$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json) Hash identifier: GWTryuoNqNcbNjLOQjJZTrveyYj5W4yZ15EwSasxvO0= Subject key identifier: C6:14:22:B8:BC:80:25:43:0A:7A:13:E9:91:4B:BF:57:39:23:9C:7A Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft Manifest number: 01C9 Signing time: Sat 31 May 2025 02:56:35 +0000 Manifest this update: Sat 31 May 2025 02:56:34 +0000 Manifest next update: Sat 07 Jun 2025 02:56:34 +0000 Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: AkEF+bVVCUwbXfFQ68C6+DzMpVtEObLoEB0R030htEU=) 2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hw7fn2Uz56pW/An8KSiF7/ybzu4erny13VSakUkooRo=) 3: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: TCN1AZgzVPw/0NzN3SuEMukcZY6yAiASu/ppodIE8PQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: May 31 02:56:34 2025 GMT Not After : Jun 7 02:56:34 2025 GMT Subject: CN=683a6fe3-6315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:b4:ca:6d:32:d9:25:c0:71:96:d0:aa:49: 3e:72:28:eb:72:b5:0f:d8:ad:75:29:92:e5:02:6e: 03:d1:05:6b:03:b2:30:99:fc:8a:86:7d:89:38:87: 0a:ae:67:33:fa:c7:bd:89:72:8b:c7:3f:df:bb:72: 32:bb:80:42:f3:9f:a8:53:c2:e2:11:32:0d:4a:08: bd:7a:c8:f0:94:9b:e6:a1:6f:e2:65:79:ea:5c:8b: ff:99:fb:c6:15:bd:46:42:3c:aa:87:9d:4d:29:b8: c1:de:66:39:0c:9c:5c:1a:80:c4:8a:d7:a8:d2:47: 08:45:5c:6b:5c:0b:3e:00:15:68:76:64:15:c6:ad: 42:58:b6:6b:bc:7e:23:82:51:b6:04:e3:07:e6:3c: 42:6e:58:b7:67:f2:41:cb:89:27:1b:9d:b1:b4:45: 01:c3:bb:1f:bc:07:32:df:7e:b6:ea:13:d4:ca:99: 79:5e:1f:ba:86:ae:36:2d:f5:be:39:e2:68:2f:3e: 2a:65:23:fa:70:50:c4:15:d2:00:5e:37:37:99:b0: 86:d0:ee:13:4f:a4:90:ab:45:76:23:2e:13:e4:c7: c7:69:22:af:ce:fe:c0:58:8d:01:be:0e:c7:bd:f7: bc:5e:2c:5b:70:a1:10:1c:d4:44:be:05:d0:a9:8a: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:14:22:B8:BC:80:25:43:0A:7A:13:E9:91:4B:BF:57:39:23:9C:7A X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:4c:2f:17:b7:fc:18:3a:5d:cf:8f:5a:eb:b6:9b:43:20:87: d7:f2:aa:e9:8f:c9:ba:cc:7a:2d:dc:12:a5:41:63:79:7e:d8: 62:6e:87:e2:1d:5c:29:f1:fa:9d:b5:37:33:bf:39:c9:49:81: 3e:5b:8f:ef:0d:71:f2:07:7b:2f:2c:95:e6:1e:b9:64:9b:dc: c5:b8:c4:e9:ab:f2:c1:2f:67:b5:04:79:e7:8f:84:f3:29:3d: d4:1c:a3:e9:24:98:ed:b6:33:53:2c:4a:e7:ab:85:1a:78:06: 62:3c:18:d1:1f:4b:e1:c3:b8:56:a8:ed:df:2b:7b:06:1e:a7: 9f:55:0c:98:44:bf:98:50:8d:da:a0:5d:9d:c7:b3:2e:2d:9f: f0:1c:d8:00:1c:a5:1d:6d:a8:cd:1a:21:9c:2b:ab:f3:7f:0a: 12:4f:3e:fb:74:ba:ed:9b:de:93:47:91:fb:a7:71:42:15:83: 05:8a:0a:58:d7:41:b0:61:3a:2c:ce:31:62:88:a9:b5:f3:5d: e3:b3:88:70:b6:67:b4:62:cb:44:06:b3:73:03:68:0e:9d:d7: 4d:ba:d0:9b:88:98:b8:19:e9:9f:f2:63:f9:19:32:19:51:07: 89:af:d4:e4:c7:81:96:af:7e:15:ee:54:28:e6:55:8f:77:11: ab:2f:ed:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjUwNTMxMDI1NjM0WhcNMjUwNjA3MDI1NjM0WjAYMRYwFAYD VQQDEw02ODNhNmZlMy02MzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvK0ym0y2SXAcZbQqkk+cijrcrUP2K11KZLlAm4D0QVrA7IwmfyKhn2JOIcK rmcz+se9iXKLxz/fu3Iyu4BC85+oU8LiETINSgi9esjwlJvmoW/iZXnqXIv/mfvG Fb1GQjyqh51NKbjB3mY5DJxcGoDEiteo0kcIRVxrXAs+ABVodmQVxq1CWLZrvH4j glG2BOMH5jxCbli3Z/JBy4knG52xtEUBw7sfvAcy33626hPUypl5Xh+6hq42LfW+ OeJoLz4qZSP6cFDEFdIAXjc3mbCG0O4TT6SQq0V2Iy4T5MfHaSKvzv7AWI0Bvg7H vfe8XixbcKEQHNREvgXQqYr4lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYUIri8 gCVDCnoT6ZFLv1c5I5x6MB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3 U3N0cUJLRlBDamJNNkZZUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZTC8Xt/wYOl3Pj1rrtptDIIfX8qrpj8m6zHot3BKlQWN5fthibofi HVwp8fqdtTczvznJSYE+W4/vDXHyB3svLJXmHrlkm9zFuMTpq/LBL2e1BHnnj4Tz KT3UHKPpJJjttjNTLErnq4UaeAZiPBjRH0vhw7hWqO3fK3sGHqefVQyYRL+YUI3a oF2dx7MuLZ/wHNgAHKUdbajNGiGcK6vzfwoSTz77dLrtm96TR5H7p3FCFYMFigpY 10GwYToszjFiiKm1813js4hwtme0YstEBrNzA2gOnddNutCbiJi4Gemf8mP5GTIZ UQeJr9Tkx4GWr34V7lQo5lWPdxGrL+0N -----END CERTIFICATE-----Generated at Sat May 31 16:35:52 2025 by rpki-client