$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json) Hash identifier: kn+0PRcmBbMz/WhmjFYZ/0dB60r1qx8up0c0ddMkVUU= Subject key identifier: 0E:8C:43:0A:A8:67:6F:26:60:50:10:C7:50:7E:DC:0B:FA:52:39:AF Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft Manifest number: 33 Signing time: Fri 13 Jun 2025 06:31:53 +0000 Manifest this update: Fri 13 Jun 2025 06:31:52 +0000 Manifest next update: Fri 20 Jun 2025 06:31:52 +0000 Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: O8QUV97bxVSv5+AExX626Zx+FU/BflWY+dVpUWVzQio=) 2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Validity Not Before: Jun 13 06:31:52 2025 GMT Not After : Jun 20 06:31:52 2025 GMT Subject: CN=684bc5d8-6a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:82:27:79:db:bc:5e:e6:00:64:a4:12:ce:48: f6:4b:15:35:95:c1:5d:03:f8:e5:47:f0:f8:ae:03: e5:36:36:9e:e6:20:78:d4:57:e6:b9:b1:72:91:e8: 20:1b:9e:0d:37:4c:59:0a:15:f2:10:c9:de:2f:af: bc:2d:42:4a:80:78:2d:95:f6:42:b6:c8:56:15:56: 15:c1:06:1b:dd:03:82:4c:96:e6:f0:a0:64:f7:ac: 0a:5b:45:39:d5:ba:f0:19:00:8f:23:ab:3d:fe:d2: 26:ea:75:29:0d:a0:79:48:c1:65:51:71:a6:2b:c2: 27:05:fc:2a:fd:c3:b6:2a:6d:64:ea:f4:a6:1d:1f: e8:51:8f:60:f0:1f:65:36:19:6f:51:85:3b:65:3c: 4c:cb:fc:af:41:ea:16:43:63:96:cb:ab:3d:76:64: 0d:45:dd:08:68:d4:de:01:bc:68:c2:77:e3:3a:9e: f4:9f:42:68:61:38:80:48:4c:85:4e:e3:6e:fd:bb: be:e6:4b:29:1f:61:70:79:4c:eb:5e:0c:d3:a9:49: f7:1c:9c:5b:d0:59:4d:4b:a0:b5:69:a5:a2:59:26: b9:11:ce:d8:e8:3f:08:5d:b0:66:c8:91:2c:44:36: 7f:10:97:0d:9a:7f:f1:bb:c1:19:56:a9:e4:3d:5d: cf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8C:43:0A:A8:67:6F:26:60:50:10:C7:50:7E:DC:0B:FA:52:39:AF X509v3 Authority Key Identifier: keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:84:9f:96:3e:4d:73:52:93:bd:9f:24:96:db:b4:0a:5b:1c: 08:b9:96:d1:e4:21:bc:d4:ca:e3:4e:eb:e1:8c:e4:58:96:1a: b4:8f:7f:ea:9d:03:28:cb:25:aa:91:41:53:2a:78:37:d4:ce: d0:df:b9:d0:3e:b8:f2:7b:88:7c:84:e2:90:08:64:b5:a2:f5: 78:fb:b5:cd:b2:ab:29:38:8e:10:0e:c4:cf:52:92:bc:e3:9d: 07:ae:05:d5:5e:59:60:a4:41:62:3e:db:07:ab:03:8e:d9:51: b9:cb:81:0b:6a:9e:64:01:fe:3d:b9:7a:cf:65:ec:98:14:0d: 70:a4:f8:f5:98:2b:99:ae:d5:c6:82:39:59:64:49:89:40:ca: 31:82:ee:7f:7b:5f:2e:be:10:4e:47:b5:bd:f0:fc:19:de:e8: c2:b4:f9:fd:5a:45:be:9e:42:a9:6e:ec:dc:3c:f5:ba:0c:47: 6d:e5:73:35:52:13:96:ec:4b:92:e5:4b:df:c8:ac:cb:81:23: ee:14:36:5e:88:8f:f2:2f:ab:cf:41:5e:cf:7d:67:57:99:13: bd:fd:a7:85:93:be:f5:6a:74:1d:c0:20:50:36:11:68:53:4d: 9b:48:5f:f6:f2:a7:b1:80:82:48:ca:2c:b2:3c:b8:c2:68:ba: 20:eb:33:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Rjk2MTExMC8GA1UEBRMoNEJFRUM3NEY0NzZGQjE3MURDOEVEQUY5NDkxRDZDQzI3 QkY4MEUyRjAeFw0yNTA2MTMwNjMxNTJaFw0yNTA2MjAwNjMxNTJaMBgxFjAUBgNV BAMTDTY4NGJjNWQ4LTZhMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOgid527xe5gBkpBLOSPZLFTWVwV0D+OVH8PiuA+U2Np7mIHjUV+a5sXKR6CAb ng03TFkKFfIQyd4vr7wtQkqAeC2V9kK2yFYVVhXBBhvdA4JMlubwoGT3rApbRTnV uvAZAI8jqz3+0ibqdSkNoHlIwWVRcaYrwicF/Cr9w7YqbWTq9KYdH+hRj2DwH2U2 GW9RhTtlPEzL/K9B6hZDY5bLqz12ZA1F3Qho1N4BvGjCd+M6nvSfQmhhOIBITIVO 4279u77mSykfYXB5TOteDNOpSfccnFvQWU1LoLVppaJZJrkRztjoPwhdsGbIkSxE Nn8Qlw2af/G7wRlWqeQ9Xc+lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDoxDCqhn byZgUBDHUH7cC/pSOa8wHwYDVR0jBBgwFoAUS+7HT0dvsXHcjtr5SR1swnv4Di8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGOTYxLzA1QjIxQjEwRkIw RDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hIY2p0cjVTUjFzd252NERp OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy03SFQwZHZzWEhjanRyNVNSMXN3bnY0RGk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG OTYxLzA1QjIxQjEwRkIwRDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hI Y2p0cjVTUjFzd252NERpOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABCEn5Y+TXNSk72fJJbbtApbHAi5ltHkIbzUyuNO6+GM5FiWGrSPf+qd AyjLJaqRQVMqeDfUztDfudA+uPJ7iHyE4pAIZLWi9Xj7tc2yqyk4jhAOxM9Skrzj nQeuBdVeWWCkQWI+2werA47ZUbnLgQtqnmQB/j25es9l7JgUDXCk+PWYK5mu1caC OVlkSYlAyjGC7n97Xy6+EE5Htb3w/Bne6MK0+f1aRb6eQqlu7Nw89boMR23lczVS E5bsS5LlS9/IrMuBI+4UNl6Ij/Ivq89BXs99Z1eZE739p4WTvvVqdB3AIFA2EWhT TZtIX/byp7GAgkjKLLI8uMJouiDrM7Y= -----END CERTIFICATE-----Generated at Sun Jun 15 08:42:34 2025 by rpki-client