$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: AbEOkYkrCgITJjuAgOefFgWJTgFMbDHFPqg8c03L1IM= Subject key identifier: 39:A2:3C:4F:A8:87:FC:FA:A4:FE:2A:49:26:B5:7D:B3:5A:4D:AB:C6 Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 0677 Signing time: Wed 02 Jul 2025 22:37:56 +0000 Manifest this update: Wed 02 Jul 2025 22:37:55 +0000 Manifest next update: Wed 09 Jul 2025 22:37:55 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: XaMrPd4trakMHaQYA4PMS8CUXI3YjEN6JvOnUzLPPSY=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 6Kv6ZSL3MazMHrERvQ2sPcXYF/GKUnOfly5I2XW62pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Jul 2 22:37:55 2025 GMT Not After : Jul 9 22:37:55 2025 GMT Subject: CN=6865b4c4-b0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:6e:b7:c3:b9:72:d4:bb:ae:2f:bf:d7:eb: 89:7c:8a:2d:a6:92:e6:a5:47:a5:7d:dc:df:10:fc: 89:3a:2a:d8:a6:c8:6b:01:fe:09:95:f4:d3:7c:2d: 03:a2:09:10:7e:5f:db:b5:53:19:7f:ff:08:38:1d: 26:6c:b3:fc:5f:a8:c9:fe:6b:20:fe:95:8d:de:a5: 1a:f0:f1:62:c4:8b:7e:f8:87:16:82:b3:c3:6c:b3: 7d:77:12:cf:da:62:4a:e4:ba:14:58:92:00:44:80: 8d:b2:67:29:a7:93:de:f9:0b:dc:85:8f:bc:7c:68: c4:eb:4d:88:51:27:be:63:37:e7:ee:70:e1:ed:ae: 12:47:77:b4:8b:c2:33:17:0b:77:3b:82:a4:c0:db: 00:e1:50:3d:9f:aa:cd:51:2f:d9:6c:50:75:5e:05: d9:74:5b:fe:26:14:5a:52:42:6e:89:37:8a:bf:66: dc:b7:f7:d5:2a:4e:d2:fc:c9:fe:1d:2f:29:bb:b0: f5:3c:3c:a0:e3:83:41:a4:64:97:15:fd:5a:9f:d5: 57:53:f2:25:6e:99:72:dc:f1:9d:2a:08:43:c4:cb: b2:e8:a7:c3:1f:0d:cd:3a:94:f8:57:6b:cf:45:22: d2:af:60:33:94:c8:7e:9a:c4:6a:5c:af:53:07:9d: 10:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A2:3C:4F:A8:87:FC:FA:A4:FE:2A:49:26:B5:7D:B3:5A:4D:AB:C6 X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:08:41:8e:34:10:b2:2b:b6:d7:cd:6c:10:30:1d:e1:66:23: 3f:27:e3:e3:75:cc:a5:d6:de:09:39:7b:5b:57:27:d0:d8:f0: 2e:6a:b5:5e:9a:77:24:a1:82:f3:29:20:5e:28:d1:05:35:a4: 06:27:f6:2d:38:af:a6:29:a4:60:ab:4a:96:c4:58:d5:94:4f: 08:35:1e:7c:f2:6d:cb:ad:e5:98:09:21:d8:ff:d4:f0:f1:31: f6:d8:c1:11:b4:65:ae:83:2d:b9:22:62:f3:b7:14:5b:8c:c1: 66:18:0f:19:89:e2:ec:a5:47:4a:5b:3e:f4:1d:2f:7c:8c:1c: ce:e9:b8:25:ba:6c:dc:f4:4b:09:36:3b:dc:71:d2:63:d7:ff: 78:e3:37:50:cd:67:31:b2:58:bb:fe:3e:a1:36:8a:60:c0:5f: 39:97:c2:6d:63:b0:68:98:0a:ab:2c:59:76:06:3e:a5:a2:ad: d8:48:48:28:f7:36:90:54:57:2d:dc:55:3a:a7:f7:32:b4:67: d6:46:ca:9b:ae:5b:46:18:1f:cc:5f:df:d0:94:89:f4:e4:c7: c0:3b:dc:0c:63:19:a8:20:d6:65:78:cb:94:4d:e1:36:c1:84: 72:71:94:73:47:a2:ed:24:9b:7a:f5:1e:3d:95:9d:50:6e:3f: 1c:c6:84:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjUwNzAyMjIzNzU1WhcNMjUwNzA5MjIzNzU1WjAYMRYwFAYD VQQDEw02ODY1YjRjNC1iMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMlut8O5ctS7ri+/1+uJfIotppLmpUelfdzfEPyJOirYpshrAf4JlfTTfC0D ogkQfl/btVMZf/8IOB0mbLP8X6jJ/msg/pWN3qUa8PFixIt++IcWgrPDbLN9dxLP 2mJK5LoUWJIARICNsmcpp5Pe+QvchY+8fGjE602IUSe+Yzfn7nDh7a4SR3e0i8Iz Fwt3O4KkwNsA4VA9n6rNUS/ZbFB1XgXZdFv+JhRaUkJuiTeKv2bct/fVKk7S/Mn+ HS8pu7D1PDyg44NBpGSXFf1an9VXU/Ilbply3PGdKghDxMuy6KfDHw3NOpT4V2vP RSLSr2AzlMh+msRqXK9TB50QSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmiPE+o h/z6pP4qSSa1fbNaTavGMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcCEGONBCyK7bXzWwQMB3hZiM/J+Pjdcyl1t4JOXtbVyfQ2PAuarVe mnckoYLzKSBeKNEFNaQGJ/YtOK+mKaRgq0qWxFjVlE8INR588m3LreWYCSHY/9Tw 8TH22MERtGWugy25ImLztxRbjMFmGA8ZieLspUdKWz70HS98jBzO6bglumzc9EsJ NjvccdJj1/944zdQzWcxsli7/j6hNopgwF85l8JtY7BomAqrLFl2Bj6loq3YSEgo 9zaQVFct3FU6p/cytGfWRsqbrltGGB/MX9/QlIn05MfAO9wMYxmoINZleMuUTeE2 wYRycZRzR6LtJJt69R49lZ1Qbj8cxoSc -----END CERTIFICATE-----Generated at Thu Jul 3 06:12:43 2025 by rpki-client