$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft File: SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json) Hash identifier: ziePlOVT8Pqahrp5tOFQheFlPXbFPV4P9BC6jLJl0CQ= Subject key identifier: 02:66:1E:E1:E8:65:EF:9C:F1:A7:63:FD:EE:98:F7:08:86:3F:89:FC Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A Certificate issuer: /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft Manifest number: 0149 Signing time: Fri 25 Apr 2025 03:19:35 +0000 Manifest this update: Fri 25 Apr 2025 03:19:35 +0000 Manifest next update: Fri 02 May 2025 03:19:35 +0000 Files and hashes: 1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: 1mRf4/auY3oTW0FvfmfroHeUvdcYPVuWr3w0JACKlf4=) 2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: u5XCjKJ3dW4XeKjruW6bKKkvEYHMaTHcPhAzry86YE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Validity Not Before: Apr 25 03:19:35 2025 GMT Not After : May 2 03:19:35 2025 GMT Subject: CN=680aff47-bf96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:f7:f9:94:b4:77:b5:4e:d5:e1:75:48:6a: 38:11:21:53:d9:35:00:c4:c9:29:e2:cf:cd:ab:0c: 10:6d:03:cf:65:54:d3:b2:5b:8b:6a:fe:c2:b8:ad: 51:35:95:a5:07:4a:02:89:88:50:eb:99:d8:2a:e4: 6d:7e:7f:56:26:f6:d5:1f:f5:01:6c:48:8a:44:98: 27:67:e4:d8:c2:4c:fc:3a:40:16:bc:89:dc:7b:16: 88:1d:55:7d:f7:24:df:44:3e:b9:98:21:9b:c9:82: c2:b3:ae:f7:87:ce:5d:60:ba:e9:72:45:a7:d5:fd: 77:2a:f3:0a:34:f4:9a:d8:6e:69:ab:f6:f4:65:60: a0:1a:42:7c:91:66:bf:64:2d:17:b7:2d:8e:00:c0: de:44:27:e9:6f:6e:76:d5:bb:04:82:ee:20:72:96: ac:d0:d5:13:d5:f1:98:86:6c:0f:1a:1f:82:c0:74: fe:6e:d1:68:88:98:b2:d3:f9:42:c5:0c:00:44:d5: 5e:ed:58:46:ca:f4:10:64:ac:1c:aa:30:6b:97:13: f6:c3:c4:a4:ed:39:30:43:1c:36:35:18:cf:9a:21: c7:96:b4:59:37:ff:de:b0:02:6d:c1:bc:a6:af:c6: 43:49:3a:00:09:78:dc:a9:80:ac:f8:0b:f5:b5:35: 4b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:66:1E:E1:E8:65:EF:9C:F1:A7:63:FD:EE:98:F7:08:86:3F:89:FC X509v3 Authority Key Identifier: keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ad:94:45:99:73:64:29:de:c8:99:9b:3e:51:30:69:ac:12: f7:5e:cb:7d:e9:ea:08:d7:b3:0d:fe:8f:e6:b2:dd:bd:4b:56: 1e:37:68:5c:9e:ff:1a:92:ae:54:ef:f5:17:fc:6f:6a:c0:d2: 2f:1a:75:d4:d5:18:e7:75:61:24:67:33:67:c7:9b:f1:4a:8a: ae:48:b9:21:13:49:77:1f:7b:8d:8a:b4:bd:1d:97:44:2f:ee: eb:79:62:0e:62:1c:13:09:64:8c:c2:18:26:4c:60:56:21:48: 88:82:61:08:71:fc:06:e0:11:4e:7b:f5:96:bb:9a:40:be:d3: ed:2b:c4:b7:7c:3c:ee:fc:25:bd:ad:52:99:21:52:e4:b2:bf: 43:4b:94:fd:b9:60:ae:58:b7:d8:48:32:2b:bc:39:f2:ff:99: 5f:1b:28:23:9f:67:40:da:07:81:45:32:11:ce:cf:d7:3b:d5: 57:e7:73:57:a8:b7:cd:58:63:95:84:ed:11:8b:ae:c0:df:27: b2:e5:7e:a4:ae:ff:ce:8d:2b:b7:f9:79:e1:e5:a4:fe:2e:28: da:2c:a3:17:13:9d:8d:a5:20:46:33:5b:7d:67:9b:93:de:2e: 84:21:fb:63:e6:db:a8:44:e6:f6:be:78:70:f4:46:60:8a:a4: 18:a9:1c:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I2NzUxMTAvBgNVBAUTKDRBQjVDQTEwQzJBQzIyMjgyQTk5QUU2QkY2MjRGOTM3 NTY4NDNGOEEwHhcNMjUwNDI1MDMxOTM1WhcNMjUwNTAyMDMxOTM1WjAYMRYwFAYD VQQDEw02ODBhZmY0Ny1iZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIP3+ZS0d7VO1eF1SGo4ESFT2TUAxMkp4s/NqwwQbQPPZVTTsluLav7CuK1R NZWlB0oCiYhQ65nYKuRtfn9WJvbVH/UBbEiKRJgnZ+TYwkz8OkAWvIncexaIHVV9 9yTfRD65mCGbyYLCs673h85dYLrpckWn1f13KvMKNPSa2G5pq/b0ZWCgGkJ8kWa/ ZC0Xty2OAMDeRCfpb2521bsEgu4gcpas0NUT1fGYhmwPGh+CwHT+btFoiJiy0/lC xQwARNVe7VhGyvQQZKwcqjBrlxP2w8Sk7TkwQxw2NRjPmiHHlrRZN//esAJtwbym r8ZDSToACXjcqYCs+Av1tTVLhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJmHuHo Ze+c8adj/e6Y9wiGP4n8MB8GA1UdIwQYMBaAFEq1yhDCrCIoKpmua/Yk+TdWhD+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjY3NS9EQ0FEMjdGQzJB MDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lpZ3FtYTVyOWlUNU4xYUVQ NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyWEtFTUtzSWlncW1hNXI5aVQ1TjFhRVA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjY3NS9EQ0FEMjdGQzJBMDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lp Z3FtYTVyOWlUNU4xYUVQNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8rZRFmXNkKd7ImZs+UTBprBL3Xst96eoI17MN/o/mst29S1YeN2hc nv8akq5U7/UX/G9qwNIvGnXU1RjndWEkZzNnx5vxSoquSLkhE0l3H3uNirS9HZdE L+7reWIOYhwTCWSMwhgmTGBWIUiIgmEIcfwG4BFOe/WWu5pAvtPtK8S3fDzu/CW9 rVKZIVLksr9DS5T9uWCuWLfYSDIrvDny/5lfGygjn2dA2geBRTIRzs/XO9VX53NX qLfNWGOVhO0Ri67A3yey5X6krv/OjSu3+Xnh5aT+LijaLKMXE52NpSBGM1t9Z5uT 3i6EIftj5tuoROb2vnhw9EZgiqQYqRyU -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:40 2025 by rpki-client