$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json) Hash identifier: 3NvvXfvmGI46uN+fDey/AFrahVMyeg9hHQBOOi+Z9PY= Subject key identifier: 3F:12:58:13:E8:71:58:A6:EF:F4:01:AE:C2:F0:1C:5D:87:6D:79:59 Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft Manifest number: 21 Signing time: Sat 31 May 2025 07:27:55 +0000 Manifest this update: Sat 31 May 2025 07:27:55 +0000 Manifest next update: Sat 07 Jun 2025 07:27:55 +0000 Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: IeiQQZGQG/pNJVucidQOBBiFk8BoxXq/CyQyNdbr4YA=) 2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Validity Not Before: May 31 07:27:55 2025 GMT Not After : Jun 7 07:27:55 2025 GMT Subject: CN=683aaf7b-ba5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:c6:cd:41:f5:90:9f:86:0a:42:5b:0a:1d: 91:7c:7f:28:fa:c6:c2:b8:69:b5:d8:50:e7:60:85: 64:2f:2f:cf:4c:3a:23:41:24:d1:4a:4b:93:de:1b: 6a:31:d3:0a:54:2a:0f:9a:1a:a9:11:d6:fa:4b:2e: 4f:e0:b1:7b:46:a1:a6:56:86:73:81:f2:c2:ef:6b: a2:21:b3:21:64:53:aa:31:3a:05:01:59:e6:86:c1: 85:12:34:7a:52:84:9a:6b:c8:2a:22:38:e0:2d:67: c5:87:f0:4d:04:c5:78:d7:d4:a9:8b:a1:b3:df:1c: 1d:de:c8:b5:dd:4c:27:22:d2:f1:23:ec:fe:05:3d: e6:f9:b8:57:63:9f:e0:3d:79:d2:53:a3:f2:8c:36: dd:3d:b3:1d:e2:da:fe:26:9c:46:4d:51:d3:b5:d5: b9:70:fe:8d:ac:bd:3f:82:e7:7a:67:eb:58:c5:f3: 60:e7:4e:5a:07:a5:3d:46:6d:bb:5d:d0:ed:92:1c: cc:53:93:f6:6c:30:82:a3:e1:f9:bb:f8:b9:f2:4d: fa:c3:f6:53:08:9c:c5:f9:21:53:ab:80:f2:04:ba: d5:71:b6:dc:3a:da:0a:b5:0a:b0:5c:c4:a8:3c:1d: b8:68:34:e9:4f:1a:6f:ef:6c:ca:e5:2b:a5:cc:0a: 6b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:12:58:13:E8:71:58:A6:EF:F4:01:AE:C2:F0:1C:5D:87:6D:79:59 X509v3 Authority Key Identifier: keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:78:23:90:2f:76:00:1c:42:08:90:15:f6:de:a5:43:72:c6: c1:a7:a7:3c:e7:5d:3b:68:82:8d:b0:b0:11:ae:53:a6:41:05: 7f:8c:39:1a:1a:da:67:d3:a6:3f:e9:e8:0d:9d:2a:a6:d2:10: 6a:1c:1a:57:37:93:8c:c5:83:b5:d5:31:f6:e7:c7:4e:d3:cc: c4:ec:f5:86:23:31:ab:67:3f:00:2f:31:cd:1b:5e:98:13:1d: 8c:86:c2:61:dd:82:8a:97:53:5e:07:bc:77:75:33:f4:3b:e6: ab:8b:16:0f:73:bd:bd:e9:b9:3f:f4:b2:d2:96:c0:0b:35:6f: f2:98:b6:56:ec:0b:c5:97:31:9d:2c:8d:a3:2d:9e:c6:9a:a4: 14:a6:d6:87:63:73:d8:d3:d9:ff:23:0e:96:9c:71:18:63:d2: 42:c1:49:5a:5b:19:f4:d7:1d:2e:e8:9f:a4:b0:4d:8c:a0:63: 06:15:29:e1:e9:8e:c4:96:52:e2:3f:41:13:c4:a9:aa:18:3d: 0b:46:22:2c:01:54:c7:cd:f7:44:9a:c7:27:d2:d6:b3:9f:e5: e7:ad:e6:36:fa:29:62:35:93:38:40:72:ad:3b:60:79:cd:6d: 94:19:44:f8:f0:0a:fa:28:fa:3e:8a:d1:06:be:53:a7:a8:f1: 5c:e2:76:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDEwRTExMC8GA1UEBRMoNDg5QTZGQ0VEN0RDNjNCN0FCMzY2NkUzNUJENTA5RDlF QTE1NzVFMDAeFw0yNTA1MzEwNzI3NTVaFw0yNTA2MDcwNzI3NTVaMBgxFjAUBgNV BAMTDTY4M2FhZjdiLWJhNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZoMbNQfWQn4YKQlsKHZF8fyj6xsK4abXYUOdghWQvL89MOiNBJNFKS5PeG2ox 0wpUKg+aGqkR1vpLLk/gsXtGoaZWhnOB8sLva6IhsyFkU6oxOgUBWeaGwYUSNHpS hJpryCoiOOAtZ8WH8E0ExXjX1KmLobPfHB3eyLXdTCci0vEj7P4FPeb5uFdjn+A9 edJTo/KMNt09sx3i2v4mnEZNUdO11blw/o2svT+C53pn61jF82DnTloHpT1Gbbtd 0O2SHMxTk/ZsMIKj4fm7+LnyTfrD9lMInMX5IVOrgPIEutVxttw62gq1CrBcxKg8 HbhoNOlPGm/vbMrlK6XMCmsVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPxJYE+hx WKbv9AGuwvAcXYdteVkwHwYDVR0jBBgwFoAUSJpvztfcY7erNmbjW9UJ2eoVdeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MTBFLzJGMDMyOThBMTA4 NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdlck5tYmpXOVVKMmVvVmRl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0pwdnp0ZmNZN2VyTm1ialc5VUoyZW9WZGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MTBFLzJGMDMyOThBMTA4NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdl ck5tYmpXOVVKMmVvVmRlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHl4I5AvdgAcQgiQFfbepUNyxsGnpzznXTtogo2wsBGuU6ZBBX+MORoa 2mfTpj/p6A2dKqbSEGocGlc3k4zFg7XVMfbnx07TzMTs9YYjMatnPwAvMc0bXpgT HYyGwmHdgoqXU14HvHd1M/Q75quLFg9zvb3puT/0stKWwAs1b/KYtlbsC8WXMZ0s jaMtnsaapBSm1odjc9jT2f8jDpaccRhj0kLBSVpbGfTXHS7on6SwTYygYwYVKeHp jsSWUuI/QRPEqaoYPQtGIiwBVMfN90SaxyfS1rOf5eet5jb6KWI1kzhAcq07YHnN bZQZRPjwCvoo+j6K0Qa+U6eo8Vzidg4= -----END CERTIFICATE-----Generated at Sat May 31 17:46:22 2025 by rpki-client