$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft File: sg6f5krzzoyYJyXQEqFCknJjzvA.mft (raw, json) Hash identifier: sLcam1aU9vKWXGyNbvPnVsPygmwnQmPdrnmI5Ndpr+Q= Subject key identifier: 8F:7E:D4:B8:3A:08:06:1A:D9:5D:DC:18:8D:91:C6:56:7F:E8:74:D2 Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 Certificate issuer: /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Certificate serial: 081A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft Manifest number: 080D Signing time: Wed 02 Jul 2025 21:11:39 +0000 Manifest this update: Wed 02 Jul 2025 21:11:39 +0000 Manifest next update: Wed 09 Jul 2025 21:11:38 +0000 Files and hashes: 1: sg6f5krzzoyYJyXQEqFCknJjzvA.crl (hash: MrvkbxNDv64MSsgC4XLA0R+wi+PhxwdPdKz81Adj6Y8=) 2: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (hash: 7JHMwVjCROL2NO+MkxXgRxb2ZHCCwLSy/kLqZ1Og33E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2074 (0x81a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Validity Not Before: Jul 2 21:11:39 2025 GMT Not After : Jul 9 21:11:38 2025 GMT Subject: CN=6865a08b-abb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:96:38:80:a7:d4:92:f5:5d:88:58:98:4d: 2b:b6:77:6b:69:04:32:ad:94:97:6c:cb:15:3a:26: de:ac:e0:31:49:06:43:a8:9a:3a:a0:2e:cd:24:b9: 58:16:5f:84:72:9f:e7:30:3c:d6:be:ca:70:f9:c6: 2b:24:6a:cd:f1:1a:ac:2e:88:68:6f:63:a8:8e:3b: 7f:59:d5:6b:44:2d:0e:51:d5:96:0c:0d:a8:55:e7: 6c:b5:21:9e:0b:88:6c:cb:65:54:4d:6b:bc:85:a3: f6:67:1a:70:5d:de:05:48:5b:9e:9e:ba:71:f3:a5: 8f:e8:bb:14:35:04:4c:26:b0:a3:81:1d:fd:67:44: a9:08:f1:e1:1e:62:d3:e3:86:f0:5c:7e:05:ea:35: f3:ee:2b:49:f6:c2:c9:99:81:e8:a4:e2:c6:4d:d3: 8e:36:0b:e6:d8:86:9a:4b:79:e3:44:ce:06:b6:8c: 8c:3c:c8:f4:1f:3e:03:17:e3:f0:ae:a7:2a:e9:06: 8d:90:59:17:e1:18:e9:bc:11:49:e5:7f:78:30:8e: d7:1d:88:fb:57:f5:4f:90:b0:e5:12:13:ee:fd:42: 02:49:7e:59:bf:5c:f9:37:0c:a6:86:d2:d5:ee:d9: 18:ea:d6:32:07:be:86:17:1d:42:a5:58:ba:c9:c2: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7E:D4:B8:3A:08:06:1A:D9:5D:DC:18:8D:91:C6:56:7F:E8:74:D2 X509v3 Authority Key Identifier: keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:1e:67:df:cc:e1:68:40:4f:7b:77:67:1c:65:51:e9:3b:66: 0c:23:6c:ba:5d:7c:8b:69:63:ef:f8:4f:ec:65:2b:2d:e7:0a: 36:40:ee:2d:ce:18:69:9d:f6:fb:d8:9b:3d:ac:2c:42:3e:67: 63:ca:94:f3:be:49:14:4b:74:c9:09:db:20:48:7b:c4:1c:33: 19:b6:e2:88:ca:c7:9a:25:27:24:74:3d:e5:19:71:49:dd:47: 85:5c:bf:ad:40:b6:3f:79:c9:bf:1b:63:d8:14:69:d5:10:3f: c0:03:14:2e:c7:5f:0f:ad:e1:0f:72:c1:8e:24:dd:e2:2e:69: 38:bb:ec:f5:69:9b:96:74:88:4c:47:13:aa:1a:37:d2:db:54: 90:b9:02:97:74:c6:72:9a:84:a3:6e:e9:d7:bb:47:06:58:3b: 78:57:a9:ed:16:c8:69:45:70:28:8e:7a:bf:78:66:2d:dd:d9: ec:39:78:d9:89:e2:ff:67:dd:2d:73:42:54:bc:36:32:70:73: 05:c1:f6:a7:f2:2f:33:01:be:99:aa:51:d5:57:88:4d:ef:55: d8:aa:7b:35:83:d8:9e:22:1f:b3:5f:58:d3:01:7a:04:96:1f: 71:47:be:dd:99:90:7f:d1:1f:21:bd:5d:d5:64:9d:7c:b2:45: a0:8f:ed:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc3QzMxMTAvBgNVBAUTKEIyMEU5RkU2NEFGM0NFOEM5ODI3MjVEMDEyQTE0Mjky NzI2M0NFRjAwHhcNMjUwNzAyMjExMTM5WhcNMjUwNzA5MjExMTM4WjAYMRYwFAYD VQQDEw02ODY1YTA4Yi1hYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kyWOICn1JL1XYhYmE0rtndraQQyrZSXbMsVOiberOAxSQZDqJo6oC7NJLlY Fl+Ecp/nMDzWvspw+cYrJGrN8RqsLohob2Oojjt/WdVrRC0OUdWWDA2oVedstSGe C4hsy2VUTWu8haP2ZxpwXd4FSFuenrpx86WP6LsUNQRMJrCjgR39Z0SpCPHhHmLT 44bwXH4F6jXz7itJ9sLJmYHopOLGTdOONgvm2IaaS3njRM4GtoyMPMj0Hz4DF+Pw rqcq6QaNkFkX4RjpvBFJ5X94MI7XHYj7V/VPkLDlEhPu/UICSX5Zv1z5NwymhtLV 7tkY6tYyB76GFx1CpVi6ycKknwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9+1Lg6 CAYa2V3cGI2RxlZ/6HTSMB8GA1UdIwQYMBaAFLIOn+ZK886MmCcl0BKhQpJyY87w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzdDMy81REE0OEMyMEU3 NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpveVlKeVhRRXFGQ2tuSmp6 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnNmY1a3J6em95WUp5WFFFcUZDa25Kanp2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzdDMy81REE0OEMyMEU3NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpv eVlKeVhRRXFGQ2tuSmp6dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlHmffzOFoQE97d2ccZVHpO2YMI2y6XXyLaWPv+E/sZSst5wo2QO4t zhhpnfb72Js9rCxCPmdjypTzvkkUS3TJCdsgSHvEHDMZtuKIyseaJSckdD3lGXFJ 3UeFXL+tQLY/ecm/G2PYFGnVED/AAxQux18PreEPcsGOJN3iLmk4u+z1aZuWdIhM RxOqGjfS21SQuQKXdMZymoSjbunXu0cGWDt4V6ntFshpRXAojnq/eGYt3dnsOXjZ ieL/Z90tc0JUvDYycHMFwfan8i8zAb6ZqlHVV4hN71XYqns1g9ieIh+zX1jTAXoE lh9xR77dmZB/0R8hvV3VZJ18skWgj+0v -----END CERTIFICATE-----Generated at Thu Jul 3 23:44:44 2025 by rpki-client