$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: iJ+jMKij3vXKigFuACF5kxUgosfae6CEj3ZNYTZabS4= Subject key identifier: 01:76:D3:09:D2:07:58:FB:68:84:81:5C:60:3F:6F:A0:D1:E4:DA:07 Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 033B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 0335 Signing time: Sun 15 Jun 2025 00:48:22 +0000 Manifest this update: Sun 15 Jun 2025 00:48:21 +0000 Manifest next update: Sun 22 Jun 2025 00:48:21 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: 9o8PUYqZyGj/yOKrSM+IwUAd6MLiLb3wYNjILIJQpOY=) 2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: lFHgwGcK464NIp9pshKfZeaAiyOHIGVlEkjl7qvlWTc=) 3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: Z+nT9PoRzTDCsdNOaBI1d+PkQHDUifBiuJhBYkV5ETQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Jun 15 00:48:21 2025 GMT Not After : Jun 22 00:48:21 2025 GMT Subject: CN=684e1856-c342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:fb:e1:23:3e:7a:0c:5a:e4:2d:22:3c:6e: 7a:7d:5f:68:fe:78:37:ce:7c:3f:79:fc:f7:0b:8e: a5:59:fd:a6:f1:dd:92:1d:19:29:e5:cf:57:76:88: 86:69:56:54:cb:0a:d2:33:78:c8:81:7d:5c:af:8b: 42:dd:6c:9f:6f:86:eb:19:30:9c:43:1b:04:bb:72: 86:1e:8e:ba:28:d6:9b:3d:8e:72:53:29:52:5d:3b: 08:a4:80:2d:33:c3:c5:c3:d3:94:70:23:bb:8a:c2: c0:13:17:ba:59:58:37:81:9a:c1:8b:b5:ff:23:15: bc:ee:90:12:18:46:f4:2a:86:2c:63:0b:5f:17:c0: d9:1f:a1:b7:c9:b8:41:89:da:1e:a1:8c:d6:d4:16: af:da:a9:25:a9:1e:7f:22:53:c8:4c:0a:3b:dd:54: d2:fd:9e:cf:02:82:a2:37:05:18:e9:ca:9e:33:9e: 70:e5:23:94:23:4d:0c:73:5d:d8:70:a5:7c:4c:5d: 9b:ea:d9:1f:13:17:5e:a6:cf:47:b0:fc:6d:9a:a2: 3b:42:0e:56:b5:35:f2:7a:5e:d7:ba:93:dd:77:69: 02:84:6a:81:5a:47:1e:9b:62:cd:99:b5:0f:01:86: a4:e5:32:0f:b0:ca:c0:33:b5:30:e2:c7:40:34:b5: 13:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:76:D3:09:D2:07:58:FB:68:84:81:5C:60:3F:6F:A0:D1:E4:DA:07 X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:10:53:da:de:63:b0:30:30:60:c5:78:28:3f:9c:41:4f:c3: 4a:1b:7e:bb:cf:28:b4:53:a4:77:ce:af:ff:2e:2a:3e:05:1e: 3d:1f:7b:88:06:73:43:37:cf:20:d4:a7:eb:ab:65:5a:37:31: e2:47:0f:8d:13:98:43:65:97:44:28:bf:98:5d:57:97:1e:e4: 13:37:3e:38:68:60:27:ed:75:03:08:48:6a:3b:12:c4:e2:57: a7:19:d1:66:5a:e8:74:d5:a7:90:7e:9e:ee:16:ba:98:7f:de: ae:1c:bb:c2:d0:87:e3:53:89:8b:04:90:57:5d:a2:ab:46:12: 4f:f9:23:61:12:d9:29:2d:62:32:e2:66:61:9d:5e:13:95:1c: 3e:52:00:b2:c9:10:b7:17:d9:34:d9:34:3a:99:ac:b7:19:33: 12:9a:56:17:0f:75:67:57:3f:21:9c:24:d2:48:0f:99:68:2a: 76:af:70:fc:b7:34:97:63:cf:57:da:c6:8d:a1:8e:1a:c7:26: 2e:1d:c8:1b:66:ec:24:74:fa:47:2b:77:b5:b7:6b:90:d7:fe: 70:ca:46:9d:25:a2:80:44:5c:30:a4:e8:65:d1:00:06:33:76: a3:cd:cb:0a:2d:14:3b:8a:f3:4c:e0:a4:7c:b6:eb:87:30:31: 91:32:e2:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUwNjE1MDA0ODIxWhcNMjUwNjIyMDA0ODIxWjAYMRYwFAYD VQQDEw02ODRlMTg1Ni1jMzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0B374SM+egxa5C0iPG56fV9o/ng3znw/efz3C46lWf2m8d2SHRkp5c9XdoiG aVZUywrSM3jIgX1cr4tC3Wyfb4brGTCcQxsEu3KGHo66KNabPY5yUylSXTsIpIAt M8PFw9OUcCO7isLAExe6WVg3gZrBi7X/IxW87pASGEb0KoYsYwtfF8DZH6G3ybhB idoeoYzW1Bav2qklqR5/IlPITAo73VTS/Z7PAoKiNwUY6cqeM55w5SOUI00Mc13Y cKV8TF2b6tkfExdeps9HsPxtmqI7Qg5WtTXyel7XupPdd2kChGqBWkcem2LNmbUP AYak5TIPsMrAM7Uw4sdANLUTlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAF20wnS B1j7aISBXGA/b6DR5NoHMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApEFPa3mOwMDBgxXgoP5xBT8NKG367zyi0U6R3zq//Lio+BR49H3uI BnNDN88g1Kfrq2VaNzHiRw+NE5hDZZdEKL+YXVeXHuQTNz44aGAn7XUDCEhqOxLE 4lenGdFmWuh01aeQfp7uFrqYf96uHLvC0IfjU4mLBJBXXaKrRhJP+SNhEtkpLWIy 4mZhnV4TlRw+UgCyyRC3F9k02TQ6may3GTMSmlYXD3VnVz8hnCTSSA+ZaCp2r3D8 tzSXY89X2saNoY4axyYuHcgbZuwkdPpHK3e1t2uQ1/5wykadJaKARFwwpOhl0QAG M3ajzcsKLRQ7ivNM4KR8tuuHMDGRMuIa -----END CERTIFICATE-----Generated at Mon Jun 16 20:10:50 2025 by rpki-client