$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json) Hash identifier: +4fmsE/odRKs4rChpR7woK6aG70gUX8s/NktCYleAok= Subject key identifier: 2D:1A:86:77:D7:1F:D3:35:A1:0A:7E:70:CA:C8:BE:F5:BE:71:EE:F6 Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft Manifest number: 014F Signing time: Sun 15 Jun 2025 03:52:46 +0000 Manifest this update: Sun 15 Jun 2025 03:52:46 +0000 Manifest next update: Sun 22 Jun 2025 03:52:46 +0000 Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: BZ8WGm6F6Igg0bkpLFixFkEyiXRKhxcJIfdPi0+mcX8=) 2: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: 28Pcqodr/XiyCXR1rm1sG8vgE+8OCqXnMRTKbKZwlik=) 3: CEB166C0E47D11EFAFC6496FC4F9AE02.roa (hash: DZtIXQ1ghN4hCYJ+ctwT88CELrMnqgkRwXBOtM2ymVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Jun 15 03:52:46 2025 GMT Not After : Jun 22 03:52:46 2025 GMT Subject: CN=684e438e-a7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:8f:76:2e:18:0d:6d:7b:9c:32:42:b8:4e: 97:82:a9:34:0b:09:ae:18:29:db:3d:ae:cf:25:8e: e3:e9:e5:17:b9:a0:37:2d:75:f2:3b:c7:f1:5c:99: 4a:94:3b:af:ae:8c:9a:d7:f5:52:32:21:50:bb:32: 97:23:7b:21:25:fe:28:b0:54:7d:b3:c9:30:7b:98: a9:fe:14:61:23:80:d9:5f:b5:cf:22:45:48:e6:4d: 38:0b:a7:6f:70:bb:dd:f5:df:39:bc:22:f0:3f:97: 39:b7:ac:49:b8:c1:81:cb:74:73:7f:51:ca:9a:0a: 6c:7b:4c:9e:79:f0:c5:fd:3c:86:7f:67:68:dc:a2: 8c:1a:1b:94:86:fb:cf:cf:71:04:fe:e5:95:62:b2: 83:61:a2:6c:d0:6c:db:82:11:9e:10:44:7b:b7:c7: 51:af:18:8e:1e:63:7e:3a:1b:e2:67:ac:d2:c4:61: ca:bf:ea:53:e7:e1:d1:99:ed:2e:f6:d5:6a:80:90: c0:1f:a3:dc:2e:67:bf:a1:9e:bc:4b:3b:d5:53:0a: 85:2e:7c:57:0c:c7:26:7f:19:6f:ad:07:86:ed:a0: eb:b4:1f:77:7e:08:01:f8:e9:0a:bb:19:f4:4f:99: 05:e4:84:b8:ff:d2:5b:63:0f:d1:82:56:22:06:96: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1A:86:77:D7:1F:D3:35:A1:0A:7E:70:CA:C8:BE:F5:BE:71:EE:F6 X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:74:d8:b1:cc:b5:4b:e1:f8:93:25:e4:b7:ff:58:8a:5f:7f: 06:2f:c9:7f:d2:70:80:59:de:3b:63:45:e8:1d:d0:c7:64:37: 2e:bf:82:1b:98:3f:b7:05:b8:91:5d:c7:80:5c:39:18:a7:60: 40:36:77:7e:7d:56:2e:f3:be:d9:b4:17:28:c9:83:a3:8f:11: fd:53:fc:7f:12:21:c4:d4:15:1d:c5:44:cf:4a:4b:19:e6:e2: 58:88:6c:31:d7:7f:e4:07:c4:29:ca:b7:0e:5a:81:ed:17:70: d7:a3:1e:d6:dd:b0:61:e8:4f:db:92:fe:54:44:09:31:02:fd: 8b:df:f0:da:3d:0c:25:0d:f9:8c:ab:6d:7c:07:62:e8:31:6f: 92:8c:95:be:66:3c:2d:15:43:78:1c:5e:ab:46:88:36:cd:07: d5:2a:f5:dc:27:4d:b6:0f:e2:ca:c7:df:a5:bf:ac:99:92:22: 46:5a:79:1b:c6:a7:1d:77:da:98:e9:62:98:98:4f:92:81:c5: 2a:77:94:20:c6:b5:ce:3c:7e:75:51:46:2c:54:29:6e:f0:f6: 9e:8c:19:0e:79:50:cd:22:fb:1e:7d:70:4b:7d:7c:f7:8c:0d: 44:65:09:bc:9e:78:fb:a3:2f:33:21:1b:91:9f:4d:32:ce:c9: bd:aa:cb:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjUwNjE1MDM1MjQ2WhcNMjUwNjIyMDM1MjQ2WjAYMRYwFAYD VQQDEw02ODRlNDM4ZS1hN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NuPdi4YDW17nDJCuE6Xgqk0CwmuGCnbPa7PJY7j6eUXuaA3LXXyO8fxXJlK lDuvroya1/VSMiFQuzKXI3shJf4osFR9s8kwe5ip/hRhI4DZX7XPIkVI5k04C6dv cLvd9d85vCLwP5c5t6xJuMGBy3Rzf1HKmgpse0yeefDF/TyGf2do3KKMGhuUhvvP z3EE/uWVYrKDYaJs0GzbghGeEER7t8dRrxiOHmN+OhviZ6zSxGHKv+pT5+HRme0u 9tVqgJDAH6PcLme/oZ68SzvVUwqFLnxXDMcmfxlvrQeG7aDrtB93fggB+OkKuxn0 T5kF5IS4/9JbYw/RglYiBpbCvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0ahnfX H9M1oQp+cMrIvvW+ce72MB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ TVFoQ3lWVmtCUmRUM3JBb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkdNixzLVL4fiTJeS3/1iKX38GL8l/0nCAWd47Y0XoHdDHZDcuv4Ib mD+3BbiRXceAXDkYp2BANnd+fVYu877ZtBcoyYOjjxH9U/x/EiHE1BUdxUTPSksZ 5uJYiGwx13/kB8QpyrcOWoHtF3DXox7W3bBh6E/bkv5URAkxAv2L3/DaPQwlDfmM q218B2LoMW+SjJW+ZjwtFUN4HF6rRog2zQfVKvXcJ022D+LKx9+lv6yZkiJGWnkb xqcdd9qY6WKYmE+SgcUqd5QgxrXOPH51UUYsVClu8PaejBkOeVDNIvsefXBLfXz3 jA1EZQm8nnj7oy8zIRuRn00yzsm9qssP -----END CERTIFICATE-----Generated at Sun Jun 15 08:50:01 2025 by rpki-client