$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json) Hash identifier: a+a54Z+6oFVGa+PcwHu6lbOCCSV9Cxiyb7yAF8/p4wo= Subject key identifier: 3F:81:BA:36:66:BE:C5:50:FA:12:B5:0E:0C:A4:73:C7:15:3D:CC:41 Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Certificate serial: 0EA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft Manifest number: 0E99 Signing time: Thu 24 Apr 2025 17:40:16 +0000 Manifest this update: Thu 24 Apr 2025 17:40:15 +0000 Manifest next update: Thu 01 May 2025 17:40:15 +0000 Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: U1UoCY+Xzg6ZnTY28BhFHCnSFYTVePFMioD3Q/vVfP0=) 2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: IptQh9J7jeiBWTQD/hPt8ei062oDoKw0nZ49KCuQKMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3746 (0xea2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E898, serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Validity Not Before: Apr 24 17:40:15 2025 GMT Not After : May 1 17:40:15 2025 GMT Subject: CN=680a777f-dee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:45:3d:63:bd:b0:34:a6:72:db:03:10:bb: 7e:4f:8f:d3:46:59:ee:4e:46:8e:44:75:5b:d3:4a: 91:f5:49:93:13:55:5d:a3:06:08:72:9b:ec:db:ff: b9:aa:9f:5c:e0:75:72:c5:e5:94:5e:de:2a:ce:a3: 26:20:b1:55:5d:cf:03:39:74:f5:4f:76:4c:80:97: d8:11:d1:b5:e0:39:69:a1:a5:23:ea:30:17:21:30: fb:62:42:d4:3a:b0:27:99:16:44:f6:24:dc:6e:ec: ad:3c:76:49:d1:b4:48:78:db:6d:13:fc:de:33:e7: f9:20:89:54:ab:11:fd:71:df:db:73:08:11:54:74: 23:e0:0a:35:3b:0d:2f:39:b9:da:8c:50:e2:47:d9: 6f:44:68:b3:3b:70:ab:d9:ac:5a:a3:f3:a3:63:21: 17:a6:f1:b6:8c:ea:15:dc:ce:a1:14:ec:11:10:55: 4c:f5:b6:3f:1c:2a:d0:73:ba:69:88:e5:11:54:01: 27:65:f6:aa:e4:d2:93:c0:b9:cd:99:b5:58:60:0e: e1:45:20:f3:b3:ec:04:ed:ae:5a:47:d1:d5:87:7a: dd:32:0d:21:09:98:30:fb:2b:f5:89:c4:90:22:d5: f0:f4:4f:b3:e6:f4:a0:ad:f1:02:7d:80:89:d3:9d: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:81:BA:36:66:BE:C5:50:FA:12:B5:0E:0C:A4:73:C7:15:3D:CC:41 X509v3 Authority Key Identifier: keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:7f:0f:c1:8c:65:01:08:dd:b9:20:de:a7:50:7b:62:8f:0b: 7e:2b:e1:85:66:dc:ce:75:62:cc:ee:c2:03:f7:16:c5:d3:5a: e1:ec:b3:42:ab:c3:ca:48:1c:44:6e:07:8d:07:ae:10:de:92: 30:aa:38:d5:63:fa:b7:00:43:c6:cb:22:47:0e:1d:4c:13:6b: 60:db:5d:cd:b2:9b:37:6b:65:6e:e6:c6:e3:15:72:2d:28:46: 55:d8:0d:95:84:ef:5b:22:64:3c:2d:bf:9c:3a:1d:5d:68:b3: da:70:d0:6c:c5:b4:0f:11:bd:27:86:e6:3e:5c:5a:9b:d3:e5: 3a:f4:12:cd:fc:bb:14:b8:68:a7:f0:3d:56:7e:3a:51:77:4c: c2:80:11:30:eb:41:15:ae:ba:7f:68:b9:0e:2c:75:33:7a:ad: a3:42:54:16:12:b9:63:94:c0:95:d6:df:6d:88:02:51:7e:05: 61:bb:f1:60:3e:f6:6e:fa:c5:fa:40:27:32:86:6d:eb:85:3b: ef:91:91:74:91:77:ce:b2:19:f6:35:73:c1:74:39:40:b2:eb: 37:a3:9f:68:8f:e4:26:fd:ae:b5:65:51:9b:4c:a5:90:fc:f4: 99:8a:f6:2d:d2:ef:c8:6f:01:93:da:73:27:3f:5f:45:c8:ce: af:ea:44:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4OTgxMTAvBgNVBAUTKDQ4MkRBREI5OTJERTJDRjFCRjk5MDgzNjQ3OEUxOTk0 NDk5NUIxRTAwHhcNMjUwNDI0MTc0MDE1WhcNMjUwNTAxMTc0MDE1WjAYMRYwFAYD VQQDEw02ODBhNzc3Zi1kZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RpFPWO9sDSmctsDELt+T4/TRlnuTkaORHVb00qR9UmTE1VdowYIcpvs2/+5 qp9c4HVyxeWUXt4qzqMmILFVXc8DOXT1T3ZMgJfYEdG14DlpoaUj6jAXITD7YkLU OrAnmRZE9iTcbuytPHZJ0bRIeNttE/zeM+f5IIlUqxH9cd/bcwgRVHQj4Ao1Ow0v ObnajFDiR9lvRGizO3Cr2axao/OjYyEXpvG2jOoV3M6hFOwREFVM9bY/HCrQc7pp iOURVAEnZfaq5NKTwLnNmbVYYA7hRSDzs+wE7a5aR9HVh3rdMg0hCZgw+yv1icSQ ItXw9E+z5vSgrfECfYCJ051ScQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+BujZm vsVQ+hK1Dgykc8cVPcxBMB8GA1UdIwQYMBaAFEgtrbmS3izxv5kINkeOGZRJlbHg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg5OC8yMTFDNjQ0NjhD MjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQR19tUWcyUjQ0WmxFbVZz ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMnR1WkxlTFBHX21RZzJSNDRabEVtVnNlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg5OC8yMTFDNjQ0NjhDMjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQ R19tUWcyUjQ0WmxFbVZzZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWfw/BjGUBCN25IN6nUHtijwt+K+GFZtzOdWLM7sID9xbF01rh7LNC q8PKSBxEbgeNB64Q3pIwqjjVY/q3AEPGyyJHDh1ME2tg213Nsps3a2Vu5sbjFXIt KEZV2A2VhO9bImQ8Lb+cOh1daLPacNBsxbQPEb0nhuY+XFqb0+U69BLN/LsUuGin 8D1WfjpRd0zCgBEw60EVrrp/aLkOLHUzeq2jQlQWErljlMCV1t9tiAJRfgVhu/Fg PvZu+sX6QCcyhm3rhTvvkZF0kXfOshn2NXPBdDlAsus3o59oj+Qm/a61ZVGbTKWQ /PSZivYt0u/IbwGT2nMnP19FyM6v6kRF -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:07 2025 by rpki-client