$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft File: snrsU_-6svW1vAy0fAhwbVBTMhA.mft (raw, json) Hash identifier: jEcURTnigj2P44isjub4wdOdewwabH3mv6EGGRHqgv4= Subject key identifier: 26:57:BF:D1:60:CC:53:7B:64:9A:E2:E7:AB:6A:89:D8:CA:46:CF:20 Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10 Certificate issuer: /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210 Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft Manifest number: 04C3 Signing time: Fri 04 Apr 2025 23:57:19 +0000 Manifest this update: Fri 04 Apr 2025 23:57:18 +0000 Manifest next update: Fri 11 Apr 2025 23:57:18 +0000 Files and hashes: 1: snrsU_-6svW1vAy0fAhwbVBTMhA.crl (hash: SQf06Y779IuvbSJmnGDexySE2Tete4VB3rlN1LMRDRY=) 2: 793A891A1EA111ECA967444FC4F9AE02.roa (hash: TuwY0bH/I8eBppDazNaeZzaGUKdY+8ax5yn8wmQ1iv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A7D6 Validity Not Before: Apr 4 23:57:18 2025 GMT Not After : Apr 11 23:57:18 2025 GMT Subject: CN=67f071de-4d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:35:2e:f4:a5:73:93:ca:6d:6a:c9:7e:a8:81: 41:21:28:3f:e1:fe:48:63:f7:b4:e7:c2:d4:2e:5f: 55:47:15:32:9e:60:ee:e0:bd:93:28:14:07:3b:2d: 93:db:40:ec:5a:e4:f9:24:23:d0:d7:38:a2:51:18: 0d:d3:14:08:5a:89:72:1f:56:94:ad:56:da:ad:ac: ff:fa:04:63:1f:19:e4:31:d6:10:92:cd:17:98:93: da:e5:76:73:08:7a:2d:db:05:c4:5c:64:4b:ce:30: 17:d5:f7:08:91:83:cd:6d:64:19:cc:e2:37:4d:73: db:05:65:b3:bc:c7:28:c6:8e:05:5c:b1:1e:0c:22: 08:53:92:25:08:ed:a2:f0:a7:f8:76:83:d2:d3:c9: 1d:3e:a5:2a:7f:20:03:cc:65:ef:86:43:78:b6:f8: de:e3:9c:6c:f9:9f:cd:ea:14:08:9a:bc:46:f1:56: 3c:f8:c3:5d:2d:02:54:3c:86:53:29:59:39:e4:88: bb:b3:5c:e3:fb:31:31:9c:75:f0:ec:a9:8f:cb:9d: 0d:bb:b3:81:08:9e:eb:d9:56:fd:64:94:af:5a:78: 03:85:a5:f0:db:2a:09:27:73:39:91:00:b3:54:99: 2c:0b:0a:4c:3c:c5:99:97:26:db:55:8e:5b:d7:d6: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:57:BF:D1:60:CC:53:7B:64:9A:E2:E7:AB:6A:89:D8:CA:46:CF:20 X509v3 Authority Key Identifier: keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:df:d4:14:ec:43:d4:0d:d8:27:8b:5c:fe:b7:55:eb:70:76: f5:aa:36:88:20:96:12:e4:9f:20:a6:3e:ef:74:19:41:d2:c8: 7b:05:0c:61:fe:ec:bd:11:b1:03:e8:99:43:91:1f:76:af:26: a9:52:87:a2:84:b1:7f:d4:3c:ae:1d:f3:c5:b6:66:b5:f8:d2: 9f:17:93:97:42:be:4e:d8:35:82:0f:51:93:30:ba:70:01:e8: 78:d1:ae:fa:11:2a:c3:5b:bb:28:fe:cd:30:e5:be:83:70:bc: 65:56:68:48:d4:13:d8:70:3b:cd:5a:77:48:a2:90:9e:d4:3e: bb:3a:d9:bc:c5:6b:2a:51:c6:1a:37:fd:e6:cb:5a:e7:05:35: 23:b6:55:80:6b:06:0f:8b:4b:60:9d:c5:9d:e1:9d:46:ad:d6: b4:99:02:b7:5c:fb:4c:18:11:f0:5c:28:7f:00:cc:c8:79:89: 42:b2:89:88:2c:e2:ae:f9:f3:f5:57:8b:61:3d:74:9e:ad:b9: 6e:45:5f:f2:77:83:d4:a6:e5:cd:3b:89:1a:e6:4b:94:d6:3a: 1a:34:b2:0d:7b:a9:8d:f6:b8:a7:5f:9a:e3:f3:03:c2:86:cc: 9b:34:3d:60:d5:3e:89:73:43:09:56:a1:06:ce:fd:cf:39:6e: fc:74:3d:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE3RDYxMTAvBgNVBAUTKEIyN0FFQzUzRkZCQUIyRjVCNUJDMENCNDdDMDg3MDZE NTA1MzMyMTAwHhcNMjUwNDA0MjM1NzE4WhcNMjUwNDExMjM1NzE4WjAYMRYwFAYD VQQDEw02N2YwNzFkZS00ZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzUu9KVzk8ptasl+qIFBISg/4f5IY/e058LULl9VRxUynmDu4L2TKBQHOy2T 20DsWuT5JCPQ1ziiURgN0xQIWolyH1aUrVbaraz/+gRjHxnkMdYQks0XmJPa5XZz CHot2wXEXGRLzjAX1fcIkYPNbWQZzOI3TXPbBWWzvMcoxo4FXLEeDCIIU5IlCO2i 8Kf4doPS08kdPqUqfyADzGXvhkN4tvje45xs+Z/N6hQImrxG8VY8+MNdLQJUPIZT KVk55Ii7s1zj+zExnHXw7KmPy50Nu7OBCJ7r2Vb9ZJSvWngDhaXw2yoJJ3M5kQCz VJksCwpMPMWZlybbVY5b19bmOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZXv9Fg zFN7ZJri56tqidjKRs8gMB8GA1UdIwQYMBaAFLJ67FP/urL1tbwMtHwIcG1QUzIQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTdENi9ERDhFNTcyNDFF OUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2VzF2QXkwZkFod2JWQlRN aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NucnNVXy02c3ZXMXZBeTBmQWh3YlZCVE1oQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTdENi9ERDhFNTcyNDFFOUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2 VzF2QXkwZkFod2JWQlRNaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA139QU7EPUDdgni1z+t1XrcHb1qjaIIJYS5J8gpj7vdBlB0sh7BQxh /uy9EbED6JlDkR92ryapUoeihLF/1DyuHfPFtma1+NKfF5OXQr5O2DWCD1GTMLpw Aeh40a76ESrDW7so/s0w5b6DcLxlVmhI1BPYcDvNWndIopCe1D67Otm8xWsqUcYa N/3my1rnBTUjtlWAawYPi0tgncWd4Z1Grda0mQK3XPtMGBHwXCh/AMzIeYlCsomI LOKu+fP1V4thPXSerbluRV/yd4PUpuXNO4ka5kuU1joaNLINe6mN9rinX5rj8wPC hsybND1g1T6Jc0MJVqEGzv3POW78dD2t -----END CERTIFICATE-----Generated at Sun Apr 6 08:43:39 2025 by rpki-client