$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json) Hash identifier: vyWKj0QZXm24hdwLgG2EqUSrmvKolPkP98+3Wx5c8KI= Subject key identifier: 37:71:83:AA:A8:56:1C:B0:4B:24:9E:D5:30:9D:56:AE:71:E3:B4:59 Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft Manifest number: D9 Signing time: Tue 01 Jul 2025 06:08:29 +0000 Manifest this update: Tue 01 Jul 2025 06:08:28 +0000 Manifest next update: Tue 08 Jul 2025 06:08:28 +0000 Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: WWv3YR6XERgUi/udk5xYDtg6D4mlCxihI417dlj8Fw0=) 2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: yRSzHrzurf6XSOu6xC9tCIXU5IVd5pxNWSd3g3cqSyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: Jul 1 06:08:28 2025 GMT Not After : Jul 8 06:08:28 2025 GMT Subject: CN=68637b5d-512d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3b:1b:83:18:d6:a9:9a:db:dc:37:16:a8:3d: ba:b4:54:83:a1:57:b1:51:28:8a:ce:14:14:2e:24: 7a:85:41:cd:ac:73:d7:7c:61:99:3d:fb:14:14:6a: dd:42:a4:77:f9:85:c0:81:12:11:ed:b8:1d:92:6b: 85:cf:5f:4c:a9:07:25:73:cf:91:56:9d:c0:cf:d5: a5:b7:dc:74:da:fd:9e:15:63:93:46:9a:7a:71:09: d7:e3:05:90:a0:66:d4:4c:30:af:e6:bc:95:c8:bf: 05:fd:77:3b:82:1f:53:3a:55:92:4b:b1:77:f3:77: cb:4f:54:a3:0c:ab:44:5f:70:3a:11:bb:62:68:09: bc:12:36:7e:d1:69:8c:14:ed:24:d2:eb:71:2b:63: c8:63:d0:66:0e:5d:18:3e:08:00:65:7e:e4:c1:c2: 55:29:de:8c:29:3f:b8:7b:e8:17:38:96:2a:dd:9a: 23:90:15:49:bd:b5:49:9a:ef:5a:a7:c9:5a:a6:cf: 79:6b:44:4e:76:aa:bc:81:58:fd:5e:d9:eb:0a:a8: f0:26:f5:dd:4a:c0:0c:76:88:1b:3f:18:21:ba:91: 4a:e4:a4:21:f0:7a:9d:36:59:8c:0c:d1:c0:16:48: e1:e5:3a:b6:6a:53:4c:fc:19:4e:4d:5a:1d:56:a6: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:71:83:AA:A8:56:1C:B0:4B:24:9E:D5:30:9D:56:AE:71:E3:B4:59 X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:9f:bb:00:42:65:4b:71:76:6f:6a:3d:19:75:a4:b6:84:4c: 18:bc:fc:00:81:dd:09:c0:55:f4:00:36:16:af:0a:c7:41:57: 5d:82:7e:96:b6:6d:02:05:72:20:cc:71:a0:ab:10:a5:bf:7c: 74:9f:25:5e:c3:e9:f5:8f:7f:e5:cc:87:6d:0c:fe:93:cf:92: 60:7c:f7:6e:c7:0b:1f:4c:bc:c2:b9:ea:33:2a:38:86:c9:a3: 9a:12:d3:38:fe:a4:ba:88:24:59:d1:0e:d5:79:ac:02:f8:69: e0:4c:94:17:fd:dc:20:17:fc:a3:5e:fd:ab:3d:0d:e3:da:a9: f0:8d:c8:95:46:66:56:a1:1f:41:ac:0e:fb:15:5b:30:d9:77: 29:75:01:3b:46:62:cd:94:fd:fb:71:7e:c9:c9:90:f5:ff:ff: db:9d:78:c9:a0:88:af:51:33:19:56:d2:72:cb:b2:c4:45:48: d3:75:de:93:2b:68:a4:7c:1b:aa:56:da:1d:d6:f6:45:f0:c5: eb:04:76:c1:ca:0c:be:b8:19:4e:2a:5c:eb:d4:a0:c3:60:82: bb:e0:5c:24:d6:dd:89:0d:5a:5d:b6:67:45:87:a5:ab:51:39: 8c:1e:04:c1:67:8e:67:b2:7f:c7:3f:3c:84:0b:20:71:d4:bd: 34:0e:a4:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1 Mjg4NjM4MTEwHhcNMjUwNzAxMDYwODI4WhcNMjUwNzA4MDYwODI4WjAYMRYwFAYD VQQDEw02ODYzN2I1ZC01MTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zsbgxjWqZrb3DcWqD26tFSDoVexUSiKzhQULiR6hUHNrHPXfGGZPfsUFGrd QqR3+YXAgRIR7bgdkmuFz19MqQclc8+RVp3Az9Wlt9x02v2eFWOTRpp6cQnX4wWQ oGbUTDCv5ryVyL8F/Xc7gh9TOlWSS7F383fLT1SjDKtEX3A6EbtiaAm8EjZ+0WmM FO0k0utxK2PIY9BmDl0YPggAZX7kwcJVKd6MKT+4e+gXOJYq3ZojkBVJvbVJmu9a p8laps95a0ROdqq8gVj9XtnrCqjwJvXdSsAMdogbPxghupFK5KQh8HqdNlmMDNHA Fkjh5Tq2alNM/BlOTVodVqYUkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdxg6qo VhywSySe1TCdVq5x47RZMB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUyQi9GODM2QkRFQzBDRUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURf WnJmeDVNa1AtWWRTaUdPQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5n7sAQmVLcXZvaj0ZdaS2hEwYvPwAgd0JwFX0ADYWrwrHQVddgn6W tm0CBXIgzHGgqxClv3x0nyVew+n1j3/lzIdtDP6Tz5JgfPduxwsfTLzCueozKjiG yaOaEtM4/qS6iCRZ0Q7VeawC+GngTJQX/dwgF/yjXv2rPQ3j2qnwjciVRmZWoR9B rA77FVsw2XcpdQE7RmLNlP37cX7JyZD1///bnXjJoIivUTMZVtJyy7LERUjTdd6T K2ikfBuqVtod1vZF8MXrBHbBygy+uBlOKlzr1KDDYIK74Fwk1t2JDVpdtmdFh6Wr UTmMHgTBZ45nsn/HPzyECyBx1L00DqRr -----END CERTIFICATE-----Generated at Thu Jul 3 03:51:10 2025 by rpki-client