$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json) Hash identifier: XpnWzneI+sLc4Cw9u9+CrvlWnWPSyn5pPfTlTUhP4Ic= Subject key identifier: 56:3E:A5:42:81:6C:DE:77:20:08:60:BC:07:D0:FB:4E:41:EC:14:5C Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft Manifest number: 36 Signing time: Thu 01 May 2025 06:38:47 +0000 Manifest this update: Thu 01 May 2025 06:38:46 +0000 Manifest next update: Thu 08 May 2025 06:38:46 +0000 Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: iJspb0l8mTrIqRzY46kbWlAkKQIkqC3FCJUVSKTdD5w=) 2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: XLgRz6Ys+AWKVb/kmctJ9W9xNxym6vJibxlk+kHS4Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 06:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Validity Not Before: May 1 06:38:46 2025 GMT Not After : May 8 06:38:46 2025 GMT Subject: CN=681316f6-d51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:75:53:98:7a:b0:b8:0a:d4:db:ae:38:9c: 01:00:f9:aa:44:48:7c:fa:51:8f:dc:b2:3e:71:ae: b8:cc:cf:9a:7d:a0:a6:39:6d:9f:2a:c8:72:d9:6f: 6f:9e:d4:98:8e:dd:ed:c2:9a:95:26:af:78:52:31: ad:c4:83:f9:3c:54:81:e0:03:e3:ae:b8:f6:07:d5: 36:6e:f7:79:3f:02:d3:e2:af:04:0b:c0:22:4d:5c: 0c:ca:d3:aa:bf:a7:b7:f4:9c:e8:d6:6c:27:99:e1: 08:84:34:23:b4:3e:9f:03:ae:3f:5b:fd:1a:f3:aa: fe:71:16:5a:a9:5c:37:ab:42:e9:30:2a:14:ef:2c: 9e:9b:bb:a8:70:56:46:6f:08:7a:78:0b:dc:b9:32: 7f:37:8a:3f:97:85:37:6e:b4:e6:9f:de:eb:7d:58: 05:0d:af:e4:89:ee:60:be:a4:97:18:77:5e:a0:4e: 14:83:4d:8f:7b:f1:2f:31:da:69:72:a0:91:01:16: ae:81:34:54:4d:5a:6a:48:d3:a2:8a:b9:cb:97:84: dc:c9:1c:c3:f9:11:dc:87:c4:4c:90:8c:b5:b1:76: 25:0d:66:6e:be:52:c4:ec:bd:63:3e:c8:65:c9:9a: 24:f0:96:10:c9:36:b4:ad:ae:3e:b4:7d:61:c3:66: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3E:A5:42:81:6C:DE:77:20:08:60:BC:07:D0:FB:4E:41:EC:14:5C X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ac:79:31:76:61:74:2f:80:5c:67:39:6e:a7:e3:57:c9:70: d3:a5:86:76:f5:e1:ad:9a:e6:20:53:41:75:9e:d0:31:4b:82: 5f:50:a8:78:d2:24:43:10:48:cc:7c:fc:17:be:00:52:4f:36: 1b:e9:cb:4b:6d:33:59:98:99:fa:6e:c9:ee:66:91:89:f5:ef: 5a:d2:79:0b:16:f5:5f:ff:c1:15:13:49:f1:00:34:69:3c:61: f1:cb:c3:49:2c:43:5c:ba:8b:bc:03:74:ef:8c:e3:d3:da:af: 81:37:2a:d8:3b:b3:73:f1:7d:96:51:99:ef:20:12:69:c5:84: 9d:12:3a:01:82:d7:09:89:68:1f:7d:05:52:32:27:79:d7:5e: 4a:68:23:0b:57:48:d8:3e:22:e7:7b:53:c5:32:0a:3f:3c:ee: dd:e0:e3:20:8d:9b:66:ff:c4:45:ed:89:b9:b8:d9:b5:73:7c: 7f:e1:55:47:bd:db:60:f2:f9:50:ce:3e:dc:3f:20:b8:27:65: 88:6d:c3:d5:da:dd:f8:b1:19:11:e3:32:00:c7:4b:5a:9f:dc: 3e:28:9b:f8:11:60:47:7c:25:62:a1:75:a6:4e:de:51:9d:e2: 3d:7a:87:f7:ac:5a:20:d6:e0:7c:5a:37:6c:ff:32:9d:2f:38: cd:87:26:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFGNTExMC8GA1UEBRMoNDkxMzY2NzVFN0UyMzRFN0QyRjg4NDU5OThFMkM2MkRC NDg4ODJDQTAeFw0yNTA1MDEwNjM4NDZaFw0yNTA1MDgwNjM4NDZaMBgxFjAUBgNV BAMTDTY4MTMxNmY2LWQ1MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIhnVTmHqwuArU2644nAEA+apESHz6UY/csj5xrrjMz5p9oKY5bZ8qyHLZb2+e 1JiO3e3CmpUmr3hSMa3Eg/k8VIHgA+OuuPYH1TZu93k/AtPirwQLwCJNXAzK06q/ p7f0nOjWbCeZ4QiENCO0Pp8Drj9b/Rrzqv5xFlqpXDerQukwKhTvLJ6bu6hwVkZv CHp4C9y5Mn83ij+XhTdutOaf3ut9WAUNr+SJ7mC+pJcYd16gThSDTY978S8x2mly oJEBFq6BNFRNWmpI06KKucuXhNzJHMP5EdyHxEyQjLWxdiUNZm6+UsTsvWM+yGXJ miTwlhDJNrStrj60fWHDZkE5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVj6lQoFs 3ncgCGC8B9D7TkHsFFwwHwYDVR0jBBgwFoAUSRNmdefiNOfS+IRZmOLGLbSIgsow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUY1L0E3NTREMzgwRDZF QzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1JObWRlZmlOT2ZTLUlSWm1PTEdMYlNJZ3NvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz MUY1L0E3NTREMzgwRDZFQzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9m Uy1JUlptT0xHTGJTSWdzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAaseTF2YXQvgFxnOW6n41fJcNOlhnb14a2a5iBTQXWe0DFLgl9QqHjS JEMQSMx8/Be+AFJPNhvpy0ttM1mYmfpuye5mkYn171rSeQsW9V//wRUTSfEANGk8 YfHLw0ksQ1y6i7wDdO+M49Par4E3Ktg7s3PxfZZRme8gEmnFhJ0SOgGC1wmJaB99 BVIyJ3nXXkpoIwtXSNg+Iud7U8UyCj887t3g4yCNm2b/xEXtibm42bVzfH/hVUe9 22Dy+VDOPtw/ILgnZYhtw9Xa3fixGRHjMgDHS1qf3D4om/gRYEd8JWKhdaZO3lGd 4j16h/esWiDW4HxaN2z/Mp0vOM2HJko= -----END CERTIFICATE-----Generated at Sat May 3 02:10:11 2025 by rpki-client