$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json) Hash identifier: E941Wsj78GHYX5YIhhwGtQn2lomqGQyCaaGcJI+aRIo= Subject key identifier: 7C:7A:60:68:82:DD:7C:1E:E0:18:3A:7A:8B:87:FE:C4:F8:02:96:31 Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft Manifest number: 0643 Signing time: Wed 02 Jul 2025 22:55:43 +0000 Manifest this update: Wed 02 Jul 2025 22:55:43 +0000 Manifest next update: Wed 09 Jul 2025 22:55:43 +0000 Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: SW5vtKQWMugXZ/0E+oFdimT1XXTLRLQMxiHVvP8l5pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Validity Not Before: Jul 2 22:55:43 2025 GMT Not After : Jul 9 22:55:43 2025 GMT Subject: CN=6865b8ef-4f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:84:82:2c:cd:d8:94:9d:6b:93:c3:51:a2: 40:94:66:7f:f4:ba:da:e2:c3:87:a4:0d:87:2c:cb: 95:f9:0e:e4:69:f1:36:65:1e:a3:3e:75:1e:33:59: 0b:7c:03:72:64:02:4e:e0:44:61:7e:a3:a3:b3:88: d5:5b:59:21:b2:a4:f0:54:5c:8f:3b:43:6d:ae:27: bf:ff:d2:3f:63:e5:02:9e:f7:00:6e:e5:c0:33:90: 1c:2e:2c:d9:1b:19:89:11:9f:97:d1:8a:13:ba:6e: 1e:22:4a:31:a8:cf:ed:81:b1:bf:a6:1d:58:04:72: 95:70:b4:12:90:80:e9:c3:6e:0f:4b:e4:1c:fe:da: 7f:f2:99:33:cd:99:17:90:7a:a8:6b:fb:61:10:ac: 10:c8:e2:b2:04:35:af:00:99:3d:0e:f3:96:41:d9: 9c:78:c2:bd:61:54:53:0f:a2:b9:a0:f7:f0:8f:d6: 4c:17:98:7c:70:da:1c:19:34:4b:ea:3a:68:53:41: cc:13:71:35:90:43:4e:67:d2:07:8c:e5:69:2a:47: 50:eb:5d:97:95:c6:d4:57:1d:5b:dd:77:36:5f:a8: 1f:4c:20:60:ab:e8:61:72:d5:e4:f4:99:27:b4:ac: 70:ae:6f:a5:f9:b7:43:21:9f:8e:0c:ca:40:46:4b: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7A:60:68:82:DD:7C:1E:E0:18:3A:7A:8B:87:FE:C4:F8:02:96:31 X509v3 Authority Key Identifier: keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4c:b7:58:64:5e:f8:6e:d7:a1:3d:a2:73:c2:ba:f6:e2:c1: 98:b1:08:9d:54:af:e1:cb:6c:48:46:06:5b:c1:ef:1f:4d:fa: d3:c4:c8:01:ba:d4:5d:0d:42:08:8c:31:b2:d3:59:54:86:38: d6:6d:b3:4e:03:64:db:d9:9d:a4:bc:30:55:9d:40:f1:ed:bb: 1b:bb:e5:89:fe:d3:f0:ca:c3:9a:6a:d2:30:28:cd:92:ea:51: f5:c0:0a:15:3a:13:e0:1d:e6:1e:ee:6f:69:e3:cc:da:8b:8e: 89:81:2d:53:2c:a5:c6:28:05:2c:88:c8:8d:c7:b6:b5:69:45: 14:90:95:c6:c0:41:ee:4c:1d:60:79:21:d2:5d:2a:be:d2:0a: 14:60:d3:55:6e:a4:94:11:92:a0:80:bd:2c:e7:d3:a1:9c:2f: b7:87:93:8a:bc:29:a8:ee:b7:e3:9e:02:a0:d8:24:15:3f:48: 80:32:82:dd:df:04:81:a4:27:b6:7d:8d:87:93:9f:c7:c6:ae: be:25:93:ad:96:af:e2:72:19:23:a1:86:6e:01:bf:00:24:17: da:34:87:9a:45:33:9e:e8:da:6e:20:87:1c:70:b6:3d:94:1e: c6:fe:85:f7:fb:22:ad:60:51:e5:9b:d2:2f:e1:04:18:9b:0b: 54:60:2b:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG NTlDMjdFOUUwHhcNMjUwNzAyMjI1NTQzWhcNMjUwNzA5MjI1NTQzWjAYMRYwFAYD VQQDEw02ODY1YjhlZi00ZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArquEgizN2JSda5PDUaJAlGZ/9Lra4sOHpA2HLMuV+Q7kafE2ZR6jPnUeM1kL fANyZAJO4ERhfqOjs4jVW1khsqTwVFyPO0Ntrie//9I/Y+UCnvcAbuXAM5AcLizZ GxmJEZ+X0YoTum4eIkoxqM/tgbG/ph1YBHKVcLQSkIDpw24PS+Qc/tp/8pkzzZkX kHqoa/thEKwQyOKyBDWvAJk9DvOWQdmceMK9YVRTD6K5oPfwj9ZMF5h8cNocGTRL 6jpoU0HME3E1kENOZ9IHjOVpKkdQ612XlcbUVx1b3Xc2X6gfTCBgq+hhctXk9Jkn tKxwrm+l+bdDIZ+ODMpARktGqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHx6YGiC 3Xwe4Bg6eouH/sT4ApYxMB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsTLdYZF74btehPaJzwrr24sGYsQidVK/hy2xIRgZbwe8fTfrTxMgB utRdDUIIjDGy01lUhjjWbbNOA2Tb2Z2kvDBVnUDx7bsbu+WJ/tPwysOaatIwKM2S 6lH1wAoVOhPgHeYe7m9p48zai46JgS1TLKXGKAUsiMiNx7a1aUUUkJXGwEHuTB1g eSHSXSq+0goUYNNVbqSUEZKggL0s59OhnC+3h5OKvCmo7rfjngKg2CQVP0iAMoLd 3wSBpCe2fY2Hk5/Hxq6+JZOtlq/ichkjoYZuAb8AJBfaNIeaRTOe6NpuIIcccLY9 lB7G/oX3+yKtYFHlm9Iv4QQYmwtUYCtX -----END CERTIFICATE-----Generated at Fri Jul 4 00:32:19 2025 by rpki-client