7e:a1:20:64:0c:ae:75:d3:3f:af: 5e:d7:26:23:86:57:12:10:fc:5b:ec:ff:44:a8:8e: 5d:e6:1e:4a:41:54:65:2e:22:24:ee:da:49:db:3f: e2:48:fe:1d:b7:d8:2b:cf:e2:64:cb:eb:ca:29:1a: fd:46:f5:95:b0:90:a6:f4:9a:c2:52:44:b8:81:12: 5a:56:fa:bd:2e:44:00:b5:bc:2f:49:ac:02:28:db: ad:ee:59:90:ba:a6:62:f0:1a:2e:e9:85:cd:3e:f7: 00:44:f9:cc:44:e2:70:ad:ae:a3:9f:d5:f3:75:49: 4e:f9:7d:66:92:5f:3a:32:ce:f7:ef:84:3b:a7:42: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:36:3A:7B:58:3C:90:CC:53:2B:26:B3:F4:9E:6C:5F:FA:77:5D:62 X509v3 Authority Key Identifier: keyid:B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:23:3a:0e:66:d4:cc:6f:e2:9b:b0:fc:d1:98:63:51:10:c4: 3e:51:61:7e:8b:e7:b8:43:29:f5:c3:a3:34:62:79:42:f7:e1: 72:37:68:b6:aa:6d:4c:ca:7f:ff:42:3e:2e:22:26:a5:ab:9d: 5f:70:f8:b4:85:5d:2f:5d:32:c5:fd:a8:33:23:8f:ed:ee:ba: 2d:9a:58:2f:9d:f5:91:f0:cd:84:a8:bb:0d:8f:cc:49:c9:6e: f0:6c:e0:82:ba:16:25:96:f6:61:39:0e:c2:10:eb:86:ed:91: 44:c9:dd:8e:76:c3:5e:a6:d6:9a:06:a2:ea:f7:f4:fc:a8:95: 9a:d6:6e:1e:c6:d4:df:4b:2c:56:dd:14:c3:d0:e0:82:d6:be: 16:41:8e:84:ad:4a:ff:77:ad:63:9f:71:3a:70:17:54:75:6f: 56:86:12:1b:4d:2f:31:71:62:e1:fe:ec:d9:35:a4:f2:12:5c: 60:d2:35:15:9e:c6:26:d6:1e:00:59:0f:f7:cd:2c:18:68:2e: d2:ec:95:c5:21:5d:e8:dd:9d:00:34:93:07:5b:14:ae:2f:bd: 06:e3:73:09:49:eb:c0:18:c2:c7:0f:0b:1b:67:31:94:8a:7c: 14:51:aa:9b:fc:1e:0e:d9:a1:4e:32:61:64:fe:a3:5c:bc:63: 14:22:29:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1NkUxMTAvBgNVBAUTKEIwNEI3RkIyMEUyNUQ2RDc1ODdGMjZGRDc1NzI3NEI5 RDNFRTNFOTUwHhcNMjUwNTExMDA0MzU0WhcNMjUwNTE4MDA0MzU0WjAYMRYwFAYD VQQDEw02ODFmZjJjYS1jZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fwjv5P3ySS8x80zWMdKVnX614lMfVBdJKKni5ounbbfw5RMEeK4lDJW8zZ1 wThBXivjule3EgALnDyrrE9vh+jbmZflJtIkdlcEpGFTjMTlOqvcRHXy2OXjhrBX ymvtvXym2HkxU3yRaPWjRMiykoSRceZ/htbU3YDCMH6hIGQMrnXTP69e1yYjhlcS EPxb7P9EqI5d5h5KQVRlLiIk7tpJ2z/iSP4dt9grz+Jky+vKKRr9RvWVsJCm9JrC UkS4gRJaVvq9LkQAtbwvSawCKNut7lmQuqZi8Bou6YXNPvcARPnMROJwra6jn9Xz dUlO+X1mkl86Ms7374Q7p0JXZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJs2OntY PJDMUysms/SebF/6d11iMB8GA1UdIwQYMBaAFLBLf7IOJdbXWH8m/XVydLnT7j6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDU2RS82RkMzMjlDQ0NC NjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0ZFlmeWI5ZFhKMHVkUHVQ cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdF9zZzRsMXRkWWZ5YjlkWEowdWRQdVBwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDU2RS82RkMzMjlDQ0NCNjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0 ZFlmeWI5ZFhKMHVkUHVQcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvIzoOZtTMb+KbsPzRmGNREMQ+UWF+i+e4Qyn1w6M0YnlC9+FyN2i2 qm1Myn//Qj4uIialq51fcPi0hV0vXTLF/agzI4/t7rotmlgvnfWR8M2EqLsNj8xJ yW7wbOCCuhYllvZhOQ7CEOuG7ZFEyd2OdsNeptaaBqLq9/T8qJWa1m4extTfSyxW 3RTD0OCC1r4WQY6ErUr/d61jn3E6cBdUdW9WhhIbTS8xcWLh/uzZNaTyElxg0jUV nsYm1h4AWQ/3zSwYaC7S7JXFIV3o3Z0ANJMHWxSuL70G43MJSevAGMLHDwsbZzGU inwUUaqb/B4O2aFOMmFk/qNcvGMUIimU -----END CERTIFICATE-----Generated at Sun May 11 15:37:33 2025 by rpki-client