$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: 0p0+IMnx0WCNjiW7kGkG1msvCX5YaMq5rkyiAdEWBpU= Subject key identifier: D4:DA:0B:85:47:19:8D:37:A8:C9:51:95:E1:23:82:40:7F:E1:D9:28 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 04CC Signing time: Tue 01 Jul 2025 00:24:44 +0000 Manifest this update: Tue 01 Jul 2025 00:24:43 +0000 Manifest next update: Tue 08 Jul 2025 00:24:43 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: wEE3RsNCZYO7a2JB2bVeKDVMQAgINr/FEib1Dl3aJqc=) 2: 1BEFBED451B911F097C15C49C4F9AE02.roa (hash: ZvucB2E7NeTigUiBDA7qRL8qFkVVJvyXSrzFIulP+x8=) 3: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: 00gQlkZJ/La3W11cygPUEyOgfEz6qTJK4E6QUbIb+4w=) 4: 1CC78D4651B911F097C15C49C4F9AE02.roa (hash: CBpPhJ6pPqhVc/HJrSFukBxQwV65YTwQkZm/veGYg0U=) 5: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: StmcDPPzK2yilWPNElLi3+ESljyQBtG5nEZLldO1WuA=) 6: 1D854DF451B911F097C15C49C4F9AE02.roa (hash: xaxaySmnWqQ+K7erniFCyus+l9/HXrQPK69GxtJF7qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Jul 1 00:24:43 2025 GMT Not After : Jul 8 00:24:43 2025 GMT Subject: CN=68632acb-4b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:0f:9a:ef:fc:93:db:1f:c9:1d:f9:be:57: c8:6c:67:0c:89:65:1c:d8:ba:15:a1:93:df:76:de: 48:7c:c8:0c:22:c5:97:18:2a:34:a3:da:44:d4:c1: 0f:06:59:c6:95:24:8f:47:b5:d2:48:71:5f:ff:0e: 29:f6:bb:c1:9e:44:6e:11:ef:8c:62:08:27:cc:2c: d9:b3:6c:4f:64:81:26:2b:e0:b1:99:1c:11:41:f3: 00:10:2a:a9:65:c7:70:3d:1d:75:1f:66:8d:ce:a9: e4:39:a3:cf:12:44:10:57:17:17:67:1e:90:b3:0e: bd:c3:ad:7d:1a:50:21:ae:d2:6e:d2:d0:74:00:63: dd:92:c3:57:e2:ba:82:dc:be:64:cd:d7:8a:5c:7a: a6:4d:fd:f6:a5:64:6f:30:6c:94:f6:a0:ca:85:4c: dd:17:d4:e5:90:30:e7:93:16:1c:94:de:6a:95:04: de:fd:4f:a6:98:ce:14:ae:65:44:27:d3:58:89:49: af:24:10:a6:e7:e9:59:9d:cd:1f:d0:02:11:26:10: 95:70:55:77:aa:bb:89:29:99:fd:43:60:95:4b:f6: e1:a0:d5:10:1f:1f:15:b2:8b:54:26:53:b5:36:e4: 5b:08:23:9f:c0:40:7e:c1:eb:b4:9c:79:98:4d:2c: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DA:0B:85:47:19:8D:37:A8:C9:51:95:E1:23:82:40:7F:E1:D9:28 X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:68:23:51:2b:b7:75:5c:5a:bd:7d:0b:f1:ad:06:d7:f1:6f: ac:65:e7:85:60:66:d5:2d:12:ce:92:e8:a4:9f:c7:6e:3b:f7: e0:17:97:68:44:2e:54:c9:3d:f1:0a:65:08:49:0b:3b:3b:fd: 36:ca:f1:a4:6b:b8:fe:f4:ce:9d:78:cc:e9:7e:03:ec:79:d1: 50:5b:0f:2b:30:7a:9a:a5:83:45:4c:09:82:e7:d9:a9:b4:ce: 40:16:37:96:1e:1d:40:27:7e:e5:40:e7:dd:d1:36:fe:f6:5a: f5:d7:ae:dd:6c:f0:28:31:04:bd:06:7b:a3:fa:90:45:c9:f4: 04:2d:45:2f:07:5f:c1:8c:c4:bb:c2:1b:ff:10:38:64:2e:af: 5f:fc:7d:ea:57:ac:a5:6b:0c:84:0c:ee:12:8a:2a:4b:e8:4e: 14:27:60:19:f2:5b:6c:90:83:72:1d:c9:6c:6f:9c:a2:7e:5b: 2b:4e:d6:d3:4f:2c:2d:0e:57:70:17:05:27:e2:33:38:69:99: 75:dd:42:ed:ee:77:77:6f:17:3a:98:23:fa:17:2c:13:9d:7d: bb:b7:77:2b:cd:ba:c8:90:80:8b:f6:08:fe:84:cb:75:db:18: 81:d1:65:73:a1:51:8f:80:ed:3f:f1:53:09:30:f6:ac:82:4d: 51:7c:8b:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUwNzAxMDAyNDQzWhcNMjUwNzA4MDAyNDQzWjAYMRYwFAYD VQQDEw02ODYzMmFjYi00YjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1MPmu/8k9sfyR35vlfIbGcMiWUc2LoVoZPfdt5IfMgMIsWXGCo0o9pE1MEP BlnGlSSPR7XSSHFf/w4p9rvBnkRuEe+MYggnzCzZs2xPZIEmK+CxmRwRQfMAECqp ZcdwPR11H2aNzqnkOaPPEkQQVxcXZx6Qsw69w619GlAhrtJu0tB0AGPdksNX4rqC 3L5kzdeKXHqmTf32pWRvMGyU9qDKhUzdF9TlkDDnkxYclN5qlQTe/U+mmM4UrmVE J9NYiUmvJBCm5+lZnc0f0AIRJhCVcFV3qruJKZn9Q2CVS/bhoNUQHx8VsotUJlO1 NuRbCCOfwEB+weu0nHmYTSxGPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTaC4VH GY03qMlRleEjgkB/4dkoMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyaCNRK7d1XFq9fQvxrQbX8W+sZeeFYGbVLRLOkuikn8duO/fgF5do RC5UyT3xCmUISQs7O/02yvGka7j+9M6deMzpfgPsedFQWw8rMHqapYNFTAmC59mp tM5AFjeWHh1AJ37lQOfd0Tb+9lr1167dbPAoMQS9Bnuj+pBFyfQELUUvB1/BjMS7 whv/EDhkLq9f/H3qV6ylawyEDO4SiipL6E4UJ2AZ8ltskINyHclsb5yiflsrTtbT TywtDldwFwUn4jM4aZl13ULt7nd3bxc6mCP6FywTnX27t3crzbrIkICL9gj+hMt1 2xiB0WVzoVGPgO0/8VMJMPasgk1RfIu3 -----END CERTIFICATE-----Generated at Tue Jul 1 17:55:27 2025 by rpki-client