$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft File: sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json) Hash identifier: lHvrumf9MzzTMJJiOS0lgMiZzrxN/8rjoYaDBHYStnw= Subject key identifier: 85:0D:FA:FC:52:ED:96:6C:26:72:59:77:B9:06:0C:15:A0:DC:6F:7D Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD Certificate issuer: /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft Manifest number: 68 Signing time: Fri 13 Jun 2025 05:54:05 +0000 Manifest this update: Fri 13 Jun 2025 05:54:04 +0000 Manifest next update: Fri 20 Jun 2025 05:54:04 +0000 Files and hashes: 1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: XDe4Br+jwhwIoXbSQDKfqyEm3wXbcIshQWxHKBWmKbE=) 2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: KPgMUtF2z6om6dSm7+mB/ufWiwTV8TpJVcH2+or0fgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Validity Not Before: Jun 13 05:54:04 2025 GMT Not After : Jun 20 05:54:04 2025 GMT Subject: CN=684bbcfc-6199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:be:ef:4b:8c:9b:b8:c8:2d:3c:96:54:d9: f6:08:3c:9b:53:8a:29:87:a4:97:8c:7e:8d:95:d7: 77:50:56:b2:25:75:8f:dc:11:99:9d:1f:c4:24:76: 12:46:49:b7:8c:8f:c0:e9:99:14:bb:8e:25:57:d0: 7c:f4:3c:35:92:00:8a:d6:06:df:06:a1:fc:be:c2: e1:63:da:0a:7a:be:3f:5e:38:ee:fb:8d:e8:87:b5: d5:c3:26:4e:ef:6c:c7:85:6c:ca:cc:32:c7:32:25: 28:c5:81:31:c9:f6:9c:db:a7:8e:4e:41:3a:cf:5b: 4b:af:a0:5a:94:07:7b:d2:82:de:aa:57:ae:86:f6: 79:96:16:cb:24:d4:b0:cb:8b:04:96:20:73:a5:a1: 17:c2:26:a1:21:8e:8d:f4:0f:16:1c:70:0d:d3:61: 05:dc:29:70:fc:20:a3:92:37:2e:8c:1b:c2:86:69: c7:f2:76:73:9e:20:dd:00:eb:75:c3:b3:9c:f9:80: 9f:44:fc:6a:04:d3:b7:80:9a:54:a7:7a:04:48:f7: 49:f6:00:cd:00:5d:3f:97:63:03:2a:58:1f:eb:ba: 5c:3d:5e:7e:e4:6d:3f:1d:d8:a5:62:4e:06:62:e9: d2:c3:35:18:97:15:f1:60:23:a5:d6:f4:10:b9:a3: 53:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0D:FA:FC:52:ED:96:6C:26:72:59:77:B9:06:0C:15:A0:DC:6F:7D X509v3 Authority Key Identifier: keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:96:6b:98:61:8e:78:fb:2e:60:ef:53:e4:71:bf:e2:b0:85: 0f:80:f6:b8:d9:29:f4:d4:f3:f6:44:4f:33:23:46:9d:15:70: 37:0f:5e:8c:fa:1e:ee:8f:35:c6:d3:9f:dc:c3:d8:a8:df:68: 3a:bc:de:ba:1a:f6:05:96:08:10:17:8b:a9:47:f2:cf:a8:1f: 52:c7:43:55:1e:0c:ce:91:89:fa:5f:07:2c:1f:14:57:cc:73: f6:22:24:5d:50:ea:23:f5:1b:ec:58:86:42:62:9e:9b:43:c8: 57:19:e5:31:6f:f6:7f:4b:e3:69:80:da:63:b6:ab:61:bc:2e: ea:bd:da:a4:59:28:e9:95:14:4b:7a:65:ec:51:3a:2b:02:cd: c5:cf:93:03:cb:98:cb:d0:f2:9c:84:fb:d3:a2:1e:61:a8:50: 62:0f:8a:7f:55:c4:39:dc:05:14:34:9c:c2:15:e3:65:78:41: ec:0f:ec:57:3e:a0:cd:6b:f6:26:49:b0:f2:b1:53:9c:43:b1: 00:fb:57:12:cd:16:01:47:4f:8b:ef:0e:a4:29:65:f8:0c:5d: 23:90:cf:d9:7d:8f:7b:e4:cd:a1:d6:4b:fc:3a:15:14:09:42: 44:6a:1c:22:5a:a1:91:d5:38:70:c8:9a:54:a2:87:66:9e:6b: e5:18:69:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTBGRTExMC8GA1UEBRMoQjAyNzk1RDJFMDlFM0FBQTNFMzZEMkI1OTJEMkUwRTlG QkI3RUZCRDAeFw0yNTA2MTMwNTU0MDRaFw0yNTA2MjAwNTU0MDRaMBgxFjAUBgNV BAMTDTY4NGJiY2ZjLTYxOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoj77vS4ybuMgtPJZU2fYIPJtTiimHpJeMfo2V13dQVrIldY/cEZmdH8QkdhJG SbeMj8DpmRS7jiVX0Hz0PDWSAIrWBt8Gofy+wuFj2gp6vj9eOO77jeiHtdXDJk7v bMeFbMrMMscyJSjFgTHJ9pzbp45OQTrPW0uvoFqUB3vSgt6qV66G9nmWFssk1LDL iwSWIHOloRfCJqEhjo30DxYccA3TYQXcKXD8IKOSNy6MG8KGacfydnOeIN0A63XD s5z5gJ9E/GoE07eAmlSnegRI90n2AM0AXT+XYwMqWB/rulw9Xn7kbT8d2KViTgZi 6dLDNRiXFfFgI6XW9BC5o1PvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhQ36/FLt lmwmcll3uQYMFaDcb30wHwYDVR0jBBgwFoAUsCeV0uCeOqo+NtK1ktLg6fu3770w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMEZFLzM3MzM0QkUyQUJD QTExRUZBOTk0RDEyOUM0RjlBRTAyL3NDZVYwdUNlT3FvLU50SzFrdExnNmZ1Mzc3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0NlVjB1Q2VPcW8tTnRLMWt0TGc2ZnUzNzcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MEZFLzM3MzM0QkUyQUJDQTExRUZBOTk0RDEyOUM0RjlBRTAyL3NDZVYwdUNlT3Fv LU50SzFrdExnNmZ1Mzc3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJiWa5hhjnj7LmDvU+Rxv+KwhQ+A9rjZKfTU8/ZETzMjRp0VcDcPXoz6 Hu6PNcbTn9zD2KjfaDq83roa9gWWCBAXi6lH8s+oH1LHQ1UeDM6RifpfBywfFFfM c/YiJF1Q6iP1G+xYhkJinptDyFcZ5TFv9n9L42mA2mO2q2G8Luq92qRZKOmVFEt6 ZexROisCzcXPkwPLmMvQ8pyE+9OiHmGoUGIPin9VxDncBRQ0nMIV42V4QewP7Fc+ oM1r9iZJsPKxU5xDsQD7VxLNFgFHT4vvDqQpZfgMXSOQz9l9j3vkzaHWS/w6FRQJ QkRqHCJaoZHVOHDImlSih2aea+UYaXA= -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:44 2025 by rpki-client