$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json) Hash identifier: wfYNDXqwQF5kYcYlFjVos8HVw27r1fc18KZgUB7eNMw= Subject key identifier: 32:E6:4D:44:61:39:4B:37:03:A2:7F:C3:AC:48:79:97:FB:B1:CF:1B Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft Manifest number: 32 Signing time: Thu 03 Jul 2025 07:56:20 +0000 Manifest this update: Thu 03 Jul 2025 07:56:19 +0000 Manifest next update: Thu 10 Jul 2025 07:56:19 +0000 Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: dHZ8J6Y3xAs/3KdqClaU+xyxTP7YUpBupoMEJo+roWw=) 2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Validity Not Before: Jul 3 07:56:19 2025 GMT Not After : Jul 10 07:56:19 2025 GMT Subject: CN=686637a4-fc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:2b:91:6d:6d:8a:9a:58:35:2a:6f:2d:d6: 70:4b:5c:f4:e9:ee:fe:d1:d7:ee:11:4e:60:0a:ce: c6:f8:c9:c7:5a:a7:36:97:24:43:e7:d3:e5:2d:f9: 37:e9:a9:be:d5:fd:50:46:e6:a9:a9:51:5b:4d:dd: d8:5d:dd:c0:2d:ab:18:04:84:62:c3:0d:f8:26:09: b7:ba:a1:57:bd:cc:44:63:b7:f1:42:71:ea:7c:e3: db:3f:26:7d:df:86:90:c6:c9:96:0c:6a:66:79:f2: a0:fb:4f:e1:83:62:fe:13:f3:b7:09:7d:34:c0:2e: 08:16:0d:46:b7:99:9e:22:86:3a:b7:20:45:8e:14: 29:39:f6:c0:5b:27:c1:a8:72:af:1c:37:d3:15:5e: cc:01:de:2c:74:c5:78:99:db:f0:d2:02:a4:0c:7f: b9:18:5f:4e:0b:7e:1a:34:ba:b8:17:95:7f:50:b2: 35:60:b0:2a:dd:fa:01:56:08:7e:fe:a6:24:d9:c9: 55:e9:94:e9:f9:25:ab:50:ab:75:a4:49:a6:03:41: 3b:46:3d:c6:cb:d1:d7:ab:0a:34:d4:f7:4a:78:42: 52:30:4e:71:6e:1b:0d:1b:40:ba:3e:7c:25:a4:7b: c0:67:d9:e3:3e:c3:7e:08:b1:4b:6e:93:b7:c0:19: f8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E6:4D:44:61:39:4B:37:03:A2:7F:C3:AC:48:79:97:FB:B1:CF:1B X509v3 Authority Key Identifier: keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f2:80:76:dd:0f:92:88:ec:70:fd:3c:7d:ff:51:44:0d:47: 72:b3:17:e5:15:cc:89:9a:eb:77:0c:c8:ad:3d:52:d3:8c:3d: 95:58:7e:f6:61:d6:c6:ab:0f:b5:51:a6:88:e5:20:df:39:0a: 5d:27:1d:95:3f:1d:2d:65:bc:78:ca:86:af:db:a9:8c:e5:a2: 86:08:25:07:9f:9b:e5:57:59:3e:70:3f:d4:75:82:9f:1a:ab: 85:8f:87:38:b0:45:1f:24:24:79:3c:df:24:01:ea:7a:19:7d: 36:73:b1:4f:4b:27:59:04:f5:f2:67:7a:ff:7b:e5:32:54:74: b6:a8:13:12:0d:2c:b7:6f:2e:af:59:fb:0b:2f:d8:2f:cd:0a: c7:b7:43:52:2b:86:4f:9d:d9:7d:0f:22:32:b1:5d:31:e0:ec: 54:8b:7a:b1:70:ca:7f:26:b0:dc:ac:8c:90:6b:8f:e7:00:8d: 4d:88:a6:02:53:d5:2e:9a:c6:3f:65:0f:80:1c:e6:39:be:c9: ce:9a:d3:85:81:5b:e1:7c:cd:71:25:2c:99:11:a8:c2:b7:86: ae:f2:9c:f6:63:28:c9:87:8f:55:e3:bf:27:ee:04:65:32:7c: 0d:b3:bd:8f:c0:58:a0:87:24:0c:6a:46:5d:31:10:cf:85:b4: 4d:aa:00:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDEwRTExMC8GA1UEBRMoNDg5QTZGQ0VEN0RDNjNCN0FCMzY2NkUzNUJENTA5RDlF QTE1NzVFMDAeFw0yNTA3MDMwNzU2MTlaFw0yNTA3MTAwNzU2MTlaMBgxFjAUBgNV BAMTDTY4NjYzN2E0LWZjNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAmiuRbW2Kmlg1Km8t1nBLXPTp7v7R1+4RTmAKzsb4ycdapzaXJEPn0+Ut+Tfp qb7V/VBG5qmpUVtN3dhd3cAtqxgEhGLDDfgmCbe6oVe9zERjt/FCcep849s/Jn3f hpDGyZYMamZ58qD7T+GDYv4T87cJfTTALggWDUa3mZ4ihjq3IEWOFCk59sBbJ8Go cq8cN9MVXswB3ix0xXiZ2/DSAqQMf7kYX04Lfho0urgXlX9QsjVgsCrd+gFWCH7+ piTZyVXplOn5JatQq3WkSaYDQTtGPcbL0derCjTU90p4QlIwTnFuGw0bQLo+fCWk e8Bn2eM+w34IsUtuk7fAGfhDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMuZNRGE5 SzcDon/DrEh5l/uxzxswHwYDVR0jBBgwFoAUSJpvztfcY7erNmbjW9UJ2eoVdeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MTBFLzJGMDMyOThBMTA4 NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdlck5tYmpXOVVKMmVvVmRl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0pwdnp0ZmNZN2VyTm1ialc5VUoyZW9WZGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MTBFLzJGMDMyOThBMTA4NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdl ck5tYmpXOVVKMmVvVmRlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEnygHbdD5KI7HD9PH3/UUQNR3KzF+UVzIma63cMyK09UtOMPZVYfvZh 1sarD7VRpojlIN85Cl0nHZU/HS1lvHjKhq/bqYzlooYIJQefm+VXWT5wP9R1gp8a q4WPhziwRR8kJHk83yQB6noZfTZzsU9LJ1kE9fJnev975TJUdLaoExINLLdvLq9Z +wsv2C/NCse3Q1Irhk+d2X0PIjKxXTHg7FSLerFwyn8msNysjJBrj+cAjU2IpgJT 1S6axj9lD4Ac5jm+yc6a04WBW+F8zXElLJkRqMK3hq7ynPZjKMmHj1XjvyfuBGUy fA2zvY/AWKCHJAxqRl0xEM+FtE2qAOM= -----END CERTIFICATE-----Generated at Thu Jul 3 09:42:28 2025 by rpki-client