$ rpki-client -vvf rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft File: sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft (raw, json) Hash identifier: 0xjau87JyykGAp/0LhT9CqpftTMZuh6VnYumJoK+vrQ= Subject key identifier: 51:24:92:9A:3D:03:D4:D1:D5:19:8F:38:F8:2E:DA:7A:73:D3:75:D7 Authority key identifier: B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 Certificate issuer: /CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft Manifest number: 0325 Signing time: Sat 31 May 2025 01:20:29 +0000 Manifest this update: Sat 31 May 2025 01:20:28 +0000 Manifest next update: Sat 07 Jun 2025 01:20:28 +0000 Files and hashes: 1: sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl (hash: 9pquMtfJLgk1A0CoP2U4gp6sPwa8xbbmHsfLAlX9PZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919456E, serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Validity Not Before: May 31 01:20:28 2025 GMT Not After : Jun 7 01:20:28 2025 GMT Subject: CN=683a595c-fb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:da:14:14:25:cc:87:a6:d7:83:cd:fc:37: 36:bd:70:10:42:ab:06:84:73:89:a0:ce:5e:6b:d4: 3d:c9:b1:1c:18:f8:f0:17:95:d0:a0:31:61:82:47: 40:6e:16:4b:c7:4e:d7:fb:f0:af:a4:d2:72:6a:ca: 5f:88:4b:06:cd:7b:5b:3e:b9:f2:f8:d8:80:42:3f: 41:a3:26:75:df:9c:10:25:91:ca:94:29:b6:6f:9f: 55:d0:96:fc:c3:80:a6:9c:c2:3d:c0:9c:96:36:04: 66:7a:79:fe:9c:54:06:d1:22:eb:b1:90:7d:e8:72: ac:ab:e2:20:d6:0e:00:f9:7f:8c:8d:89:55:07:07: 4a:38:65:c2:67:5f:5a:8d:bf:09:c7:70:a2:de:de: 46:02:f3:d4:2b:78:a8:90:88:e5:95:e5:81:f7:89: 38:55:a4:3c:d5:ea:4e:d0:4f:14:9e:17:ef:d0:c5: 62:4c:74:bd:7d:03:a2:3d:45:59:7a:0a:49:ce:ba: 39:46:17:be:65:35:1f:ba:fe:83:16:f1:a2:ab:89: 3e:85:a7:30:9e:34:20:47:85:44:ac:56:17:48:7e: 9b:79:be:20:8e:3e:16:ac:49:7f:26:46:ed:08:b9: 1d:21:5b:ab:b1:af:c1:d8:37:f0:0d:a7:33:46:33: 8d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:24:92:9A:3D:03:D4:D1:D5:19:8F:38:F8:2E:DA:7A:73:D3:75:D7 X509v3 Authority Key Identifier: keyid:B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c0:31:75:67:95:19:c3:b8:f3:ff:4e:6f:15:cf:4c:07:d6: 72:c2:5b:0d:dc:78:c3:47:49:f4:86:47:6d:1c:e2:ee:8a:ed: 5a:55:f2:6e:b6:6a:f6:5a:14:2a:9d:7e:cb:9c:29:96:e3:d6: e5:11:41:60:2e:b9:9a:c4:0d:c3:11:5c:de:8e:a9:65:43:e3: 91:3b:a7:26:43:5a:ff:12:38:32:69:39:95:7b:55:f6:a1:b4: 17:96:6b:2d:19:ac:20:4d:a9:61:06:bb:71:e0:cd:4b:6a:04: ba:bb:73:2d:9b:d0:71:d3:73:23:25:c0:64:54:3d:b9:48:37: 7f:da:37:00:2e:33:29:05:0f:25:bb:5d:34:d6:77:18:a6:ae: 5f:6c:db:30:d1:82:4b:d4:2e:33:6a:8f:62:c0:75:7e:cd:7f: 23:91:02:3e:3c:be:ef:63:d9:23:12:89:6b:f2:89:2a:80:c5: e3:20:29:92:0c:32:39:77:8a:51:a0:e0:34:e2:57:1f:79:34: c5:24:aa:75:c9:d0:4a:97:1d:8a:3c:e8:ca:38:c4:9e:39:5c: cb:a5:db:a0:83:c5:cb:e2:02:9b:42:26:b2:37:0b:7b:76:9b: 09:0e:14:c0:6a:72:c3:7f:4b:b1:a6:a3:9a:0c:ea:3a:18:eb: f8:6d:08:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1NkUxMTAvBgNVBAUTKEIwNEI3RkIyMEUyNUQ2RDc1ODdGMjZGRDc1NzI3NEI5 RDNFRTNFOTUwHhcNMjUwNTMxMDEyMDI4WhcNMjUwNjA3MDEyMDI4WjAYMRYwFAYD VQQDEw02ODNhNTk1Yy1mYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvPaFBQlzIem14PN/Dc2vXAQQqsGhHOJoM5ea9Q9ybEcGPjwF5XQoDFhgkdA bhZLx07X+/CvpNJyaspfiEsGzXtbPrny+NiAQj9BoyZ135wQJZHKlCm2b59V0Jb8 w4CmnMI9wJyWNgRmenn+nFQG0SLrsZB96HKsq+Ig1g4A+X+MjYlVBwdKOGXCZ19a jb8Jx3Ci3t5GAvPUK3iokIjlleWB94k4VaQ81epO0E8Unhfv0MViTHS9fQOiPUVZ egpJzro5Rhe+ZTUfuv6DFvGiq4k+hacwnjQgR4VErFYXSH6beb4gjj4WrEl/Jkbt CLkdIVursa/B2DfwDaczRjONrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEkkpo9 A9TR1RmPOPgu2npz03XXMB8GA1UdIwQYMBaAFLBLf7IOJdbXWH8m/XVydLnT7j6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDU2RS82RkMzMjlDQ0NC NjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0ZFlmeWI5ZFhKMHVkUHVQ cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdF9zZzRsMXRkWWZ5YjlkWEowdWRQdVBwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDU2RS82RkMzMjlDQ0NCNjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0 ZFlmeWI5ZFhKMHVkUHVQcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRwDF1Z5UZw7jz/05vFc9MB9ZywlsN3HjDR0n0hkdtHOLuiu1aVfJu tmr2WhQqnX7LnCmW49blEUFgLrmaxA3DEVzejqllQ+ORO6cmQ1r/EjgyaTmVe1X2 obQXlmstGawgTalhBrtx4M1LagS6u3Mtm9Bx03MjJcBkVD25SDd/2jcALjMpBQ8l u1001ncYpq5fbNsw0YJL1C4zao9iwHV+zX8jkQI+PL7vY9kjEolr8okqgMXjICmS DDI5d4pRoOA04lcfeTTFJKp1ydBKlx2KPOjKOMSeOVzLpdugg8XL4gKbQiayNwt7 dpsJDhTAanLDf0uxpqOaDOo6GOv4bQiR -----END CERTIFICATE-----Generated at Sat May 31 16:39:51 2025 by rpki-client