$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json) Hash identifier: s/ewoQc0ykyHQXpXY4HKDIQb/UNcrD8DCoVlIhQ2Kco= Subject key identifier: ED:0B:86:DA:4E:9C:CA:AD:52:81:5C:E0:4F:C7:D2:B1:AF:51:01:33 Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft Manifest number: 018E Signing time: Tue 17 Jun 2025 02:38:22 +0000 Manifest this update: Tue 17 Jun 2025 02:38:21 +0000 Manifest next update: Tue 24 Jun 2025 02:38:21 +0000 Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: Mz11Em5UnnC4o7Z3N70+5Vnjs7iZOV1ER5Pe+FCbV5U=) 2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: H97m0xGfwTSK15tOF7js1ABWMy5iF+l3/IsWtR98xbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Validity Not Before: Jun 17 02:38:21 2025 GMT Not After : Jun 24 02:38:21 2025 GMT Subject: CN=6850d51d-0b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:e1:86:09:28:48:3b:d0:2e:20:95:69:86: 4f:07:c6:99:db:1c:64:ae:c2:ef:60:c3:81:cc:0d: 61:1a:43:38:b4:e4:68:b2:3b:32:13:05:cb:0c:20: c4:74:4c:3f:71:75:e4:b6:76:f1:24:f8:fe:3f:03: 75:02:f3:d6:d8:ec:dd:2c:d5:5c:dc:b3:88:f2:4a: 60:b7:8b:d8:00:21:4c:c3:d8:21:a1:b7:db:7b:a2: b9:7f:75:f8:9c:61:8e:d9:ab:9e:79:8b:db:95:67: bc:2f:cc:ab:0b:0b:32:af:01:e3:46:b2:29:99:8c: 08:d4:e0:5c:e4:46:75:e9:aa:dd:5f:be:76:f9:d4: 88:cd:b4:75:27:b7:1d:3c:e5:59:3c:7b:b7:ff:8a: ef:8a:9f:e5:d4:ba:3c:5b:88:80:4f:5d:56:b9:e5: 01:07:dc:fa:4e:d2:ca:c7:54:82:5d:c0:26:6e:d0: 90:2b:35:47:8b:2a:3c:92:b0:0c:de:0c:f7:69:66: 6f:79:09:81:9e:99:b0:59:f6:14:2a:6d:a6:df:e0: 89:01:0f:c3:34:28:3e:29:cd:09:fb:f8:87:b4:a6: f4:89:bc:5d:95:03:2e:65:6d:d2:e9:17:f1:e5:14: 9c:5f:3e:ca:2d:a2:ed:e9:f5:2c:7f:85:0d:fd:4f: 5b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0B:86:DA:4E:9C:CA:AD:52:81:5C:E0:4F:C7:D2:B1:AF:51:01:33 X509v3 Authority Key Identifier: keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f8:78:0d:d7:2f:a6:f8:ab:8b:91:a3:30:61:2d:b1:21:ed: 30:bf:ed:67:1c:24:b1:ca:b7:57:2a:e4:3a:d2:82:3d:b3:2d: 69:1a:2b:c5:50:17:5e:79:5c:d9:b4:d1:59:5d:e2:53:d8:5a: f8:ae:e7:e7:cc:bd:af:3a:80:26:43:0c:9d:d1:9b:48:7d:aa: d6:25:f0:e6:75:24:78:00:80:ed:c9:75:96:27:59:86:b1:a2: da:1b:bd:ac:6c:fe:f5:73:31:9b:d2:4b:f0:22:6d:4e:6f:9b: 5e:6b:2c:c7:84:f6:92:c8:7f:8a:ee:f1:9f:1f:c0:81:5f:a7: 24:10:30:71:c6:43:c5:41:7e:8d:4c:a8:53:04:fa:9f:02:9c: 25:4e:0c:f2:98:e6:f2:30:37:87:75:a7:2f:3d:69:d2:e8:c1: 2d:c5:32:0b:0c:4c:61:17:75:03:88:4b:bc:92:35:96:08:06: 77:98:44:0f:6b:c8:cf:2e:37:fc:89:0e:37:0f:c2:77:54:f2: ac:3b:fe:9b:36:d2:e4:28:33:09:b4:0a:60:6b:92:a5:b0:57: b6:ab:dd:7b:30:8f:4e:48:0a:37:b8:96:7f:b7:b4:27:b9:01: e4:8d:e9:82:17:f9:ff:96:ee:8f:99:c9:ab:d0:4a:cc:bb:07: 4f:b5:bc:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzOTYxMTAvBgNVBAUTKDQ5RDBGNDA2OTcyQTgwNUIxRTdBOUZDMjBGQjNBOUND Qjc2NjJBQ0UwHhcNMjUwNjE3MDIzODIxWhcNMjUwNjI0MDIzODIxWjAYMRYwFAYD VQQDEw02ODUwZDUxZC0wYjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkPhhgkoSDvQLiCVaYZPB8aZ2xxkrsLvYMOBzA1hGkM4tORosjsyEwXLDCDE dEw/cXXktnbxJPj+PwN1AvPW2OzdLNVc3LOI8kpgt4vYACFMw9ghobfbe6K5f3X4 nGGO2aueeYvblWe8L8yrCwsyrwHjRrIpmYwI1OBc5EZ16ardX752+dSIzbR1J7cd POVZPHu3/4rvip/l1Lo8W4iAT11WueUBB9z6TtLKx1SCXcAmbtCQKzVHiyo8krAM 3gz3aWZveQmBnpmwWfYUKm2m3+CJAQ/DNCg+Kc0J+/iHtKb0ibxdlQMuZW3S6Rfx 5RScXz7KLaLt6fUsf4UN/U9bqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0LhtpO nMqtUoFc4E/H0rGvUQEzMB8GA1UdIwQYMBaAFEnQ9AaXKoBbHnqfwg+zqcy3ZirO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDM5Ni85NUQwREY3QUVG OUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdGc2VlcF9DRDdPcHpMZG1L czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkRDBCcGNxZ0ZzZWVwX0NEN09wekxkbUtzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDM5Ni85NUQwREY3QUVGOUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdG c2VlcF9DRDdPcHpMZG1LczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs+HgN1y+m+KuLkaMwYS2xIe0wv+1nHCSxyrdXKuQ60oI9sy1pGivF UBdeeVzZtNFZXeJT2Fr4rufnzL2vOoAmQwyd0ZtIfarWJfDmdSR4AIDtyXWWJ1mG saLaG72sbP71czGb0kvwIm1Ob5teayzHhPaSyH+K7vGfH8CBX6ckEDBxxkPFQX6N TKhTBPqfApwlTgzymObyMDeHdacvPWnS6MEtxTILDExhF3UDiEu8kjWWCAZ3mEQP a8jPLjf8iQ43D8J3VPKsO/6bNtLkKDMJtApga5KlsFe2q917MI9OSAo3uJZ/t7Qn uQHkjemCF/n/lu6Pmcmr0ErMuwdPtbxr -----END CERTIFICATE-----Generated at Wed Jun 18 08:20:25 2025 by rpki-client