$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft File: aSE1YIaDdV6U2OylfYsLNY7OFxg.mft (raw, json) Hash identifier: sS4KiO3p5RY4K55cCvwSQIE5gxvwFBqWFgOvJ0nkNkc= Subject key identifier: DF:37:E3:52:D2:0B:09:4B:96:F5:F7:E6:D3:14:6E:59:90:E1:03:A0 Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18 Certificate issuer: /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718 Certificate serial: 034E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft Manifest number: 0330 Signing time: Sat 31 May 2025 01:23:24 +0000 Manifest this update: Sat 31 May 2025 01:23:24 +0000 Manifest next update: Sat 07 Jun 2025 01:23:24 +0000 Files and hashes: 1: aSE1YIaDdV6U2OylfYsLNY7OFxg.crl (hash: mK1jnGoB+eNL/YjYfCw2+Pe+dX4xb0NS9NoPII9yhXM=) 2: EFEEF8165BB211EE88BB1945C4F9AE02.roa (hash: i6v8Xf+0KkaEGhb/TJ+saEyWBQY2o3H9ZszygH46Hd4=) 3: 593105685BB711EE8E69584CC4F9AE02.roa (hash: lkS26BT0D3kjQ+vvaIE4qPZCY0e62oxAQkxFZOHBmsQ=) 4: D0D44F9A7A7311EF9B70B061C4F9AE02.roa (hash: P57quaW3DlfcRg6H6EBZQJvqJnGiJw0/9o3VwlNBZ7w=) 5: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (hash: yRSOmcUbcPon9jEF0ergwI8+pr3n7/XtmbTEl4aDVyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 846 (0x34e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718 Validity Not Before: May 31 01:23:24 2025 GMT Not After : Jun 7 01:23:24 2025 GMT Subject: CN=683a5a0c-71c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:82:b0:1e:34:5f:8e:a5:6a:37:2e:0f:b9: ca:7d:06:79:a2:d5:2c:6f:f4:02:40:b0:cb:9e:90: a7:b8:02:f0:a2:f3:46:98:07:7d:2d:bf:ee:bb:41: 61:ca:31:90:3c:23:81:a1:c7:de:f0:c8:1d:71:d0: ce:99:14:69:ed:be:86:9e:92:49:7b:4c:57:86:51: 85:1b:c4:55:9d:bd:4f:89:25:9f:63:4e:e6:ae:ef: cc:7b:ba:bd:b6:ae:dd:53:13:32:c2:fc:f8:ec:ca: 90:cf:d1:30:ae:d5:17:b6:f4:54:f3:30:f2:f9:8c: 72:0f:9e:e8:12:41:32:5b:7e:fe:22:ba:5f:e9:29: 67:e9:5a:53:72:2e:a1:17:61:20:fd:88:af:40:e4: e0:ad:c2:ce:7f:d0:93:ab:35:75:a7:dd:72:80:42: 2c:24:0e:fc:55:67:7c:5e:04:b6:66:f1:3a:ad:1b: 7d:be:c5:6e:77:e4:83:c4:24:da:73:c0:76:00:c7: b9:1c:53:e5:60:6a:43:5a:e2:98:f4:8e:a9:60:53: ec:2c:0f:c1:47:10:c1:b8:d8:e0:e3:99:e9:58:7f: d8:fb:ba:af:89:60:c7:34:c8:5b:c7:ff:c4:9b:b1: 56:5c:81:39:07:cc:20:f7:96:96:26:cb:bb:cb:da: 0d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:37:E3:52:D2:0B:09:4B:96:F5:F7:E6:D3:14:6E:59:90:E1:03:A0 X509v3 Authority Key Identifier: keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9b:6e:e5:82:a3:9d:a3:75:57:7b:d2:cf:9d:2e:69:c6:5f: 98:f8:d3:fb:8b:09:6c:15:c8:c7:9d:00:c4:28:40:ee:1f:59: 7d:cd:66:37:c0:59:c2:64:55:91:f9:81:99:0f:aa:c0:b9:15: 90:e4:89:fd:ed:f4:97:c1:77:8b:c1:1f:6a:f8:0f:91:3e:0b: 59:dc:0f:1f:45:c1:7a:84:93:cc:5e:a3:90:93:21:b6:8c:25: c0:61:bc:0e:68:84:48:11:3e:f5:06:13:41:76:15:ab:fb:a6: e6:ff:87:31:f2:b3:0a:8b:b8:d2:96:ab:1b:34:3b:db:29:f7: 1e:73:ec:83:f3:aa:9b:41:de:27:9a:38:ed:a3:f8:91:ed:fd: e1:05:63:43:de:ff:15:4e:3b:09:4a:36:97:ee:03:a4:5d:68: 12:9e:5c:95:20:be:a5:09:08:c7:78:f6:06:0a:1c:6e:94:bb: d2:16:4d:bc:ab:79:d2:b7:e6:44:38:df:cf:89:27:fc:83:d5: 00:3d:3d:39:55:d0:5b:56:ff:21:ad:cf:65:86:68:9d:35:9b: 53:16:ad:8b:d7:b8:36:8b:af:72:51:ef:48:3d:85:d6:0d:02: 9b:c0:3b:c6:99:ca:79:7d:0a:8d:c1:25:77:93:72:5d:35:0c: 1e:82:4f:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg5OTYxMTAvBgNVBAUTKDY5MjEzNTYwODY4Mzc1NUU5NEQ4RUNBNTdEOEIwQjM1 OEVDRTE3MTgwHhcNMjUwNTMxMDEyMzI0WhcNMjUwNjA3MDEyMzI0WjAYMRYwFAYD VQQDEw02ODNhNWEwYy03MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kmCsB40X46lajcuD7nKfQZ5otUsb/QCQLDLnpCnuALwovNGmAd9Lb/uu0Fh yjGQPCOBocfe8MgdcdDOmRRp7b6GnpJJe0xXhlGFG8RVnb1PiSWfY07mru/Me7q9 tq7dUxMywvz47MqQz9EwrtUXtvRU8zDy+YxyD57oEkEyW37+Irpf6Sln6VpTci6h F2Eg/YivQOTgrcLOf9CTqzV1p91ygEIsJA78VWd8XgS2ZvE6rRt9vsVud+SDxCTa c8B2AMe5HFPlYGpDWuKY9I6pYFPsLA/BRxDBuNjg45npWH/Y+7qviWDHNMhbx//E m7FWXIE5B8wg95aWJsu7y9oNuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8341LS CwlLlvX35tMUblmQ4QOgMB8GA1UdIwQYMBaAFGkhNWCGg3VelNjspX2LCzWOzhcY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5Ni82NjAzMEY1RUQw NjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRWNlUyT3lsZllzTE5ZN09G eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTRTFZSWFEZFY2VTJPeWxmWXNMTlk3T0Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODk5Ni82NjAzMEY1RUQwNjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRW NlUyT3lsZllzTE5ZN09GeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALm27lgqOdo3VXe9LPnS5pxl+Y+NP7iwlsFcjHnQDEKEDuH1l9zWY3 wFnCZFWR+YGZD6rAuRWQ5In97fSXwXeLwR9q+A+RPgtZ3A8fRcF6hJPMXqOQkyG2 jCXAYbwOaIRIET71BhNBdhWr+6bm/4cx8rMKi7jSlqsbNDvbKfcec+yD86qbQd4n mjjto/iR7f3hBWND3v8VTjsJSjaX7gOkXWgSnlyVIL6lCQjHePYGChxulLvSFk28 q3nSt+ZEON/PiSf8g9UAPT05VdBbVv8hrc9lhmidNZtTFq2L17g2i69yUe9IPYXW DQKbwDvGmcp5fQqNwSV3k3JdNQwegk83 -----END CERTIFICATE-----Generated at Sat May 31 17:32:54 2025 by rpki-client