$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json) Hash identifier: hweth0AsaqxbWn+OYnvfHOKnHltR0fri2r1FUf59Lmo= Subject key identifier: 43:69:2E:A8:23:EB:0D:90:B2:6B:A2:35:45:12:30:9F:A7:15:35:F2 Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Certificate serial: 0AF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft Manifest number: 0AE0 Signing time: Thu 24 Apr 2025 19:20:30 +0000 Manifest this update: Thu 24 Apr 2025 19:20:29 +0000 Manifest next update: Thu 01 May 2025 19:20:29 +0000 Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: 5Xszp11nAoU9XK1J5e89Kc3XdX0BkXed56tsmoG8Roc=) 2: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: Vs9WbC7+FXTpkpEtrPfe5o3W7t/VcDXrHl+kg25ZJHc=) 3: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: 6/Bcw5YjZPi9shssWW0OtrdPJZKAVnJFq1ohKYFJu8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2805 (0xaf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Validity Not Before: Apr 24 19:20:29 2025 GMT Not After : May 1 19:20:29 2025 GMT Subject: CN=680a8efd-e992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c6:28:22:78:02:e2:eb:c5:72:3e:03:b7:dd: f7:1a:f5:d4:10:79:97:52:85:66:f7:d6:65:a2:87: ea:a8:d6:0d:58:d3:a0:a5:5a:e6:ac:36:6b:60:c2: 79:c0:8f:f3:82:ac:d3:cc:b2:e5:b3:26:ac:1e:d2: be:f5:53:ab:67:76:c6:f4:88:f3:30:f0:ea:4f:6c: af:62:a3:14:3b:08:e9:3b:aa:09:3a:c2:66:64:e8: b8:e9:ad:74:0b:5c:00:e5:d0:ac:a3:c7:2a:e9:cd: 9f:b5:5e:eb:72:a8:78:bc:a5:ed:d0:6b:fa:79:fd: 02:fd:0d:3a:88:91:90:be:40:ae:bb:c4:ba:72:14: 26:54:3b:ac:9a:80:69:3f:34:42:49:77:f2:e8:47: c3:64:d2:39:6c:59:4f:fa:64:5a:8d:ac:78:f0:e2: 63:ea:87:54:6f:78:9b:f8:59:c3:eb:b8:71:cb:19: 9c:ab:c1:69:0c:2e:74:e9:aa:8d:07:bb:81:d8:02: ad:de:ec:ba:75:a2:33:ef:20:55:31:b6:da:34:46: bc:7e:94:d8:10:e1:4d:ac:c9:ea:4d:56:0e:2b:17: 44:a6:1c:14:9e:0d:4a:75:bf:05:5a:51:63:44:87: 68:f3:58:9e:2d:13:fd:18:20:d1:52:d1:5c:da:a1: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:69:2E:A8:23:EB:0D:90:B2:6B:A2:35:45:12:30:9F:A7:15:35:F2 X509v3 Authority Key Identifier: keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:dc:ff:d8:e1:98:fe:c3:3d:b8:3b:8c:75:a3:5b:59:b7:c2: 95:7e:d9:9d:75:94:65:6b:ab:ff:4e:39:42:26:37:3d:ec:49: 5b:ea:30:a9:49:b9:f8:2f:0a:da:ae:7a:a7:d6:7c:9d:f6:17: 0c:01:97:f8:ed:6d:81:86:fb:c7:23:c2:f8:9d:9e:1f:4b:1b: f3:fe:b7:12:0c:6e:81:12:d9:6e:73:63:af:4b:18:b8:6d:6f: e2:7f:2e:a6:ae:1e:8b:b4:13:1c:fe:5f:3e:71:bd:c3:46:98: 4e:3f:73:ab:71:c2:fd:2f:95:cf:8e:0e:4e:c6:35:97:d4:65: 68:5b:68:a8:3b:4b:6d:c0:22:84:90:69:ac:1b:53:e7:80:4a: 67:35:73:2b:dc:ad:c2:8c:76:df:18:92:f1:f4:4d:43:b7:1c: d5:6a:25:a9:fc:8b:0e:9c:dd:b5:de:2a:4c:a1:5c:0e:76:32: 6d:c0:10:3d:9b:c5:91:0f:ad:f8:75:96:ff:eb:64:67:ec:c3: b0:b6:85:2c:94:be:1c:4d:da:ec:91:e2:ae:e5:e8:1b:43:4f: 1e:5f:50:6b:b6:04:e3:50:20:c5:05:6c:5c:52:bc:7a:b8:c7: 83:e9:c8:39:e7:4a:3a:7c:9c:5f:e5:d1:39:cc:6b:4e:d4:47: 04:8a:33:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MjcxMTAvBgNVBAUTKDQ4NEFFOEMwRDE1Nzk5QjVGRjA4MUZFNDBDM0UxRTAw RTRFODk0NzgwHhcNMjUwNDI0MTkyMDI5WhcNMjUwNTAxMTkyMDI5WjAYMRYwFAYD VQQDEw02ODBhOGVmZC1lOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cYoIngC4uvFcj4Dt933GvXUEHmXUoVm99ZloofqqNYNWNOgpVrmrDZrYMJ5 wI/zgqzTzLLlsyasHtK+9VOrZ3bG9IjzMPDqT2yvYqMUOwjpO6oJOsJmZOi46a10 C1wA5dCso8cq6c2ftV7rcqh4vKXt0Gv6ef0C/Q06iJGQvkCuu8S6chQmVDusmoBp PzRCSXfy6EfDZNI5bFlP+mRajax48OJj6odUb3ib+FnD67hxyxmcq8FpDC506aqN B7uB2AKt3uy6daIz7yBVMbbaNEa8fpTYEOFNrMnqTVYOKxdEphwUng1Kdb8FWlFj RIdo81ieLRP9GCDRUtFc2qGLbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENpLqgj 6w2QsmuiNUUSMJ+nFTXyMB8GA1UdIwQYMBaAFEhK6MDRV5m1/wgf5Aw+HgDk6JR4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyNy84ODg3MTkzNjQ5 MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1iWF9DQl9rREQ0ZUFPVG9s SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NFcm93TkZYbWJYX0NCX2tERDRlQU9Ub2xIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyNy84ODg3MTkzNjQ5MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1i WF9DQl9rREQ0ZUFPVG9sSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe3P/Y4Zj+wz24O4x1o1tZt8KVftmddZRla6v/TjlCJjc97Elb6jCp Sbn4Lwrarnqn1nyd9hcMAZf47W2BhvvHI8L4nZ4fSxvz/rcSDG6BEtluc2OvSxi4 bW/ify6mrh6LtBMc/l8+cb3DRphOP3OrccL9L5XPjg5OxjWX1GVoW2ioO0ttwCKE kGmsG1PngEpnNXMr3K3CjHbfGJLx9E1DtxzVaiWp/IsOnN213ipMoVwOdjJtwBA9 m8WRD634dZb/62Rn7MOwtoUslL4cTdrskeKu5egbQ08eX1BrtgTjUCDFBWxcUrx6 uMeD6cg550o6fJxf5dE5zGtO1EcEijPg -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:35 2025 by rpki-client