$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft File: SXppmDQJrXDCF1ZAccz1vjTFG8c.mft (raw, json) Hash identifier: uldknNRyWgVqFuCVGMt4aNSn1TtYzgVRxRtZIZaEYTA= Subject key identifier: A1:65:52:0C:D0:D9:F6:1A:7F:BF:5D:37:76:CC:13:26:6E:4C:20:45 Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft Manifest number: 0474 Signing time: Sat 28 Jun 2025 23:42:31 +0000 Manifest this update: Sat 28 Jun 2025 23:42:30 +0000 Manifest next update: Sat 05 Jul 2025 23:42:30 +0000 Files and hashes: 1: SXppmDQJrXDCF1ZAccz1vjTFG8c.crl (hash: xRv9nTQI5by7z9STeS/+rjdThQUJDiR8Gk0qJq7/fh4=) 2: E9237B16683211EDA8B5DD35C4F9AE02.roa (hash: m/W09ZD2DgnbOhKrF8d5SNMRuuUCLsB529DhjnozbkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C751F, serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Validity Not Before: Jun 28 23:42:30 2025 GMT Not After : Jul 5 23:42:30 2025 GMT Subject: CN=68607de6-46f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:98:3b:34:2c:05:1b:f0:4d:12:25:34:44: f3:96:1b:ef:76:5b:b1:4d:31:e7:37:c6:15:30:20: 9f:07:5d:71:41:22:ad:2b:d7:20:76:f6:53:f1:e0: fc:77:44:08:77:09:4d:fc:6c:50:89:e7:e0:8b:81: 6f:55:16:06:01:1c:1a:0e:8d:5d:2c:28:e8:3c:73: ba:64:f8:5a:17:36:da:1d:b6:41:59:ef:57:7b:f0: d7:f5:40:2c:75:eb:4d:2b:d6:fd:fe:15:a6:3b:a4: 86:a7:1b:73:27:d9:23:8a:ff:6d:57:ab:a8:b3:7b: 97:47:0e:d8:0e:71:80:93:bb:51:24:a8:cd:71:26: ab:d5:cd:34:44:c2:5a:a8:6c:7f:26:94:e0:17:e6: b0:f5:a7:46:12:08:ec:83:28:3c:46:29:3f:36:89: fc:55:55:89:30:71:3b:38:2b:c6:5c:7d:94:8a:cb: 49:51:83:c5:3b:19:ff:94:a0:98:12:e8:dc:23:b6: b9:ca:86:43:17:18:14:c5:de:c2:72:d4:b8:42:b1: 4c:74:b4:1a:52:45:75:68:74:42:c7:ae:d3:36:08: 27:35:b6:f5:48:f7:00:10:6b:77:92:d6:1c:90:9b: 2b:10:b7:4a:0b:7b:38:35:b0:57:7c:c9:4b:e2:e1: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:65:52:0C:D0:D9:F6:1A:7F:BF:5D:37:76:CC:13:26:6E:4C:20:45 X509v3 Authority Key Identifier: keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:66:ae:aa:96:e6:fd:79:ea:1f:b2:bc:f9:ae:6f:73:7f:00: 60:b0:c7:1c:2a:0c:0d:01:35:dc:ce:af:ba:1e:c9:10:9a:9d: d2:56:e5:ea:ba:23:7c:b4:e6:a2:41:c9:6e:85:6a:df:79:54: d0:7f:66:6e:0d:45:2b:3c:56:c4:2d:2c:e4:df:2f:c7:5d:e5: 81:70:4d:ca:4b:1f:06:a1:04:0e:87:62:af:fe:5b:be:c9:1c: b6:25:08:ef:ba:c7:43:f6:c2:02:5f:a3:5d:cd:97:5f:7c:53: ae:1f:fe:e2:35:4f:a3:ab:10:60:71:eb:5b:30:59:b6:cd:14: 48:11:22:d7:10:70:9d:8a:21:51:52:45:8d:2b:1e:c3:ad:58: 4c:5a:3d:a3:1b:4c:80:83:fe:0c:cc:64:4e:a9:92:12:59:36: 36:78:82:c6:3a:f2:00:31:76:c3:a5:76:9a:f7:74:c0:fa:cc: b1:a2:6d:46:ce:8d:8d:77:08:91:ed:0f:0f:25:13:f0:bf:a4: ca:cd:5b:39:28:65:fc:d5:59:ec:35:b6:00:33:37:f1:0f:fc: 2f:37:70:a9:32:8b:fa:1b:ea:d7:1f:15:3c:2b:5f:01:ca:0a: 80:57:fd:45:6e:ab:ff:c6:31:e3:9b:25:39:73:15:92:76:87: 86:99:e2:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc1MUYxMTAvBgNVBAUTKDQ5N0E2OTk4MzQwOUFENzBDMjE3NTY0MDcxQ0NGNUJF MzRDNTFCQzcwHhcNMjUwNjI4MjM0MjMwWhcNMjUwNzA1MjM0MjMwWjAYMRYwFAYD VQQDEw02ODYwN2RlNi00NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRGYOzQsBRvwTRIlNETzlhvvdluxTTHnN8YVMCCfB11xQSKtK9cgdvZT8eD8 d0QIdwlN/GxQiefgi4FvVRYGARwaDo1dLCjoPHO6ZPhaFzbaHbZBWe9Xe/DX9UAs detNK9b9/hWmO6SGpxtzJ9kjiv9tV6uos3uXRw7YDnGAk7tRJKjNcSar1c00RMJa qGx/JpTgF+aw9adGEgjsgyg8Rik/Non8VVWJMHE7OCvGXH2UistJUYPFOxn/lKCY EujcI7a5yoZDFxgUxd7CctS4QrFMdLQaUkV1aHRCx67TNggnNbb1SPcAEGt3ktYc kJsrELdKC3s4NbBXfMlL4uFxxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFlUgzQ 2fYaf79dN3bMEyZuTCBFMB8GA1UdIwQYMBaAFEl6aZg0Ca1wwhdWQHHM9b40xRvH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzUxRi8xODM5ODFEMjUx ODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJYRENGMVpBY2N6MXZqVEZH OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYcHBtRFFKclhEQ0YxWkFjY3oxdmpURkc4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzUxRi8xODM5ODFEMjUxODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJY RENGMVpBY2N6MXZqVEZHOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaZq6qlub9eeofsrz5rm9zfwBgsMccKgwNATXczq+6HskQmp3SVuXq uiN8tOaiQcluhWrfeVTQf2ZuDUUrPFbELSzk3y/HXeWBcE3KSx8GoQQOh2Kv/lu+ yRy2JQjvusdD9sICX6NdzZdffFOuH/7iNU+jqxBgcetbMFm2zRRIESLXEHCdiiFR UkWNKx7DrVhMWj2jG0yAg/4MzGROqZISWTY2eILGOvIAMXbDpXaa93TA+syxom1G zo2NdwiR7Q8PJRPwv6TKzVs5KGX81VnsNbYAMzfxD/wvN3CpMov6G+rXHxU8K18B ygqAV/1Fbqv/xjHjmyU5cxWSdoeGmeLA -----END CERTIFICATE-----Generated at Sun Jun 29 20:14:36 2025 by rpki-client