$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft File: sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json) Hash identifier: 3i0Q0O20H3cn1j0Ty1zkqEmBlciBUx0FmtibMj1F+bs= Subject key identifier: 2E:FC:8D:6C:73:5B:C9:ED:26:8E:09:53:F9:EB:CA:DE:A6:F2:DA:6E Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD Certificate issuer: /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft Manifest number: 72 Signing time: Thu 03 Jul 2025 07:05:47 +0000 Manifest this update: Thu 03 Jul 2025 07:05:46 +0000 Manifest next update: Thu 10 Jul 2025 07:05:46 +0000 Files and hashes: 1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: UNOdXUiifkfnsaYQfXQ+W9+qZ1yh047kEPm8Seu4ge8=) 2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: KPgMUtF2z6om6dSm7+mB/ufWiwTV8TpJVcH2+or0fgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Validity Not Before: Jul 3 07:05:46 2025 GMT Not After : Jul 10 07:05:46 2025 GMT Subject: CN=68662bca-f51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:8c:26:a1:49:67:b7:34:a8:97:39:7a:4c: 58:83:a5:fd:2c:3a:a7:a4:3b:45:b6:c4:42:68:ed: 43:c1:d7:27:80:54:be:81:27:d8:9a:b9:4a:13:9a: 4b:76:02:9e:02:00:ac:7e:67:83:1a:96:d5:e8:ef: 06:72:7b:c1:cc:c7:19:2b:01:da:8a:d6:88:df:94: ef:ea:f3:53:60:a8:08:45:2f:61:d7:a9:ed:a7:4d: 99:0f:ec:04:81:87:72:c0:d6:bd:b0:34:6e:d3:5a: 74:dd:64:d3:c7:22:54:60:89:3d:2d:45:ac:1f:d3: d8:8d:39:65:53:65:07:23:ac:a5:a8:2b:a8:67:da: 0d:d2:2b:19:75:04:37:0f:a9:33:a8:64:cd:73:d3: 4a:cf:da:47:a1:4d:3c:f9:76:11:47:f7:2b:82:e4: 12:f6:32:6c:31:aa:c8:47:31:12:6a:51:ff:e7:cc: 99:ab:e7:a9:27:06:57:8c:e1:f9:b7:da:f0:1d:e9: 2e:7d:44:83:17:13:75:86:5e:d4:a6:29:7a:a7:57: b7:d4:38:47:77:36:ea:63:ef:6c:f7:16:58:76:ba: fb:d2:b7:1d:75:95:93:fc:d0:5f:e3:28:21:a0:9c: 98:fb:8e:43:08:00:84:66:87:26:ec:0e:b4:0a:0a: 8a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FC:8D:6C:73:5B:C9:ED:26:8E:09:53:F9:EB:CA:DE:A6:F2:DA:6E X509v3 Authority Key Identifier: keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:59:e4:c9:53:89:7f:d8:68:bf:0e:ab:cb:44:95:66:75:8e: 26:00:46:98:b5:d5:c6:46:30:b9:89:67:32:12:7a:4e:f7:7e: 75:7e:00:16:e5:81:20:f2:cf:9d:56:10:5b:37:13:ea:59:cf: b8:13:09:e2:5c:49:c8:15:86:91:fc:ab:09:78:2d:b2:d6:90: 03:6f:3c:ca:86:e8:7a:b6:20:55:b5:06:24:59:9a:90:b2:bb: 8b:f2:33:1a:f0:80:80:cd:e7:d0:c4:62:4d:63:de:4d:31:fe: 39:17:3f:a8:aa:17:11:b0:5b:da:53:d9:e5:26:4c:ae:a2:8c: 70:43:d2:fd:2f:9e:d8:0c:dd:32:0e:ae:5c:95:ec:75:34:0d: 81:11:fa:ac:db:48:ae:81:7f:88:2f:47:b0:02:91:e9:61:29: ab:0a:34:f8:8d:7b:af:4e:2c:cf:cd:cb:8a:65:fd:c1:ef:91: 20:f4:ac:80:a8:a3:e9:26:dc:e1:c8:5a:53:b9:3a:8b:0d:55: c9:e5:46:5f:2a:1f:89:49:23:45:f0:57:a1:20:13:36:a7:bc: ce:7c:6d:f7:18:45:fc:3a:b2:4b:14:a9:1c:a4:84:b1:8c:33: 55:53:ef:be:5d:d2:40:f0:3b:94:7f:5f:c3:15:07:dd:d3:7c: c6:8e:2e:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTBGRTExMC8GA1UEBRMoQjAyNzk1RDJFMDlFM0FBQTNFMzZEMkI1OTJEMkUwRTlG QkI3RUZCRDAeFw0yNTA3MDMwNzA1NDZaFw0yNTA3MTAwNzA1NDZaMBgxFjAUBgNV BAMTDTY4NjYyYmNhLWY1MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2WYwmoUlntzSolzl6TFiDpf0sOqekO0W2xEJo7UPB1yeAVL6BJ9iauUoTmkt2 Ap4CAKx+Z4MaltXo7wZye8HMxxkrAdqK1ojflO/q81NgqAhFL2HXqe2nTZkP7ASB h3LA1r2wNG7TWnTdZNPHIlRgiT0tRawf09iNOWVTZQcjrKWoK6hn2g3SKxl1BDcP qTOoZM1z00rP2kehTTz5dhFH9yuC5BL2MmwxqshHMRJqUf/nzJmr56knBleM4fm3 2vAd6S59RIMXE3WGXtSmKXqnV7fUOEd3Nupj72z3Flh2uvvStx11lZP80F/jKCGg nJj7jkMIAIRmhybsDrQKCoqjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULvyNbHNb ye0mjglT+evK3qby2m4wHwYDVR0jBBgwFoAUsCeV0uCeOqo+NtK1ktLg6fu3770w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMEZFLzM3MzM0QkUyQUJD QTExRUZBOTk0RDEyOUM0RjlBRTAyL3NDZVYwdUNlT3FvLU50SzFrdExnNmZ1Mzc3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0NlVjB1Q2VPcW8tTnRLMWt0TGc2ZnUzNzcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MEZFLzM3MzM0QkUyQUJDQTExRUZBOTk0RDEyOUM0RjlBRTAyL3NDZVYwdUNlT3Fv LU50SzFrdExnNmZ1Mzc3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZZ5MlTiX/YaL8Oq8tElWZ1jiYARpi11cZGMLmJZzISek73fnV+ABbl gSDyz51WEFs3E+pZz7gTCeJcScgVhpH8qwl4LbLWkANvPMqG6Hq2IFW1BiRZmpCy u4vyMxrwgIDN59DEYk1j3k0x/jkXP6iqFxGwW9pT2eUmTK6ijHBD0v0vntgM3TIO rlyV7HU0DYER+qzbSK6Bf4gvR7ACkelhKasKNPiNe69OLM/Ny4pl/cHvkSD0rICo o+km3OHIWlO5OosNVcnlRl8qH4lJI0XwV6EgEzanvM58bfcYRfw6sksUqRykhLGM M1VT775d0kDwO5R/X8MVB93TfMaOLsg= -----END CERTIFICATE-----Generated at Thu Jul 3 11:22:37 2025 by rpki-client