$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: KqkiupUKC07QS0JcXLcKo8/A0wvTEEuivdnoy0nZi80= Subject key identifier: C8:B7:03:37:49:B8:9A:BA:07:AE:8D:F5:79:AA:2F:F6:46:46:96:FE Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 014D Signing time: Tue 01 Jul 2025 04:41:52 +0000 Manifest this update: Tue 01 Jul 2025 04:41:52 +0000 Manifest next update: Tue 08 Jul 2025 04:41:52 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: n+huu4aOsPBVbgGRp1j7iAYAB55iRYLrrArNM5wqWuo=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: Jul 1 04:41:52 2025 GMT Not After : Jul 8 04:41:52 2025 GMT Subject: CN=68636710-1f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:ee:d2:fc:d5:94:a9:41:71:2a:52:b5:84: 62:27:09:e6:08:96:61:64:56:e2:6f:82:3c:ef:7e: 49:6d:0b:a0:e2:95:60:ef:8d:ac:47:6f:e6:e6:0d: 9b:fb:73:07:5d:74:0c:6f:e9:8d:cf:b9:49:19:aa: 12:6d:6b:af:1a:d0:41:db:43:72:08:9f:6a:55:f4: 27:17:bd:d0:ec:d9:12:dd:75:a4:8f:16:1f:53:b2: 38:5e:c4:35:10:5b:39:8e:a9:82:eb:f2:1d:a3:73: fe:ec:81:ab:03:71:aa:68:07:04:34:80:4b:4f:57: 30:06:b9:a6:24:8c:49:98:07:77:5a:0a:29:f0:e1: 97:7c:06:26:38:13:51:c3:e6:98:52:ef:e7:44:f6: 57:e6:7a:59:bd:fd:38:4d:d9:b0:2a:e2:92:22:c9: 1e:b8:18:5c:7c:34:a2:77:d7:ee:db:c7:87:70:8f: 4a:09:bb:89:14:7a:67:50:40:df:6d:80:90:0f:9c: 2c:c8:22:a9:eb:69:8f:51:91:13:74:bb:24:1f:2b: ec:97:3a:88:3c:ac:47:d1:34:e3:0f:5b:33:2e:ac: 5e:c3:28:31:5a:74:9b:74:2f:90:6c:38:49:1d:0d: 8a:62:37:65:41:7f:b5:8b:92:10:32:60:76:b5:3e: d6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B7:03:37:49:B8:9A:BA:07:AE:8D:F5:79:AA:2F:F6:46:46:96:FE X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:00:8a:19:e0:dc:3b:90:b2:cf:45:e0:26:1c:c4:fd:4d:df: b2:58:d7:bf:0a:4f:95:29:6f:39:25:f7:5d:d4:eb:ad:b1:f3: bb:a4:a4:1e:b3:48:24:37:a9:40:79:94:53:a8:9e:53:57:22: 0a:39:47:c2:e4:62:0e:97:9f:94:21:4a:a1:8a:1e:42:98:f5: 47:1f:a6:00:72:bd:57:ba:c1:ac:2f:69:ed:2a:d4:ac:cc:38: 8f:1a:7c:f2:34:a6:5c:46:df:ce:03:87:bd:81:18:78:77:90: e3:23:5e:bf:81:c7:5c:80:fe:68:ce:28:84:81:0e:05:0e:41: e0:17:f4:ec:fa:fa:e8:1d:db:a2:06:aa:74:ae:14:52:16:af: 7c:f4:e9:32:2e:12:d5:83:7c:d8:24:1d:0c:b8:96:b7:68:df: 04:af:0f:62:52:85:fd:f9:91:23:84:8f:71:9b:e4:95:90:57: 2b:c9:a6:c6:b8:59:60:2c:cc:81:dd:f7:47:27:25:d6:d1:92: 32:79:56:2d:2e:12:32:99:85:d8:30:84:97:f9:90:52:44:48: d7:4b:09:09:0e:52:b8:e1:70:7b:f0:65:a1:7c:38:60:1a:e4: 0b:02:ba:cc:ca:93:5f:97:ab:30:4b:28:7d:2a:ab:38:8f:08: b6:3c:0a:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjUwNzAxMDQ0MTUyWhcNMjUwNzA4MDQ0MTUyWjAYMRYwFAYD VQQDEw02ODYzNjcxMC0xZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wru0vzVlKlBcSpStYRiJwnmCJZhZFbib4I8735JbQug4pVg742sR2/m5g2b +3MHXXQMb+mNz7lJGaoSbWuvGtBB20NyCJ9qVfQnF73Q7NkS3XWkjxYfU7I4XsQ1 EFs5jqmC6/Ido3P+7IGrA3GqaAcENIBLT1cwBrmmJIxJmAd3Wgop8OGXfAYmOBNR w+aYUu/nRPZX5npZvf04TdmwKuKSIskeuBhcfDSid9fu28eHcI9KCbuJFHpnUEDf bYCQD5wsyCKp62mPUZETdLskHyvslzqIPKxH0TTjD1szLqxewygxWnSbdC+QbDhJ HQ2KYjdlQX+1i5IQMmB2tT7WGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMi3AzdJ uJq6B66N9XmqL/ZGRpb+MB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbAIoZ4Nw7kLLPReAmHMT9Td+yWNe/Ck+VKW85Jfdd1OutsfO7pKQe s0gkN6lAeZRTqJ5TVyIKOUfC5GIOl5+UIUqhih5CmPVHH6YAcr1XusGsL2ntKtSs zDiPGnzyNKZcRt/OA4e9gRh4d5DjI16/gcdcgP5oziiEgQ4FDkHgF/Ts+vroHdui Bqp0rhRSFq989OkyLhLVg3zYJB0MuJa3aN8Erw9iUoX9+ZEjhI9xm+SVkFcryabG uFlgLMyB3fdHJyXW0ZIyeVYtLhIymYXYMISX+ZBSREjXSwkJDlK44XB78GWhfDhg GuQLArrMypNfl6swSyh9Kqs4jwi2PAoD -----END CERTIFICATE-----Generated at Thu Jul 3 05:04:38 2025 by rpki-client