$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft File: sdV2wMeOXPWNSDeibJJjxj8TFd0.mft (raw, json) Hash identifier: wImqFdfaZA5rtEY89t4bzPDoDcAHGQC7aZajLYu48RY= Subject key identifier: 52:DE:F5:A6:BC:C3:48:DC:80:6C:02:27:2A:2D:67:6A:FE:9F:6B:B5 Authority key identifier: B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD Certificate issuer: /CN=A914EB5A/serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft Manifest number: 0117 Signing time: Sat 21 Jun 2025 03:59:49 +0000 Manifest this update: Sat 21 Jun 2025 03:59:48 +0000 Manifest next update: Sat 28 Jun 2025 03:59:48 +0000 Files and hashes: 1: sdV2wMeOXPWNSDeibJJjxj8TFd0.crl (hash: kq7zLNBvGyU9HB3klAfRokvUz5FQ03vAZ+Etz7CML/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 03:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB5A, serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Validity Not Before: Jun 21 03:59:48 2025 GMT Not After : Jun 28 03:59:48 2025 GMT Subject: CN=68562e35-6d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:c6:39:00:bd:82:55:d2:d7:95:69:ca:8e: 05:4d:4c:9e:70:4d:2c:a8:63:02:e8:50:cd:6b:6a: 23:77:ef:ef:86:fe:e4:b5:42:68:2c:fa:88:ed:30: 78:53:e3:56:94:76:5f:85:8c:7e:0b:5c:d9:c6:cc: 93:1c:6d:f3:27:3f:2f:6d:7c:a8:74:e0:26:3e:79: 4d:f6:e2:41:5c:4d:a3:c0:e5:31:fa:43:77:40:19: ad:8a:15:7a:f2:3c:bb:07:82:4f:c7:c4:a2:1c:48: 61:78:03:19:02:ee:ac:26:41:dc:36:5c:f3:17:2c: 4e:0d:75:86:c5:ef:32:12:56:e9:99:48:d8:23:75: b5:d9:b1:fd:aa:a0:e9:01:4b:16:c9:90:35:1e:ae: c8:6d:af:3f:c1:1f:72:43:24:5e:5f:c9:06:e8:a7: 88:06:fb:30:fa:e0:98:98:c2:a1:b0:55:04:8d:e4: 42:b2:cf:46:14:6b:57:1b:58:f9:8e:c5:ec:d7:ef: 35:f7:72:0f:23:04:0e:55:85:61:dd:c9:1b:6e:64: c9:58:82:a7:3e:4b:7a:39:fc:82:37:6c:fe:f2:e7: 9a:a0:10:00:93:5b:50:c3:17:0b:57:b1:7d:bc:76: 3e:2e:36:49:ff:9e:df:97:52:3c:86:7f:2f:02:72: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DE:F5:A6:BC:C3:48:DC:80:6C:02:27:2A:2D:67:6A:FE:9F:6B:B5 X509v3 Authority Key Identifier: keyid:B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:72:24:20:d0:80:8a:3a:f4:13:5f:a7:49:b5:41:1e:b1:ab: ed:ea:80:4d:09:39:e5:2e:19:e8:2a:e3:d8:d8:f7:7b:03:29: 08:7d:d8:93:99:69:96:6e:7c:75:0d:a9:03:94:51:21:5c:0b: 6d:89:ab:30:80:01:39:87:7e:21:34:8d:03:37:35:8c:a0:fb: fc:f4:c0:42:98:b0:37:db:d8:e3:55:ce:1c:ce:67:04:df:81: c8:f5:e3:1c:12:4b:7f:f4:4b:3b:78:9d:78:e6:15:88:73:7a: 38:d7:62:5d:34:04:e7:f9:44:f0:75:dd:cf:12:25:b4:07:8c: 2b:a8:b7:f7:71:d0:34:bb:bf:ec:db:c9:25:d6:c9:9b:f1:c3: 07:67:5c:4a:8a:9c:2b:0c:d9:29:3b:1c:18:9f:3e:73:43:4a: b2:18:84:68:58:7e:a9:94:62:c2:bf:29:c9:0b:6f:08:06:56: 81:25:10:27:ca:27:8c:80:29:4c:20:73:fa:ba:d6:9a:1c:a6: 09:d9:38:8b:1e:74:3f:91:d6:e1:d7:fd:fe:58:46:cc:a1:6b: d7:4f:4e:08:d1:b8:cb:18:0f:4d:80:e4:a9:92:e7:2c:2e:aa: 66:ff:b2:22:fe:a9:55:84:a8:88:1c:50:9b:e9:75:5f:2a:09: 87:d9:86:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCNUExMTAvBgNVBAUTKEIxRDU3NkMwQzc4RTVDRjU4RDQ4MzdBMjZDOTI2M0M2 M0YxMzE1REQwHhcNMjUwNjIxMDM1OTQ4WhcNMjUwNjI4MDM1OTQ4WjAYMRYwFAYD VQQDEw02ODU2MmUzNS02ZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUjGOQC9glXS15Vpyo4FTUyecE0sqGMC6FDNa2ojd+/vhv7ktUJoLPqI7TB4 U+NWlHZfhYx+C1zZxsyTHG3zJz8vbXyodOAmPnlN9uJBXE2jwOUx+kN3QBmtihV6 8jy7B4JPx8SiHEhheAMZAu6sJkHcNlzzFyxODXWGxe8yElbpmUjYI3W12bH9qqDp AUsWyZA1Hq7Iba8/wR9yQyReX8kG6KeIBvsw+uCYmMKhsFUEjeRCss9GFGtXG1j5 jsXs1+8193IPIwQOVYVh3ckbbmTJWIKnPkt6OfyCN2z+8ueaoBAAk1tQwxcLV7F9 vHY+LjZJ/57fl1I8hn8vAnK/DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLe9aa8 w0jcgGwCJyotZ2r+n2u1MB8GA1UdIwQYMBaAFLHVdsDHjlz1jUg3omySY8Y/ExXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI1QS83QzA3NUUxOEEz QjMxMUVFQUQ2NjI5MTlDNEY5QUUwMi9zZFYyd01lT1hQV05TRGVpYkpKanhqOFRG ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NkVjJ3TWVPWFBXTlNEZWliSkpqeGo4VEZkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI1QS83QzA3NUUxOEEzQjMxMUVFQUQ2NjI5MTlDNEY5QUUwMi9zZFYyd01lT1hQ V05TRGVpYkpKanhqOFRGZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMciQg0ICKOvQTX6dJtUEesavt6oBNCTnlLhnoKuPY2Pd7AykIfdiT mWmWbnx1DakDlFEhXAttiaswgAE5h34hNI0DNzWMoPv89MBCmLA329jjVc4czmcE 34HI9eMcEkt/9Es7eJ145hWIc3o412JdNATn+UTwdd3PEiW0B4wrqLf3cdA0u7/s 28kl1smb8cMHZ1xKipwrDNkpOxwYnz5zQ0qyGIRoWH6plGLCvynJC28IBlaBJRAn yieMgClMIHP6utaaHKYJ2TiLHnQ/kdbh1/3+WEbMoWvXT04I0bjLGA9NgOSpkucs Lqpm/7Ii/qlVhKiIHFCb6XVfKgmH2YZc -----END CERTIFICATE-----Generated at Sat Jun 21 16:19:33 2025 by rpki-client