$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json) Hash identifier: hqHl+s4SNmQcEaYh7jQpT3zhaYinCsRrOhW3GisAaCg= Subject key identifier: 8B:04:69:6F:EE:1A:61:DF:11:9D:43:51:A0:A0:32:67:00:53:3B:B4 Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Certificate serial: 0D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft Manifest number: 0D46 Signing time: Fri 30 May 2025 18:10:03 +0000 Manifest this update: Fri 30 May 2025 18:10:01 +0000 Manifest next update: Fri 06 Jun 2025 18:10:01 +0000 Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: aU80O3VkdgsxG3WXWQN3IMU1HTVw+jXQo7e4wCXLjh0=) 2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: kfnndHzaWyTnp8z7+y1i5jZZ9EYcGBwsAArn1r5+vLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3406 (0xd4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Validity Not Before: May 30 18:10:01 2025 GMT Not After : Jun 6 18:10:01 2025 GMT Subject: CN=6839f47b-a3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:c8:e2:26:55:e7:03:05:fc:1a:ad:71:75: 9f:ee:62:36:eb:36:33:a2:6c:2f:f3:4c:06:39:00: db:c7:80:79:2f:65:93:94:23:3e:cf:9c:45:45:d1: 5c:ce:b7:30:e6:3a:c8:66:8e:de:97:1e:8e:2b:99: eb:0a:07:bd:8b:fa:02:eb:3e:9f:b3:6a:ec:be:41: 48:19:37:c8:bf:c7:8d:59:8e:83:d8:e5:1a:e1:ca: d0:67:21:c6:e6:f2:d3:16:d9:07:e3:b7:21:cd:aa: a2:51:f5:00:db:04:0b:b9:cd:04:94:6f:0d:5c:fc: 9f:d0:bb:e0:82:39:fb:83:29:9e:63:7c:ae:64:8a: 87:50:f7:3a:3b:f4:eb:8c:06:df:cb:9b:0d:fc:79: 73:5e:1d:cf:a5:35:5f:3c:f1:29:e4:6d:dd:46:b7: 29:fe:5e:6f:13:95:83:71:d0:f6:c2:50:16:59:f7: b9:25:04:2e:e8:a1:dd:f8:e7:b2:4e:79:73:c3:23: 3b:17:bf:fd:d4:91:b6:09:1b:1a:94:41:3e:94:76: c9:bc:35:a1:e1:4d:fa:5e:de:91:3a:cd:0d:25:ce: c7:c8:bd:ad:ce:6f:44:24:d2:96:b8:55:50:68:92: 95:09:45:30:08:26:cc:b0:29:79:49:3b:9b:8c:cd: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:04:69:6F:EE:1A:61:DF:11:9D:43:51:A0:A0:32:67:00:53:3B:B4 X509v3 Authority Key Identifier: keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:42:ac:30:4a:54:0b:50:7a:1d:38:01:93:86:e1:05:85:9b: 8b:86:47:9c:57:42:f2:9d:32:f1:a6:b7:23:2f:46:53:ea:57: 31:77:7e:46:c1:e2:b0:df:c9:d7:cc:71:bd:02:7b:27:1a:21: 08:0a:65:65:0f:0f:db:48:10:5a:38:48:1d:f6:70:a8:bb:f5: 75:60:02:44:c3:79:89:6f:84:98:9f:5c:a3:b0:37:25:94:64: 09:6c:50:21:82:50:57:20:a3:46:71:1a:03:9a:e8:cf:d5:16: 16:c9:d2:37:eb:62:5e:9c:35:4e:e3:ee:e2:1a:37:49:b6:20: bb:1b:fe:81:80:e5:84:31:67:7e:57:71:f9:e1:62:96:1e:18: 13:09:34:f8:39:57:6a:d0:8e:0a:9c:d5:cc:29:56:a3:cf:66: 24:43:77:84:2e:66:3c:db:9f:2c:20:30:14:93:c6:f7:b2:90: 56:17:74:e9:0e:00:4f:dd:32:86:62:92:ab:9b:02:5a:02:e3: ed:d0:a0:21:18:fc:6a:44:74:1f:b4:e6:10:18:8b:36:6c:8f: 28:a9:5b:1e:30:8d:4c:c1:fe:c8:a7:4e:4c:4c:aa:73:6e:69: b3:2c:e4:2d:fd:21:cd:54:26:32:d0:91:92:4a:fb:93:f7:16: e9:d4:4e:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFRjIxMTAvBgNVBAUTKDQ5QzlFOUUzMjI3Q0Q1NUFEMjlBMjEzQ0JBQTE3NDc4 NUExNjVDN0UwHhcNMjUwNTMwMTgxMDAxWhcNMjUwNjA2MTgxMDAxWjAYMRYwFAYD VQQDEw02ODM5ZjQ3Yi1hM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxajI4iZV5wMF/BqtcXWf7mI26zYzomwv80wGOQDbx4B5L2WTlCM+z5xFRdFc zrcw5jrIZo7elx6OK5nrCge9i/oC6z6fs2rsvkFIGTfIv8eNWY6D2OUa4crQZyHG 5vLTFtkH47chzaqiUfUA2wQLuc0ElG8NXPyf0Lvggjn7gymeY3yuZIqHUPc6O/Tr jAbfy5sN/HlzXh3PpTVfPPEp5G3dRrcp/l5vE5WDcdD2wlAWWfe5JQQu6KHd+Oey TnlzwyM7F7/91JG2CRsalEE+lHbJvDWh4U36Xt6ROs0NJc7HyL2tzm9EJNKWuFVQ aJKVCUUwCCbMsCl5STubjM2rRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsEaW/u GmHfEZ1DUaCgMmcAUzu0MB8GA1UdIwQYMBaAFEnJ6eMifNVa0pohPLqhdHhaFlx+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEVGMi9CNjQ0MUVCNkQy QkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFWclNtaUU4dXFGMGVGb1dY SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NjbnA0eUo4MVZyU21pRTh1cUYwZUZvV1hINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEVGMi9CNjQ0MUVCNkQyQkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFW clNtaUU4dXFGMGVGb1dYSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBQqwwSlQLUHodOAGThuEFhZuLhkecV0LynTLxprcjL0ZT6lcxd35G weKw38nXzHG9AnsnGiEICmVlDw/bSBBaOEgd9nCou/V1YAJEw3mJb4SYn1yjsDcl lGQJbFAhglBXIKNGcRoDmujP1RYWydI362JenDVO4+7iGjdJtiC7G/6BgOWEMWd+ V3H54WKWHhgTCTT4OVdq0I4KnNXMKVajz2YkQ3eELmY8258sIDAUk8b3spBWF3Tp DgBP3TKGYpKrmwJaAuPt0KAhGPxqRHQftOYQGIs2bI8oqVseMI1Mwf7Ip05MTKpz bmmzLOQt/SHNVCYy0JGSSvuT9xbp1E6J -----END CERTIFICATE-----Generated at Sat May 31 17:10:19 2025 by rpki-client