$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft File: Satd0R3JItzI8j3VqSxplN1wNQQ.mft (raw, json) Hash identifier: MdqnrLYihVhyy+yKviFei01GQrg3wzNjIy7bArBmRXg= Subject key identifier: 6A:61:9A:7D:F6:1F:24:A0:14:CB:7C:D7:46:E1:CC:58:62:A1:04:7E Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft Manifest number: 0353 Signing time: Fri 13 Jun 2025 00:33:11 +0000 Manifest this update: Fri 13 Jun 2025 00:33:10 +0000 Manifest next update: Fri 20 Jun 2025 00:33:10 +0000 Files and hashes: 1: Satd0R3JItzI8j3VqSxplN1wNQQ.crl (hash: s2JCnQW3WXWsAkJ24aFdMxw+P7rQq9bx530Z8v+/RRY=) 2: 718673B6BB7F11EC9E187F19C4F9AE02.roa (hash: O8VxzFOTQcqKK+CbKNz7Oarn0uADD/6F4h0/93MvW2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Validity Not Before: Jun 13 00:33:10 2025 GMT Not After : Jun 20 00:33:10 2025 GMT Subject: CN=684b71c6-82ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:a4:38:1d:08:8f:eb:90:d5:55:93:07:5a: b7:40:fe:73:4e:f8:a5:86:f9:e0:c7:fa:fb:db:08: f6:04:f7:39:e6:1c:f0:6e:6e:42:b8:d1:5b:7b:3e: 4a:37:d5:dc:b4:f1:b7:9d:18:b8:b1:a4:3c:85:26: bf:e8:29:83:98:32:88:f8:ca:00:cc:19:be:86:e9: bc:42:c5:e3:f6:ff:2d:8a:28:97:67:a4:2a:d9:ea: 09:98:6c:b4:6a:8d:c6:52:ac:54:3a:0e:3e:8a:2b: 61:d0:98:de:98:0d:81:86:dd:87:b8:94:fd:f4:8d: b7:24:a2:22:c6:b0:eb:33:93:ec:45:a4:4f:ba:31: 14:ff:97:a8:7f:a5:3b:8a:c1:77:6c:7b:2a:e1:32: 44:b9:e3:e3:64:c8:9b:b1:8a:34:70:2f:7a:8a:92: f3:2c:33:44:ff:4c:c5:c0:84:bc:fd:d1:8d:41:6a: be:f0:8a:7a:e2:ed:f1:3a:b4:36:fa:8b:6e:af:79: 82:d1:17:b6:60:e3:0c:d0:d8:10:ba:54:d0:3c:5c: 00:61:53:cf:54:cd:90:00:99:bb:da:ad:3c:8d:70: b6:70:19:a0:fc:5f:e9:da:0b:8e:bd:2b:7a:37:b7: 37:4e:7a:b6:a8:d6:25:c7:ba:fa:0e:20:68:84:48: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:61:9A:7D:F6:1F:24:A0:14:CB:7C:D7:46:E1:CC:58:62:A1:04:7E X509v3 Authority Key Identifier: keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:44:28:dd:e3:0c:bf:2f:8a:6c:4e:8b:03:a0:0b:61:22:1c: 1a:bb:8b:c8:4e:13:22:d7:5d:d3:a1:9a:55:55:5f:cb:91:fc: 14:99:53:de:24:e0:a3:84:87:c5:fa:23:17:a5:8f:ab:57:1d: cf:d0:47:17:e9:a2:39:55:b6:42:08:21:1c:d2:7c:03:8e:90: 74:46:c3:b7:d1:12:86:dc:69:a2:3c:44:50:ec:fd:38:21:34: 41:dd:74:6d:43:86:03:d3:14:3f:3a:58:ff:a1:20:26:08:63: 19:ce:f7:6f:27:9a:68:28:59:08:df:00:06:36:dd:5d:6d:38: b4:94:94:bb:ec:e3:69:c8:f2:b9:85:5e:a1:ac:15:05:e4:96: 72:91:b1:36:52:57:ab:25:50:6f:98:3d:85:7a:b0:e6:a0:27: 5c:cf:1f:8a:ee:a9:93:46:f7:cd:5a:cc:a9:dc:d9:de:96:b2: cf:c9:1c:6b:03:81:e3:31:33:b5:2d:53:be:27:22:d0:0c:53: 0f:fd:bb:4c:be:a3:4e:e8:f6:8c:0c:df:b4:cc:1a:94:a9:57: 29:09:dd:51:2d:f1:e2:99:13:e2:70:e7:f6:31:bd:51:37:71: 29:7b:5c:d6:05:1d:21:ed:37:2e:be:38:b7:57:7b:f9:8f:87: 80:cc:46:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0 REQ3MDM1MDQwHhcNMjUwNjEzMDAzMzEwWhcNMjUwNjIwMDAzMzEwWjAYMRYwFAYD VQQDEw02ODRiNzFjNi04MmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3GkOB0Ij+uQ1VWTB1q3QP5zTvilhvngx/r72wj2BPc55hzwbm5CuNFbez5K N9XctPG3nRi4saQ8hSa/6CmDmDKI+MoAzBm+hum8QsXj9v8tiiiXZ6Qq2eoJmGy0 ao3GUqxUOg4+iith0JjemA2Bht2HuJT99I23JKIixrDrM5PsRaRPujEU/5eof6U7 isF3bHsq4TJEuePjZMibsYo0cC96ipLzLDNE/0zFwIS8/dGNQWq+8Ip64u3xOrQ2 +otur3mC0Re2YOMM0NgQulTQPFwAYVPPVM2QAJm72q08jXC2cBmg/F/p2guOvSt6 N7c3Tnq2qNYlx7r6DiBohEhmYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGphmn32 HySgFMt810bhzFhioQR+MB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTkzQi8xMDNDN0QxQ0JCN0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0 ekk4ajNWcVN4cGxOMXdOUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1RCjd4wy/L4psTosDoAthIhwau4vIThMi113ToZpVVV/LkfwUmVPe JOCjhIfF+iMXpY+rVx3P0EcX6aI5VbZCCCEc0nwDjpB0RsO30RKG3GmiPERQ7P04 ITRB3XRtQ4YD0xQ/Olj/oSAmCGMZzvdvJ5poKFkI3wAGNt1dbTi0lJS77ONpyPK5 hV6hrBUF5JZykbE2UlerJVBvmD2FerDmoCdczx+K7qmTRvfNWsyp3NnelrLPyRxr A4HjMTO1LVO+JyLQDFMP/btMvqNO6PaMDN+0zBqUqVcpCd1RLfHimRPicOf2Mb1R N3Epe1zWBR0h7Tcuvji3V3v5j4eAzEb5 -----END CERTIFICATE-----Generated at Sat Jun 14 18:50:34 2025 by rpki-client