$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft File: snrsU_-6svW1vAy0fAhwbVBTMhA.mft (raw, json) Hash identifier: dKdBJNvXA5xhh7bxdkr5PDGRrFw4y2e9iqTFYtcuW5w= Subject key identifier: AE:CE:04:03:D1:5E:EB:50:31:97:3C:E4:4F:03:50:C7:21:F0:C3:14 Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10 Certificate issuer: /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210 Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft Manifest number: 04E2 Signing time: Fri 06 Jun 2025 23:48:09 +0000 Manifest this update: Fri 06 Jun 2025 23:48:08 +0000 Manifest next update: Fri 13 Jun 2025 23:48:08 +0000 Files and hashes: 1: snrsU_-6svW1vAy0fAhwbVBTMhA.crl (hash: gX2ZdaQeZ5OdRj+Z3Kf85D0S6vgzRby8+AVvnwxRhgQ=) 2: 793A891A1EA111ECA967444FC4F9AE02.roa (hash: TuwY0bH/I8eBppDazNaeZzaGUKdY+8ax5yn8wmQ1iv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 23:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210 Validity Not Before: Jun 6 23:48:08 2025 GMT Not After : Jun 13 23:48:08 2025 GMT Subject: CN=68437e39-b2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:88:14:85:49:b4:68:76:ae:32:69:6f:be: 8c:3b:cf:48:c4:e7:fe:b7:6f:a9:c2:12:b8:8e:77: f4:d8:a5:0b:af:62:4a:8a:b2:0b:80:f1:7f:b5:15: ea:aa:d6:a8:15:28:0a:ce:92:48:14:15:48:df:db: a1:f0:bb:84:8c:82:ff:db:93:71:30:55:9c:5f:e6: 27:8b:69:22:33:33:5f:d0:eb:ea:4b:6f:94:68:db: e8:fa:99:5f:b1:d7:f3:6f:93:75:52:fb:c4:cc:96: 9b:14:32:a7:cc:ca:b2:45:f5:ec:3a:c5:0e:3a:d8: 3f:4e:7d:fe:23:a7:32:d6:82:d0:e6:d5:22:90:7f: 4f:d3:9c:1b:22:90:2e:31:c9:e3:c8:e3:96:0a:08: 7e:c9:0d:1c:03:4f:aa:cd:95:5b:11:64:54:29:e1: bb:5d:1c:2b:d6:64:fc:d6:2b:9c:b1:09:06:13:83: 2c:46:fb:c3:c6:10:05:2f:5a:ec:10:87:e0:d7:14: 29:7b:20:73:75:dd:3e:b0:7b:df:65:32:0f:3b:09: 0e:d3:bf:2c:ee:21:d7:2c:16:45:22:2a:d2:9d:73: 9b:67:0c:81:99:a4:4d:bb:8b:1c:12:e1:94:e3:4b: 4b:65:a9:66:59:b0:25:43:5d:5e:f2:4b:b6:00:ac: 81:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CE:04:03:D1:5E:EB:50:31:97:3C:E4:4F:03:50:C7:21:F0:C3:14 X509v3 Authority Key Identifier: keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:bc:58:c7:fb:ec:95:46:d1:33:17:c3:59:ed:5f:d1:5e:86: b1:66:ef:f1:a2:a1:36:d7:73:77:a3:ad:18:30:e3:90:b8:e8: 3a:69:17:6d:18:0a:e9:ab:e2:9f:56:46:d4:a7:50:4a:2d:51: 6c:d7:9e:04:9e:c7:ef:3c:c5:8f:67:99:49:f8:c3:51:fa:95: ac:be:fc:8a:68:e0:50:33:eb:c3:09:7f:a7:af:da:0b:ee:37: a0:71:f6:7d:81:8c:68:9f:26:5b:8c:4b:a5:01:d2:7a:6e:0f: 45:8c:a9:f0:4d:d5:39:76:8c:32:d9:4f:f9:dd:dc:9d:cd:45: 20:b3:0d:0a:52:ea:6a:97:db:50:ac:39:ff:83:41:6d:83:10: 64:cb:5a:02:c8:ff:6a:fd:24:ad:fe:88:a0:30:3f:93:68:c2: ee:26:4a:bc:34:6e:fb:50:80:44:73:54:76:eb:64:45:86:ca: f6:d1:8c:e2:1e:f2:c3:d1:d4:00:1f:c2:c1:97:23:18:cd:2f: a9:0b:a3:8b:40:79:0f:7a:c8:f1:c8:61:f8:89:04:d9:d8:b7: 52:7c:e5:c5:3d:9a:1a:30:27:3d:c2:a9:63:c6:97:06:4b:30: cd:48:a4:a1:70:54:0f:7c:e4:34:c1:3f:dd:4c:88:f8:18:fe: 9b:59:2a:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE3RDYxMTAvBgNVBAUTKEIyN0FFQzUzRkZCQUIyRjVCNUJDMENCNDdDMDg3MDZE NTA1MzMyMTAwHhcNMjUwNjA2MjM0ODA4WhcNMjUwNjEzMjM0ODA4WjAYMRYwFAYD VQQDEw02ODQzN2UzOS1iMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSiIFIVJtGh2rjJpb76MO89IxOf+t2+pwhK4jnf02KULr2JKirILgPF/tRXq qtaoFSgKzpJIFBVI39uh8LuEjIL/25NxMFWcX+Yni2kiMzNf0OvqS2+UaNvo+plf sdfzb5N1UvvEzJabFDKnzMqyRfXsOsUOOtg/Tn3+I6cy1oLQ5tUikH9P05wbIpAu McnjyOOWCgh+yQ0cA0+qzZVbEWRUKeG7XRwr1mT81iucsQkGE4MsRvvDxhAFL1rs EIfg1xQpeyBzdd0+sHvfZTIPOwkO078s7iHXLBZFIirSnXObZwyBmaRNu4scEuGU 40tLZalmWbAlQ11e8ku2AKyB/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7OBAPR XutQMZc85E8DUMch8MMUMB8GA1UdIwQYMBaAFLJ67FP/urL1tbwMtHwIcG1QUzIQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTdENi9ERDhFNTcyNDFF OUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2VzF2QXkwZkFod2JWQlRN aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NucnNVXy02c3ZXMXZBeTBmQWh3YlZCVE1oQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTdENi9ERDhFNTcyNDFFOUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2 VzF2QXkwZkFod2JWQlRNaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXvFjH++yVRtEzF8NZ7V/RXoaxZu/xoqE213N3o60YMOOQuOg6aRdt GArpq+KfVkbUp1BKLVFs154EnsfvPMWPZ5lJ+MNR+pWsvvyKaOBQM+vDCX+nr9oL 7jegcfZ9gYxonyZbjEulAdJ6bg9FjKnwTdU5dowy2U/53dydzUUgsw0KUupql9tQ rDn/g0FtgxBky1oCyP9q/SSt/oigMD+TaMLuJkq8NG77UIBEc1R262RFhsr20Yzi HvLD0dQAH8LBlyMYzS+pC6OLQHkPesjxyGH4iQTZ2LdSfOXFPZoaMCc9wqljxpcG SzDNSKShcFQPfOQ0wT/dTIj4GP6bWSoZ -----END CERTIFICATE-----Generated at Sun Jun 8 08:02:50 2025 by rpki-client