$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json) Hash identifier: Z8tl/ewRvjQrSxyKmOv1mT+q/kaD4E5HJwhqviHoENA= Subject key identifier: 41:CD:CF:AE:B0:1E:16:DE:F0:DE:B9:BC:C7:4F:AC:9F:B2:AD:DA:7C Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft Manifest number: 45 Signing time: Sun 01 Jun 2025 07:08:18 +0000 Manifest this update: Sun 01 Jun 2025 07:08:17 +0000 Manifest next update: Sun 08 Jun 2025 07:08:17 +0000 Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: 5SSRbo4947hxKqOR95Ro1/n59Anypm84eeApJ5Uabo4=) 2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: XLgRz6Ys+AWKVb/kmctJ9W9xNxym6vJibxlk+kHS4Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Validity Not Before: Jun 1 07:08:17 2025 GMT Not After : Jun 8 07:08:17 2025 GMT Subject: CN=683bfc61-3463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:9a:29:52:a0:83:4b:f8:41:87:4e:65:9d: 85:51:76:13:f9:4e:84:6e:27:55:93:c9:88:83:1f: 7e:bf:ee:2e:69:51:98:9c:6d:11:34:38:14:aa:2d: 8b:ea:e8:10:27:f7:7b:31:17:c7:6b:a0:7d:fb:88: 21:a7:73:a0:91:33:ff:c5:a8:93:3a:94:6a:2f:2e: 2f:59:6e:ee:e8:ae:15:e2:8b:2c:a9:12:9c:7d:cc: 7c:2d:e6:55:9d:a6:34:f1:79:e6:0e:c2:b7:c6:11: f0:26:03:f7:2b:06:88:00:18:8b:6a:b5:29:ae:f1: 7e:8d:af:28:4f:56:01:42:bf:93:68:61:ca:1d:10: 69:a0:b7:4b:8f:12:42:a6:db:e0:06:d2:f2:8c:e4: b9:59:e7:51:11:0e:73:a8:25:12:34:23:bf:82:33: a7:ff:8b:af:4d:9d:ed:82:c9:a9:50:bb:0d:c7:4c: 2d:32:de:81:13:ae:4f:83:80:88:7d:80:d6:cd:21: 00:d1:7d:cb:32:f3:2f:1a:c3:04:5a:de:71:3e:7b: d2:5e:b3:5e:3f:0a:90:4d:31:fc:9c:93:9f:1d:d3: 6c:c3:7f:7b:1a:17:f8:d5:3e:86:fd:67:7c:6e:af: 2e:91:66:f9:ab:0d:08:c9:01:3a:d7:03:92:b4:60: 39:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CD:CF:AE:B0:1E:16:DE:F0:DE:B9:BC:C7:4F:AC:9F:B2:AD:DA:7C X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f1:09:e7:60:4e:08:46:b6:a0:0f:3e:fb:fd:9a:bb:83:29: 08:a5:c4:c7:77:55:de:78:b5:ee:b1:2b:86:76:1c:fc:2c:73: 4a:e5:29:86:f8:58:3c:a9:00:bc:43:be:17:00:f3:e0:47:f5: c1:0e:15:0f:e3:ff:16:50:6f:25:4d:b7:cd:bc:4a:c8:29:72: 00:64:80:b2:1d:32:78:d2:bf:16:32:d7:64:cb:f8:60:d7:73: 77:b2:d3:2c:fe:de:d3:ed:94:0d:db:85:7d:26:db:8b:f6:12: 68:fa:c3:1d:e8:e4:a2:35:84:fa:c4:99:f3:6b:29:bc:e2:9b: 57:d0:7b:ab:e9:85:97:0e:a9:0c:e3:ae:ff:42:83:54:b0:ef: 55:f1:73:71:82:ba:05:28:eb:be:19:ce:26:10:3a:05:18:bb: c2:17:cc:87:46:e2:1b:51:ef:7e:3c:74:ee:03:4b:8e:d5:bd: 47:33:00:f6:78:b9:d7:c2:44:d7:0d:1b:8e:b0:c9:f2:66:12: 53:f5:fe:cf:2e:c0:50:b8:ea:77:ea:af:d5:29:01:37:bb:67: 73:17:13:9d:ff:36:03:8a:36:6b:93:25:bc:b1:b9:d7:53:8f: 52:21:a9:c2:89:04:a7:63:7c:83:2e:9b:51:ce:7b:80:bd:e0: 1f:b0:70:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFGNTExMC8GA1UEBRMoNDkxMzY2NzVFN0UyMzRFN0QyRjg4NDU5OThFMkM2MkRC NDg4ODJDQTAeFw0yNTA2MDEwNzA4MTdaFw0yNTA2MDgwNzA4MTdaMBgxFjAUBgNV BAMTDTY4M2JmYzYxLTM0NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjN5opUqCDS/hBh05lnYVRdhP5ToRuJ1WTyYiDH36/7i5pUZicbRE0OBSqLYvq 6BAn93sxF8droH37iCGnc6CRM//FqJM6lGovLi9Zbu7orhXiiyypEpx9zHwt5lWd pjTxeeYOwrfGEfAmA/crBogAGItqtSmu8X6NryhPVgFCv5NoYcodEGmgt0uPEkKm 2+AG0vKM5LlZ51ERDnOoJRI0I7+CM6f/i69Nne2CyalQuw3HTC0y3oETrk+DgIh9 gNbNIQDRfcsy8y8awwRa3nE+e9Jes14/CpBNMfyck58d02zDf3saF/jVPob9Z3xu ry6RZvmrDQjJATrXA5K0YDmZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQc3PrrAe Ft7w3rm8x0+sn7Kt2nwwHwYDVR0jBBgwFoAUSRNmdefiNOfS+IRZmOLGLbSIgsow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUY1L0E3NTREMzgwRDZF QzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1JObWRlZmlOT2ZTLUlSWm1PTEdMYlNJZ3NvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz MUY1L0E3NTREMzgwRDZFQzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9m Uy1JUlptT0xHTGJTSWdzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ3xCedgTghGtqAPPvv9mruDKQilxMd3Vd54te6xK4Z2HPwsc0rlKYb4 WDypALxDvhcA8+BH9cEOFQ/j/xZQbyVNt828SsgpcgBkgLIdMnjSvxYy12TL+GDX c3ey0yz+3tPtlA3bhX0m24v2Emj6wx3o5KI1hPrEmfNrKbzim1fQe6vphZcOqQzj rv9Cg1Sw71Xxc3GCugUo674ZziYQOgUYu8IXzIdG4htR7348dO4DS47VvUczAPZ4 udfCRNcNG46wyfJmElP1/s8uwFC46nfqr9UpATe7Z3MXE53/NgOKNmuTJbyxuddT j1IhqcKJBKdjfIMum1HOe4C94B+wcOo= -----END CERTIFICATE-----Generated at Mon Jun 2 20:37:44 2025 by rpki-client