$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json) Hash identifier: wPGcnxLW3uRBnwoZephF/vhvTTdiVUJ5MCkH8lcW0cc= Subject key identifier: 08:12:22:70:E2:67:F1:1C:47:68:8F:EA:E2:F8:1E:07:CC:E0:10:D2 Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Certificate serial: 0B09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft Manifest number: 0AF4 Signing time: Wed 04 Jun 2025 19:21:00 +0000 Manifest this update: Wed 04 Jun 2025 19:20:59 +0000 Manifest next update: Wed 11 Jun 2025 19:20:59 +0000 Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: dH/k6ofEiav8Fy21Ls1l6hM0dWu4Igmola5YV0/c354=) 2: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: Vs9WbC7+FXTpkpEtrPfe5o3W7t/VcDXrHl+kg25ZJHc=) 3: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: 6/Bcw5YjZPi9shssWW0OtrdPJZKAVnJFq1ohKYFJu8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 19:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2825 (0xb09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Validity Not Before: Jun 4 19:20:59 2025 GMT Not After : Jun 11 19:20:59 2025 GMT Subject: CN=68409c9b-f64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0d:85:36:94:f8:0e:4a:ea:ed:f6:24:4e:f8: 3e:67:5b:4a:0b:df:64:b2:30:ed:80:e9:33:4a:8d: 28:eb:2f:e5:f3:f3:85:ec:e7:5d:bb:f1:7d:4c:c8: 13:d7:44:bb:5b:1d:d4:6a:79:00:9e:5e:a3:a0:a8: ce:fd:10:db:88:62:6d:9d:71:a1:dc:ba:f0:ae:f5: 13:e7:ff:05:50:74:59:f0:59:a1:f7:be:e3:81:e0: d6:80:d1:4c:9c:f6:e8:41:db:d3:49:05:e4:3f:72: 4a:75:9b:36:20:e0:66:1a:13:ba:65:9d:31:14:6c: 87:8d:37:97:03:ee:a0:43:71:3f:12:9a:53:94:29: 77:11:e3:e5:e6:9d:db:e5:70:9d:c7:83:b3:10:f1: 72:fd:3c:1a:8c:dc:2d:05:b3:5d:13:a8:3c:bf:a4: fb:46:c1:dc:0b:90:b6:01:f0:30:a7:55:1a:1b:63: 77:3f:b8:05:a5:d5:4c:2d:2a:1b:4b:e0:3b:db:11: 28:f5:6c:34:6d:6a:45:7b:71:75:5d:ac:bb:8a:49: ee:71:a1:df:4a:fd:81:ce:05:8f:3c:51:38:92:b1: b1:c4:c1:a7:7a:b5:79:66:7b:6d:d5:b6:28:1b:52: 5b:12:c8:37:33:a4:29:ad:c7:a6:40:69:89:dd:82: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:12:22:70:E2:67:F1:1C:47:68:8F:EA:E2:F8:1E:07:CC:E0:10:D2 X509v3 Authority Key Identifier: keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:95:ef:9f:25:fc:cb:7c:62:f9:ff:e7:ba:7b:d7:ba:fa:e7: 5c:94:5a:5d:f3:62:26:fe:e4:b5:72:83:66:de:de:ef:95:bb: 76:e1:56:ce:07:47:e7:69:cf:2b:74:9d:85:3e:54:ac:53:6f: bb:bc:b1:33:8e:ac:52:84:b5:d3:65:17:6a:eb:c7:7c:38:e6: ae:f8:55:25:2f:01:05:6a:94:4d:53:c2:34:8d:97:8f:ec:93: fa:4d:8c:3e:41:48:d1:94:ba:9b:20:c9:25:97:99:b8:f8:c2: 7d:ce:7f:88:d9:f0:0c:41:a8:97:97:a3:d6:fe:c5:ab:81:4f: 5b:4e:d6:bf:db:49:04:d2:cf:aa:ed:64:92:7e:08:d7:7a:d5: 11:e2:9f:e4:fb:3a:d2:b8:f4:72:ef:6a:d6:b4:0b:0c:40:69: 78:13:25:a2:c0:44:d2:58:a5:6a:02:98:e7:22:48:09:53:d2: 06:d4:ef:a1:0b:f2:3b:43:61:1c:37:bc:29:c9:6a:e3:5f:1e: b6:e7:7b:f4:f3:2d:60:18:43:d4:f6:c7:b0:c6:73:5e:b2:a8: cf:31:bf:5a:16:80:d1:4d:4f:89:df:a8:1b:7d:41:35:db:c4: f2:bd:5a:7d:15:91:0b:9b:b6:54:2b:a2:f2:03:46:6b:34:2d: ae:09:f9:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MjcxMTAvBgNVBAUTKDQ4NEFFOEMwRDE1Nzk5QjVGRjA4MUZFNDBDM0UxRTAw RTRFODk0NzgwHhcNMjUwNjA0MTkyMDU5WhcNMjUwNjExMTkyMDU5WjAYMRYwFAYD VQQDEw02ODQwOWM5Yi1mNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1g2FNpT4Dkrq7fYkTvg+Z1tKC99ksjDtgOkzSo0o6y/l8/OF7Oddu/F9TMgT 10S7Wx3UankAnl6joKjO/RDbiGJtnXGh3LrwrvUT5/8FUHRZ8Fmh977jgeDWgNFM nPboQdvTSQXkP3JKdZs2IOBmGhO6ZZ0xFGyHjTeXA+6gQ3E/EppTlCl3EePl5p3b 5XCdx4OzEPFy/TwajNwtBbNdE6g8v6T7RsHcC5C2AfAwp1UaG2N3P7gFpdVMLSob S+A72xEo9Ww0bWpFe3F1Xay7iknucaHfSv2BzgWPPFE4krGxxMGnerV5Zntt1bYo G1JbEsg3M6QprcemQGmJ3YK5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgSInDi Z/EcR2iP6uL4HgfM4BDSMB8GA1UdIwQYMBaAFEhK6MDRV5m1/wgf5Aw+HgDk6JR4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyNy84ODg3MTkzNjQ5 MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1iWF9DQl9rREQ0ZUFPVG9s SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NFcm93TkZYbWJYX0NCX2tERDRlQU9Ub2xIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyNy84ODg3MTkzNjQ5MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1i WF9DQl9rREQ0ZUFPVG9sSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABle+fJfzLfGL5/+e6e9e6+udclFpd82Im/uS1coNm3t7vlbt24VbO B0fnac8rdJ2FPlSsU2+7vLEzjqxShLXTZRdq68d8OOau+FUlLwEFapRNU8I0jZeP 7JP6TYw+QUjRlLqbIMkll5m4+MJ9zn+I2fAMQaiXl6PW/sWrgU9bTta/20kE0s+q 7WSSfgjXetUR4p/k+zrSuPRy72rWtAsMQGl4EyWiwETSWKVqApjnIkgJU9IG1O+h C/I7Q2EcN7wpyWrjXx6253v08y1gGEPU9sewxnNesqjPMb9aFoDRTU+J36gbfUE1 28TyvVp9FZELm7ZUK6LyA0ZrNC2uCfkW -----END CERTIFICATE-----Generated at Thu Jun 5 19:56:26 2025 by rpki-client