$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft File: sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft (raw, json) Hash identifier: wm1+cfpLgjuXEBpK1HsWc5WayrYgeqjvztSGf8s5cPU= Subject key identifier: 63:FF:44:39:12:F9:CE:E5:BD:2E:71:C3:22:B0:76:48:32:08:E1:11 Authority key identifier: B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50 Certificate issuer: /CN=A911C53A/serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft Manifest number: 10 Signing time: Thu 03 Jul 2025 08:20:58 +0000 Manifest this update: Thu 03 Jul 2025 08:20:57 +0000 Manifest next update: Thu 10 Jul 2025 08:20:57 +0000 Files and hashes: 1: sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl (hash: BPEsWUcCVwJ0pWD0X7UM1JltYgE/zezUgF41pR3UFQs=) 2: BDF659C4445111F0945A7E49C4F9AE02.roa (hash: NrM1GT0GOIEPUd0x6/lOomv0lodf7Nxw+vo5Gb1q27Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53A, serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550 Validity Not Before: Jul 3 08:20:57 2025 GMT Not After : Jul 10 08:20:57 2025 GMT Subject: CN=68663d6a-05c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:08:3d:f2:20:9a:04:d2:ab:50:d4:88:0a: 96:47:3c:4f:b2:5e:00:a9:a5:45:f1:ad:49:ca:b3: 08:98:e9:ce:28:62:b7:a3:a7:74:d4:9c:91:84:d4: d9:81:a8:fc:7e:ae:51:4e:1a:70:56:6c:48:c3:59: 24:78:b2:9c:c4:32:26:91:42:ab:4a:55:71:4b:73: f1:a8:84:94:24:43:c5:aa:9d:25:fa:a4:f6:69:94: 7c:aa:ac:f2:0e:8a:59:1a:70:26:cf:a5:d7:6e:4a: 2b:fd:87:00:cd:c8:1c:b2:52:6d:e9:15:dd:6e:66: 70:4a:b4:c3:5e:70:b8:28:dd:0b:9a:66:4a:3a:7d: e1:cd:48:f8:ee:43:67:9f:9d:4d:fd:52:fe:d4:9c: 5f:e8:af:f9:be:ad:ab:de:d6:b7:99:d5:84:3d:36: d2:4f:0a:04:a7:4e:f6:bb:1a:ab:86:35:82:46:b5: 13:9f:de:cc:09:76:8d:dc:40:18:84:ef:bf:55:cf: ae:3a:e0:5b:89:20:fa:17:56:c5:55:64:28:1b:eb: 33:7e:cc:0d:d9:ea:3d:6f:ba:db:c6:6e:d0:41:33: ac:44:fa:0c:c2:03:e5:69:7a:c2:fd:6e:90:fa:20: 2e:26:8f:b3:9e:90:f1:66:5b:19:77:46:d5:43:cd: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FF:44:39:12:F9:CE:E5:BD:2E:71:C3:22:B0:76:48:32:08:E1:11 X509v3 Authority Key Identifier: keyid:B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:9d:b7:97:7e:73:d0:c5:89:a3:a7:10:a8:ab:0f:ea:66:1e: 11:2a:a2:76:9c:bb:e3:2f:e0:2f:27:88:93:18:a0:22:a0:e3: e9:3e:50:b3:ba:e9:d7:01:87:4e:33:67:21:ee:4c:da:ff:79: 2b:da:fa:1d:e2:d8:0c:71:84:4b:72:b3:a3:9a:69:fd:68:32: 15:16:28:13:12:22:5f:91:cd:a6:28:eb:90:aa:b8:b2:47:0d: 32:7f:0e:0a:d5:f2:15:d3:55:66:8b:e7:b3:0c:3b:d5:dd:35: 85:14:ed:79:53:b7:95:65:cb:f7:15:45:40:ac:5d:ff:18:c3: 1e:c6:4f:74:21:fc:44:3e:d1:02:18:4e:06:70:fe:e6:29:87: ce:c0:66:81:66:b0:ea:d2:24:24:c2:e3:20:45:75:e5:a7:e7: 50:9c:04:e7:bf:3c:90:28:b2:26:f3:3f:b2:56:74:b1:22:c8: a7:95:c7:91:0b:9c:8a:05:f0:7b:3e:37:7b:03:71:9e:1f:35: f1:ed:51:1a:1f:ee:ac:d0:85:6b:c4:39:d5:39:72:f7:11:39: ec:43:bd:ae:6a:b7:9c:dd:90:4e:b4:63:b0:55:79:b3:45:37: 56:c1:db:34:30:8c:34:ba:96:a9:fb:e9:36:32:51:14:00:8c: ea:92:2c:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzUzQTExMC8GA1UEBRMoQjA4QjU5RTVEMTA3MDVDNUNCMkQzQ0RCODU2NUIzMjhE NTAyRjU1MDAeFw0yNTA3MDMwODIwNTdaFw0yNTA3MTAwODIwNTdaMBgxFjAUBgNV BAMTDTY4NjYzZDZhLTA1YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5jwg98iCaBNKrUNSICpZHPE+yXgCppUXxrUnKswiY6c4oYrejp3TUnJGE1NmB qPx+rlFOGnBWbEjDWSR4spzEMiaRQqtKVXFLc/GohJQkQ8WqnSX6pPZplHyqrPIO ilkacCbPpdduSiv9hwDNyByyUm3pFd1uZnBKtMNecLgo3QuaZko6feHNSPjuQ2ef nU39Uv7UnF/or/m+rave1reZ1YQ9NtJPCgSnTva7GquGNYJGtROf3swJdo3cQBiE 779Vz6464FuJIPoXVsVVZCgb6zN+zA3Z6j1vutvGbtBBM6xE+gzCA+VpesL9bpD6 IC4mj7OekPFmWxl3RtVDzaO3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY/9EORL5 zuW9LnHDIrB2SDII4REwHwYDVR0jBBgwFoAUsItZ5dEHBcXLLTzbhWWzKNUC9VAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDNTNBLzQ3NDUwNTZFNDQ1 MTExRjBBMDlFOEEyNEM0RjlBRTAyL3NJdFo1ZEVIQmNYTExUemJoV1d6S05VQzlW QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0l0WjVkRUhCY1hMTFR6YmhXV3pLTlVDOVZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD NTNBLzQ3NDUwNTZFNDQ1MTExRjBBMDlFOEEyNEM0RjlBRTAyL3NJdFo1ZEVIQmNY TExUemJoV1d6S05VQzlWQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADadt5d+c9DFiaOnEKirD+pmHhEqonacu+Mv4C8niJMYoCKg4+k+ULO6 6dcBh04zZyHuTNr/eSva+h3i2AxxhEtys6Oaaf1oMhUWKBMSIl+RzaYo65CquLJH DTJ/DgrV8hXTVWaL57MMO9XdNYUU7XlTt5Vly/cVRUCsXf8Ywx7GT3Qh/EQ+0QIY TgZw/uYph87AZoFmsOrSJCTC4yBFdeWn51CcBOe/PJAosibzP7JWdLEiyKeVx5EL nIoF8Hs+N3sDcZ4fNfHtURof7qzQhWvEOdU5cvcROexDva5qt5zdkE60Y7BVebNF N1bB2zQwjDS6lqn76TYyURQAjOqSLE0= -----END CERTIFICATE-----Generated at Sat Jul 5 05:42:30 2025 by rpki-client