$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: N/yXNebi9t7FQlGB+e18TCVYMrQ6RwB17EL7daQDojk= Subject key identifier: 51:7B:63:B0:08:E3:94:C0:6C:A2:B1:E1:C3:EE:AA:10:4D:DA:EF:76 Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 066D Signing time: Thu 12 Jun 2025 22:00:49 +0000 Manifest this update: Thu 12 Jun 2025 22:00:49 +0000 Manifest next update: Thu 19 Jun 2025 22:00:49 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: vWmNYe/nvCa5t9d6yFMScoPCr+O+wdXyxtz0DW7HOAo=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 6Kv6ZSL3MazMHrERvQ2sPcXYF/GKUnOfly5I2XW62pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Jun 12 22:00:49 2025 GMT Not After : Jun 19 22:00:49 2025 GMT Subject: CN=684b4e11-7c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:af:ce:a7:4b:2b:90:f2:4a:8b:cb:85:b6: a7:05:40:33:1a:c1:b2:c3:96:3e:50:18:2f:c3:7c: ce:cb:4a:5c:d3:7a:8e:ad:95:26:27:39:6b:31:e5: 24:a8:a8:ed:a4:d0:55:4f:c9:04:6c:5c:52:f8:37: a5:f5:8e:74:19:98:d0:80:93:1a:6a:62:af:ba:4a: bb:76:17:7e:1b:2c:9f:4d:2f:84:94:58:b0:70:9c: f2:75:4b:e8:1c:21:dd:14:9b:91:22:8a:37:c1:03: b5:2d:33:e2:e8:c5:78:86:99:97:20:6a:4c:a1:ac: eb:1f:c5:9c:2e:6e:8e:09:2d:dd:16:9b:49:5f:10: b1:69:8a:61:56:e5:10:e8:d2:1a:16:47:9b:9d:10: 2e:d6:f4:ff:93:a5:da:7c:88:f8:f3:73:47:df:ce: 87:c6:29:19:3c:fb:0a:ad:e8:d6:8f:a9:c2:59:8e: 0b:42:10:81:39:d0:b1:85:f3:68:cc:ca:fe:62:a7: 72:e4:86:62:1a:79:e2:f2:99:ab:cf:31:19:08:72: fb:0a:92:d0:48:79:f9:de:66:77:72:cc:73:43:54: 2f:c0:43:ba:0d:af:a7:36:ee:e1:8e:95:1f:3f:45: 3e:15:11:e8:4b:c9:c9:af:40:db:63:ac:8b:0f:3d: 57:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7B:63:B0:08:E3:94:C0:6C:A2:B1:E1:C3:EE:AA:10:4D:DA:EF:76 X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:4b:ae:9d:a5:47:42:b2:49:50:93:63:9f:19:7b:f9:21:73: 2d:57:71:a7:a0:26:ab:36:7f:a1:7d:06:ed:5d:fa:21:c8:af: 6b:de:f6:01:44:59:dd:1e:6a:c7:af:e7:58:1b:cc:e2:ef:82: c5:85:68:b6:41:58:92:d9:73:88:1c:82:61:15:f4:64:dc:13: 37:b1:ea:69:a9:a4:86:24:99:d2:4e:5e:a8:b9:8d:71:13:d0: a4:f4:a3:1f:9c:8c:9f:c2:72:16:bf:09:07:7b:9a:d9:51:eb: 0c:71:cc:f9:17:50:3e:26:1d:98:e4:da:68:b3:07:41:23:6c: fe:07:da:57:01:e9:4d:3f:92:09:a9:a8:87:64:9c:53:fb:cf: 78:f8:04:a6:de:e5:1b:fd:38:a5:65:fb:23:12:17:48:03:cf: 53:bf:e9:48:d0:1e:82:d7:5c:a8:9a:fe:54:ea:96:a0:dd:79: 59:13:48:ed:3f:ae:d3:42:f0:cb:2d:5d:f7:81:fd:d3:c4:e5: 03:64:eb:8d:48:a6:d8:7a:f2:3a:d0:52:0c:87:75:9d:80:3e: b2:dc:d4:6b:22:3c:0b:48:05:a9:13:68:a7:c7:db:fe:26:5e: 7a:ba:ad:52:4c:d4:7c:f3:52:a7:56:59:44:af:57:b6:57:ed: a4:4a:06:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjUwNjEyMjIwMDQ5WhcNMjUwNjE5MjIwMDQ5WjAYMRYwFAYD VQQDEw02ODRiNGUxMS03YzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PavzqdLK5DySovLhbanBUAzGsGyw5Y+UBgvw3zOy0pc03qOrZUmJzlrMeUk qKjtpNBVT8kEbFxS+Del9Y50GZjQgJMaamKvukq7dhd+GyyfTS+ElFiwcJzydUvo HCHdFJuRIoo3wQO1LTPi6MV4hpmXIGpMoazrH8WcLm6OCS3dFptJXxCxaYphVuUQ 6NIaFkebnRAu1vT/k6XafIj483NH386HxikZPPsKrejWj6nCWY4LQhCBOdCxhfNo zMr+Yqdy5IZiGnni8pmrzzEZCHL7CpLQSHn53mZ3csxzQ1QvwEO6Da+nNu7hjpUf P0U+FRHoS8nJr0DbY6yLDz1XHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF7Y7AI 45TAbKKx4cPuqhBN2u92MB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnS66dpUdCsklQk2OfGXv5IXMtV3GnoCarNn+hfQbtXfohyK9r3vYB RFndHmrHr+dYG8zi74LFhWi2QViS2XOIHIJhFfRk3BM3seppqaSGJJnSTl6ouY1x E9Ck9KMfnIyfwnIWvwkHe5rZUesMccz5F1A+Jh2Y5NposwdBI2z+B9pXAelNP5IJ qaiHZJxT+894+ASm3uUb/TilZfsjEhdIA89Tv+lI0B6C11yomv5U6pag3XlZE0jt P67TQvDLLV33gf3TxOUDZOuNSKbYevI60FIMh3WdgD6y3NRrIjwLSAWpE2inx9v+ Jl56uq1STNR881KnVllEr1e2V+2kSgZf -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:11 2025 by rpki-client