$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: FGrGsxaYllPmmS7A5gfYSKtbYLADx+O8eMDqhicVt2s= Subject key identifier: 61:CA:A6:D8:F1:45:5E:4C:48:70:83:46:DD:8A:E4:2A:8D:24:E4:A9 Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 08BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 08BE Signing time: Wed 02 Jul 2025 20:43:29 +0000 Manifest this update: Wed 02 Jul 2025 20:43:28 +0000 Manifest next update: Wed 09 Jul 2025 20:43:28 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: h/C+2RRbRLOAVTKyhnsVKZv8Ns3Sx7dX+6rd01Hu2LM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2239 (0x8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Jul 2 20:43:28 2025 GMT Not After : Jul 9 20:43:28 2025 GMT Subject: CN=686599f1-7f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:85:01:61:3e:b4:d3:20:a1:20:fa:a9:26: d9:2b:0e:53:e0:a8:45:b8:59:90:11:30:a2:c1:0b: 18:f2:87:62:a9:a3:1a:e6:ce:ed:9c:22:0c:78:39: 28:69:d8:05:18:d7:ec:30:28:08:fe:0c:e8:46:f9: d9:07:24:f3:04:83:bc:62:b5:39:55:d9:95:a9:e2: b3:c6:ec:1c:a3:77:85:03:b0:21:b1:a9:c7:24:66: 62:9e:00:11:08:41:3c:6e:07:10:40:53:05:c8:86: ee:2e:0a:58:ea:1f:ca:76:e3:28:ad:de:bd:81:32: 9f:8e:ba:3f:b9:48:3d:a3:56:9f:fc:04:12:9b:c6: 2d:ed:33:76:81:54:b3:03:87:a4:1f:46:de:15:c9: 79:6e:b9:8b:43:8e:28:bf:8b:1e:42:62:fd:12:a8: 0e:93:32:b3:51:df:83:1b:4e:b7:d1:7f:bb:31:bc: 18:2e:95:b5:f9:7f:8c:de:98:a5:78:28:00:1a:f2: 16:e5:7b:4a:95:dc:6b:e7:af:41:fa:ea:ab:82:5a: f1:bd:fd:5a:14:55:52:cc:1d:3a:2a:5c:13:47:06: 5e:62:e9:e6:bf:3d:83:af:aa:c9:d7:03:fc:ff:3d: 53:2a:ca:cd:10:c8:92:ee:bf:75:17:66:e2:c0:ac: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CA:A6:D8:F1:45:5E:4C:48:70:83:46:DD:8A:E4:2A:8D:24:E4:A9 X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:2b:3e:51:dc:8c:3f:f6:7d:d5:60:41:aa:76:84:d4:b4:60: fe:a8:cb:b0:84:4f:de:77:54:ff:8e:72:6f:2a:dc:54:f2:2a: be:ca:27:34:6c:7f:fa:1c:d1:e3:bd:73:98:18:f6:e8:81:ac: 04:c6:50:16:d2:a1:75:ff:0a:c0:fc:63:64:ed:a4:fe:5d:65: 21:76:b0:56:85:8e:b3:c1:49:d4:53:14:c9:c7:36:c8:d0:81: 7a:27:21:96:f9:81:71:37:eb:f3:74:2f:97:33:1d:19:90:27: 83:94:5c:e1:08:38:1c:a8:53:c5:13:44:b1:cd:24:e2:73:09: 9b:61:0c:4e:83:9e:63:f3:c3:91:f6:d5:13:82:31:1e:4d:07: 7d:0d:51:0e:fe:6b:03:54:d6:da:0c:a8:4f:78:2e:cf:40:db: 31:8a:bf:98:30:79:3d:0e:d7:00:0c:32:26:f8:91:d8:0c:fe: f8:0f:da:37:ee:21:cb:d5:f3:88:bb:18:fd:d9:55:a1:f3:ae: 5d:2a:6a:e8:12:65:3b:8c:cd:19:33:88:ec:4b:13:d4:b3:86: 41:01:7b:92:3e:7c:a7:8b:94:24:cf:5c:f1:ae:48:d8:4d:41: 38:c2:e3:ca:87:89:bd:4c:20:3b:10:4e:af:19:3f:81:19:c1: d6:29:c2:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUwNzAyMjA0MzI4WhcNMjUwNzA5MjA0MzI4WjAYMRYwFAYD VQQDEw02ODY1OTlmMS03ZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6yFAWE+tNMgoSD6qSbZKw5T4KhFuFmQETCiwQsY8odiqaMa5s7tnCIMeDko adgFGNfsMCgI/gzoRvnZByTzBIO8YrU5VdmVqeKzxuwco3eFA7AhsanHJGZingAR CEE8bgcQQFMFyIbuLgpY6h/KduMord69gTKfjro/uUg9o1af/AQSm8Yt7TN2gVSz A4ekH0beFcl5brmLQ44ov4seQmL9EqgOkzKzUd+DG0630X+7MbwYLpW1+X+M3pil eCgAGvIW5XtKldxr569B+uqrglrxvf1aFFVSzB06KlwTRwZeYunmvz2Dr6rJ1wP8 /z1TKsrNEMiS7r91F2biwKweLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHKptjx RV5MSHCDRt2K5CqNJOSpMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARKz5R3Iw/9n3VYEGqdoTUtGD+qMuwhE/ed1T/jnJvKtxU8iq+yic0 bH/6HNHjvXOYGPbogawExlAW0qF1/wrA/GNk7aT+XWUhdrBWhY6zwUnUUxTJxzbI 0IF6JyGW+YFxN+vzdC+XMx0ZkCeDlFzhCDgcqFPFE0SxzSTicwmbYQxOg55j88OR 9tUTgjEeTQd9DVEO/msDVNbaDKhPeC7PQNsxir+YMHk9DtcADDIm+JHYDP74D9o3 7iHL1fOIuxj92VWh865dKmroEmU7jM0ZM4jsSxPUs4ZBAXuSPnyni5Qkz1zxrkjY TUE4wuPKh4m9TCA7EE6vGT+BGcHWKcKk -----END CERTIFICATE-----Generated at Thu Jul 3 18:55:18 2025 by rpki-client