$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft File: SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft (raw, json) Hash identifier: NY3PgXcCoMXayu0u32b7TxpEQzfNMVWg3OFXvt/uV5U= Subject key identifier: DC:46:6B:75:A2:A7:8D:66:31:15:B6:CF:A7:B3:EC:2A:CD:31:41:AB Authority key identifier: 48:95:4B:5B:25:F9:41:3A:A8:05:4E:54:13:C1:1E:93:1A:DA:F7:F4 Certificate issuer: /CN=A917FD40/serialNumber=48954B5B25F9413AA8054E5413C11E931ADAF7F4 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJVLWyX5QTqoBU5UE8Eekxra9_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft Manifest number: 0578 Signing time: Wed 02 Jul 2025 23:56:12 +0000 Manifest this update: Wed 02 Jul 2025 23:56:11 +0000 Manifest next update: Wed 09 Jul 2025 23:56:11 +0000 Files and hashes: 1: SJVLWyX5QTqoBU5UE8Eekxra9_Q.crl (hash: BzqzLC/7opN0SJi1//KklddYcogthcEJ9opgY62WjXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.crl rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJVLWyX5QTqoBU5UE8Eekxra9_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FD40, serialNumber=48954B5B25F9413AA8054E5413C11E931ADAF7F4 Validity Not Before: Jul 2 23:56:11 2025 GMT Not After : Jul 9 23:56:11 2025 GMT Subject: CN=6865c71b-c835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:11:54:8f:ff:97:b7:86:67:db:c0:3e:6f:81: bb:bb:e1:93:6f:b1:e8:4c:41:94:51:70:9e:33:65: 23:fd:2c:50:a4:76:e6:7a:8f:74:5a:9c:e4:c9:7c: 4d:c0:bb:af:ef:f8:62:bb:c5:66:24:66:f4:12:1d: 74:44:31:7b:f6:ae:2f:e1:f0:61:2b:29:bb:e3:e0: c6:c4:fd:85:25:36:69:7e:d3:d4:46:55:bf:3e:40: 36:86:cc:de:f3:fd:c6:6a:66:ab:6f:a6:75:36:09: c5:f2:8e:d6:ca:b6:a4:03:5b:ff:d1:b1:28:e5:f3: cc:08:11:7e:26:ac:ec:6a:1c:2d:30:97:e6:7e:27: 8d:fe:ab:0e:7d:38:cf:ac:4c:c3:ee:a7:1b:65:1e: 00:95:09:65:e1:10:0b:b8:ed:8f:b1:12:c7:64:71: ba:33:3e:8a:e9:c1:de:b8:81:69:b0:76:4f:77:9d: 5d:e4:46:eb:f0:5d:db:1d:5d:9e:b1:63:88:11:00: df:93:a4:dd:b6:7d:c4:8a:df:37:e9:50:ef:fc:fc: 46:ac:37:38:8d:50:df:f9:70:85:3f:00:76:00:00: 8b:c4:d9:b6:63:7f:7a:95:76:02:aa:06:f2:b4:ec: 81:4d:d0:6b:9d:a1:7f:75:0c:5f:c5:8e:42:d0:16: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:46:6B:75:A2:A7:8D:66:31:15:B6:CF:A7:B3:EC:2A:CD:31:41:AB X509v3 Authority Key Identifier: keyid:48:95:4B:5B:25:F9:41:3A:A8:05:4E:54:13:C1:1E:93:1A:DA:F7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJVLWyX5QTqoBU5UE8Eekxra9_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:12:a0:f1:db:97:8c:2f:b5:a1:5c:f1:68:b9:2f:45:34:d7: 