$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json) Hash identifier: UQxKS8oy6THVYlI1ovMryZpOumo9aQyeocrSTj2Wzn0= Subject key identifier: 10:EC:0B:75:3E:74:97:C9:36:03:D2:DC:A1:C4:5F:13:02:60:E0:93 Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft Manifest number: 4E Signing time: Thu 19 Jun 2025 06:40:43 +0000 Manifest this update: Thu 19 Jun 2025 06:40:42 +0000 Manifest next update: Thu 26 Jun 2025 06:40:42 +0000 Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: hSrRSDqr0ycqaPoKsWiEzYjPpubG6ffQv4UMPEjYGr4=) 2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: XLgRz6Ys+AWKVb/kmctJ9W9xNxym6vJibxlk+kHS4Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Validity Not Before: Jun 19 06:40:42 2025 GMT Not After : Jun 26 06:40:42 2025 GMT Subject: CN=6853b0eb-015f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:95:a6:21:76:05:b4:03:a4:1b:c5:6e:73: 41:67:8b:6e:36:8b:50:89:96:e7:90:d6:86:d1:10: e6:fb:75:e9:08:b5:b8:fd:4b:06:34:6a:49:45:f9: 99:2c:ef:48:b6:ff:99:1f:db:e2:39:8c:aa:7c:b4: 50:cb:62:9e:59:99:d5:b2:09:44:b7:37:a9:14:74: b8:1b:da:09:9b:af:6d:c2:01:74:cd:5f:78:28:86: 99:17:4c:73:30:13:b1:ec:0b:e4:e4:11:87:21:c7: 83:38:52:0a:8d:9b:8a:3b:06:ab:d3:de:26:b2:12: 9a:e8:06:1d:df:47:29:6a:56:18:33:58:f1:bb:46: 14:7c:e0:80:e8:19:0a:37:9c:8c:9c:c9:a7:90:fc: 59:8b:a6:64:e0:d9:5c:18:bb:8f:bf:05:a4:45:c0: c5:bd:ec:94:9f:02:21:35:d6:45:30:8f:a1:f2:a2: b5:dd:b9:43:e1:28:88:7a:e5:df:ef:49:93:3c:e4: 2b:e2:b7:01:7a:e2:eb:87:68:e7:df:e8:69:01:e8: fa:54:ab:da:f2:ad:14:af:f4:84:22:5e:1a:0c:ab: 35:73:0b:97:f5:74:cc:57:ab:14:67:d4:ca:5d:5c: 21:c2:bb:61:29:f1:8e:f5:ad:f7:fa:25:7e:a6:5c: 8e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EC:0B:75:3E:74:97:C9:36:03:D2:DC:A1:C4:5F:13:02:60:E0:93 X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a8:6a:fa:59:63:ec:92:8a:a7:9d:3d:34:12:95:4c:fe:18: eb:81:f8:de:d6:03:98:6f:75:d6:72:cd:c5:b3:1f:45:a8:a9: b9:1b:5d:43:06:13:59:7c:43:ee:28:8d:d0:c3:87:22:65:bf: 02:98:7c:d6:46:e0:86:91:88:2e:4d:d7:fe:2e:c4:16:92:7f: 8c:37:cf:ff:fa:70:60:f4:dd:0c:fe:78:92:9a:52:8a:08:99: 0f:a8:0a:49:c9:15:65:25:8d:4b:64:f2:fa:ce:74:88:c9:4c: a2:25:73:47:ed:4f:cb:fe:83:9e:ce:d4:88:4d:e5:ea:6e:59: 2c:5f:50:99:19:e9:60:92:78:16:3a:61:a4:dc:94:fe:6a:14: a0:e3:1c:cc:9f:8e:3f:8f:77:b2:92:fb:eb:af:00:8d:40:07: 0a:6c:8e:6b:cc:40:a5:14:47:ba:fe:eb:e9:75:63:54:6a:b4: ae:db:a6:40:77:d8:6f:67:55:f1:e8:9e:ab:32:8e:ba:89:99: be:6c:01:95:ea:3b:d1:16:43:38:ef:77:d6:26:7f:73:37:0b: b8:f6:c6:99:ae:05:35:ef:1f:14:df:cd:9f:30:a1:82:f4:df: 9b:ce:08:31:ab:99:17:53:7f:f2:09:fc:34:c9:53:e8:4f:ac: 13:15:3e:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFGNTExMC8GA1UEBRMoNDkxMzY2NzVFN0UyMzRFN0QyRjg4NDU5OThFMkM2MkRC NDg4ODJDQTAeFw0yNTA2MTkwNjQwNDJaFw0yNTA2MjYwNjQwNDJaMBgxFjAUBgNV BAMTDTY4NTNiMGViLTAxNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSVpWmIXYFtAOkG8Vuc0Fni242i1CJlueQ1obREOb7dekItbj9SwY0aklF+Zks 70i2/5kf2+I5jKp8tFDLYp5ZmdWyCUS3N6kUdLgb2gmbr23CAXTNX3gohpkXTHMw E7HsC+TkEYchx4M4UgqNm4o7BqvT3iayEproBh3fRylqVhgzWPG7RhR84IDoGQo3 nIycyaeQ/FmLpmTg2VwYu4+/BaRFwMW97JSfAiE11kUwj6HyorXduUPhKIh65d/v SZM85CvitwF64uuHaOff6GkB6PpUq9ryrRSv9IQiXhoMqzVzC5f1dMxXqxRn1Mpd XCHCu2Ep8Y71rff6JX6mXI5pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEOwLdT50 l8k2A9LcocRfEwJg4JMwHwYDVR0jBBgwFoAUSRNmdefiNOfS+IRZmOLGLbSIgsow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUY1L0E3NTREMzgwRDZF QzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1JObWRlZmlOT2ZTLUlSWm1PTEdMYlNJZ3NvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz MUY1L0E3NTREMzgwRDZFQzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9m Uy1JUlptT0xHTGJTSWdzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIqoavpZY+ySiqedPTQSlUz+GOuB+N7WA5hvddZyzcWzH0WoqbkbXUMG E1l8Q+4ojdDDhyJlvwKYfNZG4IaRiC5N1/4uxBaSf4w3z//6cGD03Qz+eJKaUooI mQ+oCknJFWUljUtk8vrOdIjJTKIlc0ftT8v+g57O1IhN5epuWSxfUJkZ6WCSeBY6 YaTclP5qFKDjHMyfjj+Pd7KS++uvAI1ABwpsjmvMQKUUR7r+6+l1Y1RqtK7bpkB3 2G9nVfHonqsyjrqJmb5sAZXqO9EWQzjvd9Ymf3M3C7j2xpmuBTXvHxTfzZ8woYL0 35vOCDGrmRdTf/IJ/DTJU+hPrBMVPvQ= -----END CERTIFICATE-----Generated at Fri Jun 20 14:18:10 2025 by rpki-client