$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json) Hash identifier: bb4aFu6ID/psIDJUdCQrCxIvFL+mzsWHG2LJtzvtr3Q= Subject key identifier: 16:9A:44:BF:D0:B9:D7:84:67:EC:DE:BC:1B:C3:D6:45:59:B7:32:8F Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft Manifest number: 017A Signing time: Sun 11 May 2025 02:39:28 +0000 Manifest this update: Sun 11 May 2025 02:39:28 +0000 Manifest next update: Sun 18 May 2025 02:39:28 +0000 Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: Hd0GbsOiKA1JbT5IlBf9qe56cjSOdgfUo3s06C1UKMs=) 2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: ln6kjE1HduHHIWCF/si9qoxC6cm3GotB2vKTDwUMOYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Validity Not Before: May 11 02:39:28 2025 GMT Not After : May 18 02:39:28 2025 GMT Subject: CN=68200de0-5077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:6f:91:5e:3d:b3:26:bf:89:aa:b9:8e:c8: f6:80:7d:ae:27:1e:3a:c8:26:2d:6a:f5:30:59:d5: 28:c7:0c:03:bd:f9:01:b6:67:fd:81:a9:63:a2:a0: d6:9f:02:e4:ad:ac:a1:0b:26:33:c7:35:38:e9:ff: ab:6a:a2:c0:0d:4d:21:ac:53:ea:66:eb:bb:af:40: ac:0a:4d:6b:40:75:82:5c:29:92:87:41:3d:49:4e: 72:ec:44:ec:30:71:c4:d5:10:20:f2:91:32:f8:45: e5:90:9a:22:a4:bc:53:d7:c4:28:05:23:39:8b:ca: b8:62:a1:b6:84:8b:11:82:a3:83:65:37:2d:e5:d2: a2:f9:91:69:13:ea:cf:34:a4:e5:9a:ce:39:44:72: 93:4c:a2:48:27:3c:1b:d4:bd:1c:1a:fb:ec:ec:1d: e3:55:8b:7d:c0:02:5c:91:0b:d9:d6:e2:fd:a2:95: 28:dd:74:c9:a1:64:47:06:60:9c:84:c2:c6:9b:8b: 24:c1:63:dd:e0:95:77:1f:aa:2a:27:ff:ae:19:6c: 02:6b:1f:a6:d2:28:05:da:b4:18:a7:dc:d9:5d:dc: f9:72:ab:a5:b2:dd:44:72:a2:a8:ac:72:3e:c4:d8: 57:a9:cf:db:94:56:6a:2e:2e:fa:51:2d:2d:63:b6: 5e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9A:44:BF:D0:B9:D7:84:67:EC:DE:BC:1B:C3:D6:45:59:B7:32:8F X509v3 Authority Key Identifier: keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:73:ce:9d:6b:45:d0:3e:63:0a:45:88:a1:f1:5e:6b:c6:da: 55:40:a1:1f:cc:b4:3b:8b:c6:24:d0:83:39:4d:46:d4:a0:65: b8:8f:39:24:eb:ad:ec:70:c6:0c:00:3d:22:ca:b0:7c:16:68: 5c:54:da:d8:5c:6d:48:3c:ae:9a:c1:1e:f1:64:ed:85:10:8f: 4d:d3:35:47:da:c7:2d:09:13:00:1c:53:1e:0d:df:43:cf:93: f9:33:f9:59:6e:3d:8f:86:53:a2:9e:e1:4f:05:90:e0:40:4b: 3d:d5:6e:e8:ac:7f:d3:47:dc:c5:cd:48:ed:25:35:f9:dc:e2: a2:4e:37:ed:3f:a9:a4:3f:a0:cc:a5:6d:2b:d3:6e:a1:88:67: 2a:a9:75:26:65:09:c4:06:c3:21:37:65:d9:6b:d1:fc:84:a0: d7:44:4e:61:7b:57:1b:67:f6:73:02:b2:7d:8a:c9:20:6c:73: fc:63:51:72:9e:a2:1e:fe:9b:83:50:3c:91:be:8b:ad:c1:99: 6a:76:5e:b5:ef:d8:87:d7:28:13:ae:e6:b4:cc:60:0a:c2:85: 98:15:da:a1:45:e8:39:de:82:23:7c:fc:97:a4:90:c8:8e:72: 98:d0:2f:e5:53:a9:86:b8:b0:08:64:b9:e4:49:32:d7:a9:72: 83:27:dd:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzOTYxMTAvBgNVBAUTKDQ5RDBGNDA2OTcyQTgwNUIxRTdBOUZDMjBGQjNBOUND Qjc2NjJBQ0UwHhcNMjUwNTExMDIzOTI4WhcNMjUwNTE4MDIzOTI4WjAYMRYwFAYD VQQDEw02ODIwMGRlMC01MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsRvkV49sya/iaq5jsj2gH2uJx46yCYtavUwWdUoxwwDvfkBtmf9galjoqDW nwLkrayhCyYzxzU46f+raqLADU0hrFPqZuu7r0CsCk1rQHWCXCmSh0E9SU5y7ETs MHHE1RAg8pEy+EXlkJoipLxT18QoBSM5i8q4YqG2hIsRgqODZTct5dKi+ZFpE+rP NKTlms45RHKTTKJIJzwb1L0cGvvs7B3jVYt9wAJckQvZ1uL9opUo3XTJoWRHBmCc hMLGm4skwWPd4JV3H6oqJ/+uGWwCax+m0igF2rQYp9zZXdz5cqulst1EcqKorHI+ xNhXqc/blFZqLi76US0tY7Ze7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaaRL/Q udeEZ+zevBvD1kVZtzKPMB8GA1UdIwQYMBaAFEnQ9AaXKoBbHnqfwg+zqcy3ZirO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDM5Ni85NUQwREY3QUVG OUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdGc2VlcF9DRDdPcHpMZG1L czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkRDBCcGNxZ0ZzZWVwX0NEN09wekxkbUtzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDM5Ni85NUQwREY3QUVGOUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdG c2VlcF9DRDdPcHpMZG1LczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBc86da0XQPmMKRYih8V5rxtpVQKEfzLQ7i8Yk0IM5TUbUoGW4jzkk 663scMYMAD0iyrB8FmhcVNrYXG1IPK6awR7xZO2FEI9N0zVH2sctCRMAHFMeDd9D z5P5M/lZbj2PhlOinuFPBZDgQEs91W7orH/TR9zFzUjtJTX53OKiTjftP6mkP6DM pW0r026hiGcqqXUmZQnEBsMhN2XZa9H8hKDXRE5he1cbZ/ZzArJ9iskgbHP8Y1Fy nqIe/puDUDyRvoutwZlqdl6179iH1ygTrua0zGAKwoWYFdqhReg53oIjfPyXpJDI jnKY0C/lU6mGuLAIZLnkSTLXqXKDJ92t -----END CERTIFICATE-----Generated at Mon May 12 04:15:01 2025 by rpki-client