$ rpki-client -vvf rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft File: sbozBTw5ulhlU3dDESOJ4wDEiAc.mft (raw, json) Hash identifier: IHRnxeuoX0xQDLauWk8WBrHb0HCyKlpIxpt/CBqlYEE= Subject key identifier: BA:2A:E2:D8:D7:ED:2A:F9:32:51:7E:4C:51:EE:20:86:BB:D9:60:4D Authority key identifier: B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07 Certificate issuer: /CN=A9150384/serialNumber=B1BA33053C39BA5865537743112389E300C48807 Certificate serial: 0C94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft Manifest number: 0C81 Signing time: Fri 04 Jul 2025 18:36:54 +0000 Manifest this update: Fri 04 Jul 2025 18:36:53 +0000 Manifest next update: Fri 11 Jul 2025 18:36:53 +0000 Files and hashes: 1: sbozBTw5ulhlU3dDESOJ4wDEiAc.crl (hash: V5Uudw1hRj/DvZSpcANJt0TtroOirMswXRK3fkSxI2E=) 2: 3240ED82D62D11EFB0442B5DC4F9AE02.roa (hash: 4ezgedPR9KopOZYLyZFbtl63GBaLOL0AGy6NscKrMGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3220 (0xc94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150384, serialNumber=B1BA33053C39BA5865537743112389E300C48807 Validity Not Before: Jul 4 18:36:53 2025 GMT Not After : Jul 11 18:36:53 2025 GMT Subject: CN=68681f46-8dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:85:03:0f:72:72:96:2a:53:bf:4b:32:98: 88:3a:52:19:03:f4:af:43:59:a5:de:bc:c2:15:9d: 5b:77:e9:d2:08:9d:82:a7:73:ed:7f:ca:e7:e1:b2: a8:a9:45:2b:62:be:a2:83:e4:3a:30:11:0a:c3:e8: 09:88:82:d3:91:c3:c5:66:47:31:a4:dd:53:b7:7b: 02:e8:a6:e2:cb:1e:38:9b:da:46:43:23:9c:6c:5a: 2c:6b:3b:25:55:2d:14:8e:c0:df:7d:a4:c9:bc:98: 60:a6:d9:36:85:04:5b:0f:00:dc:73:d3:18:66:37: a2:60:fc:b9:42:fc:7a:50:8e:70:02:f0:92:63:4f: 41:8e:0b:c5:9f:db:29:29:ba:04:1f:59:14:74:54: 87:12:b7:d6:39:ab:97:d7:bf:09:0a:1e:d0:20:e1: f3:a3:1f:1a:cc:ec:d5:cc:ae:fe:20:e9:2d:a3:5d: 81:75:4e:52:a3:40:7b:46:b2:7f:80:55:11:df:0f: 7a:df:ca:84:02:7e:5c:00:d0:14:e6:4c:00:50:a6: c4:41:d3:c4:94:bf:51:e8:77:1a:97:ff:f2:3d:2c: 39:a6:6d:17:36:75:14:53:f8:fe:88:d2:48:69:c4: 9e:6d:ab:23:de:34:66:0a:77:c3:1e:38:7e:8e:8f: 59:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2A:E2:D8:D7:ED:2A:F9:32:51:7E:4C:51:EE:20:86:BB:D9:60:4D X509v3 Authority Key Identifier: keyid:B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d4:8a:d4:3d:80:c3:3c:41:94:75:3e:2b:55:35:31:c8:84: 