$ rpki-client -vvf rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft File: sc_l-mpxIskE6xEO8agpgPw9-ko.mft (raw, json) Hash identifier: AILXsuUc+BdKAE6S80SXzqGzk+eFOp6YwSJb0Lkjxks= Subject key identifier: CE:95:51:50:CA:E4:FB:8D:39:05:AE:74:28:C9:CF:48:7D:28:30:B1 Authority key identifier: B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A Certificate issuer: /CN=A91E75B7/serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft Manifest number: 068C Signing time: Sat 28 Jun 2025 21:51:15 +0000 Manifest this update: Sat 28 Jun 2025 21:51:14 +0000 Manifest next update: Sat 05 Jul 2025 21:51:14 +0000 Files and hashes: 1: sc_l-mpxIskE6xEO8agpgPw9-ko.crl (hash: ECaFFIKsRUdWkQgkLY5TBVDZisBEpTwEp7gSEbFgfdE=) 2: AD0B0E5E762711EBBD5D544FC4F9AE02.roa (hash: sRmBeQkX3ZH6lPD83kjqFke2bsVl1aLInDxD3kBzJvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E75B7, serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A Validity Not Before: Jun 28 21:51:14 2025 GMT Not After : Jul 5 21:51:14 2025 GMT Subject: CN=686063d2-7f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e4:68:e2:39:b2:43:e9:eb:3a:61:a2:c4:22: 71:f1:dd:41:e4:49:f2:9d:85:9d:74:2c:c3:37:ae: 0f:14:f1:95:ba:88:1c:10:0b:b7:06:b9:5d:5f:3d: be:6b:74:3d:1d:c6:82:6d:71:f8:d5:db:7f:a7:25: 6e:4d:17:f1:fc:24:53:1f:2b:d6:5f:8e:35:ac:52: af:71:96:6f:dd:7e:12:4e:03:b9:f9:89:c4:a9:4b: b7:a2:f3:46:af:db:e2:1f:be:1b:ba:e6:ae:12:fa: 51:d1:e1:c8:0e:8d:c6:8c:c7:93:dd:4c:04:8b:2f: 6f:80:55:66:e8:10:af:dc:f2:8b:48:2c:84:d9:d4: 27:12:13:26:a0:4a:75:a8:3e:b4:83:d6:1f:9d:e9: f1:31:30:19:a4:68:f9:ad:46:a2:4a:16:7c:a7:dc: 44:58:d6:35:66:67:9a:e9:3b:6b:37:78:2a:c6:24: fc:c7:35:1c:b2:ed:8f:af:6a:8e:bc:14:fa:a0:ab: 4f:d3:29:2c:91:06:53:96:6f:27:e8:86:bb:fd:7d: d3:f7:19:c6:65:4a:0c:82:dc:f0:74:4c:8d:36:01: fc:23:87:00:d9:7f:a0:32:fc:03:c7:d2:25:1a:94: a7:b7:80:5a:c5:cf:41:cc:e1:6f:43:a7:80:c0:8a: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:95:51:50:CA:E4:FB:8D:39:05:AE:74:28:C9:CF:48:7D:28:30:B1 X509v3 Authority Key Identifier: keyid:B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:72:dd:59:84:d5:bb:3c:82:23:70:39:da:2e:27:25:76:a5: e0:c4:80:a4:10:19:27:17:47:89:47:51:7c:76:3e:3b:8e:0f: 16:53:c9:99:dc:e6:9e:29:03:c4:1a:93:f9:43:db:11:f5:73: ce:ac:88:4e:6a:9a:55:25:3f:bc:3a:f6:62:3c:5e:d7:74:47: 10:66:ae:f6:e5:06:9b:f9:d7:5e:16:61:85:d8:16:95:a7:2e: 9b:78:40:14:4f:31:c7:c2:e5:9b:80:a2:ce:5c:b1:50:64:e8: 37:00:c0:97:66:ba:c5:e4:d7:1b:cd:4a:ad:88:c7:0b:2e:2e: f5:4e:65:e3:35:ec:b1:ce:ab:ed:9c:bf:2d:e3:90:eb:aa:34: 68:14:90:11:5f:41:50:66:d1:3e:8a:8f:1c:48:c1:8f:cf:bb: 18:24:9e:a4:89:26:f3:f8:4c:de:05:48:72:af:03:e6:ff:f3: 38:47:9f:9e:01:2e:5f:cf:70:ff:17:41:ce:5a:b8:c0:c8:a2: 99:95:57:3e:5f:fc:11:a5:6b:8f:8a:be:6d:c5:fc:5c:c7:d5: 51:68:df:79:b5:50:b4:a8:da:a9:b4:c0:21:86:c4:59:2c:cd: de:58:96:30:1d:c6:9f:04:f2:60:0f:93:02:39:43:be:c2:60: 4f:0b:09:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1QjcxMTAvBgNVBAUTKEIxQ0ZFNUZBNkE3MTIyQzkwNEVCMTEwRUYxQTgyOTgw RkMzREZBNEEwHhcNMjUwNjI4MjE1MTE0WhcNMjUwNzA1MjE1MTE0WjAYMRYwFAYD VQQDEw02ODYwNjNkMi03ZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6eRo4jmyQ+nrOmGixCJx8d1B5EnynYWddCzDN64PFPGVuogcEAu3BrldXz2+ a3Q9HcaCbXH41dt/pyVuTRfx/CRTHyvWX441rFKvcZZv3X4STgO5+YnEqUu3ovNG r9viH74buuauEvpR0eHIDo3GjMeT3UwEiy9vgFVm6BCv3PKLSCyE2dQnEhMmoEp1 qD60g9YfnenxMTAZpGj5rUaiShZ8p9xEWNY1Zmea6TtrN3gqxiT8xzUcsu2Pr2qO vBT6oKtP0ykskQZTlm8n6Ia7/X3T9xnGZUoMgtzwdEyNNgH8I4cA2X+gMvwDx9Il GpSnt4Baxc9BzOFvQ6eAwIr0bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6VUVDK 5PuNOQWudCjJz0h9KDCxMB8GA1UdIwQYMBaAFLHP5fpqcSLJBOsRDvGoKYD8PfpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzVCNy83RkVENUUxRTc2 MjYxMUVCOERGQ0UwNEVDNEY5QUUwMi9zY19sLW1weElza0U2eEVPOGFncGdQdzkt a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjX2wtbXB4SXNrRTZ4RU84YWdwZ1B3OS1rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzVCNy83RkVENUUxRTc2MjYxMUVCOERGQ0UwNEVDNEY5QUUwMi9zY19sLW1weElz a0U2eEVPOGFncGdQdzkta28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsct1ZhNW7PIIjcDnaLicldqXgxICkEBknF0eJR1F8dj47jg8WU8mZ 3OaeKQPEGpP5Q9sR9XPOrIhOappVJT+8OvZiPF7XdEcQZq725Qab+ddeFmGF2BaV py6beEAUTzHHwuWbgKLOXLFQZOg3AMCXZrrF5NcbzUqtiMcLLi71TmXjNeyxzqvt nL8t45DrqjRoFJARX0FQZtE+io8cSMGPz7sYJJ6kiSbz+EzeBUhyrwPm//M4R5+e AS5fz3D/F0HOWrjAyKKZlVc+X/wRpWuPir5txfxcx9VRaN95tVC0qNqptMAhhsRZ LM3eWJYwHcafBPJgD5MCOUO+wmBPCwkK -----END CERTIFICATE-----Generated at Sun Jun 29 18:19:35 2025 by rpki-client