$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: uHksccmW51refAH+G6XTm5QnCV8Y0Bg9FT1bTWo/fIU= Subject key identifier: 57:15:7B:7D:FF:D8:A0:7A:35:4B:51:36:31:F9:DA:D5:C4:2C:56:06 Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 015C Signing time: Sat 31 May 2025 03:51:56 +0000 Manifest this update: Sat 31 May 2025 03:51:56 +0000 Manifest next update: Sat 07 Jun 2025 03:51:56 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: X50tvtTsUIIqRCaQhto4a0lrMcNFtF8Mh65vSnxcj7Q=) 2: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: RH2tA+pDkL65URt1jd9V89/t/7TTanl0u6hNZrCKG3I=) 3: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: 3zCR20o/KfK/K9C/wTlGB6P7rn/kp0/zxFVVdoqdb8g=) 4: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: mR/q70Jk2CRrQySn0SCNQ9Ok1ptByPEBAf3/SOp/6zs=) 5: A16CA728B9EA11EFACF35552C4F9AE02.roa (hash: LIplw0gjYt5TLtVYJx2JRQCdxPLCfIKOl8NOlftLuUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: May 31 03:51:56 2025 GMT Not After : Jun 7 03:51:56 2025 GMT Subject: CN=683a7cdc-c574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:78:b0:99:6d:1e:ce:ef:78:d5:00:0b:05: 63:ff:e4:3b:77:ab:2c:69:e9:3d:23:fb:85:2a:33: 70:65:1a:a5:ce:ff:37:a8:99:55:4c:14:d9:81:83: 94:24:25:c3:d8:2b:25:61:5d:8a:77:54:3c:0b:46: 1e:b2:74:74:18:62:11:9d:34:28:16:81:dc:84:f9: db:0d:4b:7f:26:e7:50:15:b1:c4:15:f0:c7:b4:0f: d2:99:c7:e8:3f:64:6c:11:22:79:16:05:15:ed:15: 68:a5:e8:58:79:46:5f:9f:51:2d:98:ec:19:9f:c8: 4f:0e:71:9a:3d:4f:58:f9:35:79:d7:8a:07:f0:fe: 33:65:6e:82:ee:d9:41:ae:dd:7d:10:eb:a7:70:e3: a8:11:06:ec:dc:88:a2:3a:1c:f7:6d:bc:b9:ba:45: 33:2a:ac:44:86:c3:58:a1:10:5e:d2:f3:1a:86:80: d0:dd:34:72:c1:1b:bf:7d:3a:63:65:fc:c0:b7:84: d8:69:9d:1f:a8:a9:cd:dc:1f:e7:94:4f:ff:1e:07: 8a:e2:9a:be:1e:65:e3:54:e7:39:8e:59:c2:7b:f4: ca:4e:b4:09:92:0f:e9:0c:2e:b7:fc:ff:4e:8e:1b: 1b:d2:b3:72:af:de:1c:2e:b6:05:69:65:1e:0b:68: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:15:7B:7D:FF:D8:A0:7A:35:4B:51:36:31:F9:DA:D5:C4:2C:56:06 X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1d:e9:56:27:95:3d:c3:0f:3a:f4:13:90:cc:23:0d:b8:27: 88:ea:01:e2:d3:1f:02:b1:33:3d:da:f2:6d:f6:ee:6a:4b:be: fc:0b:b7:83:99:b0:73:e8:1d:5b:50:27:8f:30:07:de:4e:61: 10:c7:23:a8:7f:12:5f:ca:d5:d2:7a:1d:a7:68:c4:8f:ae:9f: 35:66:37:1e:6d:30:fe:f1:1a:84:62:69:c0:45:4e:1d:89:44: 08:ed:00:6b:d5:3d:7c:0c:db:64:e9:49:c1:80:6f:0a:cc:e3: 58:74:d0:12:a4:16:3e:61:53:d6:81:34:89:a7:d9:c1:76:64: bd:6d:c7:88:96:61:2c:b7:77:38:34:62:ea:12:1b:2f:a4:0b: d0:04:80:f5:a9:cc:cb:2b:7e:9f:43:18:a0:ec:be:a1:10:5a: 91:46:01:19:ed:63:eb:84:d8:fb:7f:e2:22:a4:54:66:5d:5f: 92:52:23:e7:ec:33:8c:c7:ba:b6:c8:d5:6e:a0:ac:cf:00:a2: 30:4a:2f:68:c5:1b:dd:03:a1:8a:73:f5:13:b8:18:57:80:a5: 3c:5c:7c:f9:db:b1:47:4e:66:23:96:b9:31:fc:f9:99:7f:56: da:ef:cb:87:8f:f1:65:d7:6a:14:3e:31:0e:aa:90:a4:6d:ea: 56:e1:30:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjUwNTMxMDM1MTU2WhcNMjUwNjA3MDM1MTU2WjAYMRYwFAYD VQQDEw02ODNhN2NkYy1jNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kt4sJltHs7veNUACwVj/+Q7d6ssaek9I/uFKjNwZRqlzv83qJlVTBTZgYOU JCXD2CslYV2Kd1Q8C0YesnR0GGIRnTQoFoHchPnbDUt/JudQFbHEFfDHtA/Smcfo P2RsESJ5FgUV7RVopehYeUZfn1EtmOwZn8hPDnGaPU9Y+TV514oH8P4zZW6C7tlB rt19EOuncOOoEQbs3IiiOhz3bby5ukUzKqxEhsNYoRBe0vMahoDQ3TRywRu/fTpj ZfzAt4TYaZ0fqKnN3B/nlE//HgeK4pq+HmXjVOc5jlnCe/TKTrQJkg/pDC63/P9O jhsb0rNyr94cLrYFaWUeC2gzvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcVe33/ 2KB6NUtRNjH52tXELFYGMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOHelWJ5U9ww869BOQzCMNuCeI6gHi0x8CsTM92vJt9u5qS778C7eD mbBz6B1bUCePMAfeTmEQxyOofxJfytXSeh2naMSPrp81ZjcebTD+8RqEYmnARU4d iUQI7QBr1T18DNtk6UnBgG8KzONYdNASpBY+YVPWgTSJp9nBdmS9bceIlmEst3c4 NGLqEhsvpAvQBID1qczLK36fQxig7L6hEFqRRgEZ7WPrhNj7f+IipFRmXV+SUiPn 7DOMx7q2yNVuoKzPAKIwSi9oxRvdA6GKc/UTuBhXgKU8XHz527FHTmYjlrkx/PmZ f1ba78uHj/Fl12oUPjEOqpCkbepW4TDv -----END CERTIFICATE-----Generated at Sat May 31 15:47:00 2025 by rpki-client