$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json) Hash identifier: lPYfTmWTGDi2XIpwO3Cghb1On6XY8ClWdtYBcHcl2pg= Subject key identifier: DD:D9:CD:8E:6D:F4:F1:A8:EC:CA:26:CE:DC:EC:3F:69:65:D5:9F:4E Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Certificate serial: 0B0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft Manifest number: 0AF9 Signing time: Sat 14 Jun 2025 19:14:34 +0000 Manifest this update: Sat 14 Jun 2025 19:14:33 +0000 Manifest next update: Sat 21 Jun 2025 19:14:33 +0000 Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: +nVxknOxw9/ZDqqC7/zI8KMablAEG1OFcdfTEXC52zY=) 2: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: Vs9WbC7+FXTpkpEtrPfe5o3W7t/VcDXrHl+kg25ZJHc=) 3: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: 6/Bcw5YjZPi9shssWW0OtrdPJZKAVnJFq1ohKYFJu8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2830 (0xb0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Validity Not Before: Jun 14 19:14:33 2025 GMT Not After : Jun 21 19:14:33 2025 GMT Subject: CN=684dca19-8eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:65:b4:c9:b0:a5:d2:f6:e3:9e:aa:a8:f6:45: d4:b1:7d:6d:10:3b:7e:c1:3a:5a:93:9a:f7:5d:87: bd:6f:bb:67:52:b0:66:2e:b7:cc:48:5f:4a:47:e4: 72:84:e3:11:f8:bb:9d:6c:69:5d:ad:82:5b:32:81: 04:f8:50:4f:d3:32:d4:75:1b:df:9b:31:53:15:8c: 10:c4:25:d9:21:40:b2:e5:2a:45:e9:72:d8:29:ae: d3:fa:0b:90:15:bf:93:0f:8b:42:28:90:59:26:45: 83:5b:ca:85:7a:78:77:d7:e5:25:0d:a6:65:3b:fb: a1:75:a3:28:fb:e8:7d:42:71:7f:58:fd:9f:21:5a: f2:10:0a:fc:7a:87:f0:fd:44:7d:31:b5:86:22:b1: a0:a9:d5:ca:43:41:d6:1b:44:85:0a:a0:33:3a:aa: df:f3:ae:9a:82:6a:77:65:50:46:b9:ff:9b:c9:aa: cf:38:1f:59:04:0e:d6:dc:ab:56:2e:81:e6:c3:17: 33:15:4f:63:16:8e:fb:0f:0a:b5:27:30:81:ae:1e: d9:c5:0d:a0:64:d6:4e:2d:30:11:8a:73:e5:3c:3d: 88:6b:60:14:e1:82:74:51:d9:70:94:64:1a:7f:57: 55:91:06:53:ce:1c:cf:45:08:86:ce:26:a2:c3:f1: 4e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D9:CD:8E:6D:F4:F1:A8:EC:CA:26:CE:DC:EC:3F:69:65:D5:9F:4E X509v3 Authority Key Identifier: keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4a:a2:fc:a5:24:0c:29:fa:de:f1:d1:63:d6:d7:4e:3a:ae: 39:32:e5:9d:95:be:76:c5:0b:ce:59:3f:25:ad:95:ca:d0:59: 73:1e:a6:62:ed:57:a5:c2:80:be:e3:81:e3:c1:9b:f2:c1:79: 61:e2:06:29:75:cf:a1:f6:d4:e5:12:b0:08:49:3f:f8:10:a9: 7a:08:2b:65:58:55:03:9a:8e:13:76:ed:27:c4:a5:28:ea:7f: 68:d4:e6:f0:de:cd:18:1a:84:1c:e5:6e:11:3d:47:1b:21:eb: e9:ed:6f:98:f3:62:35:81:6d:fe:62:2f:d7:e6:5a:3d:f3:fc: 86:b8:24:16:ba:f8:ed:78:88:fc:07:03:1a:5c:5a:64:22:35: c3:93:b4:f8:fe:4d:9f:d8:38:51:43:83:66:f9:b8:1a:0f:af: 66:67:5b:89:7b:ae:0d:3a:07:e7:59:3d:4c:72:27:60:df:4b: 7e:3f:3f:0e:07:81:de:47:1b:4d:dc:bf:2b:39:4c:7b:0c:8e: 5a:d5:6d:2e:09:ca:59:9d:8c:64:61:13:a5:d8:19:96:20:96: 60:1d:05:dd:d0:3b:3a:2b:09:ef:45:13:16:a8:b1:86:fd:a8: c5:05:eb:0f:bc:74:af:1f:81:a3:d5:e0:15:51:ba:07:32:ca: 40:34:fc:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MjcxMTAvBgNVBAUTKDQ4NEFFOEMwRDE1Nzk5QjVGRjA4MUZFNDBDM0UxRTAw RTRFODk0NzgwHhcNMjUwNjE0MTkxNDMzWhcNMjUwNjIxMTkxNDMzWjAYMRYwFAYD VQQDEw02ODRkY2ExOS04ZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82W0ybCl0vbjnqqo9kXUsX1tEDt+wTpak5r3XYe9b7tnUrBmLrfMSF9KR+Ry hOMR+LudbGldrYJbMoEE+FBP0zLUdRvfmzFTFYwQxCXZIUCy5SpF6XLYKa7T+guQ Fb+TD4tCKJBZJkWDW8qFenh31+UlDaZlO/uhdaMo++h9QnF/WP2fIVryEAr8eofw /UR9MbWGIrGgqdXKQ0HWG0SFCqAzOqrf866agmp3ZVBGuf+byarPOB9ZBA7W3KtW LoHmwxczFU9jFo77Dwq1JzCBrh7ZxQ2gZNZOLTARinPlPD2Ia2AU4YJ0UdlwlGQa f1dVkQZTzhzPRQiGziaiw/FO0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3ZzY5t 9PGo7MomztzsP2ll1Z9OMB8GA1UdIwQYMBaAFEhK6MDRV5m1/wgf5Aw+HgDk6JR4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyNy84ODg3MTkzNjQ5 MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1iWF9DQl9rREQ0ZUFPVG9s SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NFcm93TkZYbWJYX0NCX2tERDRlQU9Ub2xIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyNy84ODg3MTkzNjQ5MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1i WF9DQl9rREQ0ZUFPVG9sSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6SqL8pSQMKfre8dFj1tdOOq45MuWdlb52xQvOWT8lrZXK0FlzHqZi 7VelwoC+44HjwZvywXlh4gYpdc+h9tTlErAIST/4EKl6CCtlWFUDmo4Tdu0nxKUo 6n9o1Obw3s0YGoQc5W4RPUcbIevp7W+Y82I1gW3+Yi/X5lo98/yGuCQWuvjteIj8 BwMaXFpkIjXDk7T4/k2f2DhRQ4Nm+bgaD69mZ1uJe64NOgfnWT1Mcidg30t+Pz8O B4HeRxtN3L8rOUx7DI5a1W0uCcpZnYxkYROl2BmWIJZgHQXd0Ds6KwnvRRMWqLGG /ajFBesPvHSvH4Gj1eAVUboHMspANPwD -----END CERTIFICATE-----Generated at Sun Jun 15 09:58:24 2025 by rpki-client