$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json) Hash identifier: wJ+b8QktOpsYKkJhLAAV4te+kdnoZ/R9cnzsmthP8mE= Subject key identifier: B8:4D:BF:14:5E:CA:3C:FE:13:66:BA:15:A8:34:CD:7E:F7:3A:63:53 Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft Manifest number: 0157 Signing time: Tue 01 Jul 2025 05:05:20 +0000 Manifest this update: Tue 01 Jul 2025 05:05:20 +0000 Manifest next update: Tue 08 Jul 2025 05:05:20 +0000 Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: EGQM0XzZDMPpidD8WptzC+WizAYCcdbXd1cURvpPyQw=) 2: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: 28Pcqodr/XiyCXR1rm1sG8vgE+8OCqXnMRTKbKZwlik=) 3: CEB166C0E47D11EFAFC6496FC4F9AE02.roa (hash: DZtIXQ1ghN4hCYJ+ctwT88CELrMnqgkRwXBOtM2ymVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Jul 1 05:05:20 2025 GMT Not After : Jul 8 05:05:20 2025 GMT Subject: CN=68636c90-553f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:99:28:18:3f:44:8b:52:b6:20:ca:b3:a0: 50:c2:6f:2a:1f:05:fb:34:3d:a7:51:8c:2f:4a:66: 54:f6:21:a3:f5:3b:f3:e7:16:9a:3b:ea:c9:b4:37: 63:42:00:df:c7:50:ce:18:b9:9c:e3:a2:37:2b:dd: e3:7a:4e:44:76:b2:0c:e2:b7:af:5e:e5:b3:99:3e: 1a:0a:b2:8d:e7:ec:20:b1:91:13:a8:a7:0e:c0:8b: 96:5a:1c:b9:5f:f5:ed:14:ef:33:50:22:78:77:24: ed:ae:31:fb:46:6f:0e:31:44:d0:04:d6:a8:20:3f: 1f:3b:4d:7b:51:e0:ab:7d:d2:10:c8:0c:dd:57:66: a3:95:d5:58:b7:fb:18:f7:9a:70:3e:66:01:8c:79: 39:fb:1c:fe:9b:29:60:e2:69:03:3a:0b:55:61:23: 6e:a2:b7:07:9a:8c:70:14:df:0b:45:70:c8:5a:61: eb:a0:fb:1b:8f:d4:e3:dc:d4:9d:47:ad:1c:8e:41: ba:15:dd:ab:4b:4c:87:14:df:53:55:ab:9f:f9:97: 3e:5b:4b:fc:6d:6c:3c:8a:50:92:1e:ec:5b:86:25: 1a:ca:f7:5c:e9:c4:04:8c:99:19:e9:6b:de:6a:5c: 8e:92:e1:1e:25:83:81:7a:fb:fa:be:e4:38:1a:b0: 07:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4D:BF:14:5E:CA:3C:FE:13:66:BA:15:A8:34:CD:7E:F7:3A:63:53 X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:6c:ff:7c:83:c1:ac:8b:cd:7b:60:3a:51:86:de:2c:3a:d2: a5:92:9c:2b:53:f6:e4:30:72:1a:a4:c1:b3:92:e6:43:a2:19: 10:d9:76:c3:9f:6a:d4:c1:51:9b:74:96:ee:49:d9:b9:54:de: eb:0c:6a:aa:c4:52:56:f7:c8:e4:31:03:4b:95:1d:31:7f:be: aa:b8:97:af:e0:f3:9e:e1:eb:4b:bd:5c:af:39:cc:2a:3f:29: 38:6c:de:32:9c:2a:7e:c3:58:71:83:1f:28:cc:27:5d:5c:93: ed:28:cc:19:df:77:5a:4e:b9:8e:0d:03:ec:c7:ce:6f:a6:6e: 86:27:65:39:eb:44:31:65:27:51:82:8a:24:22:54:14:63:cb: 9b:ba:84:93:04:52:3c:91:7f:f6:5a:e1:65:e2:1b:9b:f1:76: 78:48:d1:f6:b4:69:04:7f:71:82:b1:b9:bc:60:3d:cf:f4:71: 1b:be:b3:b4:73:87:31:e8:68:a2:6f:93:8d:d1:12:0e:26:2e: 7b:a6:7c:7c:5a:1b:9f:56:d6:27:2f:3f:75:70:3c:e1:78:43: 1c:a1:2f:42:8a:98:08:30:28:a1:1f:90:55:de:5a:d2:a2:c3: 7b:c4:61:fb:b9:06:96:e9:54:9c:d9:44:76:da:91:b7:b5:5a: 2b:96:be:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjUwNzAxMDUwNTIwWhcNMjUwNzA4MDUwNTIwWjAYMRYwFAYD VQQDEw02ODYzNmM5MC01NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtOZKBg/RItStiDKs6BQwm8qHwX7ND2nUYwvSmZU9iGj9Tvz5xaaO+rJtDdj QgDfx1DOGLmc46I3K93jek5EdrIM4revXuWzmT4aCrKN5+wgsZETqKcOwIuWWhy5 X/XtFO8zUCJ4dyTtrjH7Rm8OMUTQBNaoID8fO017UeCrfdIQyAzdV2ajldVYt/sY 95pwPmYBjHk5+xz+mylg4mkDOgtVYSNuorcHmoxwFN8LRXDIWmHroPsbj9Tj3NSd R60cjkG6Fd2rS0yHFN9TVauf+Zc+W0v8bWw8ilCSHuxbhiUayvdc6cQEjJkZ6Wve alyOkuEeJYOBevv6vuQ4GrAHkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhNvxRe yjz+E2a6Fag0zX73OmNTMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ TVFoQ3lWVmtCUmRUM3JBb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVbP98g8Gsi817YDpRht4sOtKlkpwrU/bkMHIapMGzkuZDohkQ2XbD n2rUwVGbdJbuSdm5VN7rDGqqxFJW98jkMQNLlR0xf76quJev4POe4etLvVyvOcwq Pyk4bN4ynCp+w1hxgx8ozCddXJPtKMwZ33daTrmODQPsx85vpm6GJ2U560QxZSdR gookIlQUY8ubuoSTBFI8kX/2WuFl4hub8XZ4SNH2tGkEf3GCsbm8YD3P9HEbvrO0 c4cx6Giib5ON0RIOJi57pnx8WhufVtYnLz91cDzheEMcoS9CipgIMCihH5BV3lrS osN7xGH7uQaW6VSc2UR22pG3tVorlr5l -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:10 2025 by rpki-client