$ rpki-client -vvf rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft File: SvQPQ3ii6YvubHhNi9uegu22bJ8.mft (raw, json) Hash identifier: 2G1/b+oYjDW1cIcD4GFvvnq5VaA7qOKSJjnXyQh5Oyo= Subject key identifier: 34:59:C2:D4:77:0C:8D:6B:3C:6E:4A:3B:76:27:20:75:13:1B:6F:4E Authority key identifier: 4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F Certificate issuer: /CN=A9162439/serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft Manifest number: 07A7 Signing time: Wed 14 May 2025 21:20:35 +0000 Manifest this update: Wed 14 May 2025 21:20:35 +0000 Manifest next update: Wed 21 May 2025 21:20:35 +0000 Files and hashes: 1: SvQPQ3ii6YvubHhNi9uegu22bJ8.crl (hash: +msMs+gTletU7SPIyYVAL6sJthQWH5EOyj5SfpVJsmw=) 2: 95CAE87C6BF311EDA6D4C167C4F9AE02.roa (hash: 3EzXcKLqkf+yvu5XSnwelAKqEi6m9pFTGpMryRUvc1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.crl rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162439, serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F Validity Not Before: May 14 21:20:35 2025 GMT Not After : May 21 21:20:35 2025 GMT Subject: CN=68250923-e3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:94:0d:5f:09:15:7a:4f:9c:88:cf:7a:6f: a3:b5:32:f4:86:1d:9f:c3:e0:23:6c:f8:64:4c:f2: 06:10:60:58:5b:38:7f:fb:7f:72:fd:ec:c8:13:bc: 36:f7:5c:20:31:dd:93:93:90:b0:fc:fb:f8:f6:08: bb:74:ef:0e:a6:0e:69:8c:24:45:d9:c0:94:e4:70: 32:28:60:18:a4:fe:18:87:3d:d9:4f:de:5b:c5:40: 49:83:d6:cd:44:0c:44:1a:9b:79:ab:e9:f0:e4:e2: ed:2c:40:33:37:e6:6b:6e:ee:c6:b0:12:92:f4:93: 3d:1e:f0:c1:0c:9e:8e:97:86:9d:3a:69:cb:56:95: 85:0e:61:6e:d3:d8:b7:5d:a4:05:52:ed:dd:fd:76: 45:a3:db:f7:e9:cb:28:1b:78:f6:8a:19:da:57:c8: 67:6d:7d:07:f8:be:69:0a:78:ea:89:35:02:3a:75: f2:bf:76:c4:df:e1:04:47:5d:30:32:9e:cc:d5:d3: d0:c5:ba:22:28:b3:7d:e6:db:bf:46:5a:0e:0b:84: c8:99:29:c7:75:4e:d8:fa:a3:81:29:43:84:3b:02: 84:f5:a6:92:06:2b:31:25:d6:4a:8d:75:b1:1e:a3: 2f:3f:fb:b2:be:3e:13:82:93:47:88:92:f4:e4:fc: db:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:59:C2:D4:77:0C:8D:6B:3C:6E:4A:3B:76:27:20:75:13:1B:6F:4E X509v3 Authority Key Identifier: keyid:4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:62:2f:01:ba:49:e0:ea:dd:af:cc:fc:3e:80:3f:00:e9:9f: 99:0f:45:43:aa:ad:55:88:5d:a3:8f:93:ae:ca:9b:dd:6f:f7: 34:6f:7a:02:86:a4:83:17:26:89:6b:58:84:af:66:27:43:06: 49:6f:11:62:06:94:ac:53:7f:d5:72:22:75:07:e3:68:cd:fa: de:18:8d:8e:ef:25:bb:a3:f7:3a:7d:d8:da:cf:a3:13:6f:d7: 54:d5:38:fd:74:fc:60:39:a4:7f:6a:da:36:67:cf:99:e9:be: 18:23:6d:f2:66:f2:52:37:d1:eb:48:98:3a:8d:33:61:9f:6e: 50:bc:18:b5:bb:f6:da:24:97:64:2b:53:0c:0e:3f:a6:29:10: 5f:c7:14:36:92:45:0e:9a:9d:85:f9:80:ef:67:97:11:eb:29: e4:15:b6:46:5d:e7:18:d7:32:a0:5d:5a:5c:0d:b9:ab:95:81: 6f:bf:6c:ff:f4:30:9e:f5:2b:fe:d6:f3:24:3e:a0:4e:a3:eb: 7e:69:e5:65:8b:0e:74:7a:ac:66:e7:02:d3:86:3d:e4:73:e5: 48:75:06:88:a9:ec:82:48:2e:5c:ca:e3:9e:7a:aa:0c:2d:a4: 30:0b:19:01:1a:f3:a1:00:1d:5e:ec:81:48:de:0f:fa:7e:5c: 46:2f:13:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI0MzkxMTAvBgNVBAUTKDRBRjQwRjQzNzhBMkU5OEJFRTZDNzg0RDhCREI5RTgy RURCNjZDOUYwHhcNMjUwNTE0MjEyMDM1WhcNMjUwNTIxMjEyMDM1WjAYMRYwFAYD VQQDEw02ODI1MDkyMy1lM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAve6UDV8JFXpPnIjPem+jtTL0hh2fw+AjbPhkTPIGEGBYWzh/+39y/ezIE7w2 91wgMd2Tk5Cw/Pv49gi7dO8Opg5pjCRF2cCU5HAyKGAYpP4Yhz3ZT95bxUBJg9bN RAxEGpt5q+nw5OLtLEAzN+Zrbu7GsBKS9JM9HvDBDJ6Ol4adOmnLVpWFDmFu09i3 XaQFUu3d/XZFo9v36csoG3j2ihnaV8hnbX0H+L5pCnjqiTUCOnXyv3bE3+EER10w Mp7M1dPQxboiKLN95tu/RloOC4TImSnHdU7Y+qOBKUOEOwKE9aaSBisxJdZKjXWx HqMvP/uyvj4TgpNHiJL05PzbCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRZwtR3 DI1rPG5KO3YnIHUTG29OMB8GA1UdIwQYMBaAFEr0D0N4oumL7mx4TYvbnoLttmyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjQzOS8zMEQ5Qjc3QTAy RTMxMUVCODZEMjg3MzZDNEY5QUUwMi9TdlFQUTNpaTZZdnViSGhOaTl1ZWd1MjJi SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2UVBRM2lpNll2dWJIaE5pOXVlZ3UyMmJKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjQzOS8zMEQ5Qjc3QTAyRTMxMUVCODZEMjg3MzZDNEY5QUUwMi9TdlFQUTNpaTZZ dnViSGhOaTl1ZWd1MjJiSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpYi8Bukng6t2vzPw+gD8A6Z+ZD0VDqq1ViF2jj5Ouypvdb/c0b3oC hqSDFyaJa1iEr2YnQwZJbxFiBpSsU3/VciJ1B+NozfreGI2O7yW7o/c6fdjaz6MT b9dU1Tj9dPxgOaR/ato2Z8+Z6b4YI23yZvJSN9HrSJg6jTNhn25QvBi1u/baJJdk K1MMDj+mKRBfxxQ2kkUOmp2F+YDvZ5cR6ynkFbZGXecY1zKgXVpcDbmrlYFvv2z/ 9DCe9Sv+1vMkPqBOo+t+aeVliw50eqxm5wLThj3kc+VIdQaIqeyCSC5cyuOeeqoM LaQwCxkBGvOhAB1e7IFI3g/6flxGLxO9 -----END CERTIFICATE-----Generated at Fri May 16 07:17:59 2025 by rpki-client