$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json) Hash identifier: YnyA/Ct4FpHeRkWY8KzWkWIXmOY4d7wO+VpiIhMoIJw= Subject key identifier: 0D:64:6B:F9:B0:87:52:9F:DA:86:61:2B:54:BD:FB:EC:E8:74:93:7E Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 0A82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft Manifest number: 0A7C Signing time: Thu 12 Jun 2025 19:23:45 +0000 Manifest this update: Thu 12 Jun 2025 19:23:44 +0000 Manifest next update: Thu 19 Jun 2025 19:23:44 +0000 Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: bxZqSonjt4Sz3Pt5gQvKI1U+6dmO+SzKiZ08feqg6B8=) 2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 0MEjUCGRzvjz5epLH1Yc0e31fL5fFdQ31GIxJUqAOEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2690 (0xa82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: Jun 12 19:23:44 2025 GMT Not After : Jun 19 19:23:44 2025 GMT Subject: CN=684b2940-05d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:53:7d:19:3e:7b:78:8b:8b:6a:bd:13:a8: 9b:84:da:2b:2c:a1:7a:9b:28:6f:6a:bc:65:c7:91: 1f:e3:80:ca:b5:78:47:de:c3:11:c1:4d:88:54:c7: e5:91:97:7b:84:5f:66:e7:8e:78:b1:ca:7d:a6:22: 58:51:30:6c:ef:d3:66:de:d2:55:2b:71:f6:56:36: c8:d5:6c:c7:53:4b:87:a5:75:ef:3b:f2:b8:06:02: 07:a8:09:6e:a5:a6:df:8b:23:a3:36:3e:ca:c0:db: af:81:0d:ab:9c:e4:52:c9:f9:60:5a:33:95:fa:d0: 2d:bd:78:8a:de:2b:18:c0:0b:d7:f2:33:49:5d:fd: 8e:c5:29:f1:fe:ec:c8:c1:65:dc:76:f0:96:29:25: ba:9f:32:f4:72:36:86:94:11:eb:d2:db:52:f1:f2: b8:9a:2d:b7:fa:2b:17:5a:9a:a8:e5:96:1d:9f:26: a7:42:c3:3c:56:57:df:7b:47:9e:94:4d:13:8a:83: 06:1e:9d:ec:d6:36:dd:79:ba:fe:ae:0e:e7:f3:8c: 75:28:1d:bc:05:34:9d:77:00:50:ee:d9:57:27:34: 96:0b:37:ad:d6:a2:7e:85:dd:3a:34:b1:28:46:b0: d2:e6:96:ba:78:73:40:c4:ba:fb:64:46:a3:35:0b: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:64:6B:F9:B0:87:52:9F:DA:86:61:2B:54:BD:FB:EC:E8:74:93:7E X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ed:be:c4:2d:44:f2:75:61:2e:61:a7:d6:da:18:a4:89:24: 81:62:51:6c:42:33:f1:56:1e:23:51:8a:52:f9:4d:2e:05:da: c7:e7:9a:07:88:9c:3b:b0:15:2b:b7:0c:43:ac:c2:42:bb:ec: 19:78:6f:5f:18:cd:18:8c:f0:e0:03:3c:63:9d:53:ea:e1:b0: 1a:8f:93:26:f0:cc:d7:7b:b8:a5:0c:1e:0b:c4:eb:1d:cb:98: ee:e4:06:cf:05:23:2a:b3:16:5d:d9:c4:41:0e:83:bc:89:45: 2f:c2:6f:ee:57:3c:c8:9b:4b:2b:3c:af:4f:63:7b:42:82:1b: 0b:01:f0:57:4d:d7:0d:9b:1d:f2:f1:0d:b7:26:3f:f7:63:98: e2:7b:a3:d1:cb:50:f5:59:50:f3:14:22:2c:86:bd:4f:3f:47: f4:1a:16:3a:38:7d:03:d8:3a:31:e1:1d:cc:8c:e7:2b:1f:04: 8c:d8:62:2a:4b:0f:87:0c:b6:ce:af:54:f3:b1:41:ae:1b:52: 0b:fd:71:0b:7a:de:a3:3d:72:ff:4e:bc:18:3c:3e:60:08:22: ec:28:ef:8d:f8:84:88:aa:3e:aa:45:c9:0e:07:3c:1a:43:73: b8:5f:40:a1:66:01:43:ae:f1:75:43:f3:05:71:3b:d7:fc:04: bd:bf:01:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjUwNjEyMTkyMzQ0WhcNMjUwNjE5MTkyMzQ0WjAYMRYwFAYD VQQDEw02ODRiMjk0MC0wNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdFTfRk+e3iLi2q9E6ibhNorLKF6myhvarxlx5Ef44DKtXhH3sMRwU2IVMfl kZd7hF9m5454scp9piJYUTBs79Nm3tJVK3H2VjbI1WzHU0uHpXXvO/K4BgIHqAlu pabfiyOjNj7KwNuvgQ2rnORSyflgWjOV+tAtvXiK3isYwAvX8jNJXf2OxSnx/uzI wWXcdvCWKSW6nzL0cjaGlBHr0ttS8fK4mi23+isXWpqo5ZYdnyanQsM8Vlffe0ee lE0TioMGHp3s1jbdebr+rg7n84x1KB28BTSddwBQ7tlXJzSWCzet1qJ+hd06NLEo RrDS5pa6eHNAxLr7ZEajNQvbvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1ka/mw h1Kf2oZhK1S9++zodJN+MB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3 UmtiSHZBYmlZajRXdm5rRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp7b7ELUTydWEuYafW2hikiSSBYlFsQjPxVh4jUYpS+U0uBdrH55oH iJw7sBUrtwxDrMJCu+wZeG9fGM0YjPDgAzxjnVPq4bAaj5Mm8MzXe7ilDB4LxOsd y5ju5AbPBSMqsxZd2cRBDoO8iUUvwm/uVzzIm0srPK9PY3tCghsLAfBXTdcNmx3y 8Q23Jj/3Y5jie6PRy1D1WVDzFCIshr1PP0f0GhY6OH0D2Dox4R3MjOcrHwSM2GIq Sw+HDLbOr1TzsUGuG1IL/XELet6jPXL/TrwYPD5gCCLsKO+N+ISIqj6qRckOBzwa Q3O4X0ChZgFDrvF1Q/MFcTvX/AS9vwGy -----END CERTIFICATE-----Generated at Fri Jun 13 16:17:20 2025 by rpki-client