$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json) Hash identifier: WasB5snJi0zntvHqlyWC7EJAHwW2IH2MhaXcl/6M3eA= Subject key identifier: F3:86:C0:87:EE:AB:E3:A6:C2:A1:91:86:2F:BB:78:20:BB:80:07:72 Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft Manifest number: 0148 Signing time: Sun 29 Jun 2025 03:24:41 +0000 Manifest this update: Sun 29 Jun 2025 03:24:41 +0000 Manifest next update: Sun 06 Jul 2025 03:24:41 +0000 Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: gH9BTb76xTteZksmbU+mcYO0ulsPak2Z0jQmNLDezuM=) 2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: aw8y769dbHtoKJEd8vQWlpw8CKdXEBliY+eMjR7xPWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: Jun 29 03:24:41 2025 GMT Not After : Jul 6 03:24:41 2025 GMT Subject: CN=6860b1f9-c5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f3:45:e6:bb:5f:7a:fa:78:d4:0f:6f:6f:ed: ce:79:7b:99:66:90:d8:4e:ab:30:e5:e3:f1:e9:a0: f9:fa:83:b9:cc:77:9f:97:1b:13:1a:43:21:ed:55: 18:68:36:fa:83:da:d7:c2:88:6c:85:bf:f1:6e:a8: f9:8b:e4:46:bb:27:ea:d7:dc:ca:3e:7f:21:b2:92: 42:d1:bd:e7:01:38:46:53:d6:35:49:84:65:45:97: 25:d6:97:29:dc:2d:e3:83:e7:aa:a2:86:ee:32:96: a3:26:5e:12:e6:3a:f6:60:be:68:6a:a9:3c:f4:88: f1:b5:80:b7:4e:27:86:94:5f:6d:42:17:d1:76:27: 8d:a3:64:4d:53:a8:a1:89:b1:20:fc:41:e0:f2:d6: b7:c6:87:6b:57:9c:78:4a:c4:2e:90:0b:94:d3:ff: 6a:ae:26:da:da:1f:8d:54:46:cc:01:c9:8d:fd:4e: 18:0b:4d:af:0f:1c:01:3f:86:6b:57:03:1b:12:35: d1:62:cd:55:e7:5f:7f:5a:ce:03:d1:8c:92:01:0a: 00:47:37:df:06:8d:78:a7:f5:09:02:46:3f:eb:42: 23:1d:eb:d5:45:43:57:16:0b:08:f4:db:87:00:2c: 0e:7e:d2:f7:3f:2d:2e:d3:01:3a:9d:64:03:54:c3: b8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:86:C0:87:EE:AB:E3:A6:C2:A1:91:86:2F:BB:78:20:BB:80:07:72 X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:41:5a:98:10:70:c2:0c:8d:35:6f:0a:76:31:7b:53:71:20: 83:6d:7a:bb:92:db:af:fd:65:d9:10:40:bc:33:50:b9:39:9f: 10:53:b9:bd:70:07:c4:fd:10:2b:7f:9b:89:d7:17:4c:75:58: 17:30:be:d6:f3:6d:5a:71:83:d7:9d:48:ae:16:4c:48:2c:77: 67:92:5f:b1:41:30:be:f2:24:74:1b:4c:65:09:3d:90:2b:20: a2:34:1d:0d:bc:e4:8f:6b:91:e4:84:f2:fa:4d:16:e4:7c:18: a5:04:c7:e0:57:c7:b8:6b:45:77:e9:e5:6b:8f:fe:9a:50:33: c7:1a:52:1c:24:30:4c:2f:9b:0b:cd:16:ab:e8:7f:9a:b9:57: de:9b:9e:3d:a0:02:64:e9:f8:69:09:13:5e:d0:21:e3:d9:57: 94:dc:4b:8b:29:ce:eb:63:41:94:86:c8:ff:8c:b0:f8:56:b6: 6c:0b:52:da:75:f4:75:95:2b:12:db:5c:0c:45:6c:65:8b:f9: 34:0c:98:66:1a:10:b2:b5:4b:c7:fb:3a:22:71:75:e1:32:59: 19:d1:a3:84:bd:00:c9:d3:b0:51:a3:2c:9f:1a:d4:9f:ee:24: 80:79:37:f6:55:6f:42:c3:ad:8b:5e:c1:6b:e8:70:c9:c1:c6: c3:a5:fc:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3QzQxMTAvBgNVBAUTKDQ5REI2MUZGMDNDNTUxNjc5NUNGNzg1MDlFQTM3QTA2 MEY0NTQ3QkYwHhcNMjUwNjI5MDMyNDQxWhcNMjUwNzA2MDMyNDQxWjAYMRYwFAYD VQQDEw02ODYwYjFmOS1jNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vNF5rtfevp41A9vb+3OeXuZZpDYTqsw5ePx6aD5+oO5zHeflxsTGkMh7VUY aDb6g9rXwohshb/xbqj5i+RGuyfq19zKPn8hspJC0b3nAThGU9Y1SYRlRZcl1pcp 3C3jg+eqoobuMpajJl4S5jr2YL5oaqk89IjxtYC3TieGlF9tQhfRdieNo2RNU6ih ibEg/EHg8ta3xodrV5x4SsQukAuU0/9qriba2h+NVEbMAcmN/U4YC02vDxwBP4Zr VwMbEjXRYs1V519/Ws4D0YySAQoARzffBo14p/UJAkY/60IjHevVRUNXFgsI9NuH ACwOftL3Py0u0wE6nWQDVMO4CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOGwIfu q+OmwqGRhi+7eCC7gAdyMB8GA1UdIwQYMBaAFEnbYf8DxVFnlc94UJ6jegYPRUe/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDdDNC81OTVCRTgyQzYz NUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVXZVZ6M2hRbnFONkJnOUZS NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDdDNC81OTVCRTgyQzYzNUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVX ZVZ6M2hRbnFONkJnOUZSNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOQVqYEHDCDI01bwp2MXtTcSCDbXq7ktuv/WXZEEC8M1C5OZ8QU7m9 cAfE/RArf5uJ1xdMdVgXML7W821acYPXnUiuFkxILHdnkl+xQTC+8iR0G0xlCT2Q KyCiNB0NvOSPa5HkhPL6TRbkfBilBMfgV8e4a0V36eVrj/6aUDPHGlIcJDBML5sL zRar6H+auVfem549oAJk6fhpCRNe0CHj2VeU3EuLKc7rY0GUhsj/jLD4VrZsC1La dfR1lSsS21wMRWxli/k0DJhmGhCytUvH+zoicXXhMlkZ0aOEvQDJ07BRoyyfGtSf 7iSAeTf2VW9Cw62LXsFr6HDJwcbDpfyO -----END CERTIFICATE-----Generated at Sun Jun 29 13:44:42 2025 by rpki-client