$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json) Hash identifier: SoFwRbsI+h+Ji+JkA9Gxm7YebHUiZQoANx1E+G7cplU= Subject key identifier: 64:6D:47:6F:B9:33:FA:84:92:C5:3D:CB:36:BC:E7:22:65:67:CD:F3 Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft Manifest number: 0C3C Signing time: Wed 02 Jul 2025 18:46:50 +0000 Manifest this update: Wed 02 Jul 2025 18:46:50 +0000 Manifest next update: Wed 09 Jul 2025 18:46:50 +0000 Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: 6aSCyFbOnFkK3hdqGZkpDj5sig/ZsSn9t+ETyMk6rhI=) 2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: m+JE5pCglgWFiHYLAbZNmBupgcN+FxTJD3mSp1g3gfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: Jul 2 18:46:50 2025 GMT Not After : Jul 9 18:46:50 2025 GMT Subject: CN=68657e9a-40a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:91:d6:b8:92:0a:bb:ba:fe:2c:70:0b:9a:f4: bd:b5:78:62:46:a6:02:11:11:13:3b:9c:3f:5f:bd: 05:71:ed:5f:84:43:52:af:c9:0b:88:fb:7f:8c:5d: 0d:a2:30:91:cc:21:9b:ce:2a:a0:a0:a3:1b:4d:b2: 19:7e:ff:bb:e0:1f:88:b9:5c:c5:5e:f6:3a:d9:b2: ff:a0:1c:90:e6:98:b2:37:24:ca:63:93:d4:94:c2: 42:b2:94:68:7f:4b:75:be:94:bd:a8:41:40:17:a2: de:06:51:8d:c1:2d:a4:2c:f3:1e:4e:25:4e:ce:a4: d9:7e:29:1f:30:fa:73:12:37:dc:84:3d:ae:af:83: 95:28:60:73:95:4f:78:da:44:09:56:5e:8f:a0:f5: ea:62:52:28:4f:a5:12:5c:a9:5a:63:8a:2b:f7:76: 35:c6:26:a7:45:dc:e3:32:3f:2b:af:70:47:dc:d4: f7:d8:0b:d4:5a:fa:c9:1e:a7:53:a5:c1:89:83:7e: 0d:0d:bc:f9:8b:27:b4:d3:e9:d9:59:55:3d:a2:e3: cf:9c:11:6c:be:96:5a:9b:b9:e2:d2:bf:0b:e6:15: f4:20:e5:c1:f5:73:90:ab:54:5c:99:4b:e0:1b:c0: b8:22:20:c1:8a:f6:6a:da:fd:74:3f:39:de:6a:46: 0a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6D:47:6F:B9:33:FA:84:92:C5:3D:CB:36:BC:E7:22:65:67:CD:F3 X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:da:3e:a3:a5:44:da:c0:a0:0d:07:5b:4e:ee:36:69:5e:d9: ee:ec:3d:c7:f0:44:d5:f5:d2:f0:ec:d0:86:3d:bc:84:a3:3a: 5a:13:2f:b7:43:13:b9:df:64:ad:24:f4:63:90:58:29:28:b9: 38:7a:a1:3b:6d:e8:7a:05:77:a2:09:c4:23:dc:37:e2:ee:89: 77:92:b7:f3:68:27:02:66:3c:90:b7:7f:e8:7b:8d:09:99:25: fb:5c:19:82:ac:02:82:b2:5a:2d:b2:49:8b:a4:7b:05:17:76: eb:21:19:c6:22:b7:e9:2f:a7:c5:6e:8b:ed:70:9f:92:e3:1a: a2:62:96:fd:38:fe:76:13:80:4d:cd:38:b7:5a:f9:cf:8e:96: bc:42:6b:50:33:c2:5b:f5:9c:42:27:65:57:5a:2c:28:18:dd: 84:48:6a:c4:9b:25:60:6c:93:9e:26:f5:47:6d:cc:e2:54:1b: 97:5f:ee:4a:22:e6:87:53:c9:c6:de:67:7d:a2:98:28:fd:2c: 21:98:e6:69:fd:7d:09:16:2b:76:82:c0:ef:84:26:9f:40:b6: b7:86:22:cf:1e:21:ca:e0:9c:71:be:ec:7b:8f:ef:c9:95:9b: dc:3e:cb:2e:c1:e2:39:b5:dd:68:99:f8:be:f0:57:ac:76:05: 65:69:70:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjUwNzAyMTg0NjUwWhcNMjUwNzA5MTg0NjUwWjAYMRYwFAYD VQQDEw02ODY1N2U5YS00MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJHWuJIKu7r+LHALmvS9tXhiRqYCERETO5w/X70Fce1fhENSr8kLiPt/jF0N ojCRzCGbziqgoKMbTbIZfv+74B+IuVzFXvY62bL/oByQ5piyNyTKY5PUlMJCspRo f0t1vpS9qEFAF6LeBlGNwS2kLPMeTiVOzqTZfikfMPpzEjfchD2ur4OVKGBzlU94 2kQJVl6PoPXqYlIoT6USXKlaY4or93Y1xianRdzjMj8rr3BH3NT32AvUWvrJHqdT pcGJg34NDbz5iye00+nZWVU9ouPPnBFsvpZam7ni0r8L5hX0IOXB9XOQq1RcmUvg G8C4IiDBivZq2v10PzneakYKewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRtR2+5 M/qEksU9yza85yJlZ83zMB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTVGQi9DMTU2REY4RTA5REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VD QUNFNzh0elB4b2NQaGVCR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn2j6jpUTawKANB1tO7jZpXtnu7D3H8ETV9dLw7NCGPbyEozpaEy+3 QxO532StJPRjkFgpKLk4eqE7beh6BXeiCcQj3Dfi7ol3krfzaCcCZjyQt3/oe40J mSX7XBmCrAKCslotskmLpHsFF3brIRnGIrfpL6fFbovtcJ+S4xqiYpb9OP52E4BN zTi3WvnPjpa8QmtQM8Jb9ZxCJ2VXWiwoGN2ESGrEmyVgbJOeJvVHbcziVBuXX+5K IuaHU8nG3md9opgo/SwhmOZp/X0JFit2gsDvhCafQLa3hiLPHiHK4Jxxvux7j+/J lZvcPssuweI5td1omfi+8FesdgVlaXCr -----END CERTIFICATE-----Generated at Wed Jul 2 21:36:15 2025 by rpki-client