$ rpki-client -vvf rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft File: sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft (raw, json) Hash identifier: p7J79J7wgo92K54Zv+oF+WMyo3donyI0ERe2GpgdpnE= Subject key identifier: F7:E7:CF:80:7F:A9:FB:D1:85:84:AD:CF:B1:24:17:99:5A:24:EC:22 Authority key identifier: B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 Certificate issuer: /CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Certificate serial: 0339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft Manifest number: 0335 Signing time: Tue 01 Jul 2025 01:41:57 +0000 Manifest this update: Tue 01 Jul 2025 01:41:56 +0000 Manifest next update: Tue 08 Jul 2025 01:41:56 +0000 Files and hashes: 1: sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl (hash: gQAarXIUYMHtc4Q2znnc4raTw2omNYogBgIWJ5IAJJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825 (0x339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919456E, serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Validity Not Before: Jul 1 01:41:56 2025 GMT Not After : Jul 8 01:41:56 2025 GMT Subject: CN=68633ce5-dd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:9c:85:f9:c6:48:89:7f:a3:0a:8a:6f:97: 5c:14:16:69:61:0e:89:7c:da:41:27:ba:26:91:e8: 40:a1:b7:d6:22:d4:8f:4f:5c:bc:a1:d4:36:9a:c3: c0:60:41:32:89:58:09:ba:72:8a:08:74:2d:c3:d5: 81:9e:17:2c:4e:d3:9e:dd:74:78:a1:86:93:1b:16: 0b:b7:ca:f1:f1:6c:13:5a:8f:d5:f4:be:56:90:84: af:80:8e:3d:ae:ee:f3:49:c9:d9:7e:18:80:5c:ac: 87:7d:4d:8c:4c:20:60:bd:d5:a5:d9:e0:73:52:d7: e3:02:7d:65:48:40:cc:3b:aa:1d:a1:ed:09:e7:80: ed:13:52:ae:92:63:15:d9:12:3d:70:de:7c:ff:cb: 38:20:c9:f7:b4:9a:63:08:ed:da:76:3d:8a:2f:21: 4a:eb:65:89:70:21:12:41:1f:c4:f4:18:94:f2:f3: 2c:35:b8:f4:b2:74:d3:46:72:25:f7:53:a5:ce:7e: 70:18:8e:f1:b0:e3:69:08:87:a5:2c:d5:8b:28:88: 39:32:12:0a:9d:51:6e:54:ee:6b:e6:92:4a:34:ec: a4:96:6c:6b:d5:6c:17:2e:5b:30:70:be:5f:c7:e2: 85:26:cd:f2:32:ff:7f:a6:04:4a:4b:e5:0c:83:d2: e9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E7:CF:80:7F:A9:FB:D1:85:84:AD:CF:B1:24:17:99:5A:24:EC:22 X509v3 Authority Key Identifier: keyid:B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:36:96:eb:81:c3:4b:2e:61:17:e2:3e:bf:dd:1a:d6:75:2d: f0:cf:9f:85:a8:64:80:ad:d2:9e:c0:0c:90:69:3e:17:56:2f: 74:4f:a4:20:75:0b:e4:ce:3e:a0:01:35:d5:0d:ca:3a:d8:01: c4:3d:0e:e7:4e:7e:45:3a:7b:6a:0b:e7:11:36:22:a7:e2:c3: f9:53:9a:9d:ef:79:b4:3b:9f:e5:73:66:f1:94:2d:eb:96:52: b6:1a:0f:fe:33:dd:26:7f:83:d9:6b:0b:a7:25:bf:77:8a:b7: 0d:aa:96:34:6c:e9:d8:7b:fc:58:49:8a:70:7e:58:d1:37:69: 58:eb:64:2a:39:51:81:80:c2:fc:e6:66:81:dc:dd:b1:fa:6c: ed:34:17:94:50:ba:ee:e3:2d:29:7d:64:58:ab:05:8c:92:1e: 9e:e9:2d:de:38:c8:d2:b6:ac:32:7a:5f:81:29:dd:c6:f2:58: 07:18:6f:f3:2a:c9:e6:d6:cb:db:eb:d9:4c:3b:27:25:04:69: 03:d2:fb:4d:d5:31:05:3e:55:fc:70:11:3b:f1:b9:4a:5d:88: b2:2e:09:86:5f:b2:37:37:94:6a:f4:0f:d7:3c:be:2f:df:6d: 89:8a:b7:80:05:c7:62:b2:dd:47:d3:da:30:73:ff:56:58:4a: 6a:bf:71:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1NkUxMTAvBgNVBAUTKEIwNEI3RkIyMEUyNUQ2RDc1ODdGMjZGRDc1NzI3NEI5 RDNFRTNFOTUwHhcNMjUwNzAxMDE0MTU2WhcNMjUwNzA4MDE0MTU2WjAYMRYwFAYD VQQDEw02ODYzM2NlNS1kZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviOchfnGSIl/owqKb5dcFBZpYQ6JfNpBJ7omkehAobfWItSPT1y8odQ2msPA YEEyiVgJunKKCHQtw9WBnhcsTtOe3XR4oYaTGxYLt8rx8WwTWo/V9L5WkISvgI49 ru7zScnZfhiAXKyHfU2MTCBgvdWl2eBzUtfjAn1lSEDMO6odoe0J54DtE1KukmMV 2RI9cN58/8s4IMn3tJpjCO3adj2KLyFK62WJcCESQR/E9BiU8vMsNbj0snTTRnIl 91Olzn5wGI7xsONpCIelLNWLKIg5MhIKnVFuVO5r5pJKNOyklmxr1WwXLlswcL5f x+KFJs3yMv9/pgRKS+UMg9LpSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfnz4B/ qfvRhYStz7EkF5laJOwiMB8GA1UdIwQYMBaAFLBLf7IOJdbXWH8m/XVydLnT7j6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDU2RS82RkMzMjlDQ0NC NjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0ZFlmeWI5ZFhKMHVkUHVQ cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdF9zZzRsMXRkWWZ5YjlkWEowdWRQdVBwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDU2RS82RkMzMjlDQ0NCNjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0 ZFlmeWI5ZFhKMHVkUHVQcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsNpbrgcNLLmEX4j6/3RrWdS3wz5+FqGSArdKewAyQaT4XVi90T6Qg dQvkzj6gATXVDco62AHEPQ7nTn5FOntqC+cRNiKn4sP5U5qd73m0O5/lc2bxlC3r llK2Gg/+M90mf4PZawunJb93ircNqpY0bOnYe/xYSYpwfljRN2lY62QqOVGBgML8 5maB3N2x+mztNBeUULru4y0pfWRYqwWMkh6e6S3eOMjStqwyel+BKd3G8lgHGG/z Ksnm1svb69lMOyclBGkD0vtN1TEFPlX8cBE78blKXYiyLgmGX7I3N5Rq9A/XPL4v 322JireABcdist1H09owc/9WWEpqv3GJ -----END CERTIFICATE-----Generated at Tue Jul 1 18:33:37 2025 by rpki-client