$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json) Hash identifier: DmVHkOSiidgyaq5h0tria1R5t9lY3IqRo58bE3JHFks= Subject key identifier: 2E:19:5F:69:7F:C0:51:A4:01:E0:15:39:95:5D:F3:41:C6:7D:63:A2 Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft Manifest number: 0203 Signing time: Thu 03 Jul 2025 02:29:40 +0000 Manifest this update: Thu 03 Jul 2025 02:29:40 +0000 Manifest next update: Thu 10 Jul 2025 02:29:40 +0000 Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: h5xlx1Ev3ifnyWqgoJXgNj54nbSRzS6wq4tHocgp25k=) 2: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: PE1GT2A7EmT71tkAdrtk5aTsSiGLh2+65uV6vdi3L2w=) 3: A4B9732E372211F088B77741C4F9AE02.roa (hash: mk1V1FHxB9suL0UPFLyM/A4VOyjRdsjF6s6gkTDXYcQ=) 4: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: 8t/E7tL8Lbh/a7Lj1jqywOIP2dcmbqemPtvNv/RJomk=) 5: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 88kWEiY/06EoXdAjoPmCFzf4ibe9Kqek376AzBNc9lE=) 6: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: 8cIYacmt17oQhUg55NPG9jDcGp/KP0H3kvB7HR2dORY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Jul 3 02:29:40 2025 GMT Not After : Jul 10 02:29:40 2025 GMT Subject: CN=6865eb14-0356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:7f:c0:be:f5:f1:c7:f5:76:de:33:74:f8: d5:81:d6:b1:b5:9f:33:0d:72:46:72:be:5f:29:07: ca:f2:ab:ff:23:12:a2:b3:56:2a:f4:21:37:95:2d: df:f9:20:75:20:c5:99:94:56:3d:aa:60:fa:12:38: 35:2b:4e:0d:f7:ca:c3:4f:82:96:b3:4a:39:5d:2e: f3:26:34:7e:4d:c7:dd:96:f0:92:b7:83:95:98:75: 0a:ec:38:55:36:be:d6:fa:3e:e0:8a:9c:82:e8:f9: b5:3d:d2:d1:0b:61:64:fc:96:74:54:09:a3:be:d1: 13:7b:89:99:aa:e0:8e:77:f4:d3:3c:86:d0:ee:c4: e7:01:01:38:06:46:be:21:e3:a0:78:89:97:8e:96: f4:ba:0f:ab:cc:fe:c0:38:08:40:6d:56:1a:05:d6: 69:1d:1e:53:33:9a:da:ce:79:f4:a6:cf:a2:00:f2: 26:ab:5c:19:1b:26:ff:8f:3c:56:41:69:f7:c0:d3: ec:b1:1c:96:ad:29:d1:30:f1:d7:f1:cd:79:25:9a: f5:a8:87:7e:4f:f2:2a:b3:09:1d:f0:6e:0b:3b:29: 4f:bf:0f:b6:96:ae:81:66:07:21:0f:ee:36:aa:ae: b8:4e:d4:1b:e2:57:95:ea:c1:1d:1a:93:62:8b:63: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:19:5F:69:7F:C0:51:A4:01:E0:15:39:95:5D:F3:41:C6:7D:63:A2 X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:58:2e:25:66:a5:69:25:14:8d:ed:81:d6:c0:50:23:4a:88: 85:ab:a3:7a:f5:e6:50:4b:e6:58:2a:f4:09:af:b0:81:16:db: 76:bb:5d:e9:22:f5:16:2e:f8:38:ff:8d:57:6e:6e:ef:f0:d6: 31:88:27:55:60:49:ae:b6:5d:e2:0c:db:f7:66:93:11:1f:06: a0:64:b4:18:d2:e4:66:44:66:98:43:a5:35:53:08:01:e2:36: 5b:93:a4:f3:8c:74:6f:a4:7e:cc:c9:13:61:1e:a6:9a:bf:46: 50:85:0d:d2:cc:e4:da:22:3c:b2:c6:fe:ab:0e:8b:94:32:61: b2:ed:03:7e:0e:1b:a5:5b:38:6b:c3:9a:c5:e3:a6:1d:a9:ef: 49:c5:b4:51:62:78:70:e5:47:21:d2:67:a6:5e:0d:4b:0f:87: 1e:dc:21:7c:1f:e2:96:67:4e:8c:d6:59:e2:8e:a2:7e:85:9f: fe:4d:85:37:1d:c0:aa:98:b3:36:f6:a4:07:fe:f5:7c:72:40: 52:3f:f7:3d:61:91:b7:2d:a0:9a:15:6f:bc:2f:57:e3:6c:ed: 2f:04:75:fe:e2:19:f0:ee:bd:10:8f:d1:57:77:a2:f7:5f:98: 1c:22:21:9f:39:f6:ba:b4:60:21:68:e6:fc:8f:37:73:c9:88: c3:0a:29:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjUwNzAzMDIyOTQwWhcNMjUwNzEwMDIyOTQwWjAYMRYwFAYD VQQDEw02ODY1ZWIxNC0wMzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwt/wL718cf1dt4zdPjVgdaxtZ8zDXJGcr5fKQfK8qv/IxKis1Yq9CE3lS3f +SB1IMWZlFY9qmD6Ejg1K04N98rDT4KWs0o5XS7zJjR+TcfdlvCSt4OVmHUK7DhV Nr7W+j7gipyC6Pm1PdLRC2Fk/JZ0VAmjvtETe4mZquCOd/TTPIbQ7sTnAQE4Bka+ IeOgeImXjpb0ug+rzP7AOAhAbVYaBdZpHR5TM5raznn0ps+iAPImq1wZGyb/jzxW QWn3wNPssRyWrSnRMPHX8c15JZr1qId+T/Iqswkd8G4LOylPvw+2lq6BZgchD+42 qq64TtQb4leV6sEdGpNii2MndwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4ZX2l/ wFGkAeAVOZVd80HGfWOiMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzQ4RS80RDc4OTI2QTRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3 VmtMU1NFdF9BZ1d1ZmN4MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPWC4lZqVpJRSN7YHWwFAjSoiFq6N69eZQS+ZYKvQJr7CBFtt2u13p IvUWLvg4/41Xbm7v8NYxiCdVYEmutl3iDNv3ZpMRHwagZLQY0uRmRGaYQ6U1UwgB 4jZbk6TzjHRvpH7MyRNhHqaav0ZQhQ3SzOTaIjyyxv6rDouUMmGy7QN+DhulWzhr w5rF46Ydqe9JxbRRYnhw5Uch0memXg1LD4ce3CF8H+KWZ06M1lnijqJ+hZ/+TYU3 HcCqmLM29qQH/vV8ckBSP/c9YZG3LaCaFW+8L1fjbO0vBHX+4hnw7r0Qj9FXd6L3 X5gcIiGfOfa6tGAhaOb8jzdzyYjDCim6 -----END CERTIFICATE-----Generated at Thu Jul 3 06:53:08 2025 by rpki-client