$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft File: sUCvBJGbRROCWm6lfhq55UN548g.mft (raw, json) Hash identifier: cf3E4AM+zRCDZMb1yq/uD7OBsm74pSGddhtr4RMEiD4= Subject key identifier: FC:AC:84:EA:61:C0:D2:04:CD:24:CF:E9:29:C3:93:0B:2A:58:00:7F Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 Certificate issuer: /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft Manifest number: 0B37 Signing time: Thu 12 Jun 2025 18:58:07 +0000 Manifest this update: Thu 12 Jun 2025 18:58:07 +0000 Manifest next update: Thu 19 Jun 2025 18:58:07 +0000 Files and hashes: 1: sUCvBJGbRROCWm6lfhq55UN548g.crl (hash: p+h1Mewc/PJvHpIhX9PXW1y8JKZ8VkMzab363FLC2A8=) 2: B6EF8F5E3A9011EA957A6A34C4F9AE02.roa (hash: MMg6miblGYwiWs8actEKJcMi2SqNBUoJuKwgQQDzl38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EBFD, serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Validity Not Before: Jun 12 18:58:07 2025 GMT Not After : Jun 19 18:58:07 2025 GMT Subject: CN=684b233f-d107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:56:28:ee:3f:ee:7d:44:0a:d4:ca:88:62:e2: 11:b4:50:d0:4b:88:66:fa:86:21:7b:1e:06:36:2e: 1a:34:a5:86:ff:39:e4:b1:5c:62:cd:aa:14:86:15: a1:2c:bb:a0:23:4f:0d:86:25:30:89:2e:ad:38:2f: a4:d9:fc:a4:46:39:99:82:6a:ee:da:39:bd:4e:80: 39:1a:89:08:ba:7b:01:5d:64:c0:b3:0f:42:96:9e: f8:ce:94:8c:fe:a1:7b:11:db:57:42:ac:03:59:0c: 55:71:f9:13:35:70:ee:22:6d:34:f3:64:41:86:51: 26:84:33:9b:c4:c5:3d:bc:27:51:67:af:b8:9b:33: ad:09:c6:f8:40:80:d0:df:9c:cf:0d:aa:51:75:d3: 18:b1:fa:54:97:b9:46:f6:b3:d4:22:a2:92:47:b6: 33:65:40:e5:01:a6:b9:bd:db:af:ea:0a:e0:52:50: c1:d6:59:80:c7:09:cf:7a:b7:3d:c9:4e:6b:9a:8f: 37:51:1c:3a:a7:4b:86:d5:6d:c8:fe:5b:83:7f:56: d7:e6:13:a6:45:41:24:15:eb:79:11:37:aa:b0:2f: 4e:24:a3:5f:f5:3a:28:0b:24:1a:4c:f3:a3:74:00: bd:ce:ed:0c:15:26:5f:a4:35:b1:f8:27:3a:4b:88: 14:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AC:84:EA:61:C0:D2:04:CD:24:CF:E9:29:C3:93:0B:2A:58:00:7F X509v3 Authority Key Identifier: keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:83:16:24:3b:6e:37:e4:19:92:d7:49:2b:a8:bb:11:f8:70: 85:cb:71:57:36:41:e1:0c:bf:a1:e5:f3:bc:ff:ae:45:80:4a: 37:c6:7e:b4:fc:3d:de:bf:5b:bc:e7:b7:6b:22:b6:f4:c9:2d: 89:7b:03:3b:96:07:07:4f:80:72:0b:0c:81:8a:12:d6:b1:cc: c5:e7:70:fe:f6:d1:94:02:c3:b5:b5:75:e8:fc:33:27:9c:d1: cd:4f:9a:1e:40:51:ce:c8:62:bc:07:97:43:e0:bf:b7:62:8b: fc:24:a8:00:25:ca:87:55:c6:a5:57:2f:71:58:e4:4b:0a:a7: e0:66:98:69:8b:5d:7a:3f:a2:53:0a:b4:09:3b:09:71:09:da: b6:be:41:af:f5:fc:e2:b3:bb:4e:d9:9a:74:ab:70:eb:31:56: bb:86:04:5c:65:02:15:17:ea:63:b7:c3:06:6d:c5:68:1f:c1: 19:ed:48:3a:08:1f:0e:9b:12:45:94:e8:13:24:fa:0b:6b:59: 89:7c:bc:ad:c9:eb:f3:03:98:f7:62:81:86:66:35:0e:7f:44: 8c:ca:cc:df:cd:1f:59:11:90:55:fb:e9:bd:47:03:de:e3:57: c5:f0:5b:2d:97:f0:a4:51:69:77:dc:91:aa:b0:8a:1b:ac:6f: a4:8e:3f:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VCRkQxMTAvBgNVBAUTKEIxNDBBRjA0OTE5QjQ1MTM4MjVBNkVBNTdFMUFCOUU1 NDM3OUUzQzgwHhcNMjUwNjEyMTg1ODA3WhcNMjUwNjE5MTg1ODA3WjAYMRYwFAYD VQQDEw02ODRiMjMzZi1kMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VYo7j/ufUQK1MqIYuIRtFDQS4hm+oYhex4GNi4aNKWG/znksVxizaoUhhWh LLugI08NhiUwiS6tOC+k2fykRjmZgmru2jm9ToA5GokIunsBXWTAsw9Clp74zpSM /qF7EdtXQqwDWQxVcfkTNXDuIm0082RBhlEmhDObxMU9vCdRZ6+4mzOtCcb4QIDQ 35zPDapRddMYsfpUl7lG9rPUIqKSR7YzZUDlAaa5vduv6grgUlDB1lmAxwnPerc9 yU5rmo83URw6p0uG1W3I/luDf1bX5hOmRUEkFet5ETeqsC9OJKNf9TooCyQaTPOj dAC9zu0MFSZfpDWx+Cc6S4gU1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyshOph wNIEzSTP6SnDkwsqWAB/MB8GA1UdIwQYMBaAFLFArwSRm0UTglpupX4aueVDeePI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUJGRC9GN0NFNjI5QTNB OEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJST0NXbTZsZmhxNTVVTjU0 OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQ3ZCSkdiUlJPQ1dtNmxmaHE1NVVONTQ4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUJGRC9GN0NFNjI5QTNBOEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJS T0NXbTZsZmhxNTVVTjU0OGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUgxYkO2435BmS10krqLsR+HCFy3FXNkHhDL+h5fO8/65FgEo3xn60 /D3ev1u857drIrb0yS2JewM7lgcHT4ByCwyBihLWsczF53D+9tGUAsO1tXXo/DMn nNHNT5oeQFHOyGK8B5dD4L+3Yov8JKgAJcqHVcalVy9xWORLCqfgZphpi116P6JT CrQJOwlxCdq2vkGv9fzis7tO2Zp0q3DrMVa7hgRcZQIVF+pjt8MGbcVoH8EZ7Ug6 CB8OmxJFlOgTJPoLa1mJfLytyevzA5j3YoGGZjUOf0SMyszfzR9ZEZBV++m9RwPe 41fF8Fstl/CkUWl33JGqsIobrG+kjj9C -----END CERTIFICATE-----Generated at Sat Jun 14 19:03:43 2025 by rpki-client