$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: q5Zf3bgVw4EpJRw5lH/S4Pvl2HNVG8waAMFepMKhY8E= Subject key identifier: 1B:36:50:26:1A:EB:47:DA:E9:5C:32:AF:6E:56:AD:18:8F:26:6A:12 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 07FC Signing time: Mon 30 Jun 2025 21:12:38 +0000 Manifest this update: Mon 30 Jun 2025 21:12:38 +0000 Manifest next update: Mon 07 Jul 2025 21:12:38 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: aJQ1EZOtwVsfDzXoiYfERrYJeIFXzPmJgYFL05Jo68I=) 2: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: wAmduclXNrZKRu8/pqGkayPdmVyxI/8+xrVLzFoQnO8=) 3: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: tNP9+2nzm8wftPIS9csYEXaUq+mqRmQ5CYwfV6WquDE=) 4: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 6ixsZ+U2NSefvVb36mPlfQcQ8GQSyjxzHzBxsc46ols=) 5: 67FF0960076911EF8569F157C4F9AE02.roa (hash: QiY4AYjpAOfJUKdo2bWSjao/45XX+9doU5egkrwqJ78=) 6: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: jw0xm0XxEdyeTKSbIjmLJq8kg/lPA+5yh93w4gEj5Qo=) 7: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: StO4PQ6ffihfvooMv19fGDjAg2vQbPTwXqeeTRzTihQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Jun 30 21:12:38 2025 GMT Not After : Jul 7 21:12:38 2025 GMT Subject: CN=6862fdc6-8ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:03:04:28:53:ff:87:86:9d:70:4e:03:57: 99:35:63:54:86:0f:5e:00:9a:9b:cc:95:ec:74:43: 44:a9:42:a5:09:c8:b1:fb:2c:cc:f9:98:97:d9:ea: 89:ba:aa:b1:59:69:fb:9d:0b:93:e6:f9:29:3f:20: d3:7a:a7:92:16:df:5c:9b:99:08:21:d7:90:12:8e: 1f:4c:77:c7:dd:f4:c8:f4:68:c2:32:cc:1b:35:21: 83:57:ad:26:7d:13:f5:66:0f:cf:95:5e:a2:b7:84: 69:02:35:3d:06:d4:4b:6e:2a:a9:e9:a5:7a:7d:72: 0f:aa:46:bb:5c:fd:9a:6e:07:a1:cb:a0:31:6f:3a: 1a:ed:d3:2c:51:66:b2:cf:a8:fb:a8:5b:30:6c:18: 0d:07:fc:8e:57:d5:e8:de:ce:d6:1e:8e:cd:8c:80: ff:58:28:25:1e:95:9c:2f:19:51:15:8c:d5:3d:cf: 07:4b:91:6b:a9:d9:23:a3:7c:c1:9a:28:dc:d6:79: ea:f5:bb:e8:6b:82:cf:3b:30:8a:5e:a3:e0:6b:28: e4:a7:64:9f:78:47:8e:11:32:9b:32:f2:43:7b:d3: 01:c6:bf:20:0f:f4:33:f3:c7:ad:f6:55:c8:38:60: f3:a9:5c:dc:29:e7:68:dd:90:a1:0b:51:0e:99:80: b6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:36:50:26:1A:EB:47:DA:E9:5C:32:AF:6E:56:AD:18:8F:26:6A:12 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:71:18:60:8a:bd:5e:1c:83:ff:17:9a:6b:48:b2:62:04:a7: 61:f8:cf:89:81:69:4a:76:f8:61:11:9a:e2:1c:e1:14:a0:b8: 65:ad:e1:f3:5c:0f:bb:7c:5d:04:d4:e7:1c:ff:86:06:b4:a7: 56:4e:1c:50:67:ea:74:aa:21:26:12:74:33:3c:68:d0:9c:d8: 99:6d:c1:a7:ac:1b:56:cc:8e:56:60:2c:fc:c7:2b:ba:a4:0e: d2:52:e9:4d:30:07:ff:48:88:f8:e8:b1:a7:9d:87:20:fc:11: 1c:14:f6:78:cb:b5:c6:5b:fa:a5:ad:2a:8f:21:27:ee:74:8f: 90:43:3c:45:76:0e:0b:c7:01:63:33:b1:20:fb:b8:32:f6:77: 54:2e:e1:72:13:b8:76:46:6c:48:61:0c:49:c4:75:93:56:8c: 62:6b:45:e8:68:bc:d2:f8:9c:81:cb:73:fb:70:22:ee:8a:4d: 65:d9:7f:1d:b4:ff:f6:04:43:30:aa:1f:6c:dc:09:30:61:30: 74:d3:17:6d:1b:c8:6e:21:2c:26:87:df:e2:f7:6c:0c:1f:dc: 67:fd:a7:72:e8:e9:1e:cc:76:d9:82:5a:91:b3:9f:09:cc:2b: 68:0d:36:d7:25:13:a2:4f:80:eb:75:32:5c:2f:24:cd:9a:12: 10:15:80:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjUwNjMwMjExMjM4WhcNMjUwNzA3MjExMjM4WjAYMRYwFAYD VQQDEw02ODYyZmRjNi04ZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqYDBChT/4eGnXBOA1eZNWNUhg9eAJqbzJXsdENEqUKlCcix+yzM+ZiX2eqJ uqqxWWn7nQuT5vkpPyDTeqeSFt9cm5kIIdeQEo4fTHfH3fTI9GjCMswbNSGDV60m fRP1Zg/PlV6it4RpAjU9BtRLbiqp6aV6fXIPqka7XP2abgehy6Axbzoa7dMsUWay z6j7qFswbBgNB/yOV9Xo3s7WHo7NjID/WCglHpWcLxlRFYzVPc8HS5Frqdkjo3zB mijc1nnq9bvoa4LPOzCKXqPgayjkp2SfeEeOETKbMvJDe9MBxr8gD/Qz88et9lXI OGDzqVzcKedo3ZChC1EOmYC2kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBs2UCYa 60fa6Vwyr25WrRiPJmoSMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4cRhgir1eHIP/F5prSLJiBKdh+M+JgWlKdvhhEZriHOEUoLhlreHz XA+7fF0E1Occ/4YGtKdWThxQZ+p0qiEmEnQzPGjQnNiZbcGnrBtWzI5WYCz8xyu6 pA7SUulNMAf/SIj46LGnnYcg/BEcFPZ4y7XGW/qlrSqPISfudI+QQzxFdg4LxwFj M7Eg+7gy9ndULuFyE7h2RmxIYQxJxHWTVoxia0XoaLzS+JyBy3P7cCLuik1l2X8d tP/2BEMwqh9s3AkwYTB00xdtG8huISwmh9/i92wMH9xn/ady6OkezHbZglqRs58J zCtoDTbXJROiT4DrdTJcLyTNmhIQFYCg -----END CERTIFICATE-----Generated at Tue Jul 1 18:38:13 2025 by rpki-client