$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft File: svBcLOw1UNLTyetRODn0egAqhy4.mft (raw, json) Hash identifier: 1MDaQUMeujeUjIX6lavUSb8X2UOnSRvpTMIoN9cZ038= Subject key identifier: E6:C8:F2:F3:E0:D1:6B:A3:CA:DD:D8:3A:23:99:38:85:03:55:E6:A0 Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E Certificate issuer: /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E Certificate serial: 03A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft Manifest number: 03A0 Signing time: Fri 25 Apr 2025 00:31:18 +0000 Manifest this update: Fri 25 Apr 2025 00:31:17 +0000 Manifest next update: Fri 02 May 2025 00:31:17 +0000 Files and hashes: 1: svBcLOw1UNLTyetRODn0egAqhy4.crl (hash: SqqUngh/tPl2JJOMF8GLAbLeHzaZxfRt/0i64k57Q/0=) 2: D118AD20820911EDAC2FD360C4F9AE02.roa (hash: ICtN0AhdlHgfYIx82KgCcqvbtFC2Nt85yrH3EgkUFWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E Validity Not Before: Apr 25 00:31:17 2025 GMT Not After : May 2 00:31:17 2025 GMT Subject: CN=680ad7d5-7bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:85:f2:93:d9:0c:8b:94:3c:36:89:93:50:a3: 79:84:ae:88:f8:37:f6:8b:21:d4:e8:8f:9d:bb:39: b2:b6:04:cd:76:78:95:bd:80:ad:ae:af:0c:d7:7c: 8d:1f:7f:ad:76:3e:a6:0f:e2:60:d4:4b:7b:c6:b7: 1f:4f:04:fd:1a:8e:8f:07:8e:55:ed:43:7b:ba:53: 86:44:c7:fc:d3:a1:50:02:e3:1a:d9:07:5e:29:ef: 89:20:79:b6:52:3e:2d:50:d2:66:07:7f:05:67:72: 92:e9:9b:c6:f8:55:4f:e5:b6:8b:68:2f:00:e2:fe: 00:4c:e3:27:55:6c:dc:b4:76:74:4b:17:9a:0c:e2: a3:36:96:af:54:3b:cb:b0:61:6d:83:69:40:88:32: 3b:9d:4e:c9:2a:b8:bc:51:8a:ca:1a:c9:bf:6a:d3: 77:d4:56:ae:68:ab:f0:43:2d:db:9a:2d:ca:bc:69: f6:9d:9e:ae:3e:e9:62:44:13:87:34:12:26:67:48: 48:c1:1c:d5:8f:8d:94:66:79:0d:8e:bf:48:ac:5b: bc:a3:42:1e:64:83:10:ad:bc:5b:a4:37:a0:65:c7: ca:80:55:04:fc:68:50:02:5d:01:0c:99:af:ef:89: aa:cf:5f:6d:38:24:46:eb:b0:61:5b:11:e9:41:f1: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C8:F2:F3:E0:D1:6B:A3:CA:DD:D8:3A:23:99:38:85:03:55:E6:A0 X509v3 Authority Key Identifier: keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ab:2f:70:cd:57:59:e7:cb:aa:9d:23:92:8a:40:b3:93:9b: 6b:f8:5a:65:eb:10:c5:ba:3c:03:48:99:cb:d8:de:28:c6:76: fe:57:2d:96:54:0c:72:ea:97:c6:24:68:57:38:94:b4:76:15: 38:1c:47:9a:c0:f8:3f:14:4b:6f:72:45:48:eb:83:51:ec:ac: 25:67:73:e9:2c:07:e6:a5:fa:a1:29:60:c0:ac:ab:64:be:8f: 85:e2:59:a4:fc:48:9b:f1:85:ce:7a:d6:b5:5d:7f:b0:e2:c2: 67:9c:45:52:d7:ea:61:f8:ff:a1:03:c7:db:68:63:2d:81:71: 45:a4:9e:bd:af:8c:d8:57:90:65:58:10:03:4f:c3:fc:38:31: 35:df:4f:e8:49:71:0d:74:95:18:7e:d2:30:80:b0:28:8f:f7: e3:f0:42:3d:4a:90:a1:f5:32:24:66:70:24:68:7e:f6:da:9f: fa:20:60:0b:7f:aa:8b:31:dc:02:a9:47:3a:33:28:dd:b3:ca: 1d:e6:86:df:22:5b:e2:54:4e:78:20:6f:83:14:c9:64:3c:4b: 40:53:76:71:48:97:dd:6b:9b:67:d0:3d:0d:c9:ae:a9:91:d3: ad:1e:6e:ab:f1:10:49:eb:65:71:19:b8:f2:b2:b1:4a:5a:e8: 06:bd:e4:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEODgxMTAvBgNVBAUTKEIyRjA1QzJDRUMzNTUwRDJEM0M5RUI1MTM4MzlGNDdB MDAyQTg3MkUwHhcNMjUwNDI1MDAzMTE3WhcNMjUwNTAyMDAzMTE3WjAYMRYwFAYD VQQDEw02ODBhZDdkNS03YmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoXyk9kMi5Q8NomTUKN5hK6I+Df2iyHU6I+duzmytgTNdniVvYCtrq8M13yN H3+tdj6mD+Jg1Et7xrcfTwT9Go6PB45V7UN7ulOGRMf806FQAuMa2QdeKe+JIHm2 Uj4tUNJmB38FZ3KS6ZvG+FVP5baLaC8A4v4ATOMnVWzctHZ0SxeaDOKjNpavVDvL sGFtg2lAiDI7nU7JKri8UYrKGsm/atN31FauaKvwQy3bmi3KvGn2nZ6uPuliRBOH NBImZ0hIwRzVj42UZnkNjr9IrFu8o0IeZIMQrbxbpDegZcfKgFUE/GhQAl0BDJmv 74mqz19tOCRG67BhWxHpQfE75wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObI8vPg 0Wujyt3YOiOZOIUDVeagMB8GA1UdIwQYMBaAFLLwXCzsNVDS08nrUTg59HoAKocu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ4OC9GMUI3RUFCQTkz QUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVOTFR5ZXRST0RuMGVnQXFo eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N2QmNMT3cxVU5MVHlldFJPRG4wZWdBcWh5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ4OC9GMUI3RUFCQTkzQUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVO TFR5ZXRST0RuMGVnQXFoeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGqy9wzVdZ58uqnSOSikCzk5tr+Fpl6xDFujwDSJnL2N4oxnb+Vy2W VAxy6pfGJGhXOJS0dhU4HEeawPg/FEtvckVI64NR7KwlZ3PpLAfmpfqhKWDArKtk vo+F4lmk/Eib8YXOeta1XX+w4sJnnEVS1+ph+P+hA8fbaGMtgXFFpJ69r4zYV5Bl WBADT8P8ODE130/oSXENdJUYftIwgLAoj/fj8EI9SpCh9TIkZnAkaH722p/6IGAL f6qLMdwCqUc6Myjds8od5obfIlviVE54IG+DFMlkPEtAU3ZxSJfda5tn0D0Nya6p kdOtHm6r8RBJ62VxGbjysrFKWugGveRk -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:16 2025 by rpki-client