$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft File: _SqdXvq5ERsKWjAT80wsva_QH8I.mft (raw, json) Hash identifier: 6TsVxfs1G1kvxn06OotosojOczugY6xCChxZi2uv2ZM= Subject key identifier: 41:EF:69:4C:D3:CC:B3:03:CC:61:99:7E:B0:AB:26:FA:0D:42:15:AA Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2 Certificate issuer: /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2 Certificate serial: 072A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft Manifest number: 0725 Signing time: Mon 16 Jun 2025 21:31:39 +0000 Manifest this update: Mon 16 Jun 2025 21:31:39 +0000 Manifest next update: Mon 23 Jun 2025 21:31:39 +0000 Files and hashes: 1: _SqdXvq5ERsKWjAT80wsva_QH8I.crl (hash: BgZZd2jZz/BnP61mR2cJHVIinIusksD908tJ7cb8Swg=) 2: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (hash: OHqpc630iPDrvxa3JYL+djk/kcEwI5eOHtscWctQIpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1834 (0x72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2 Validity Not Before: Jun 16 21:31:39 2025 GMT Not After : Jun 23 21:31:39 2025 GMT Subject: CN=68508d3b-c67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e2:c2:4f:02:08:11:d2:c3:20:f5:9a:5b:8d: 86:7c:17:b4:4d:f6:df:a1:f0:0e:b8:26:fd:f7:2e: a0:1a:9a:07:91:d3:f8:06:75:e9:1d:f7:2d:a6:51: 71:95:0e:bd:c1:37:5f:c0:ac:9a:f3:71:30:4e:a3: 03:e4:8d:67:ec:81:0c:65:5a:54:3b:44:21:8e:fb: 43:c9:4a:7f:29:1d:92:9c:f8:3e:f5:40:ec:93:a0: a1:f9:9b:a0:bf:f7:e8:93:8d:ef:20:c6:74:1f:62: fb:ae:0b:e1:47:78:f9:fe:df:6b:12:e3:0d:d7:ac: cf:28:b5:17:56:66:0e:72:30:33:4f:31:f4:80:20: 1b:30:7d:22:d2:d1:98:ba:b9:20:fe:15:14:3b:99: b7:b0:b3:ec:0a:99:54:22:8e:98:7f:72:d2:30:46: 6b:7f:c3:8f:14:e3:9f:af:3f:25:fc:d4:9c:c3:a4: 03:cb:90:0b:40:bd:7e:67:c2:23:ab:c5:41:9d:75: 39:27:21:55:57:04:36:99:a6:00:4f:49:85:e4:ba: 26:40:e2:d2:c0:a3:dc:4d:42:b1:ce:5b:25:e8:08: 77:9d:a0:90:b6:2e:dc:c2:ab:f3:28:47:03:ba:d1: 66:cb:ab:2b:93:48:3b:db:8b:b8:fd:72:c3:ec:a4: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EF:69:4C:D3:CC:B3:03:CC:61:99:7E:B0:AB:26:FA:0D:42:15:AA X509v3 Authority Key Identifier: keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:67:7c:85:02:04:c3:41:59:b9:f3:ec:73:31:e3:59:74:7b: a7:2f:8d:55:c1:5d:ba:87:ef:f0:68:81:c7:f9:37:cc:c2:17: 97:b3:dd:c4:fd:00:56:9f:85:22:f2:02:f8:45:ac:63:9e:ae: 87:45:55:f2:20:7a:b8:12:1f:6d:9b:c9:2f:52:ad:b3:0c:e8: de:93:c0:07:0a:dd:5c:0c:45:a9:53:00:9b:5e:4f:ee:fa:fd: e3:a6:60:9b:b3:38:67:7e:79:03:17:52:c1:1c:2c:11:04:df: c7:d7:bc:c4:9f:89:65:1e:5a:55:16:92:b8:fd:64:d4:c6:f4: 15:82:6d:79:f9:66:2a:57:9a:fb:cb:e5:4c:b7:e4:92:e3:ee: a9:68:f7:68:cf:ba:cf:02:60:dc:50:1c:bd:6d:a0:eb:5d:86: d6:fd:d2:79:6d:ef:07:32:91:59:03:09:67:4d:a4:90:e9:c0: fd:b6:e6:a7:4b:e3:56:f4:23:19:40:2b:ba:5d:f6:d2:f5:81: e8:30:37:71:8b:f8:d9:69:07:29:ec:1f:18:27:fd:42:5e:e8: 42:ce:23:44:bc:fd:25:a7:f5:32:9a:79:e4:88:eb:5d:51:24: c7:30:9d:1e:72:27:01:54:55:df:3c:d2:4e:22:4b:9d:b1:82: b5:0e:b0:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4OUIxMTAvBgNVBAUTKEZEMkE5RDVFRkFCOTExMUIwQTVBMzAxM0YzNEMyQ0JE QUZEMDFGQzIwHhcNMjUwNjE2MjEzMTM5WhcNMjUwNjIzMjEzMTM5WjAYMRYwFAYD VQQDEw02ODUwOGQzYi1jNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+LCTwIIEdLDIPWaW42GfBe0TfbfofAOuCb99y6gGpoHkdP4BnXpHfctplFx lQ69wTdfwKya83EwTqMD5I1n7IEMZVpUO0QhjvtDyUp/KR2SnPg+9UDsk6Ch+Zug v/fok43vIMZ0H2L7rgvhR3j5/t9rEuMN16zPKLUXVmYOcjAzTzH0gCAbMH0i0tGY urkg/hUUO5m3sLPsCplUIo6Yf3LSMEZrf8OPFOOfrz8l/NScw6QDy5ALQL1+Z8Ij q8VBnXU5JyFVVwQ2maYAT0mF5LomQOLSwKPcTUKxzlsl6Ah3naCQti7cwqvzKEcD utFmy6srk0g724u4/XLD7KTfoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHvaUzT zLMDzGGZfrCrJvoNQhWqMB8GA1UdIwQYMBaAFP0qnV76uREbClowE/NMLL2v0B/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTg5Qi8zMjhCREQ0MDM4 NzIxMUVCOTk3QUEyM0FDNEY5QUUwMi9fU3FkWHZxNUVSc0tXakFUODB3c3ZhX1FI OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19TcWRYdnE1RVJzS1dqQVQ4MHdzdmFfUUg4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTg5Qi8zMjhCREQ0MDM4NzIxMUVCOTk3QUEyM0FDNEY5QUUwMi9fU3FkWHZxNUVS c0tXakFUODB3c3ZhX1FIOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdZ3yFAgTDQVm58+xzMeNZdHunL41VwV26h+/waIHH+TfMwheXs93E /QBWn4Ui8gL4Raxjnq6HRVXyIHq4Eh9tm8kvUq2zDOjek8AHCt1cDEWpUwCbXk/u +v3jpmCbszhnfnkDF1LBHCwRBN/H17zEn4llHlpVFpK4/WTUxvQVgm15+WYqV5r7 y+VMt+SS4+6paPdoz7rPAmDcUBy9baDrXYbW/dJ5be8HMpFZAwlnTaSQ6cD9tuan S+NW9CMZQCu6XfbS9YHoMDdxi/jZaQcp7B8YJ/1CXuhCziNEvP0lp/UymnnkiOtd USTHMJ0ecicBVFXfPNJOIkudsYK1DrBa -----END CERTIFICATE-----Generated at Wed Jun 18 13:19:42 2025 by rpki-client