$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: roHqNp9T5SKJCHRUmtPOXpSARzg//sQhwY4cLhxp4Wg= Subject key identifier: 10:AD:0D:F3:71:25:34:EB:F7:7D:0B:7A:41:FD:7D:4E:C5:78:55:82 Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 014B Signing time: Fri 25 Apr 2025 03:30:25 +0000 Manifest this update: Fri 25 Apr 2025 03:30:25 +0000 Manifest next update: Fri 02 May 2025 03:30:25 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: p6ZA/iSeIAYDsgUzGVnuwo+Sp5WVfBymBOnhYI6Yu6A=) 2: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: RH2tA+pDkL65URt1jd9V89/t/7TTanl0u6hNZrCKG3I=) 3: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: 3zCR20o/KfK/K9C/wTlGB6P7rn/kp0/zxFVVdoqdb8g=) 4: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: mR/q70Jk2CRrQySn0SCNQ9Ok1ptByPEBAf3/SOp/6zs=) 5: A16CA728B9EA11EFACF35552C4F9AE02.roa (hash: LIplw0gjYt5TLtVYJx2JRQCdxPLCfIKOl8NOlftLuUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: Apr 25 03:30:25 2025 GMT Not After : May 2 03:30:25 2025 GMT Subject: CN=680b01d1-8e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:db:ae:b0:8a:f4:1d:1e:6b:21:8d:5c:88: 74:7d:c3:08:53:f6:cf:cc:c5:4d:aa:71:4f:aa:c4: 38:60:7c:b7:7a:e6:86:91:b9:16:2c:87:a8:ce:c6: 29:f6:1e:3d:e2:d0:a0:f7:e0:b9:36:e9:ee:68:f0: 1a:36:df:69:fa:92:69:18:56:5e:7a:58:9d:73:5a: ef:9f:49:1a:f1:f7:1d:7d:83:5d:71:af:e4:ea:62: 29:75:29:b6:17:60:fa:8e:28:aa:9d:d4:31:41:2f: 56:29:51:17:0f:7a:24:83:c5:7d:ff:58:42:b6:4d: 0e:04:e9:83:19:d6:0d:70:e9:ac:fe:35:96:27:a1: d9:b6:44:49:b3:49:f7:25:4d:92:94:06:fe:1b:d1: 54:35:93:72:5e:aa:e9:7b:ea:da:c5:22:5e:40:06: 97:53:8c:cb:fd:1a:5c:e2:24:e2:79:4f:b2:10:5c: a7:12:c6:de:e1:cb:22:ff:cb:49:02:57:67:fc:ff: 06:e1:ab:18:74:b6:c4:9f:0f:71:26:b4:67:d0:ac: 1b:5a:2e:d4:0f:d2:b6:88:49:df:37:99:88:92:7a: 53:84:9f:dd:86:3b:83:e4:b8:a2:04:fa:14:3a:77: df:08:12:f5:18:a6:ff:d6:81:c3:be:b0:d1:cd:54: ee:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AD:0D:F3:71:25:34:EB:F7:7D:0B:7A:41:FD:7D:4E:C5:78:55:82 X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:e8:b8:37:a1:8c:e1:56:0f:37:cb:eb:85:35:18:88:ea:b1: 6b:a1:dc:d8:c9:05:3e:1f:92:96:85:5c:ce:c2:1e:dc:55:59: 68:e8:11:6f:59:65:f9:71:13:b9:6a:3d:c9:6d:a9:16:bd:bb: 30:6c:40:8d:05:ea:e4:39:e8:6f:01:5f:0f:2b:b0:61:3c:7f: 3a:c4:8f:7f:d9:3a:61:6e:3b:ea:ad:d3:fa:94:25:1c:70:2a: 48:5c:db:98:66:5e:8e:e2:e1:13:d9:19:63:d7:f4:d7:88:73: aa:41:f7:70:31:60:06:ef:b3:c4:e7:d0:e9:9c:bf:fe:5c:68: 47:88:2e:c4:f6:d2:94:62:0d:35:78:64:13:a3:55:a5:fb:f7: f5:f6:e5:fa:0e:65:8d:c8:2a:88:02:8e:be:52:f5:f5:cb:30: 1c:86:25:62:44:7d:54:b9:87:f0:97:94:cc:fa:42:e2:01:7f: 5c:d2:cf:dd:6a:92:07:3d:d3:b4:5b:29:c9:29:b9:b6:74:e1: a3:4a:6a:3f:e5:db:cf:d5:7c:fe:44:74:af:c7:b6:3b:02:ff: 2f:26:11:c5:c9:4b:0d:d4:4e:af:bb:62:81:2d:7b:6b:2c:62: 51:34:71:39:2d:f6:c8:c7:f1:70:6a:1d:62:90:24:b5:3c:54: 36:ba:89:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjUwNDI1MDMzMDI1WhcNMjUwNTAyMDMzMDI1WjAYMRYwFAYD VQQDEw02ODBiMDFkMS04ZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXPbrrCK9B0eayGNXIh0fcMIU/bPzMVNqnFPqsQ4YHy3euaGkbkWLIeozsYp 9h494tCg9+C5NunuaPAaNt9p+pJpGFZeelidc1rvn0ka8fcdfYNdca/k6mIpdSm2 F2D6jiiqndQxQS9WKVEXD3okg8V9/1hCtk0OBOmDGdYNcOms/jWWJ6HZtkRJs0n3 JU2SlAb+G9FUNZNyXqrpe+raxSJeQAaXU4zL/Rpc4iTieU+yEFynEsbe4csi/8tJ Aldn/P8G4asYdLbEnw9xJrRn0KwbWi7UD9K2iEnfN5mIknpThJ/dhjuD5LiiBPoU OnffCBL1GKb/1oHDvrDRzVTulQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCtDfNx JTTr930LekH9fU7FeFWCMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+6Lg3oYzhVg83y+uFNRiI6rFrodzYyQU+H5KWhVzOwh7cVVlo6BFv WWX5cRO5aj3JbakWvbswbECNBerkOehvAV8PK7BhPH86xI9/2TphbjvqrdP6lCUc cCpIXNuYZl6O4uET2Rlj1/TXiHOqQfdwMWAG77PE59DpnL/+XGhHiC7E9tKUYg01 eGQTo1Wl+/f19uX6DmWNyCqIAo6+UvX1yzAchiViRH1UuYfwl5TM+kLiAX9c0s/d apIHPdO0WynJKbm2dOGjSmo/5dvP1Xz+RHSvx7Y7Av8vJhHFyUsN1E6vu2KBLXtr LGJRNHE5LfbIx/Fwah1ikCS1PFQ2uonj -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:29 2025 by rpki-client