$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json) Hash identifier: CKPJzkd5rioM6JfPfyOUCKwXuvxYkEBUgLP26tTPnR8= Subject key identifier: C0:48:C5:26:21:BA:B2:EC:C4:85:4F:94:75:1A:2D:B1:B5:82:72:28 Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft Manifest number: D2 Signing time: Tue 17 Jun 2025 04:37:14 +0000 Manifest this update: Tue 17 Jun 2025 04:37:14 +0000 Manifest next update: Tue 24 Jun 2025 04:37:14 +0000 Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: M1SXzzH9ekEnH6B55iGV3L2PqeB5FbTWptDVrmjViSc=) 2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: yRSzHrzurf6XSOu6xC9tCIXU5IVd5pxNWSd3g3cqSyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: Jun 17 04:37:14 2025 GMT Not After : Jun 24 04:37:14 2025 GMT Subject: CN=6850f0fa-0188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:25:88:b4:e6:ee:2c:85:46:9e:18:39:48: e4:9e:a7:a3:d8:62:02:87:e8:04:bf:49:91:f0:c5: 79:4b:03:d5:c0:b8:30:df:50:d2:84:30:4a:53:d5: f0:6a:ef:6f:1b:52:d0:db:44:1c:e5:a0:a0:a6:cd: 25:8c:62:2e:eb:e4:16:ee:68:6a:17:bd:e1:ef:e0: fc:5e:5b:d8:30:b2:01:1f:14:22:09:b5:3f:3f:61: c1:2d:6a:9e:6a:ed:42:39:95:9b:d6:cf:9a:54:f5: 40:27:b0:42:74:b2:ae:1e:c0:7a:58:e8:c7:80:02: 94:eb:0e:61:c0:49:3e:78:db:8a:89:20:af:c7:15: 2d:5b:96:90:d5:54:5d:43:58:d9:2b:a8:36:1e:1d: 24:93:18:cc:86:62:b6:c3:af:38:19:84:e4:83:12: 9d:2f:23:b5:49:bc:c6:62:d3:b4:96:95:c9:e5:af: 56:32:93:61:52:3e:bd:fe:a0:5e:e6:3c:e8:24:85: 6f:82:f3:be:a4:19:94:e9:af:8b:37:f4:27:1e:4b: 4e:fa:f9:1b:e7:07:8e:22:63:32:82:82:a7:6f:68: 9b:69:be:f5:98:29:a2:d4:12:4c:0b:12:7d:dc:48: 8c:42:00:ed:b4:2b:2e:e8:74:ec:49:44:1c:69:80: d4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:48:C5:26:21:BA:B2:EC:C4:85:4F:94:75:1A:2D:B1:B5:82:72:28 X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:8a:e7:6b:61:80:24:c2:3d:b3:85:ed:55:ae:ab:ed:de:73: 66:5a:70:1c:de:e6:9f:28:91:3c:d9:a7:89:47:c9:57:33:5e: 04:a1:6f:6f:4a:38:e0:4d:be:ae:a0:76:ca:b4:69:21:f4:dc: 85:8b:f1:e1:5a:27:a0:34:7a:11:ed:2c:a0:05:5e:15:13:d4: b0:96:1c:81:d6:3b:49:54:a4:2e:c7:fe:b2:b8:dc:79:b7:3e: 40:fe:10:87:2c:c6:8c:fb:a0:34:6b:5e:00:50:50:a7:73:77: 92:b4:a5:d6:d8:b6:44:50:dd:9e:12:1f:2c:d9:96:a7:01:f0: a7:73:86:0a:05:40:ad:4e:77:bc:cb:90:42:e8:95:1a:29:71: 68:40:97:2c:8c:64:89:5e:10:b5:d3:94:9c:51:4b:bf:2f:3f: 0d:d8:ee:e0:db:66:fc:12:fc:20:d8:03:2e:7f:5a:c6:2f:0d: 80:79:b2:76:1c:2e:58:54:d0:fb:02:79:b3:4e:a1:8d:99:6f: ed:28:66:8b:06:65:7f:b6:68:0d:0b:e0:29:4d:3c:df:41:75: 54:4f:58:f1:f3:4d:85:e9:78:c4:7c:12:b3:19:46:2c:95:31: 34:c1:7f:63:9a:d1:72:df:08:13:62:bb:9e:13:ad:b3:70:e1: e9:77:2e:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1 Mjg4NjM4MTEwHhcNMjUwNjE3MDQzNzE0WhcNMjUwNjI0MDQzNzE0WjAYMRYwFAYD VQQDEw02ODUwZjBmYS0wMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1AliLTm7iyFRp4YOUjknqej2GICh+gEv0mR8MV5SwPVwLgw31DShDBKU9Xw au9vG1LQ20Qc5aCgps0ljGIu6+QW7mhqF73h7+D8XlvYMLIBHxQiCbU/P2HBLWqe au1COZWb1s+aVPVAJ7BCdLKuHsB6WOjHgAKU6w5hwEk+eNuKiSCvxxUtW5aQ1VRd Q1jZK6g2Hh0kkxjMhmK2w684GYTkgxKdLyO1SbzGYtO0lpXJ5a9WMpNhUj69/qBe 5jzoJIVvgvO+pBmU6a+LN/QnHktO+vkb5weOImMygoKnb2ibab71mCmi1BJMCxJ9 3EiMQgDttCsu6HTsSUQcaYDUxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBIxSYh urLsxIVPlHUaLbG1gnIoMB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUyQi9GODM2QkRFQzBDRUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURf WnJmeDVNa1AtWWRTaUdPQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2iudrYYAkwj2zhe1Vrqvt3nNmWnAc3uafKJE82aeJR8lXM14EoW9v SjjgTb6uoHbKtGkh9NyFi/HhWiegNHoR7SygBV4VE9SwlhyB1jtJVKQux/6yuNx5 tz5A/hCHLMaM+6A0a14AUFCnc3eStKXW2LZEUN2eEh8s2ZanAfCnc4YKBUCtTne8 y5BC6JUaKXFoQJcsjGSJXhC105ScUUu/Lz8N2O7g22b8Evwg2AMuf1rGLw2AebJ2 HC5YVND7AnmzTqGNmW/tKGaLBmV/tmgNC+ApTTzfQXVUT1jx802F6XjEfBKzGUYs lTE0wX9jmtFy3wgTYrueE62zcOHpdy4y -----END CERTIFICATE-----Generated at Wed Jun 18 03:01:09 2025 by rpki-client