$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json) Hash identifier: NuK0vWsfzm9pMdlhCfC0nun2MtxuwoESq8jSBSR4Vjo= Subject key identifier: C7:43:7F:CA:0C:FB:BD:D1:B3:7F:4A:D7:8E:04:1D:6A:95:D5:B9:88 Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft Manifest number: 0A5F Signing time: Mon 14 Apr 2025 19:31:57 +0000 Manifest this update: Mon 14 Apr 2025 19:31:57 +0000 Manifest next update: Mon 21 Apr 2025 19:31:57 +0000 Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: 5MqpG3DrLeQ3oVasQuLpxhPrhETAYMiEz8dbpPMdPIA=) 2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 0MEjUCGRzvjz5epLH1Yc0e31fL5fFdQ31GIxJUqAOEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 19:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: Apr 14 19:31:57 2025 GMT Not After : Apr 21 19:31:57 2025 GMT Subject: CN=67fd62ad-3e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f5:6c:62:3b:1d:c4:23:2e:91:77:63:8d:04: 19:9e:a6:a9:09:1d:ac:a5:ca:38:af:bd:5a:99:6d: 29:4a:69:5a:cb:7d:00:bc:b0:c9:5e:ac:84:51:83: a2:7a:57:d1:f8:af:2d:f1:87:fc:38:7b:2e:de:51: c6:c2:d8:2f:e6:c3:1a:fa:1d:ce:49:e5:4e:45:59: 0a:4c:dd:e3:24:17:d8:af:02:84:c4:28:8d:3a:73: 87:58:e7:a9:22:69:3b:eb:4a:5c:0d:0b:f3:9e:99: d3:e1:27:09:8f:7e:3a:5f:a3:ee:eb:71:8f:2b:18: ec:43:95:b5:b6:a9:7a:fe:11:9b:86:cc:1d:80:43: 05:18:fc:7f:b9:32:00:a8:0c:75:8c:6a:b7:df:41: a3:c8:81:a8:ae:0e:38:4e:dc:f6:42:d7:28:67:8c: 5c:3e:bc:5a:9e:e0:49:f9:fe:c5:31:36:c5:e2:fc: 47:15:11:7b:61:41:be:c1:a6:29:5e:73:ab:42:5b: 29:ff:0f:a0:8d:ea:4d:fc:7a:0c:d0:8c:a3:cc:f5: 72:7a:56:27:83:db:a7:0e:6b:b0:08:a5:d4:8c:e4: 87:f6:b9:6b:8b:3c:45:77:1c:9b:28:9f:b8:b0:70: c9:09:29:dc:60:ec:7f:3a:8e:fc:09:f7:0e:40:99: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:43:7F:CA:0C:FB:BD:D1:B3:7F:4A:D7:8E:04:1D:6A:95:D5:B9:88 X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b6:94:39:5b:83:64:de:50:03:a7:c5:9e:9d:83:1d:ac:8b: d3:c8:83:17:fd:1c:c7:9c:c2:9a:ce:d2:f2:6f:ce:a8:f7:d3: 44:53:95:c7:fb:f4:28:4e:62:6c:f3:bf:00:eb:e0:a3:1b:99: d0:e5:b7:15:34:ea:85:b6:c7:cd:91:db:c0:25:8f:9a:b9:33: 89:84:9a:e0:00:85:32:c4:6f:e6:e1:1b:43:c8:51:9e:1b:e9: 97:a5:1c:05:36:46:aa:9e:02:85:46:98:a8:72:58:b1:2b:cc: 74:87:77:5c:54:e0:eb:9f:5c:87:3f:4e:af:f4:11:6e:59:54: a2:da:0b:ae:c4:82:86:fe:36:e9:96:25:7d:11:37:51:32:e9: bf:6b:e3:83:f2:61:9a:37:52:ab:36:c6:78:b4:a7:27:79:84: 78:94:ab:2c:2d:af:3d:df:49:aa:5a:d1:95:45:bf:59:22:00: 9e:0b:16:0d:7a:98:1f:c3:93:98:96:eb:43:e1:2d:c3:17:28: 47:04:bf:5a:59:21:c7:2e:67:9a:e3:54:b4:05:80:e3:5b:c0: 35:f8:f7:36:b4:e2:81:99:a1:1f:ad:13:1e:44:47:d6:e9:aa: 8d:f5:f8:83:6f:ce:63:c9:c2:b5:f0:72:a1:27:67:c9:e4:20: 7f:4c:4d:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjUwNDE0MTkzMTU3WhcNMjUwNDIxMTkzMTU3WjAYMRYwFAYD VQQDEw02N2ZkNjJhZC0zZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7vVsYjsdxCMukXdjjQQZnqapCR2spco4r71amW0pSmlay30AvLDJXqyEUYOi elfR+K8t8Yf8OHsu3lHGwtgv5sMa+h3OSeVORVkKTN3jJBfYrwKExCiNOnOHWOep Imk760pcDQvznpnT4ScJj346X6Pu63GPKxjsQ5W1tql6/hGbhswdgEMFGPx/uTIA qAx1jGq330GjyIGorg44Ttz2QtcoZ4xcPrxanuBJ+f7FMTbF4vxHFRF7YUG+waYp XnOrQlsp/w+gjepN/HoM0IyjzPVyelYng9unDmuwCKXUjOSH9rlrizxFdxybKJ+4 sHDJCSncYOx/Oo78CfcOQJkCzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdDf8oM +73Rs39K144EHWqV1bmIMB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3 UmtiSHZBYmlZajRXdm5rRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTtpQ5W4Nk3lADp8WenYMdrIvTyIMX/RzHnMKaztLyb86o99NEU5XH +/QoTmJs878A6+CjG5nQ5bcVNOqFtsfNkdvAJY+auTOJhJrgAIUyxG/m4RtDyFGe G+mXpRwFNkaqngKFRpioclixK8x0h3dcVODrn1yHP06v9BFuWVSi2guuxIKG/jbp liV9ETdRMum/a+OD8mGaN1KrNsZ4tKcneYR4lKssLa8930mqWtGVRb9ZIgCeCxYN epgfw5OYlutD4S3DFyhHBL9aWSHHLmea41S0BYDjW8A1+Pc2tOKBmaEfrRMeREfW 6aqN9fiDb85jycK18HKhJ2fJ5CB/TE3i -----END CERTIFICATE-----Generated at Wed Apr 16 20:18:17 2025 by rpki-client