$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json) Hash identifier: IoFk4fPjrslV8MHW7JgFNVYIfL++LUV58SDPEuv0r58= Subject key identifier: 9D:E3:8A:B4:2D:34:79:B0:16:75:20:97:F4:29:7A:73:D3:01:F1:61 Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft Manifest number: 0271 Signing time: Tue 01 Jul 2025 02:25:56 +0000 Manifest this update: Tue 01 Jul 2025 02:25:55 +0000 Manifest next update: Tue 08 Jul 2025 02:25:55 +0000 Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: q7z80NLOCjrgOXLN/wrXwWNa0vBM+kdn3x92dIQomlA=) 2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Validity Not Before: Jul 1 02:25:55 2025 GMT Not After : Jul 8 02:25:55 2025 GMT Subject: CN=68634734-c9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:eb:0e:6c:63:76:d4:6f:88:4b:38:e2:28: 8a:16:26:55:dc:0c:22:d0:49:24:6f:8a:d9:e3:c7: e9:b0:d1:f9:3f:fe:09:c9:61:93:25:5b:16:50:19: b0:97:7f:7a:26:08:ad:56:25:d4:82:80:1c:dc:a9: 95:b9:8c:fc:65:36:49:b5:aa:45:84:bc:1a:f1:05: 8e:bc:73:ce:4e:05:20:d6:1f:d6:d1:50:2c:86:99: eb:32:ba:74:92:fe:d1:49:47:25:7a:fc:ee:ea:c0: 9c:fb:3d:a3:8a:ee:cf:28:16:13:9a:1a:e5:81:61: 93:3c:00:97:74:e0:73:17:7c:86:9c:2f:c9:ce:e7: 2e:4a:f1:9a:4b:a5:68:4e:72:b2:52:a5:ec:36:73: bd:9d:c1:a7:50:2b:83:74:21:87:1d:97:3a:8e:28: fe:dd:43:a7:f6:d6:ff:13:c9:3d:3c:e0:f1:00:f7: 0d:49:75:f3:4b:2f:f3:4f:35:b7:8c:a1:78:40:49: 48:dd:10:ac:76:f2:ab:59:a2:af:b2:44:a7:ef:7a: 58:6e:bc:2a:dd:dc:b2:ca:fe:a9:95:dd:47:24:6c: c1:dc:84:63:49:4d:60:44:9f:74:0f:9b:9b:26:98: cc:15:6c:68:b5:b6:3c:89:df:be:ab:e5:da:e9:b9: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E3:8A:B4:2D:34:79:B0:16:75:20:97:F4:29:7A:73:D3:01:F1:61 X509v3 Authority Key Identifier: keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c1:3a:35:11:b2:5b:7f:c8:82:83:e4:01:99:d5:7a:20:d2: 52:94:34:b1:34:a4:45:ee:fb:bd:6e:a6:3e:eb:d5:26:34:5a: e8:ea:cb:c0:01:1a:0c:ce:27:25:93:23:72:4a:e3:5d:d9:a9: 18:d9:8b:c4:6e:95:0a:9e:95:aa:c8:db:1f:e2:5e:99:65:46: f7:eb:9f:64:07:61:eb:6e:bd:69:fc:cd:c4:f1:3d:1c:bc:c8: 44:02:ae:41:28:54:c8:12:8b:8f:e0:fe:af:40:fc:eb:74:c2: ac:21:4e:03:bd:69:8b:9d:ab:e3:6a:48:f0:14:3c:da:c7:94: d2:7b:93:3e:6c:22:24:d9:bc:cc:0e:21:b8:7e:4a:5c:7f:6f: 8f:16:e2:b3:01:cf:bd:4d:53:4e:16:4b:52:ce:19:98:04:ca: 3d:14:a7:65:10:36:06:d7:dc:48:65:9b:05:e3:d0:e4:01:c8: b0:19:38:05:e3:8a:a3:d2:c5:db:30:dd:c2:ba:14:27:49:1c: db:33:f7:8c:9d:e8:7c:fb:f3:94:a8:90:08:2e:4c:87:87:0b: 54:c0:20:7f:30:11:ec:4e:4a:8d:24:ab:43:52:43:6c:b3:86: 53:47:7c:65:3b:9f:5b:c5:79:03:48:44:5b:7c:5b:bd:e3:f4: e6:bb:df:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz QjIyMDE4OUQwHhcNMjUwNzAxMDIyNTU1WhcNMjUwNzA4MDIyNTU1WjAYMRYwFAYD VQQDEw02ODYzNDczNC1jOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxazrDmxjdtRviEs44iiKFiZV3Awi0Ekkb4rZ48fpsNH5P/4JyWGTJVsWUBmw l396JgitViXUgoAc3KmVuYz8ZTZJtapFhLwa8QWOvHPOTgUg1h/W0VAshpnrMrp0 kv7RSUclevzu6sCc+z2jiu7PKBYTmhrlgWGTPACXdOBzF3yGnC/JzucuSvGaS6Vo TnKyUqXsNnO9ncGnUCuDdCGHHZc6jij+3UOn9tb/E8k9PODxAPcNSXXzSy/zTzW3 jKF4QElI3RCsdvKrWaKvskSn73pYbrwq3dyyyv6pld1HJGzB3IRjSU1gRJ90D5ub JpjMFWxotbY8id++q+Xa6bnvzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3jirQt NHmwFnUgl/QpenPTAfFhMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2 QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/wTo1EbJbf8iCg+QBmdV6INJSlDSxNKRF7vu9bqY+69UmNFro6svA ARoMziclkyNySuNd2akY2YvEbpUKnpWqyNsf4l6ZZUb3659kB2Hrbr1p/M3E8T0c vMhEAq5BKFTIEouP4P6vQPzrdMKsIU4DvWmLnavjakjwFDzax5TSe5M+bCIk2bzM DiG4fkpcf2+PFuKzAc+9TVNOFktSzhmYBMo9FKdlEDYG19xIZZsF49DkAciwGTgF 44qj0sXbMN3CuhQnSRzbM/eMneh8+/OUqJAILkyHhwtUwCB/MBHsTkqNJKtDUkNs s4ZTR3xlO59bxXkDSERbfFu94/Tmu9+4 -----END CERTIFICATE-----Generated at Wed Jul 2 23:23:31 2025 by rpki-client