$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft File: SihlGpSsY59qsTJHTTHrDfzm3Hk.mft (raw, json) Hash identifier: CRytBHNph+7JwjAHWWZfwrrN2t/wlWgCVy9ZTl2cCB4= Subject key identifier: 21:FA:F7:C6:34:D4:B1:44:55:39:35:DD:7A:16:75:85:3F:2F:B3:D0 Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 Certificate issuer: /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79 Certificate serial: 04DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft Manifest number: 04CA Signing time: Wed 18 Jun 2025 23:40:05 +0000 Manifest this update: Wed 18 Jun 2025 23:40:04 +0000 Manifest next update: Wed 25 Jun 2025 23:40:04 +0000 Files and hashes: 1: SihlGpSsY59qsTJHTTHrDfzm3Hk.crl (hash: mc4DiEMi1gpYeYL4C+kw0ZX65FXOi+iITSxIOQ2iP3w=) 2: A64296622BAA11EC9618D864C4F9AE02.roa (hash: OMr4Dz07a9K+JRAHryD2B9Vl/J9RaoHPdVjAOTh62ZI=) 3: C420EBE06EC911EC8A5A940AC4F9AE02.roa (hash: t0Udbj/BMaf/sH0WctEk56jZ3TVW9akvyOH3KkeFZWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122373, serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79 Validity Not Before: Jun 18 23:40:04 2025 GMT Not After : Jun 25 23:40:04 2025 GMT Subject: CN=68534e55-40f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:25:8a:62:58:d3:8f:2e:b2:54:09:7d:3e: 12:15:38:a6:04:e9:ed:ab:61:76:88:82:e9:cd:69: f0:7f:7e:cd:5e:eb:d3:a9:52:91:b3:6d:71:38:1c: 65:5e:41:8c:27:e1:c8:d0:3a:70:e0:12:ac:ee:53: a3:d9:2c:a4:e4:36:25:fa:c8:a7:18:58:fa:7b:50: 43:8d:f3:79:e3:7b:48:24:06:e2:d6:27:d3:ed:50: 1b:c1:45:73:eb:ba:f6:5d:e4:a2:c2:d6:91:c6:80: b6:69:0a:72:4d:f4:5b:03:16:c0:be:d8:4a:6e:5f: 30:b5:65:0d:dd:29:be:df:a3:9f:29:cf:3d:d0:a4: 55:11:a2:6d:b1:ce:4e:f2:c7:dc:0b:9c:0d:5d:77: 9b:3b:c7:c2:ec:14:36:59:2d:a4:98:b3:bb:ef:2b: 65:ff:ba:69:27:4a:74:74:28:c0:e1:bc:89:9d:cd: 14:85:c4:de:43:59:e1:44:65:59:99:5a:6b:a4:a5: ff:f3:6a:07:f5:d8:04:a2:b8:d3:0d:68:51:4e:c3: d1:06:7d:44:03:4f:28:e8:1d:20:56:a3:fb:9d:f6: da:57:a2:c2:1e:9d:b4:c7:1f:ad:ec:8b:fd:75:d3: 8c:74:67:36:45:17:7a:8d:3f:ef:bc:8c:f7:ce:2e: fc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FA:F7:C6:34:D4:B1:44:55:39:35:DD:7A:16:75:85:3F:2F:B3:D0 X509v3 Authority Key Identifier: keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:34:f4:de:1b:4a:7d:63:98:89:4a:08:04:98:cc:ef:ac:dd: 93:7c:3b:03:15:c7:c1:f3:a7:be:cd:f6:ba:6e:e9:3b:d0:56: 2e:57:3b:92:8e:8b:63:5e:62:43:1c:31:66:76:18:68:e8:da: 7d:32:52:65:f2:14:4f:e2:bb:b7:04:16:9c:7e:0f:57:dd:18: ac:9e:f3:0a:29:16:96:77:0b:9a:46:27:c8:e9:3c:e1:be:d0: 6d:98:24:70:71:fc:32:d0:14:1f:69:ec:25:25:d2:ca:c7:2e: 29:e7:e7:47:32:68:02:08:94:4f:6e:35:1a:02:56:e7:51:89: 7a:bf:ee:33:f9:fa:63:10:7a:cd:7e:b1:44:51:36:35:fe:2c: 12:4d:80:2b:c2:a2:a7:27:49:68:31:73:9e:a6:40:11:ee:55: 09:11:ca:91:ee:d4:c7:38:e8:60:74:7f:7d:62:6d:8b:9b:1c: aa:c2:6e:55:e0:b4:ff:ef:a2:d1:0e:63:fd:ae:f8:a3:b4:a5: df:ea:92:c1:b2:8a:b2:e6:0d:22:12:b0:a3:4b:5c:98:28:27: ca:f4:f2:a5:d9:62:5a:1b:1a:2d:47:3d:84:4b:36:78:c1:73: 80:6b:15:47:4e:b1:62:7d:14:63:a9:e4:2d:e0:7f:8e:dd:7b: 76:79:b6:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIzNzMxMTAvBgNVBAUTKDRBMjg2NTFBOTRBQzYzOUY2QUIxMzI0NzREMzFFQjBE RkNFNkRDNzkwHhcNMjUwNjE4MjM0MDA0WhcNMjUwNjI1MjM0MDA0WjAYMRYwFAYD VQQDEw02ODUzNGU1NS00MGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTUlimJY048uslQJfT4SFTimBOntq2F2iILpzWnwf37NXuvTqVKRs21xOBxl XkGMJ+HI0Dpw4BKs7lOj2Syk5DYl+sinGFj6e1BDjfN543tIJAbi1ifT7VAbwUVz 67r2XeSiwtaRxoC2aQpyTfRbAxbAvthKbl8wtWUN3Sm+36OfKc890KRVEaJtsc5O 8sfcC5wNXXebO8fC7BQ2WS2kmLO77ytl/7ppJ0p0dCjA4byJnc0UhcTeQ1nhRGVZ mVprpKX/82oH9dgEorjTDWhRTsPRBn1EA08o6B0gVqP7nfbaV6LCHp20xx+t7Iv9 ddOMdGc2RRd6jT/vvIz3zi78AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCH698Y0 1LFEVTk13XoWdYU/L7PQMB8GA1UdIwQYMBaAFEooZRqUrGOfarEyR00x6w385tx5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM3My8yQzAwNkJCODJC MkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1OXFzVEpIVFRIckRmem0z SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpaGxHcFNzWTU5cXNUSkhUVEhyRGZ6bTNIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjM3My8yQzAwNkJCODJCMkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1 OXFzVEpIVFRIckRmem0zSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZNPTeG0p9Y5iJSggEmMzvrN2TfDsDFcfB86e+zfa6buk70FYuVzuS jotjXmJDHDFmdhho6Np9MlJl8hRP4ru3BBacfg9X3RisnvMKKRaWdwuaRifI6Tzh vtBtmCRwcfwy0BQfaewlJdLKxy4p5+dHMmgCCJRPbjUaAlbnUYl6v+4z+fpjEHrN frFEUTY1/iwSTYArwqKnJ0loMXOepkAR7lUJEcqR7tTHOOhgdH99Ym2Lmxyqwm5V 4LT/76LRDmP9rvijtKXf6pLBsoqy5g0iErCjS1yYKCfK9PKl2WJaGxotRz2ESzZ4 wXOAaxVHTrFifRRjqeQt4H+O3Xt2ebbI -----END CERTIFICATE-----Generated at Fri Jun 20 10:22:12 2025 by rpki-client