$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json) Hash identifier: V9az+RJAk/6VSwBRR+znb++Jk5yqnlqKKlFvndR11Gk= Subject key identifier: F4:53:48:FB:7E:67:E0:05:51:BA:FC:C8:0C:B1:F2:EE:D0:23:92:E7 Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft Manifest number: 01A1 Signing time: Sat 05 Apr 2025 02:58:09 +0000 Manifest this update: Sat 05 Apr 2025 02:58:08 +0000 Manifest next update: Sat 12 Apr 2025 02:58:08 +0000 Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: 49GCcUfUtCk9N2OLf4Kge8UQVpuNE65AWYEBN2O0e8o=) 2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: 2ess2+aqjcLPy2+BGdLHTuvI+dzY0+eD7HCX2k3smvc=) 3: 4014542AED7D11ED8302706AC4F9AE02.roa (hash: zD9nEEeJbLqL6PpRHEJS0ZOHFslLXEVcLH+yPO4OeY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC Validity Not Before: Apr 5 02:58:08 2025 GMT Not After : Apr 12 02:58:08 2025 GMT Subject: CN=67f09c40-fa61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5c:02:94:d8:18:6b:bc:21:78:e5:12:cd:2b: 04:a7:80:3f:91:e3:37:3c:e0:58:b5:90:fe:60:70: 5f:74:17:de:1f:db:b3:73:7f:d6:9b:47:cd:a0:16: 6f:37:cc:a7:8a:e3:3e:10:bf:eb:ed:20:fe:2a:fe: b5:c7:2b:11:5d:d0:1f:25:5a:7a:f0:a8:ea:e9:d5: 3b:8c:9b:50:5a:d9:ae:e0:7d:d7:90:59:28:6b:d8: 42:00:9b:74:c5:d2:7f:18:95:07:29:0d:29:84:d6: 14:79:87:bd:65:5f:4f:35:f9:9d:f9:10:25:df:bd: fc:6a:ae:ec:56:ef:ea:37:9f:e4:02:ea:46:f5:70: 80:1b:7a:d1:aa:d0:ed:46:0f:40:64:00:57:9c:b2: 0c:b5:4d:d6:90:36:b2:b9:b6:66:52:b9:23:4c:ff: 1d:20:7f:f2:20:28:ed:dc:6b:4d:a8:d9:27:ba:ce: 55:b1:e8:a1:2b:28:f7:c4:21:b4:d2:77:96:38:8e: dd:08:48:73:ec:bb:52:bf:e8:5e:54:87:d4:46:2a: 82:78:9d:a6:ac:b0:4b:0c:ef:f1:c7:47:e8:fc:9c: 36:b2:3a:c5:8a:0f:91:cd:58:6e:05:c0:cf:26:67: ed:a1:83:27:c3:08:81:4e:e4:d2:a5:06:d2:e9:0c: ab:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:53:48:FB:7E:67:E0:05:51:BA:FC:C8:0C:B1:F2:EE:D0:23:92:E7 X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fe:03:94:09:08:ab:e3:4d:a8:45:9e:3f:a8:d6:d4:ae:c6: 58:e6:f7:af:68:03:5f:9b:55:e2:f4:79:17:4d:b5:a2:df:9d: ff:b9:bf:66:21:96:6f:de:c9:7c:be:8c:21:a4:44:0b:69:47: c5:04:f8:05:18:8e:ea:5a:04:f6:1e:9e:8f:43:97:66:87:20: 54:3e:b0:fc:5f:4d:5d:86:49:9e:60:09:e3:ed:79:40:2b:77: 00:9e:00:49:ca:56:53:f8:1d:4e:7a:b4:75:6d:8b:82:18:49: d9:71:c5:80:a4:f7:10:90:94:06:36:27:93:8a:73:40:2f:f4: 7d:c9:97:4c:ee:c6:97:27:ed:ad:2d:48:c2:b7:4f:fb:18:4b: 27:55:95:40:fd:fc:32:aa:c4:76:c7:d9:9b:b0:cb:ba:2a:03: 4b:d0:0e:97:65:d0:b0:b3:73:25:1a:8a:5f:7a:dd:6b:f4:e4: eb:a7:9a:41:5a:e5:e8:dc:a7:a5:7a:62:a9:4a:b1:3d:52:aa: 1d:03:29:9c:0d:f7:11:0f:18:4c:86:a2:b3:60:c6:a0:78:39: f2:a5:cf:20:27:e1:56:0f:b6:97:ff:c9:ef:11:d1:71:55:30: 50:0f:12:fe:db:05:4f:ac:88:c3:3a:a0:3d:3d:1c:1a:17:e1: 04:a5:bf:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjUwNDA1MDI1ODA4WhcNMjUwNDEyMDI1ODA4WjAYMRYwFAYD VQQDEw02N2YwOWM0MC1mYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FwClNgYa7wheOUSzSsEp4A/keM3POBYtZD+YHBfdBfeH9uzc3/Wm0fNoBZv N8yniuM+EL/r7SD+Kv61xysRXdAfJVp68Kjq6dU7jJtQWtmu4H3XkFkoa9hCAJt0 xdJ/GJUHKQ0phNYUeYe9ZV9PNfmd+RAl3738aq7sVu/qN5/kAupG9XCAG3rRqtDt Rg9AZABXnLIMtU3WkDayubZmUrkjTP8dIH/yICjt3GtNqNknus5VseihKyj3xCG0 0neWOI7dCEhz7LtSv+heVIfURiqCeJ2mrLBLDO/xx0fo/Jw2sjrFig+RzVhuBcDP JmftoYMnwwiBTuTSpQbS6QyrMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRTSPt+ Z+AFUbr8yAyx8u7QI5LnMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3 U3N0cUJLRlBDamJNNkZZUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK/gOUCQir402oRZ4/qNbUrsZY5vevaANfm1Xi9HkXTbWi353/ub9m IZZv3sl8vowhpEQLaUfFBPgFGI7qWgT2Hp6PQ5dmhyBUPrD8X01dhkmeYAnj7XlA K3cAngBJylZT+B1OerR1bYuCGEnZccWApPcQkJQGNieTinNAL/R9yZdM7saXJ+2t LUjCt0/7GEsnVZVA/fwyqsR2x9mbsMu6KgNL0A6XZdCws3MlGopfet1r9OTrp5pB WuXo3KelemKpSrE9UqodAymcDfcRDxhMhqKzYMageDnypc8gJ+FWD7aX/8nvEdFx VTBQDxL+2wVPrIjDOqA9PRwaF+EEpb8N -----END CERTIFICATE-----Generated at Sat Apr 5 08:58:32 2025 by rpki-client