$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft File: sXBCw3IXHA9BRv78RNHbqlIjhxs.mft (raw, json) Hash identifier: 2D1HkkqhSvUZrijh+gBKqdVKl+AOZtvVZxQAYqa+F8Y= Subject key identifier: 4E:81:1D:09:8A:6D:19:F2:B3:34:60:D6:05:FD:63:FD:BD:DC:6E:39 Authority key identifier: B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B Certificate issuer: /CN=A918FEF6/serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Certificate serial: 0739 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft Manifest number: 0734 Signing time: Wed 18 Jun 2025 21:35:57 +0000 Manifest this update: Wed 18 Jun 2025 21:35:56 +0000 Manifest next update: Wed 25 Jun 2025 21:35:56 +0000 Files and hashes: 1: sXBCw3IXHA9BRv78RNHbqlIjhxs.crl (hash: 568qRyOIebEH1tXuqKuDh+kDTbUTK5nOUVsBbbnL/VM=) 2: 3A9A3904330011EBA08B865DC4F9AE02.roa (hash: 3vNGkA3tCUjQbATswchBY3GI0Vd54z+gZRifmc/PxUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF6, serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Validity Not Before: Jun 18 21:35:56 2025 GMT Not After : Jun 25 21:35:56 2025 GMT Subject: CN=6853313c-3059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:d9:ef:0b:e3:0b:44:f1:12:d5:f9:21:c6: 3f:4b:bd:77:ce:aa:57:7c:58:34:d4:e4:a0:18:85: f1:31:5d:a4:6f:39:6b:86:47:9a:2c:7e:85:4c:44: cd:a2:bc:63:b5:f4:66:ef:dd:09:b8:30:5b:31:3a: 99:00:35:bd:df:5e:a5:54:ee:c5:81:62:f6:7d:35: b2:30:07:70:7f:00:53:49:d7:a3:c4:5d:8f:55:37: 64:8f:24:fd:00:aa:c8:ac:85:9c:9b:0a:b8:f5:b7: b6:9a:4d:9f:fc:4f:e6:5d:08:10:c9:6e:3d:85:cb: 64:f5:b8:84:15:aa:4e:fa:e6:56:39:ae:e9:9f:66: fc:56:ed:ce:0f:ee:5d:c7:08:4a:38:8f:ce:fa:fe: a6:fa:0c:86:fb:bd:f0:d1:a8:4a:02:0b:f2:45:25: b5:0e:f2:a9:00:06:4b:71:8b:b7:d5:51:6e:5b:2e: 7d:1c:9d:cb:c8:ad:c6:79:74:3d:27:e7:52:a7:8a: d2:23:cb:56:2b:1f:1e:8a:11:f7:26:0e:f1:0a:d1: a4:e1:1a:0f:12:35:06:4c:6d:88:72:61:b4:eb:f0: 79:36:f7:ba:9d:10:c7:80:12:29:37:ee:ff:83:bb: 89:d4:20:24:71:5e:81:61:88:34:94:04:76:72:12: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:81:1D:09:8A:6D:19:F2:B3:34:60:D6:05:FD:63:FD:BD:DC:6E:39 X509v3 Authority Key Identifier: keyid:B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:e9:89:2c:b5:ab:55:ab:77:29:29:b9:0e:26:1b:b7:2f:a1: 26:64:42:7c:25:5e:71:a9:7b:28:41:c0:b8:a5:f8:3c:92:2d: dc:a2:7b:3d:7e:ac:6e:ae:d1:87:4b:58:4f:d8:56:6e:64:0e: 88:fb:20:32:dc:33:0d:7d:8a:d3:f8:1e:31:ae:d0:20:9a:04: 53:09:69:70:98:a8:a0:d8:ab:22:7e:47:35:73:fb:ee:f2:49: 0e:6a:70:7d:a1:ca:df:97:90:7c:63:be:2c:55:5f:8d:ee:22: e1:e3:19:90:76:29:4e:ee:12:a4:1c:0a:16:78:67:21:d6:8e: ed:f4:c8:c5:08:96:5f:55:6e:80:ec:6c:99:98:8e:d0:04:d3: fd:21:c4:45:83:de:98:80:07:7a:83:26:19:ae:26:da:d2:b3: 60:21:6e:68:fe:19:58:a6:1b:17:6f:b6:70:40:e6:57:3b:e0: a2:9a:55:18:53:92:6b:fe:d0:ea:d1:57:7d:19:a7:8a:a6:d9: 08:1f:bc:7e:2c:a9:e9:f3:6b:e2:91:94:f9:be:c9:2e:cc:36: f5:0d:98:78:09:c5:d0:52:35:fb:0a:de:41:b9:29:8e:c2:ef: 5c:45:fe:fa:58:40:19:18:7c:e5:df:c9:29:63:16:2b:e6:e0: d2:5a:6d:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjYxMTAvBgNVBAUTKEIxNzA0MkMzNzIxNzFDMEY0MTQ2RkVGQzQ0RDFEQkFB NTIyMzg3MUIwHhcNMjUwNjE4MjEzNTU2WhcNMjUwNjI1MjEzNTU2WjAYMRYwFAYD VQQDEw02ODUzMzEzYy0zMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3rZ7wvjC0TxEtX5IcY/S713zqpXfFg01OSgGIXxMV2kbzlrhkeaLH6FTETN orxjtfRm790JuDBbMTqZADW9316lVO7FgWL2fTWyMAdwfwBTSdejxF2PVTdkjyT9 AKrIrIWcmwq49be2mk2f/E/mXQgQyW49hctk9biEFapO+uZWOa7pn2b8Vu3OD+5d xwhKOI/O+v6m+gyG+73w0ahKAgvyRSW1DvKpAAZLcYu31VFuWy59HJ3LyK3GeXQ9 J+dSp4rSI8tWKx8eihH3Jg7xCtGk4RoPEjUGTG2IcmG06/B5Nve6nRDHgBIpN+7/ g7uJ1CAkcV6BYYg0lAR2chKl6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6BHQmK bRnyszRg1gX9Y/293G45MB8GA1UdIwQYMBaAFLFwQsNyFxwPQUb+/ETR26pSI4cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGNi8xOTg2QjlEODMy RkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhBOUJSdjc4Uk5IYnFsSWpo eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NYQkN3M0lYSEE5QlJ2NzhSTkhicWxJamh4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGNi8xOTg2QjlEODMyRkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhB OUJSdjc4Uk5IYnFsSWpoeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI6YkstatVq3cpKbkOJhu3L6EmZEJ8JV5xqXsoQcC4pfg8ki3cons9 fqxurtGHS1hP2FZuZA6I+yAy3DMNfYrT+B4xrtAgmgRTCWlwmKig2Ksifkc1c/vu 8kkOanB9ocrfl5B8Y74sVV+N7iLh4xmQdilO7hKkHAoWeGch1o7t9MjFCJZfVW6A 7GyZmI7QBNP9IcRFg96YgAd6gyYZriba0rNgIW5o/hlYphsXb7ZwQOZXO+CimlUY U5Jr/tDq0Vd9GaeKptkIH7x+LKnp82vikZT5vskuzDb1DZh4CcXQUjX7Ct5BuSmO wu9cRf76WEAZGHzl38kpYxYr5uDSWm3w -----END CERTIFICATE-----Generated at Fri Jun 20 05:05:10 2025 by rpki-client