$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft File: svBcLOw1UNLTyetRODn0egAqhy4.mft (raw, json) Hash identifier: 7trrxWu8irR5Uy5DAKP6JecoL6EeNeJpUqq+bgHJwQ4= Subject key identifier: DF:02:13:07:3C:34:2D:8F:FE:C5:89:11:32:DC:08:FB:56:F3:47:54 Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E Certificate issuer: /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft Manifest number: 03C2 Signing time: Thu 03 Jul 2025 01:00:23 +0000 Manifest this update: Thu 03 Jul 2025 01:00:23 +0000 Manifest next update: Thu 10 Jul 2025 01:00:23 +0000 Files and hashes: 1: svBcLOw1UNLTyetRODn0egAqhy4.crl (hash: c/VL+BK4p9EJ6+9HOLZ4xoQBGu4s1FvjF2fieEXZZPA=) 2: D118AD20820911EDAC2FD360C4F9AE02.roa (hash: ICtN0AhdlHgfYIx82KgCcqvbtFC2Nt85yrH3EgkUFWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E Validity Not Before: Jul 3 01:00:23 2025 GMT Not After : Jul 10 01:00:23 2025 GMT Subject: CN=6865d627-a974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0e:58:3c:16:d3:96:5e:cd:00:ee:28:55:c5: a3:f3:94:c7:17:57:60:b0:16:24:55:09:39:9d:71: 9a:e2:2e:62:84:35:93:14:c6:5f:53:7f:7f:4b:8b: e7:94:f5:9d:5b:d1:ce:91:12:18:fb:4f:76:d1:0f: bc:a3:89:5d:e7:e7:56:a2:15:25:b9:09:07:19:97: 66:73:e5:07:58:af:11:53:e9:cd:e9:81:7d:29:a9: 18:38:9b:77:a5:b8:a5:31:50:5b:4e:d5:39:1a:b7: 74:0a:23:34:a5:49:04:94:b7:0f:54:d7:09:46:cd: a4:4b:5b:7a:fe:69:36:78:84:cf:fb:0e:57:23:1d: 9d:8a:d2:af:30:a0:cf:af:ec:b7:22:79:7d:60:1d: 65:c5:33:71:2f:2f:9a:46:34:63:9d:a5:82:6a:6f: 73:07:13:e5:36:c8:40:dc:67:44:5f:21:29:12:f0: e6:08:d8:30:52:d9:e6:21:fb:b7:48:25:74:d9:a8: ea:a4:ed:1a:67:c9:bb:57:4d:e3:5a:61:e8:05:96: 4f:c2:50:fc:40:1f:e4:47:0e:6a:12:0d:ab:0f:15: 8b:e1:ff:50:65:a4:d5:0e:06:6f:93:2f:c9:7f:b6: c6:d2:b9:f0:6e:9c:11:be:f3:67:47:0a:3b:a0:c8: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:02:13:07:3C:34:2D:8F:FE:C5:89:11:32:DC:08:FB:56:F3:47:54 X509v3 Authority Key Identifier: keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:66:dd:1f:ca:1f:1b:40:ae:27:b6:47:f2:15:97:cb:68:57: 22:a6:b7:c7:40:af:7d:ef:81:80:f1:b1:62:5f:e1:d8:d6:9b: dc:be:c5:56:e9:f5:99:ad:c2:88:c5:8a:ac:ee:cd:c9:73:bf: 66:74:96:fe:0e:b3:4f:5c:f1:d9:b6:79:66:f4:75:93:8f:33: 6e:8a:c1:89:50:1a:93:27:1f:d8:f4:61:8e:ef:05:bd:2e:c1: a9:8b:d7:37:e0:07:99:1d:c5:4d:d1:20:0b:62:61:1e:84:e7: c0:4e:b7:43:b2:16:10:22:bf:cb:a6:ab:5f:6f:6f:b4:5b:f2: ec:d5:6d:b6:31:4e:20:09:16:7e:a7:e4:a9:3a:2b:d9:d3:33: cc:f9:d0:d6:75:95:18:3e:31:44:e4:22:c6:72:24:73:8e:3a: 71:a7:0c:fc:5d:df:80:29:87:1a:00:5d:7d:3a:99:42:50:23: 6d:00:f8:fb:bd:dd:a7:03:d0:64:45:8c:9e:2c:6a:63:43:bb: 60:72:1b:50:d0:d4:f0:4d:31:66:8f:1a:6a:35:73:54:32:65: 89:a2:f9:65:9c:d6:36:c0:24:f9:ca:c7:16:89:34:83:b1:5d: 4a:df:5d:4c:e0:82:24:60:45:2d:7e:43:d4:e4:48:78:60:06: 87:be:81:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEODgxMTAvBgNVBAUTKEIyRjA1QzJDRUMzNTUwRDJEM0M5RUI1MTM4MzlGNDdB MDAyQTg3MkUwHhcNMjUwNzAzMDEwMDIzWhcNMjUwNzEwMDEwMDIzWjAYMRYwFAYD VQQDEw02ODY1ZDYyNy1hOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzA5YPBbTll7NAO4oVcWj85THF1dgsBYkVQk5nXGa4i5ihDWTFMZfU39/S4vn lPWdW9HOkRIY+0920Q+8o4ld5+dWohUluQkHGZdmc+UHWK8RU+nN6YF9KakYOJt3 pbilMVBbTtU5Grd0CiM0pUkElLcPVNcJRs2kS1t6/mk2eITP+w5XIx2ditKvMKDP r+y3Inl9YB1lxTNxLy+aRjRjnaWCam9zBxPlNshA3GdEXyEpEvDmCNgwUtnmIfu3 SCV02ajqpO0aZ8m7V03jWmHoBZZPwlD8QB/kRw5qEg2rDxWL4f9QZaTVDgZvky/J f7bG0rnwbpwRvvNnRwo7oMg3mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8CEwc8 NC2P/sWJETLcCPtW80dUMB8GA1UdIwQYMBaAFLLwXCzsNVDS08nrUTg59HoAKocu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ4OC9GMUI3RUFCQTkz QUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVOTFR5ZXRST0RuMGVnQXFo eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N2QmNMT3cxVU5MVHlldFJPRG4wZWdBcWh5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ4OC9GMUI3RUFCQTkzQUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVO TFR5ZXRST0RuMGVnQXFoeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCZt0fyh8bQK4ntkfyFZfLaFciprfHQK9974GA8bFiX+HY1pvcvsVW 6fWZrcKIxYqs7s3Jc79mdJb+DrNPXPHZtnlm9HWTjzNuisGJUBqTJx/Y9GGO7wW9 LsGpi9c34AeZHcVN0SALYmEehOfATrdDshYQIr/Lpqtfb2+0W/Ls1W22MU4gCRZ+ p+SpOivZ0zPM+dDWdZUYPjFE5CLGciRzjjpxpwz8Xd+AKYcaAF19OplCUCNtAPj7 vd2nA9BkRYyeLGpjQ7tgchtQ0NTwTTFmjxpqNXNUMmWJovllnNY2wCT5yscWiTSD sV1K311M4IIkYEUtfkPU5Eh4YAaHvoEQ -----END CERTIFICATE-----Generated at Thu Jul 3 09:12:32 2025 by rpki-client