$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json) Hash identifier: XajDBscu8sd0FV/zmDoxkD1s4hx4fBTWFYo1b4WPtq4= Subject key identifier: 90:3E:5B:78:9E:E7:B4:F3:32:95:BB:E3:CA:CF:51:93:1B:D3:60:D2 Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Certificate serial: 0E8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft Manifest number: 0E83 Signing time: Wed 12 Mar 2025 17:37:23 +0000 Manifest this update: Wed 12 Mar 2025 17:37:22 +0000 Manifest next update: Wed 19 Mar 2025 17:37:22 +0000 Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: Z8DxDE3BQMljALwbZCgNstp2yN8ob4V0nmbSnKO76NM=) 2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: IptQh9J7jeiBWTQD/hPt8ei062oDoKw0nZ49KCuQKMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 17:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3724 (0xe8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E898 Validity Not Before: Mar 12 17:37:22 2025 GMT Not After : Mar 19 17:37:22 2025 GMT Subject: CN=67d1c652-5b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:a7:e5:f3:50:8f:4d:c5:ef:15:ec:b4:32: 3e:e6:91:08:c6:e4:d8:a2:a8:9b:3e:c2:a9:b7:c5: 0e:9b:1f:d8:ed:f0:96:20:c5:7e:89:bd:70:11:02: 19:d6:6f:b8:2d:c6:b0:42:38:65:eb:1a:ff:d0:35: 44:18:3f:04:38:d1:00:60:ce:e7:47:e2:11:a9:17: b3:d7:25:40:5d:fd:53:4e:d8:01:45:f0:8f:88:95: 79:49:fc:58:4d:ba:54:71:14:da:d5:4e:2d:b7:a5: e3:e8:ce:76:d9:a4:82:1e:5a:fa:1c:91:68:b0:41: 31:1e:d9:a6:85:8f:43:4e:2b:81:87:3a:8b:d7:cc: 89:a5:89:24:0f:ee:0c:bf:72:fd:57:8a:85:f9:32: 53:c9:65:74:03:ea:4d:61:ee:26:60:92:eb:16:3c: 3a:fa:7b:a9:f5:62:4a:f5:91:b1:cf:84:3d:0f:93: 9b:5f:ff:c0:29:f9:36:29:10:44:80:f9:ae:31:d1: 61:ba:52:11:37:86:01:a9:b6:05:8e:52:8c:72:37: 6d:e4:65:9f:7a:a6:dd:87:67:41:22:3d:d6:91:11: 20:53:b9:c0:50:93:c3:68:ca:6c:a6:eb:b6:aa:3b: e2:b6:a0:39:86:65:c4:bb:66:61:e9:8d:f1:f9:28: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3E:5B:78:9E:E7:B4:F3:32:95:BB:E3:CA:CF:51:93:1B:D3:60:D2 X509v3 Authority Key Identifier: keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:2c:98:34:e7:20:de:b2:9c:3c:8a:5b:33:5d:5d:78:28:6b: 58:88:27:cb:b1:4e:eb:fc:48:ba:30:06:30:2b:00:68:b9:87: 21:cc:bd:df:24:c9:ef:73:94:01:24:ac:eb:c4:b5:ca:2b:77: c6:5a:09:6f:f8:5f:6b:91:56:a6:70:d3:4c:a1:8f:84:93:e2: 2a:bc:91:6c:db:df:82:0c:1c:d6:cc:17:be:fa:b0:c2:f2:f9: 75:5a:57:d5:17:ad:d5:97:5c:79:01:90:d3:20:d8:17:94:6b: 30:09:48:dd:cb:a4:4e:e9:0d:e5:d9:49:11:0c:4f:de:c0:39: d8:28:07:75:40:e3:7b:c7:ff:af:94:1b:d2:ad:a7:a7:58:5d: 39:f8:fd:72:6d:67:7a:4a:0b:6b:fe:93:f8:66:a4:27:36:7e: 43:cd:63:d1:83:80:fe:2a:d0:28:7e:ae:1f:68:b1:22:33:45: 37:72:85:27:57:90:20:1b:9b:36:c0:9c:1a:04:7e:8a:3f:9c: 22:0f:af:46:56:8b:4b:12:fc:f0:db:8f:11:b8:67:cb:e4:57: d9:43:2d:36:15:4e:0d:a4:88:f5:83:5b:1c:36:2a:d1:69:41: 7e:07:c2:d2:03:5e:95:1d:4f:8c:78:81:a4:f9:e7:22:67:11: ff:25:f7:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4OTgxMTAvBgNVBAUTKDQ4MkRBREI5OTJERTJDRjFCRjk5MDgzNjQ3OEUxOTk0 NDk5NUIxRTAwHhcNMjUwMzEyMTczNzIyWhcNMjUwMzE5MTczNzIyWjAYMRYwFAYD VQQDEw02N2QxYzY1Mi01YjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqun5fNQj03F7xXstDI+5pEIxuTYoqibPsKpt8UOmx/Y7fCWIMV+ib1wEQIZ 1m+4LcawQjhl6xr/0DVEGD8EONEAYM7nR+IRqRez1yVAXf1TTtgBRfCPiJV5SfxY TbpUcRTa1U4tt6Xj6M522aSCHlr6HJFosEExHtmmhY9DTiuBhzqL18yJpYkkD+4M v3L9V4qF+TJTyWV0A+pNYe4mYJLrFjw6+nup9WJK9ZGxz4Q9D5ObX//AKfk2KRBE gPmuMdFhulIRN4YBqbYFjlKMcjdt5GWfeqbdh2dBIj3WkREgU7nAUJPDaMpspuu2 qjvitqA5hmXEu2Zh6Y3x+SiVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJA+W3ie 57TzMpW748rPUZMb02DSMB8GA1UdIwQYMBaAFEgtrbmS3izxv5kINkeOGZRJlbHg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg5OC8yMTFDNjQ0NjhD MjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQR19tUWcyUjQ0WmxFbVZz ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMnR1WkxlTFBHX21RZzJSNDRabEVtVnNlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg5OC8yMTFDNjQ0NjhDMjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQ R19tUWcyUjQ0WmxFbVZzZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZLJg05yDespw8ilszXV14KGtYiCfLsU7r/Ei6MAYwKwBouYchzL3f JMnvc5QBJKzrxLXKK3fGWglv+F9rkVamcNNMoY+Ek+IqvJFs29+CDBzWzBe++rDC 8vl1WlfVF63Vl1x5AZDTINgXlGswCUjdy6RO6Q3l2UkRDE/ewDnYKAd1QON7x/+v lBvSraenWF05+P1ybWd6Sgtr/pP4ZqQnNn5DzWPRg4D+KtAofq4faLEiM0U3coUn V5AgG5s2wJwaBH6KP5wiD69GVotLEvzw248RuGfL5FfZQy02FU4NpIj1g1scNirR aUF+B8LSA16VHU+MeIGk+eciZxH/Jfdw -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:20 2025 by rpki-client