$ rpki-client -vvf rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft File: sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft (raw, json) Hash identifier: qZDtGpUcHQBBNvFEAE/SLxaXBbaYRkN8D/6m7z4E1PU= Subject key identifier: E9:E5:68:8E:0F:70:4F:44:B1:8F:A0:25:08:23:D3:75:5B:19:29:F2 Authority key identifier: B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 Certificate issuer: /CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft Manifest number: 0314 Signing time: Fri 25 Apr 2025 00:57:56 +0000 Manifest this update: Fri 25 Apr 2025 00:57:56 +0000 Manifest next update: Fri 02 May 2025 00:57:56 +0000 Files and hashes: 1: sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl (hash: Mh9QyYm51atTyn7gZCbmoxvWJmwEL9pXLOGouHMaZjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919456E, serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Validity Not Before: Apr 25 00:57:56 2025 GMT Not After : May 2 00:57:56 2025 GMT Subject: CN=680ade14-66c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:13:c9:3d:54:e6:4d:e4:50:35:59:fe:91: ed:e5:70:8f:b7:59:34:29:93:53:ca:d1:aa:6c:f8: bc:b6:85:60:96:4e:ff:d9:69:ad:e9:d1:c5:14:06: db:1b:05:c3:5a:45:8f:8b:f3:65:c1:2b:bc:25:a3: 67:ef:96:01:18:be:58:14:2f:41:b5:07:cf:70:a0: 15:54:f0:2b:79:ca:3f:d9:2b:fd:a6:3b:06:a6:80: 35:66:3d:ee:2f:da:73:6f:44:e8:91:34:ca:18:c3: 40:ae:37:e5:7c:67:fa:5c:29:b0:08:4d:07:fb:15: b1:0c:2d:4b:1b:f3:24:7e:d6:82:91:d3:25:ce:6b: 26:02:29:5b:a3:01:c4:e6:13:41:69:a8:b5:c6:f5: c0:6e:b2:ff:49:f7:04:f6:13:64:6b:e1:8d:63:82: 8d:41:cd:ce:f1:a6:06:d1:df:6d:ad:24:96:21:f9: 61:23:0e:dc:05:53:1a:c0:00:b3:a5:97:1e:67:90: 12:41:7c:53:41:67:c0:5f:be:3d:76:35:32:45:ff: 88:27:b6:ea:f0:94:a0:36:54:91:05:a7:7b:19:6a: ae:2f:a2:82:bc:70:8d:f4:cf:71:70:1d:e5:69:e3: bf:50:21:bf:fd:7a:70:f8:8e:32:a2:63:36:7b:c5: 50:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E5:68:8E:0F:70:4F:44:B1:8F:A0:25:08:23:D3:75:5B:19:29:F2 X509v3 Authority Key Identifier: keyid:B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e2:7d:f6:18:fc:30:e9:39:d8:1c:d6:50:69:25:d2:15:03: 1a:3c:c8:13:60:9c:0a:7f:c3:cf:09:a2:17:64:5d:0e:8e:45: 13:88:1c:01:e7:f4:83:4b:12:02:a6:80:52:3c:d2:a0:53:43: 0b:f7:f9:29:c4:83:9c:c9:27:5b:da:48:80:3d:06:6d:ed:d0: 49:ae:20:53:dd:96:9d:cf:67:f8:89:34:6d:05:2d:95:bf:a1: bb:c7:9f:c8:65:40:c4:9b:31:74:28:41:90:b6:d7:54:21:07: 84:0d:f2:68:16:5c:d2:32:98:d1:0b:d7:b6:44:9b:95:9b:ab: 77:9f:74:d9:9a:62:6f:fe:15:f0:9f:da:5a:c9:37:f4:88:f3: 1a:63:43:f0:08:02:c5:17:8b:de:e1:ae:c0:aa:fd:bf:25:72: c3:b1:12:6d:e2:10:67:ce:66:d4:45:a7:75:04:ed:81:70:3d: 7c:f8:0d:8d:b0:0c:61:a9:c2:bd:a1:df:bd:d3:2f:97:57:e3: 25:e7:78:61:97:eb:16:fb:23:a1:5d:67:3c:0f:a8:da:64:76: 72:ac:33:5b:c1:94:8b:6f:62:ac:a7:be:fa:60:97:5b:6c:28: c0:3e:6c:a1:af:04:d6:21:f7:eb:fe:fa:0e:92:43:ff:9d:36: 30:47:85:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1NkUxMTAvBgNVBAUTKEIwNEI3RkIyMEUyNUQ2RDc1ODdGMjZGRDc1NzI3NEI5 RDNFRTNFOTUwHhcNMjUwNDI1MDA1NzU2WhcNMjUwNTAyMDA1NzU2WjAYMRYwFAYD VQQDEw02ODBhZGUxNC02NmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqsTyT1U5k3kUDVZ/pHt5XCPt1k0KZNTytGqbPi8toVglk7/2Wmt6dHFFAbb GwXDWkWPi/NlwSu8JaNn75YBGL5YFC9BtQfPcKAVVPAreco/2Sv9pjsGpoA1Zj3u L9pzb0TokTTKGMNArjflfGf6XCmwCE0H+xWxDC1LG/MkftaCkdMlzmsmAilbowHE 5hNBaai1xvXAbrL/SfcE9hNka+GNY4KNQc3O8aYG0d9trSSWIflhIw7cBVMawACz pZceZ5ASQXxTQWfAX749djUyRf+IJ7bq8JSgNlSRBad7GWquL6KCvHCN9M9xcB3l aeO/UCG//Xpw+I4yomM2e8VQ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnlaI4P cE9EsY+gJQgj03VbGSnyMB8GA1UdIwQYMBaAFLBLf7IOJdbXWH8m/XVydLnT7j6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDU2RS82RkMzMjlDQ0NC NjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0ZFlmeWI5ZFhKMHVkUHVQ cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdF9zZzRsMXRkWWZ5YjlkWEowdWRQdVBwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDU2RS82RkMzMjlDQ0NCNjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0 ZFlmeWI5ZFhKMHVkUHVQcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ4n32GPww6TnYHNZQaSXSFQMaPMgTYJwKf8PPCaIXZF0OjkUTiBwB 5/SDSxICpoBSPNKgU0ML9/kpxIOcySdb2kiAPQZt7dBJriBT3Zadz2f4iTRtBS2V v6G7x5/IZUDEmzF0KEGQttdUIQeEDfJoFlzSMpjRC9e2RJuVm6t3n3TZmmJv/hXw n9payTf0iPMaY0PwCALFF4ve4a7Aqv2/JXLDsRJt4hBnzmbURad1BO2BcD18+A2N sAxhqcK9od+90y+XV+Ml53hhl+sW+yOhXWc8D6jaZHZyrDNbwZSLb2Ksp776YJdb bCjAPmyhrwTWIffr/voOkkP/nTYwR4XV -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:42 2025 by rpki-client