$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json) Hash identifier: gk4ZZBi7dOyLxXjS8pVkMyxsbMaP50p7T9WzvhsKDiw= Subject key identifier: B5:04:8F:F8:23:6C:72:5E:0A:A0:31:7F:FF:69:F6:85:76:A6:91:34 Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Certificate serial: 0D3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft Manifest number: 0D33 Signing time: Thu 24 Apr 2025 17:58:09 +0000 Manifest this update: Thu 24 Apr 2025 17:58:08 +0000 Manifest next update: Thu 01 May 2025 17:58:08 +0000 Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: yRDWVa3LGQB7uN7ASZargQ8OBeXx01B4daoMQSN5q4M=) 2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: 3NvJFO+he2ACqNiLgD+llzSbjPgJVQ7hiMX5hEMIbGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Validity Not Before: Apr 24 17:58:08 2025 GMT Not After : May 1 17:58:08 2025 GMT Subject: CN=680a7bb0-e69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:59:82:38:d7:c9:4d:a1:74:ef:0f:32:40: d1:32:e7:d6:7a:e9:91:83:0d:47:a7:9f:73:eb:d8: 9b:4b:0c:62:f0:7c:2a:92:45:a0:fd:ab:18:2b:df: ee:ec:1c:2c:1d:9b:b6:bb:c4:c9:a7:fb:c3:74:4e: 75:4c:7e:83:1e:34:19:35:c0:ac:9b:7e:f3:23:ab: d7:ea:12:bf:36:d8:bd:c3:38:58:3d:85:8a:84:25: 8e:4a:3c:f4:fe:f4:0e:db:29:69:eb:ee:c2:19:69: 5a:dc:f0:2b:ba:ba:a1:ef:fd:4f:cc:86:db:00:1f: 07:0f:97:07:e1:2e:e7:3f:25:a2:29:99:d0:03:7e: cc:77:0b:ac:84:4f:d2:59:2f:b5:de:6f:b7:bc:f3: 7c:a7:be:61:8d:30:63:97:ed:3c:b3:1a:1a:0b:cf: aa:34:f3:48:aa:69:d2:73:07:91:7e:6d:e6:9f:d0: 6f:72:dc:21:07:3b:2d:c1:50:02:d0:60:f1:e0:9b: a8:71:df:49:d4:1b:27:69:0c:8e:b3:60:74:a3:63: 89:8e:7e:69:71:b3:f6:7b:d9:69:5d:2a:18:d0:31: f0:ba:aa:fb:c6:6d:d9:70:99:da:1c:a3:a3:58:63: 81:19:77:42:fd:e2:db:53:18:25:1a:ef:16:e3:33: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:04:8F:F8:23:6C:72:5E:0A:A0:31:7F:FF:69:F6:85:76:A6:91:34 X509v3 Authority Key Identifier: keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:6c:32:92:2f:07:1e:a1:46:f3:67:1a:a9:dc:33:4b:db:bf: bc:09:29:7c:d9:70:3e:22:5c:87:95:48:11:7d:73:47:9e:8e: 7c:b8:8f:7e:4c:5c:b5:16:9a:84:4d:c1:72:92:19:52:69:2d: de:77:d3:5c:0c:32:88:03:d9:c2:20:ed:84:fe:db:0a:f9:a0: 96:22:71:c6:ce:c6:7b:bd:9a:b2:90:a8:05:57:b5:f0:43:bd: 7b:f4:df:28:b5:b6:39:5a:85:02:f9:63:ee:67:e5:f2:77:fe: 25:38:83:fb:21:26:6d:fa:90:b0:58:86:00:83:28:d0:6a:bb: 53:cc:96:5c:8d:89:dd:61:e8:84:ec:3b:d7:dc:7b:4d:39:7b: 03:a6:3d:f5:91:df:f8:0e:36:7e:48:b2:15:08:b1:9f:8b:22: 64:41:87:41:1d:f7:c7:db:5f:60:a2:c3:16:57:a1:2b:7a:11: 52:2b:71:19:0c:e3:48:78:1e:a9:ad:21:5b:c4:2b:d4:97:7b: c2:54:3b:4b:58:0b:a1:77:11:57:2a:a7:54:ca:64:a1:8e:f7: b3:4b:40:2e:25:64:57:73:5e:1a:c0:9e:fa:82:1c:5d:dc:f7: 11:23:82:f0:c5:f5:99:cb:71:bd:b7:8d:28:31:c0:7c:3f:e9: 69:a6:db:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFRjIxMTAvBgNVBAUTKDQ5QzlFOUUzMjI3Q0Q1NUFEMjlBMjEzQ0JBQTE3NDc4 NUExNjVDN0UwHhcNMjUwNDI0MTc1ODA4WhcNMjUwNTAxMTc1ODA4WjAYMRYwFAYD VQQDEw02ODBhN2JiMC1lNjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWxZgjjXyU2hdO8PMkDRMufWeumRgw1Hp59z69ibSwxi8HwqkkWg/asYK9/u 7BwsHZu2u8TJp/vDdE51TH6DHjQZNcCsm37zI6vX6hK/Nti9wzhYPYWKhCWOSjz0 /vQO2ylp6+7CGWla3PArurqh7/1PzIbbAB8HD5cH4S7nPyWiKZnQA37MdwushE/S WS+13m+3vPN8p75hjTBjl+08sxoaC8+qNPNIqmnScweRfm3mn9BvctwhBzstwVAC 0GDx4Juocd9J1BsnaQyOs2B0o2OJjn5pcbP2e9lpXSoY0DHwuqr7xm3ZcJnaHKOj WGOBGXdC/eLbUxglGu8W4zMgzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUEj/gj bHJeCqAxf/9p9oV2ppE0MB8GA1UdIwQYMBaAFEnJ6eMifNVa0pohPLqhdHhaFlx+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEVGMi9CNjQ0MUVCNkQy QkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFWclNtaUU4dXFGMGVGb1dY SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NjbnA0eUo4MVZyU21pRTh1cUYwZUZvV1hINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEVGMi9CNjQ0MUVCNkQyQkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFW clNtaUU4dXFGMGVGb1dYSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFbDKSLwceoUbzZxqp3DNL27+8CSl82XA+IlyHlUgRfXNHno58uI9+ TFy1FpqETcFykhlSaS3ed9NcDDKIA9nCIO2E/tsK+aCWInHGzsZ7vZqykKgFV7Xw Q7179N8otbY5WoUC+WPuZ+Xyd/4lOIP7ISZt+pCwWIYAgyjQartTzJZcjYndYeiE 7DvX3HtNOXsDpj31kd/4DjZ+SLIVCLGfiyJkQYdBHffH219gosMWV6ErehFSK3EZ DONIeB6prSFbxCvUl3vCVDtLWAuhdxFXKqdUymShjvezS0AuJWRXc14awJ76ghxd 3PcRI4LwxfWZy3G9t40oMcB8P+lpptt3 -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:35 2025 by rpki-client