$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: 3BzheEl8gMbWqemQt2XgpHctBnJmfR/eUfGNfDWYqa8= Subject key identifier: EA:50:B0:2F:06:73:7D:45:7B:45:21:CA:04:C2:73:A4:7F:1A:68:4D Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 047B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 0474 Signing time: Thu 03 Jul 2025 00:27:07 +0000 Manifest this update: Thu 03 Jul 2025 00:27:07 +0000 Manifest next update: Thu 10 Jul 2025 00:27:07 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: W2WRz6DKOQCjeIhjC548yq8FCuBim+s6eipCFzuN4cs=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: P2DNiNhjlpF64BsKz4nEdQOFVD1WxrPx8iOejuhEZGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147 (0x47b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: Jul 3 00:27:07 2025 GMT Not After : Jul 10 00:27:07 2025 GMT Subject: CN=6865ce5b-912b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e4:ed:54:cf:e9:9c:35:08:bc:89:36:d9:b8: 86:38:6e:17:ea:06:ee:35:e6:3b:43:81:c5:4a:09: 26:98:2c:de:96:68:ff:c4:6d:ec:de:f5:bc:50:be: 1a:ea:b6:e7:51:ff:dc:05:64:cb:5e:de:df:66:2a: 67:09:8b:69:ed:a1:9a:2e:51:43:3b:a9:d3:ae:62: dd:17:5f:75:bb:47:c6:80:cc:05:e6:e3:93:3e:ff: d1:e4:15:a3:89:a8:d9:fb:4d:ec:54:d5:c3:95:1f: 51:54:74:94:b0:8f:06:6c:4a:a7:dc:54:a6:e0:13: fc:5d:41:2d:fd:bd:01:39:53:60:ae:82:31:56:35: 9e:38:30:a0:8c:a9:a6:6a:d4:88:ec:e3:97:5b:fb: 17:9d:46:59:86:16:aa:09:fe:2c:12:2f:15:6e:6d: f0:7a:64:98:e3:cc:a3:b6:d3:1f:d3:8f:4e:86:aa: 2e:fe:f2:92:01:db:3b:dd:76:64:7d:1b:04:90:2f: bf:43:0d:05:13:48:83:54:cc:38:9f:c2:d1:de:7e: e2:17:99:34:22:4f:fc:a5:38:44:d0:11:4e:7e:8b: 24:b0:83:cc:f2:87:76:2c:3b:53:18:8f:0e:4f:4b: 23:72:b9:42:57:ae:7d:b0:a8:8d:aa:37:55:f9:0a: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:50:B0:2F:06:73:7D:45:7B:45:21:CA:04:C2:73:A4:7F:1A:68:4D X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:11:4c:bf:01:ee:0e:de:4b:60:05:72:dd:80:97:bf:35:48: e1:10:fc:49:98:a9:99:91:bd:44:cd:dc:7e:58:6d:96:a2:78: f6:5b:2a:a0:da:3b:7f:4f:bb:5d:52:34:70:99:83:d5:c6:e2: 61:4e:5a:f4:b9:bc:4b:bb:9e:75:ac:81:85:d1:b4:94:16:63: 00:9d:13:01:b1:35:e0:15:2b:df:9b:6e:a4:39:cf:2b:3e:45: 35:37:2a:3d:86:c8:b8:5e:0e:c5:31:84:62:2e:c1:ee:9d:b8: 5d:cd:7a:4b:6f:ce:fa:b8:cd:b5:a1:38:a9:1c:58:04:ea:7f: 2a:1b:82:4a:50:f8:16:1d:01:e5:07:e4:99:2f:bc:29:34:b1: 54:a9:cd:b4:25:8b:89:c7:bc:ae:f0:3c:9b:11:ee:77:4d:6f: 42:64:c4:36:8d:92:37:fc:f6:28:b4:2f:b1:c5:e0:cb:d3:e5: f5:45:00:95:df:39:74:f4:4c:df:c0:c4:1e:1b:e6:82:dc:ea: 24:9a:60:ce:00:e4:43:4e:5f:f5:8c:ba:2c:ac:37:30:61:a1: c9:26:87:ea:23:f3:53:5d:f5:e4:68:42:52:1c:f7:50:ae:11: 60:83:fa:c2:d1:f0:61:70:a2:ab:42:36:71:ce:ce:aa:9a:90: 2e:86:5b:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjUwNzAzMDAyNzA3WhcNMjUwNzEwMDAyNzA3WjAYMRYwFAYD VQQDEw02ODY1Y2U1Yi05MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OTtVM/pnDUIvIk22biGOG4X6gbuNeY7Q4HFSgkmmCzelmj/xG3s3vW8UL4a 6rbnUf/cBWTLXt7fZipnCYtp7aGaLlFDO6nTrmLdF191u0fGgMwF5uOTPv/R5BWj iajZ+03sVNXDlR9RVHSUsI8GbEqn3FSm4BP8XUEt/b0BOVNgroIxVjWeODCgjKmm atSI7OOXW/sXnUZZhhaqCf4sEi8Vbm3wemSY48yjttMf049Ohqou/vKSAds73XZk fRsEkC+/Qw0FE0iDVMw4n8LR3n7iF5k0Ik/8pThE0BFOfosksIPM8od2LDtTGI8O T0sjcrlCV659sKiNqjdV+QoTMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpQsC8G c31Fe0UhygTCc6R/GmhNMB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrEUy/Ae4O3ktgBXLdgJe/NUjhEPxJmKmZkb1Ezdx+WG2Wonj2Wyqg 2jt/T7tdUjRwmYPVxuJhTlr0ubxLu551rIGF0bSUFmMAnRMBsTXgFSvfm26kOc8r PkU1Nyo9hsi4Xg7FMYRiLsHunbhdzXpLb876uM21oTipHFgE6n8qG4JKUPgWHQHl B+SZL7wpNLFUqc20JYuJx7yu8DybEe53TW9CZMQ2jZI3/PYotC+xxeDL0+X1RQCV 3zl09EzfwMQeG+aC3OokmmDOAORDTl/1jLosrDcwYaHJJofqI/NTXfXkaEJSHPdQ rhFgg/rC0fBhcKKrQjZxzs6qmpAuhltY -----END CERTIFICATE-----Generated at Thu Jul 3 09:49:21 2025 by rpki-client