$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft File: SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json) Hash identifier: pNK7BdptRxq2m1NOG18p2Hm80vjhWY+1I6CmMoWgZ44= Subject key identifier: FF:A7:42:19:14:87:D7:4A:4C:60:1D:F4:E4:A0:3A:04:88:7B:D1:E1 Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft Manifest number: 0225 Signing time: Sat 31 May 2025 02:07:57 +0000 Manifest this update: Sat 31 May 2025 02:07:56 +0000 Manifest next update: Sat 07 Jun 2025 02:07:56 +0000 Files and hashes: 1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: k622f3wv6Cyua/USnDmf0zC3WCW+5fjYq9rlQyRAqnA=) 2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: 98vVrHrPunOhqyUNT9wqul+NkLuBnWOfghiKhqlLWSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D167, serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Validity Not Before: May 31 02:07:56 2025 GMT Not After : Jun 7 02:07:56 2025 GMT Subject: CN=683a647d-4ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:af:01:c4:3f:27:fd:ab:d5:16:c2:ba:2e:fd: 34:c9:c8:9e:c4:89:7a:78:ac:27:eb:22:37:6d:2e: c4:f5:bc:28:97:fa:c0:11:ac:03:25:f3:0c:f1:a6: 9d:fc:96:1f:27:fc:8d:c8:d4:03:bf:f5:95:7f:8a: fc:45:57:39:94:9b:aa:7f:1b:59:fa:2a:c0:91:17: 89:00:3d:42:bb:bb:18:47:e9:bf:1f:7d:81:94:ab: 52:bd:dd:03:35:96:42:b7:3e:5a:dc:44:37:4a:e6: 3c:04:86:dc:b5:6d:c5:c0:a3:22:da:5d:49:08:79: 9e:c1:0b:37:74:2a:8f:ff:a2:c8:24:9c:1a:83:3d: 63:96:fb:07:7f:c0:d2:d2:e4:b6:2f:4b:70:22:23: 3e:ca:c9:c9:11:33:56:ed:15:12:9d:e9:dd:35:24: 4b:99:89:ce:83:9d:d5:63:d0:a6:7a:51:36:3c:a7: 57:78:d5:20:00:75:59:fd:03:6d:13:e5:6b:6e:0a: 5e:9d:cd:4e:1a:b6:0e:46:c1:5b:5f:39:3b:db:14: d9:47:3a:f2:93:70:a4:9e:75:6e:12:da:41:fc:f3: 16:44:44:27:6e:12:9d:1e:2e:80:c8:75:68:16:f1: 7f:98:a8:08:2a:8a:cb:20:a9:5f:70:69:09:9e:76: fd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A7:42:19:14:87:D7:4A:4C:60:1D:F4:E4:A0:3A:04:88:7B:D1:E1 X509v3 Authority Key Identifier: keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:79:f2:94:3d:7b:aa:57:a5:9a:51:d3:9e:0c:ea:9f:88:80: 98:25:81:c1:7e:6e:d3:1c:4a:b6:65:29:39:d1:0d:8c:96:52: 40:97:b2:b9:3c:15:d1:9c:20:10:3f:a5:11:10:a3:e3:02:52: 31:13:64:0a:c5:fe:83:89:6b:46:8c:64:05:b9:26:b6:35:9f: 80:8e:83:d9:bb:52:b8:d6:1a:78:56:d9:29:f1:77:e0:65:cd: 95:46:e5:1e:d7:a9:af:c9:97:33:fd:33:d0:c7:1f:82:a0:38: 77:f3:73:44:f3:f2:4a:7f:a7:6a:70:eb:88:7b:34:62:89:02: 9c:34:09:f0:24:3a:fc:44:ff:6b:45:0b:a7:4d:d4:46:0f:47: 04:fe:64:32:04:9e:b0:96:31:3c:37:0a:b8:cd:53:ca:40:97: 20:0e:31:72:dd:0a:3d:5b:d8:5a:bb:00:94:39:a3:0b:82:11: 84:3e:8d:b8:aa:1d:43:a9:14:01:31:28:e1:a3:98:c2:45:2c: 17:6f:32:16:27:97:ee:58:cc:d6:e5:f7:2b:0a:ac:9a:e0:bc: ae:78:ab:8e:42:80:5f:63:f4:4c:ea:79:43:07:98:07:94:40: 48:3f:6f:33:5d:4c:f0:b0:4c:89:60:63:6c:ef:d5:e7:4c:aa: b5:6e:9b:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3 RDY5OTMyNDgwHhcNMjUwNTMxMDIwNzU2WhcNMjUwNjA3MDIwNzU2WjAYMRYwFAYD VQQDEw02ODNhNjQ3ZC00YWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3a8BxD8n/avVFsK6Lv00yciexIl6eKwn6yI3bS7E9bwol/rAEawDJfMM8aad /JYfJ/yNyNQDv/WVf4r8RVc5lJuqfxtZ+irAkReJAD1Cu7sYR+m/H32BlKtSvd0D NZZCtz5a3EQ3SuY8BIbctW3FwKMi2l1JCHmewQs3dCqP/6LIJJwagz1jlvsHf8DS 0uS2L0twIiM+ysnJETNW7RUSnendNSRLmYnOg53VY9CmelE2PKdXeNUgAHVZ/QNt E+Vrbgpenc1OGrYORsFbXzk72xTZRzryk3CknnVuEtpB/PMWREQnbhKdHi6AyHVo FvF/mKgIKorLIKlfcGkJnnb9JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+nQhkU h9dKTGAd9OSgOgSIe9HhMB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDefKUPXuqV6WaUdOeDOqfiICYJYHBfm7THEq2ZSk50Q2MllJAl7K5 PBXRnCAQP6UREKPjAlIxE2QKxf6DiWtGjGQFuSa2NZ+AjoPZu1K41hp4Vtkp8Xfg Zc2VRuUe16mvyZcz/TPQxx+CoDh383NE8/JKf6dqcOuIezRiiQKcNAnwJDr8RP9r RQunTdRGD0cE/mQyBJ6wljE8Nwq4zVPKQJcgDjFy3Qo9W9hauwCUOaMLghGEPo24 qh1DqRQBMSjho5jCRSwXbzIWJ5fuWMzW5fcrCqya4LyueKuOQoBfY/RM6nlDB5gH lEBIP28zXUzwsEyJYGNs79XnTKq1bpvP -----END CERTIFICATE-----Generated at Sat May 31 17:18:54 2025 by rpki-client