$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: LfbfbQ2bXv1sgZx1A8au8/OLLjE+zOvh7AuRub7y+7o= Subject key identifier: 16:D3:C0:68:15:98:69:F0:A1:DE:E0:79:0B:9B:23:5D:D5:83:70:F8 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 1037 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 102D Signing time: Wed 02 Jul 2025 17:37:45 +0000 Manifest this update: Wed 02 Jul 2025 17:37:44 +0000 Manifest next update: Wed 09 Jul 2025 17:37:44 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: AsRuEJbVYIu0SaaZkACKpTf7hTS14MWEu69vLfJYFkY=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: Ksnt24EsyPmiy/Gyqmmcb01Su1qcDddDH/I7fUARzPI=) 3: D38E10ACDEA311EE901DD072C4F9AE02.roa (hash: NbpmBB1gIIGV5sc1Y6a1vNgV2IiOYxP9cMlh7LY3b+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4151 (0x1037) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: Jul 2 17:37:44 2025 GMT Not After : Jul 9 17:37:44 2025 GMT Subject: CN=68656e69-f5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:14:74:43:c1:22:98:9f:ca:53:8d:ab:88:ea: 92:df:69:80:41:c8:d1:3b:dc:a9:6c:35:6f:8d:d3: ad:41:50:18:9c:b7:7a:78:eb:ff:b9:5e:66:9e:9b: df:35:c2:d7:3c:a4:b8:37:f6:17:46:5b:40:7b:ed: b8:d7:7f:44:f3:db:08:6f:91:cb:57:85:dc:32:00: cc:da:a5:63:79:ce:bb:df:44:ad:bc:14:e6:db:3b: 81:5a:a2:fc:bc:a5:59:33:39:5b:5c:86:e6:c5:9c: 7a:45:d2:18:2e:89:52:2f:c6:a3:5a:57:19:38:71: 0e:bb:58:dd:36:25:3f:33:e4:7b:4f:d0:d0:1c:9c: 96:b0:66:b1:a2:b9:bb:51:9b:59:8e:83:4a:88:18: 2a:d6:0b:92:64:9b:18:84:85:f0:f2:6e:f6:9d:69: de:d6:1b:91:02:8d:82:4d:a7:b1:58:9a:37:34:bf: 05:f0:30:16:6a:37:d7:4f:77:ba:5a:ed:69:e0:11: 5c:45:40:87:87:eb:4b:e4:c0:3b:65:9c:04:de:35: 3c:59:a6:67:d0:4b:5e:5f:db:f5:2b:99:5b:bc:a1: a6:84:7e:8f:a5:26:15:3a:a8:25:ea:c2:18:62:87: 29:81:81:0d:df:1a:8e:e7:b9:81:8d:c3:66:2e:5f: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D3:C0:68:15:98:69:F0:A1:DE:E0:79:0B:9B:23:5D:D5:83:70:F8 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9a:f6:92:33:4a:25:3e:66:f5:f8:57:f9:39:6e:fa:2b:f1: ef:d2:f8:69:66:a0:f1:73:14:65:85:59:e3:a5:d4:5b:e3:aa: df:14:a8:ec:48:5d:f3:f8:81:23:fe:b5:d7:03:70:46:d0:5f: 7b:d2:92:5a:f9:37:55:3b:40:ec:45:eb:38:2e:7b:9b:66:f9: 49:a2:c9:32:9d:0a:ab:07:d9:77:8f:1a:2d:fc:1e:a7:b3:6f: 36:71:2d:f9:fa:55:ce:26:80:72:f2:bd:cf:f4:3d:56:cb:af: ee:f3:0e:81:39:f7:6e:df:b4:2b:fd:8e:00:e8:a9:2e:8b:b9: 6d:15:56:b9:75:7b:17:67:99:e2:90:30:d2:ca:9d:10:05:81: 0b:b1:98:f7:b8:66:3d:da:65:3c:77:ef:81:f7:75:f6:3e:17: c3:87:df:85:7d:c1:e3:78:6a:6e:74:fb:0c:c7:83:0f:73:de: 03:dc:a1:b5:ae:4b:14:ee:4d:df:f1:e4:55:7b:ac:ab:26:c7: ee:0b:8c:ad:df:d7:85:43:d3:17:27:f8:a3:ae:00:60:ce:ea: 21:c0:bd:f8:79:5f:7a:b6:79:5a:24:fc:1a:a2:06:12:b6:2f: 58:74:81:3f:a6:b5:a4:f9:51:83:c5:eb:78:1a:72:48:e0:54: 31:b8:3f:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUwNzAyMTczNzQ0WhcNMjUwNzA5MTczNzQ0WjAYMRYwFAYD VQQDEw02ODY1NmU2OS1mNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphR0Q8EimJ/KU42riOqS32mAQcjRO9ypbDVvjdOtQVAYnLd6eOv/uV5mnpvf NcLXPKS4N/YXRltAe+24139E89sIb5HLV4XcMgDM2qVjec6730StvBTm2zuBWqL8 vKVZMzlbXIbmxZx6RdIYLolSL8ajWlcZOHEOu1jdNiU/M+R7T9DQHJyWsGaxorm7 UZtZjoNKiBgq1guSZJsYhIXw8m72nWne1huRAo2CTaexWJo3NL8F8DAWajfXT3e6 Wu1p4BFcRUCHh+tL5MA7ZZwE3jU8WaZn0EteX9v1K5lbvKGmhH6PpSYVOqgl6sIY YocpgYEN3xqO57mBjcNmLl8I0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbTwGgV mGnwod7geQubI13Vg3D4MB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBmvaSM0olPmb1+Ff5OW76K/Hv0vhpZqDxcxRlhVnjpdRb46rfFKjs SF3z+IEj/rXXA3BG0F970pJa+TdVO0DsRes4LnubZvlJoskynQqrB9l3jxot/B6n s282cS35+lXOJoBy8r3P9D1Wy6/u8w6BOfdu37Qr/Y4A6Kkui7ltFVa5dXsXZ5ni kDDSyp0QBYELsZj3uGY92mU8d++B93X2PhfDh9+FfcHjeGpudPsMx4MPc94D3KG1 rksU7k3f8eRVe6yrJsfuC4yt39eFQ9MXJ/ijrgBgzuohwL34eV96tnlaJPwaogYS ti9YdIE/prWk+VGDxet4GnJI4FQxuD+o -----END CERTIFICATE-----Generated at Wed Jul 2 19:38:23 2025 by rpki-client