$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft File: svBcLOw1UNLTyetRODn0egAqhy4.mft (raw, json) Hash identifier: DjTLi699SdaMj7c24Z63ZRW1OV8cpvfvxaYOvfYBYQI= Subject key identifier: 72:76:C8:E5:B2:C8:70:E8:8E:5D:28:C2:A2:D5:41:F0:10:6A:9E:B8 Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E Certificate issuer: /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E Certificate serial: 03BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft Manifest number: 03B8 Signing time: Fri 13 Jun 2025 00:14:24 +0000 Manifest this update: Fri 13 Jun 2025 00:14:23 +0000 Manifest next update: Fri 20 Jun 2025 00:14:23 +0000 Files and hashes: 1: svBcLOw1UNLTyetRODn0egAqhy4.crl (hash: IKOo8wHMJz4R2tX2aEAQlO9MASQZvjKUZcGKn3V+m58=) 2: D118AD20820911EDAC2FD360C4F9AE02.roa (hash: ICtN0AhdlHgfYIx82KgCcqvbtFC2Nt85yrH3EgkUFWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E Validity Not Before: Jun 13 00:14:23 2025 GMT Not After : Jun 20 00:14:23 2025 GMT Subject: CN=684b6d60-d149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:0d:d8:fc:9f:4b:c5:d8:54:8d:77:2b:3b: 27:8a:96:8f:ac:93:74:f1:20:45:ba:19:ec:85:ad: af:d1:ee:fc:6b:2d:7c:16:74:2a:9a:93:31:3d:25: b9:af:fc:73:8b:31:da:a4:6f:bd:4b:46:c3:36:12: 0f:7b:2c:85:e5:c9:58:d7:ee:03:8a:b5:36:bf:1a: fe:58:07:03:32:49:6f:c6:64:53:4c:a9:0c:e8:e8: a8:07:03:b0:da:c0:1f:8a:67:02:4a:fe:e6:6e:2e: 51:a4:a7:13:58:eb:1c:87:c1:05:26:58:ac:99:cf: f0:9e:f7:b3:f3:d2:88:40:f5:53:8c:2d:a9:36:4a: 3d:58:fd:a6:d5:e8:53:60:08:25:c2:8e:c7:ca:2b: 84:be:92:c9:6a:42:65:7c:c0:4d:ce:8f:0d:e5:0a: b1:01:65:f8:05:14:0a:0b:3a:52:ae:92:fc:99:86: e8:b9:53:fd:15:15:71:3c:2e:5e:aa:f1:96:e7:48: 46:de:56:9d:91:e3:da:be:5a:3e:87:4a:ca:91:f0: 47:03:0a:36:9c:b4:d4:0e:44:99:c5:ff:d4:81:6e: c5:32:5c:eb:f7:45:a7:87:9d:5f:af:a3:c4:6b:4c: 4d:19:fa:08:6f:aa:74:24:e9:06:2f:e4:8c:12:27: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:76:C8:E5:B2:C8:70:E8:8E:5D:28:C2:A2:D5:41:F0:10:6A:9E:B8 X509v3 Authority Key Identifier: keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0c:6a:63:a5:bd:63:4c:9f:07:57:3e:de:0d:5b:73:cb:f1: 60:c1:e7:aa:7b:cf:c8:5c:95:b0:7c:c4:1c:59:9e:82:f5:15: ee:7c:c7:b2:f3:0b:71:64:dd:dc:1d:6c:d7:f3:41:4e:ad:0b: 3f:87:c3:83:a4:ea:26:85:05:68:3f:b5:49:af:9c:ca:f7:18: 04:e8:90:5d:ce:52:35:0e:a6:81:b7:ec:f4:2c:82:25:3f:19: 70:6f:a4:c5:c3:cf:b0:2e:13:23:bd:e9:55:0c:d7:c2:17:e3: 52:67:22:a3:0a:84:4e:2d:46:d3:f3:f0:b0:f7:9a:81:fd:8c: 78:87:36:01:63:16:45:03:3a:aa:02:5d:6d:77:e4:3f:98:e5: 72:2e:ae:6e:97:4a:aa:27:84:43:3b:fe:ce:09:53:a0:f1:8c: be:ea:f3:cb:5b:9c:11:89:8b:d7:09:30:d5:a9:15:80:ce:7c: 40:f9:0a:e1:6a:47:a8:80:7b:af:99:99:84:d1:0e:db:f5:11: a6:16:8f:55:47:6e:1c:57:47:fc:6b:a4:5d:99:8a:d7:d0:93: b9:6a:21:57:e5:b9:69:52:8c:8c:b6:d9:e0:f6:a3:ef:93:05: 35:99:69:7f:d7:ac:16:63:4c:ab:2a:55:84:9f:38:da:2c:fe: d8:71:35:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEODgxMTAvBgNVBAUTKEIyRjA1QzJDRUMzNTUwRDJEM0M5RUI1MTM4MzlGNDdB MDAyQTg3MkUwHhcNMjUwNjEzMDAxNDIzWhcNMjUwNjIwMDAxNDIzWjAYMRYwFAYD VQQDEw02ODRiNmQ2MC1kMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymwN2PyfS8XYVI13KzsnipaPrJN08SBFuhnsha2v0e78ay18FnQqmpMxPSW5 r/xzizHapG+9S0bDNhIPeyyF5clY1+4DirU2vxr+WAcDMklvxmRTTKkM6OioBwOw 2sAfimcCSv7mbi5RpKcTWOsch8EFJlismc/wnvez89KIQPVTjC2pNko9WP2m1ehT YAglwo7HyiuEvpLJakJlfMBNzo8N5QqxAWX4BRQKCzpSrpL8mYbouVP9FRVxPC5e qvGW50hG3ladkePavlo+h0rKkfBHAwo2nLTUDkSZxf/UgW7FMlzr90Wnh51fr6PE a0xNGfoIb6p0JOkGL+SMEid5OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJ2yOWy yHDojl0owqLVQfAQap64MB8GA1UdIwQYMBaAFLLwXCzsNVDS08nrUTg59HoAKocu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ4OC9GMUI3RUFCQTkz QUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVOTFR5ZXRST0RuMGVnQXFo eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N2QmNMT3cxVU5MVHlldFJPRG4wZWdBcWh5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ4OC9GMUI3RUFCQTkzQUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVO TFR5ZXRST0RuMGVnQXFoeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9DGpjpb1jTJ8HVz7eDVtzy/Fgweeqe8/IXJWwfMQcWZ6C9RXufMey 8wtxZN3cHWzX80FOrQs/h8ODpOomhQVoP7VJr5zK9xgE6JBdzlI1DqaBt+z0LIIl Pxlwb6TFw8+wLhMjvelVDNfCF+NSZyKjCoROLUbT8/Cw95qB/Yx4hzYBYxZFAzqq Al1td+Q/mOVyLq5ul0qqJ4RDO/7OCVOg8Yy+6vPLW5wRiYvXCTDVqRWAznxA+Qrh akeogHuvmZmE0Q7b9RGmFo9VR24cV0f8a6RdmYrX0JO5aiFX5blpUoyMttng9qPv kwU1mWl/16wWY0yrKlWEnzjaLP7YcTVN -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:22 2025 by rpki-client