$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json) Hash identifier: thCP5oAJGyXYbQepyVvj+yXZkOR8ruW9dSMfdRYnsSk= Subject key identifier: 56:72:24:AA:49:7A:A0:29:62:95:B3:0F:87:AD:81:3A:8F:5A:70:CD Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Certificate serial: 0EB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft Manifest number: 0EAA Signing time: Fri 30 May 2025 17:51:22 +0000 Manifest this update: Fri 30 May 2025 17:51:22 +0000 Manifest next update: Fri 06 Jun 2025 17:51:22 +0000 Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: U//NGcpLVWcFmb5SkqcSagNJdOuFqWm6BZAyq7zul1s=) 2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: IptQh9J7jeiBWTQD/hPt8ei062oDoKw0nZ49KCuQKMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3763 (0xeb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E898, serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Validity Not Before: May 30 17:51:22 2025 GMT Not After : Jun 6 17:51:22 2025 GMT Subject: CN=6839f01a-df74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:0d:2f:22:6b:69:2b:a6:bd:22:6f:cc:2e: 75:49:ff:b1:e7:e8:48:5a:ab:a8:d1:58:2c:2d:e9: 63:3b:76:e3:fa:2b:83:dd:0e:4f:f6:fe:93:2d:2d: 9e:10:a8:15:bd:4d:79:96:5c:86:c5:d2:4a:e3:a9: 75:f4:d3:ae:34:91:83:51:0e:57:60:78:54:ab:28: 90:b0:bc:13:bf:b5:73:91:5d:de:10:02:79:41:d5: 9e:7c:fb:af:dd:6c:4c:34:e8:a9:97:da:f5:a9:03: c2:12:35:5a:e7:8e:0a:bc:ae:8b:0e:9e:d6:40:67: 30:da:c5:73:9b:66:84:af:cf:8f:f0:31:6d:f0:78: 8f:5a:f8:0e:41:de:92:dc:00:bc:2e:0f:54:ef:d4: 67:44:02:51:27:e6:ad:b1:54:31:d2:66:83:46:2d: 4a:07:26:17:11:67:0c:2e:93:f8:62:a1:2f:36:c3: 73:f4:da:54:c2:ef:97:8f:c2:d6:17:1c:48:3d:81: bd:71:ae:ab:2f:c8:5b:f4:b1:3b:0c:52:76:b8:59: 1b:a0:55:f8:a9:28:7a:a8:1a:18:6f:5f:8e:ba:88: bb:3d:50:81:e9:f0:2a:60:f1:6d:32:e9:26:72:0f: 96:aa:aa:ba:93:51:60:34:26:61:3d:d5:78:54:85: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:72:24:AA:49:7A:A0:29:62:95:B3:0F:87:AD:81:3A:8F:5A:70:CD X509v3 Authority Key Identifier: keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4e:f5:17:cb:0c:38:4a:bc:2d:66:fa:1c:76:10:85:d0:90: 8c:27:ed:89:ba:db:78:08:8e:16:3f:90:3d:9f:7c:e9:7f:fb: e7:ce:2f:f0:03:da:da:a3:8f:57:85:fb:fa:e2:15:ce:d6:aa: a8:b9:57:6b:fe:ea:30:82:bb:ba:28:18:7f:a4:ce:43:e9:1e: fa:6a:fd:ef:05:63:eb:79:d7:44:8e:58:03:39:c8:93:c5:aa: 22:15:52:24:1a:9a:c3:ba:af:16:5b:75:b6:8c:a1:8e:70:03: 55:2a:37:08:b1:19:ae:68:86:ef:85:c7:25:85:0f:1e:67:6d: 30:01:ad:d4:a6:9f:3d:ba:e1:40:db:0a:70:9f:ab:f4:aa:a9: 99:9d:d1:35:5d:a4:23:f8:86:7c:3e:bd:94:b3:d4:b7:90:fc: 39:11:95:ff:3b:79:2f:45:38:e5:6d:d4:c3:1a:30:de:c5:98: 12:5e:96:fb:6c:ff:36:19:8a:54:69:a7:fa:c8:9e:1f:51:f0: 64:3d:ba:8b:64:b6:ec:e3:30:3b:0f:9c:33:3d:a8:d7:a3:f2: be:0a:f8:ab:19:36:8e:39:fb:a4:98:72:4f:de:e4:3f:ad:0b: 32:f1:d2:e1:ff:3d:ec:c3:3a:33:09:61:e6:0d:ec:07:17:60: 46:00:cd:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4OTgxMTAvBgNVBAUTKDQ4MkRBREI5OTJERTJDRjFCRjk5MDgzNjQ3OEUxOTk0 NDk5NUIxRTAwHhcNMjUwNTMwMTc1MTIyWhcNMjUwNjA2MTc1MTIyWjAYMRYwFAYD VQQDEw02ODM5ZjAxYS1kZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTcNLyJraSumvSJvzC51Sf+x5+hIWquo0VgsLeljO3bj+iuD3Q5P9v6TLS2e EKgVvU15llyGxdJK46l19NOuNJGDUQ5XYHhUqyiQsLwTv7VzkV3eEAJ5QdWefPuv 3WxMNOipl9r1qQPCEjVa544KvK6LDp7WQGcw2sVzm2aEr8+P8DFt8HiPWvgOQd6S 3AC8Lg9U79RnRAJRJ+atsVQx0maDRi1KByYXEWcMLpP4YqEvNsNz9NpUwu+Xj8LW FxxIPYG9ca6rL8hb9LE7DFJ2uFkboFX4qSh6qBoYb1+Ouoi7PVCB6fAqYPFtMukm cg+Wqqq6k1FgNCZhPdV4VIWmGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZyJKpJ eqApYpWzD4etgTqPWnDNMB8GA1UdIwQYMBaAFEgtrbmS3izxv5kINkeOGZRJlbHg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg5OC8yMTFDNjQ0NjhD MjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQR19tUWcyUjQ0WmxFbVZz ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMnR1WkxlTFBHX21RZzJSNDRabEVtVnNlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg5OC8yMTFDNjQ0NjhDMjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQ R19tUWcyUjQ0WmxFbVZzZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMTvUXyww4SrwtZvocdhCF0JCMJ+2Jutt4CI4WP5A9n3zpf/vnzi/w A9rao49Xhfv64hXO1qqouVdr/uowgru6KBh/pM5D6R76av3vBWPreddEjlgDOciT xaoiFVIkGprDuq8WW3W2jKGOcANVKjcIsRmuaIbvhcclhQ8eZ20wAa3Upp89uuFA 2wpwn6v0qqmZndE1XaQj+IZ8Pr2Us9S3kPw5EZX/O3kvRTjlbdTDGjDexZgSXpb7 bP82GYpUaaf6yJ4fUfBkPbqLZLbs4zA7D5wzPajXo/K+CvirGTaOOfukmHJP3uQ/ rQsy8dLh/z3swzozCWHmDewHF2BGAM1B -----END CERTIFICATE-----Generated at Sat May 31 15:21:30 2025 by rpki-client