$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json) Hash identifier: IOHRB4Rx8Lr0sQyCpm9xf2cuK3Cl60TTmP1GG0ID8jw= Subject key identifier: 4E:28:72:33:FE:7E:16:7F:59:2B:F0:AA:44:A8:CC:9B:0A:6C:62:58 Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft Manifest number: 01BD Signing time: Sun 11 May 2025 02:17:44 +0000 Manifest this update: Sun 11 May 2025 02:17:44 +0000 Manifest next update: Sun 18 May 2025 02:17:44 +0000 Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: GdblF2E9b6xBxwgkyBvMUHKSP1ESYahHIqBIdlqXUuI=) 2: 13C972682B8011F09A62D245C4F9AE02.roa (hash: a2k2kkecct4az0mOheVVqOWING4MkGl+Pvuv0azxsmk=) 3: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hw7fn2Uz56pW/An8KSiF7/ybzu4erny13VSakUkooRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: May 11 02:17:44 2025 GMT Not After : May 18 02:17:44 2025 GMT Subject: CN=682008c8-1db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:30:f7:1a:2e:4c:89:e7:4c:b2:e1:03:08: 04:6e:59:7a:68:24:bd:86:64:b6:98:2b:17:cb:eb: a2:d6:51:bf:ac:ba:da:a1:3f:8e:be:df:8b:b6:18: db:8f:03:1c:52:03:1b:fe:b5:0f:21:29:5c:5d:5b: 16:45:ff:ff:79:a6:9f:66:56:a3:1c:d3:7a:25:4c: 30:26:ad:4f:90:bf:f1:8b:75:8a:8b:19:b7:94:a8: 56:8e:87:2f:87:55:aa:3f:e3:b1:cf:85:ec:3c:82: cd:0b:41:73:c6:79:b8:1e:16:d0:40:69:9b:b5:e5: ee:21:a9:fa:6d:dd:41:37:c3:00:e1:dd:ef:9e:c9: 63:fb:c2:ff:dd:a8:46:b9:64:c3:12:01:fb:82:a6: c3:9b:36:5d:59:3c:7b:56:5a:e6:13:6c:7a:13:d3: 82:7d:71:4a:34:13:0b:14:d0:4a:b7:60:63:b9:60: 9a:3b:9c:ff:2b:51:f9:bc:fe:53:77:ff:3e:59:00: 9d:3f:0e:43:ed:c7:b9:fc:3c:2a:58:16:3d:bc:d7: d2:f1:3b:2a:16:1f:15:ad:07:e7:e4:0e:56:ec:33: 58:70:5b:4f:f3:64:b8:38:f6:52:cb:68:b9:4b:51: 67:9e:70:57:39:1c:ae:8b:7c:85:49:9c:b2:0e:b5: 27:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:28:72:33:FE:7E:16:7F:59:2B:F0:AA:44:A8:CC:9B:0A:6C:62:58 X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b5:c2:f3:b1:9e:9a:fb:e6:a6:3f:94:b6:5d:fb:21:39:9f: 93:bb:3e:ae:68:1b:c2:1f:8d:82:d7:a1:be:fb:f8:f4:4b:1e: 78:4d:3e:49:b3:13:44:5a:fb:90:c9:5e:09:41:22:74:03:6a: 92:d1:b8:c8:be:35:72:cb:b0:5c:b0:77:b4:88:3d:7f:6d:e7: 8b:20:a0:4e:c4:ac:87:e5:74:8d:0e:5c:8f:59:5a:c4:1a:dc: 79:da:9e:cc:75:7e:d8:79:b6:2c:2e:c9:de:ac:62:f9:cb:0c: 97:04:c7:76:15:53:b3:4c:87:82:39:61:2d:45:47:18:56:cf: 0c:dc:4d:73:b4:f4:58:67:b3:76:b1:6a:0f:da:f8:6a:da:10: 3d:f8:57:53:55:b9:fb:78:5a:f7:ca:2a:59:02:5e:fc:a1:4b: 82:e2:cd:08:77:9a:e8:d0:5d:1f:1b:0c:35:54:ac:2f:ec:b5: 31:c9:98:b4:c7:07:9a:9a:3f:dd:8b:a0:35:2b:a5:ea:ab:b5: 0d:b9:d3:fe:55:7a:ae:42:ba:f3:5b:bc:ed:4d:e8:4f:9c:66: 23:7c:0c:0e:50:8e:f3:46:6b:ef:1f:6e:d0:55:64:10:1b:8a: 87:3a:12:8b:29:e0:0e:66:5f:9c:8e:75:c2:d6:c4:29:44:79: 15:3e:83:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjUwNTExMDIxNzQ0WhcNMjUwNTE4MDIxNzQ0WjAYMRYwFAYD VQQDEw02ODIwMDhjOC0xZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvgw9xouTInnTLLhAwgEbll6aCS9hmS2mCsXy+ui1lG/rLraoT+Ovt+Lthjb jwMcUgMb/rUPISlcXVsWRf//eaafZlajHNN6JUwwJq1PkL/xi3WKixm3lKhWjocv h1WqP+Oxz4XsPILNC0Fzxnm4HhbQQGmbteXuIan6bd1BN8MA4d3vnslj+8L/3ahG uWTDEgH7gqbDmzZdWTx7VlrmE2x6E9OCfXFKNBMLFNBKt2BjuWCaO5z/K1H5vP5T d/8+WQCdPw5D7ce5/DwqWBY9vNfS8TsqFh8VrQfn5A5W7DNYcFtP82S4OPZSy2i5 S1FnnnBXORyui3yFSZyyDrUnqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4ocjP+ fhZ/WSvwqkSozJsKbGJYMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3 U3N0cUJLRlBDamJNNkZZUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAztcLzsZ6a++amP5S2XfshOZ+Tuz6uaBvCH42C16G++/j0Sx54TT5J sxNEWvuQyV4JQSJ0A2qS0bjIvjVyy7BcsHe0iD1/beeLIKBOxKyH5XSNDlyPWVrE Gtx52p7MdX7YebYsLsnerGL5ywyXBMd2FVOzTIeCOWEtRUcYVs8M3E1ztPRYZ7N2 sWoP2vhq2hA9+FdTVbn7eFr3yipZAl78oUuC4s0Id5ro0F0fGww1VKwv7LUxyZi0 xweamj/di6A1K6Xqq7UNudP+VXquQrrzW7ztTehPnGYjfAwOUI7zRmvvH27QVWQQ G4qHOhKLKeAOZl+cjnXC1sQpRHkVPoPQ -----END CERTIFICATE-----Generated at Sun May 11 03:54:24 2025 by rpki-client