78:09:ef:cb:41:c0:0d:88:19:45:91:06:8f:a6:ff:88:3c:70: 1d:62:44:93:d7:e0:9f:80:d4:d7:b0:ee:14:cd:05:04:32:ad: 4c:18:64:cb:4f:35:d0:db:a3:c9:c0:96:da:22:80:89:fc:9e: 71:2b:95:4f:8f:13:13:8c:c3:8a:97:71:d8:fc:18:5d:ce:65: fd:ba:17:3b:d5:6d:93:32:e9:e5:25:3f:0c:d5:47:eb:3b:8f: b3:c4:19:93:0e:12:1b:e9:89:f2:0f:49:a4:2e:82:d8:d8:89: b3:8e:92:86:18:b4:81:b6:cc:2b:b0:ed:9f:e3:8a:36:6b:68: 3e:15:af:41:f1:6b:39:b4:ec:56:84:b9:6b:e4:c5:39:23:15: 0a:e4:b8:db:db:45:e3:4d:4b:0a:48:fb:5a:6a:e8:9d:b9:57: ff:03:b1:9f:2e:20:6b:0e:7e:26:c3:d6:6f:6f:4a:b8:aa:bf: 1c:3b:de:d8:62:cd:8b:84:04:d6:c2:cc:89:e5:a7:3e:cc:f8: d5:03:cf:fb:cd:5c:01:ac:97:59:9a:3b:e8:c5:49:c1:ee:4f: 28:eb:67:0a:4e:97:bf:e9:36:84:ab:e9:4b:f8:30:19:ba:52: 7b:07:bb:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAzODQxMTAvBgNVBAUTKEIxQkEzMzA1M0MzOUJBNTg2NTUzNzc0MzExMjM4OUUz MDBDNDg4MDcwHhcNMjUwNzA0MTgzNjUzWhcNMjUwNzExMTgzNjUzWjAYMRYwFAYD VQQDEw02ODY4MWY0Ni04ZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pOFAw9ycpYqU79LMpiIOlIZA/SvQ1ml3rzCFZ1bd+nSCJ2Cp3Ptf8rn4bKo qUUrYr6ig+Q6MBEKw+gJiILTkcPFZkcxpN1Tt3sC6Kbiyx44m9pGQyOcbFosazsl VS0UjsDffaTJvJhgptk2hQRbDwDcc9MYZjeiYPy5Qvx6UI5wAvCSY09BjgvFn9sp KboEH1kUdFSHErfWOauX178JCh7QIOHzox8azOzVzK7+IOkto12BdU5So0B7RrJ/ gFUR3w9638qEAn5cANAU5kwAUKbEQdPElL9R6Hcal//yPSw5pm0XNnUUU/j+iNJI acSebasj3jRmCnfDHjh+jo9ZsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoq4tjX 7Sr5MlF+TFHuIIa72WBNMB8GA1UdIwQYMBaAFLG6MwU8ObpYZVN3QxEjieMAxIgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDM4NC85MzdGMzcyRTAw NUExMUVBQTA5NEJEMzFDNEY5QUUwMi9zYm96QlR3NXVsaGxVM2RERVNPSjR3REVp QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nib3pCVHc1dWxobFUzZERFU09KNHdERWlBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDM4NC85MzdGMzcyRTAwNUExMUVBQTA5NEJEMzFDNEY5QUUwMi9zYm96QlR3NXVs aGxVM2RERVNPSjR3REVpQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ1IrUPYDDPEGUdT4rVTUxyIR4Ce/LQcANiBlFkQaPpv+IPHAdYkST 1+CfgNTXsO4UzQUEMq1MGGTLTzXQ26PJwJbaIoCJ/J5xK5VPjxMTjMOKl3HY/Bhd zmX9uhc71W2TMunlJT8M1UfrO4+zxBmTDhIb6YnyD0mkLoLY2ImzjpKGGLSBtswr sO2f44o2a2g+Fa9B8Ws5tOxWhLlr5MU5IxUK5Ljb20XjTUsKSPtaauiduVf/A7Gf LiBrDn4mw9Zvb0q4qr8cO97YYs2LhATWwsyJ5ac+zPjVA8/7zVwBrJdZmjvoxUnB 7k8o62cKTpe/6TaEq+lL+DAZulJ7B7s8 -----END CERTIFICATE-----Generated at Sat Jul 5 14:53:24 2025 by rpki-client