9d:72:14:56:5a:0c:41:d8:45:eb:5c:b5:d5:69:bd:61:e0:26: a7:12:d9:37:a1:e4:bf:5e:c7:48:35:48:bc:78:c0:7c:1d:ae: 39:fa:1c:df:a8:63:aa:1e:2b:5e:ff:d7:95:f1:2e:68:f8:65: 3d:65:9a:e8:70:37:00:0b:dd:7d:ce:a2:e3:f2:07:78:bb:00: fb:ef:89:64:bd:f7:26:c5:9f:82:93:dd:2e:2b:8d:3f:d5:1c: 7c:2f:96:6b:45:e7:f0:63:25:4d:80:6b:f9:9d:fe:8d:6e:82: d8:06:ef:ca:91:bf:b8:0c:0e:65:15:13:ae:a9:d0:95:47:f5: 7e:f8:23:b8:7f:fc:1c:5c:79:ce:ec:40:eb:45:b9:b1:f8:b7: 7d:19:93:d9:36:c5:29:ea:a1:88:e9:73:30:a0:89:4a:d1:2d: 14:2b:eb:3f:a7:13:c1:64:0a:f7:ad:11:14:81:7a:dc:e4:c0: 05:3d:c0:63:f8:56:a0:32:ea:e0:4f:98:fa:a8:c1:33:ac:fd: e9:6d:c9:c6:fb:1a:4c:e6:22:65:9b:5d:b2:c0:6e:bd:22:01: 6b:50:85:54:51:fc:b8:a2:4e:5d:2d:06:bb:a8:08:e2:d5:c1: 29:72:83:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RkQ0MDExMC8GA1UEBRMoNDg5NTRCNUIyNUY5NDEzQUE4MDU0RTU0MTNDMTFFOTMx QURBRjdGNDAeFw0yNTA3MDIyMzU2MTFaFw0yNTA3MDkyMzU2MTFaMBgxFjAUBgNV BAMTDTY4NjVjNzFiLWM4MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsEVSP/5e3hmfbwD5vgbu74ZNvsehMQZRRcJ4zZSP9LFCkduZ6j3RanOTJfE3A u6/v+GK7xWYkZvQSHXREMXv2ri/h8GErKbvj4MbE/YUlNml+09RGVb8+QDaGzN7z /cZqZqtvpnU2CcXyjtbKtqQDW//RsSjl88wIEX4mrOxqHC0wl+Z+J43+qw59OM+s TMPupxtlHgCVCWXhEAu47Y+xEsdkcbozPorpwd64gWmwdk93nV3kRuvwXdsdXZ6x Y4gRAN+TpN22fcSK3zfpUO/8/EasNziNUN/5cIU/AHYAAIvE2bZjf3qVdgKqBvK0 7IFN0GudoX91DF/FjkLQFvXzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3EZrdaKn jWYxFbbPp7PsKs0xQaswHwYDVR0jBBgwFoAUSJVLWyX5QTqoBU5UE8Eekxra9/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRDQwL0ZDMjE5NTVFMEJE NjExRUM4Rjk5RDA2M0M0RjlBRTAyL1NKVkxXeVg1UVRxb0JVNVVFOEVla3hyYTlf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0pWTFd5WDVRVHFvQlU1VUU4RWVreHJhOV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG RDQwL0ZDMjE5NTVFMEJENjExRUM4Rjk5RDA2M0M0RjlBRTAyL1NKVkxXeVg1UVRx b0JVNVVFOEVla3hyYTlfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOgSoPHbl4wvtaFc8Wi5L0U0151yFFZaDEHYRetctdVpvWHgJqcS2Teh 5L9ex0g1SLx4wHwdrjn6HN+oY6oeK17/15XxLmj4ZT1lmuhwNwAL3X3OouPyB3i7 APvviWS99ybFn4KT3S4rjT/VHHwvlmtF5/BjJU2Aa/md/o1ugtgG78qRv7gMDmUV E66p0JVH9X74I7h//Bxcec7sQOtFubH4t30Zk9k2xSnqoYjpczCgiUrRLRQr6z+n E8FkCvetERSBetzkwAU9wGP4VqAy6uBPmPqowTOs/eltycb7GkzmImWbXbLAbr0i AWtQhVRR/LiiTl0tBruoCOLVwSlyg70= -----END CERTIFICATE-----Generated at Thu Jul 3 20:14:05 2025 by rpki-client