$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json) Hash identifier: qIw9oBdC+1yBIV+NUizBKjGvMoiN5wUapoLd5q2ynYs= Subject key identifier: F7:3B:8F:98:94:71:57:A6:BD:66:08:8E:70:35:67:DA:D7:94:44:7D Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft Manifest number: 11 Signing time: Fri 25 Apr 2025 07:05:40 +0000 Manifest this update: Fri 25 Apr 2025 07:05:39 +0000 Manifest next update: Fri 02 May 2025 07:05:39 +0000 Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: GD4iKxtKgJWA9x6f0vNmfAY1lRdVRR5aPIzNhpfk2g4=) 2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Validity Not Before: Apr 25 07:05:39 2025 GMT Not After : May 2 07:05:39 2025 GMT Subject: CN=680b3443-a567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:0d:a4:75:e1:2e:f5:5b:4d:b0:da:c6:7d: 9f:f4:9e:cc:38:3e:81:5a:b8:3e:42:bc:9a:6d:d1: d8:1c:55:67:3c:3c:94:14:01:dc:2b:52:eb:9f:73: b3:55:62:df:37:87:1e:43:ce:d8:e9:a5:cf:a5:45: 86:7e:e1:ed:9e:b2:e5:f7:53:36:27:76:29:2c:26: 6b:d2:b8:2b:87:7e:13:e7:17:99:65:70:9b:51:76: 54:01:b6:9e:ab:45:be:03:aa:62:39:19:c3:33:e4: 9d:40:08:8f:c7:ab:81:1a:67:31:f6:7e:0c:b7:cb: a5:4c:c6:09:0c:63:95:34:4a:b6:3a:a4:97:a8:4d: 40:1c:ec:2d:c6:bd:88:76:3a:24:80:5b:e9:4b:6e: 53:1b:c3:d0:49:81:b8:cc:65:f4:05:a6:25:92:b9: b1:43:68:5e:2f:fb:15:7c:dd:7a:1c:95:53:91:91: fe:fe:a5:5b:98:09:19:f5:66:10:ef:3a:d2:22:db: 69:ac:bc:6c:16:2f:25:82:e8:c9:6d:08:26:2e:20: 14:0d:40:57:b1:0d:44:a6:17:d8:89:54:f8:d5:2c: f2:19:8b:8b:c1:8f:e1:d4:82:41:66:f6:b4:83:d3: ba:3e:62:94:69:32:17:8a:21:6e:2b:0e:a3:7d:02: a9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3B:8F:98:94:71:57:A6:BD:66:08:8E:70:35:67:DA:D7:94:44:7D X509v3 Authority Key Identifier: keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:3f:3a:c0:80:eb:39:5d:28:d6:59:9f:55:e1:0b:23:29:b0: 1a:7f:49:c6:e5:b4:1a:52:49:ed:df:d8:e6:92:db:9c:f1:f9: b1:1e:6c:34:e0:54:ee:b7:aa:3a:8d:14:f2:b7:58:b8:e0:7d: dc:5e:7a:7c:e7:c3:26:fa:d8:b3:89:d3:a6:98:d5:50:51:ae: 43:6e:79:c8:bc:ba:8d:3f:16:d3:a3:93:45:19:1b:a9:9f:00: 6a:25:0a:d9:b9:a7:93:c1:51:97:10:bd:f5:7b:c4:98:47:57: 9f:f0:d2:1e:dc:dd:f0:28:81:5f:e1:9e:14:9a:aa:5f:31:ff: a7:6b:62:a3:89:4a:03:25:ae:28:e7:17:ef:46:7e:60:c3:40: 91:bf:23:b7:1c:f4:a8:74:04:dd:26:61:b2:5c:52:3e:40:8c: de:29:d2:9f:0e:95:af:0b:b9:65:ec:c4:27:83:c1:ce:19:af: 90:49:29:fb:9b:ea:cf:f4:88:92:67:3a:f5:93:30:e3:cb:32: 20:08:d9:fc:3f:6d:7c:d2:51:5e:92:e8:9e:06:71:a1:16:f8: 29:3b:ef:da:82:3a:c3:f8:31:d3:62:44:56:bf:88:b1:fe:db: b4:c6:a6:c0:c8:9e:4e:c7:e2:72:b8:b4:18:e3:76:33:7a:1d: f3:a2:0a:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDEwRTExMC8GA1UEBRMoNDg5QTZGQ0VEN0RDNjNCN0FCMzY2NkUzNUJENTA5RDlF QTE1NzVFMDAeFw0yNTA0MjUwNzA1MzlaFw0yNTA1MDIwNzA1MzlaMBgxFjAUBgNV BAMTDTY4MGIzNDQzLWE1NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPcQ2kdeEu9VtNsNrGfZ/0nsw4PoFauD5CvJpt0dgcVWc8PJQUAdwrUuufc7NV Yt83hx5Dztjppc+lRYZ+4e2esuX3UzYndiksJmvSuCuHfhPnF5llcJtRdlQBtp6r Rb4DqmI5GcMz5J1ACI/Hq4EaZzH2fgy3y6VMxgkMY5U0SrY6pJeoTUAc7C3GvYh2 OiSAW+lLblMbw9BJgbjMZfQFpiWSubFDaF4v+xV83XoclVORkf7+pVuYCRn1ZhDv OtIi22msvGwWLyWC6MltCCYuIBQNQFexDUSmF9iJVPjVLPIZi4vBj+HUgkFm9rSD 07o+YpRpMheKIW4rDqN9AqmjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9zuPmJRx V6a9ZgiOcDVn2teURH0wHwYDVR0jBBgwFoAUSJpvztfcY7erNmbjW9UJ2eoVdeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MTBFLzJGMDMyOThBMTA4 NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdlck5tYmpXOVVKMmVvVmRl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0pwdnp0ZmNZN2VyTm1ialc5VUoyZW9WZGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MTBFLzJGMDMyOThBMTA4NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdl ck5tYmpXOVVKMmVvVmRlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAII/OsCA6zldKNZZn1XhCyMpsBp/ScbltBpSSe3f2OaS25zx+bEebDTg VO63qjqNFPK3WLjgfdxeenznwyb62LOJ06aY1VBRrkNueci8uo0/FtOjk0UZG6mf AGolCtm5p5PBUZcQvfV7xJhHV5/w0h7c3fAogV/hnhSaql8x/6drYqOJSgMlrijn F+9GfmDDQJG/I7cc9Kh0BN0mYbJcUj5AjN4p0p8Ola8LuWXsxCeDwc4Zr5BJKfub 6s/0iJJnOvWTMOPLMiAI2fw/bXzSUV6S6J4GcaEW+Ck779qCOsP4MdNiRFa/iLH+ 27TGpsDInk7H4nK4tBjjdjN6HfOiCj8= -----END CERTIFICATE-----Generated at Sat Apr 26 05:29:27 2025 by rpki-client