$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json) Hash identifier: R3VngAgqxsVWTmhOlewNFRZYkWsrFGDub5x8U7MRsN8= Subject key identifier: C0:25:23:BA:67:ED:76:58:44:2F:D9:59:1F:B5:44:6A:F5:71:A9:C8 Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft Manifest number: 85 Signing time: Fri 13 Jun 2025 05:32:22 +0000 Manifest this update: Fri 13 Jun 2025 05:32:21 +0000 Manifest next update: Fri 20 Jun 2025 05:32:21 +0000 Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: 4rJw6D//sLXfQtTCKXbdwMrzqZs1YsCTquk/8WtiY00=) 2: 35525B92845611EFB053C341C4F9AE02.roa (hash: VrKew/904a7WGaHwfTfVmRygoJsUgD+2JGEhLd8TxAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Validity Not Before: Jun 13 05:32:21 2025 GMT Not After : Jun 20 05:32:21 2025 GMT Subject: CN=684bb7e5-9f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:3b:12:b4:93:6c:c8:ac:1f:73:34:c2:70: f5:91:d3:9f:5b:75:ec:1e:bf:94:fb:b1:4c:f7:92: 98:03:87:4f:b3:02:52:d3:95:e0:2b:06:68:43:6f: 82:31:2e:80:1e:55:b1:47:28:05:66:df:22:11:ff: 29:fc:b3:83:94:81:b6:12:38:c6:3b:08:3d:63:f7: 39:a0:1b:1d:29:72:32:c5:d2:b9:a2:81:f8:de:d4: 23:c1:ff:5b:9f:7b:61:90:7e:77:13:5a:4c:38:50: 66:19:83:fd:05:3f:7b:2e:5d:b8:1c:92:a5:c6:5e: ff:02:d1:37:40:f2:d7:0d:c2:79:6f:62:70:97:70: 19:37:cc:54:60:13:cd:ae:74:9e:58:22:17:e1:d4: 7f:4d:37:86:10:73:a9:69:9b:07:b8:c3:0d:ba:36: 96:aa:32:6d:6c:7f:78:82:40:75:ef:05:d5:93:10: 31:64:4d:99:ea:1f:24:44:06:11:44:5f:ae:20:dc: dd:d2:2f:a5:c3:4e:33:3b:a7:46:ce:a5:d0:2f:b9: 7a:45:61:b6:a5:21:6c:ec:bc:75:1d:f4:95:0a:05: d0:9d:57:08:1c:04:ba:15:a0:d9:56:a5:55:ec:82: 80:61:b7:d9:8e:67:78:4b:22:34:48:30:ae:23:79: 9b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:25:23:BA:67:ED:76:58:44:2F:D9:59:1F:B5:44:6A:F5:71:A9:C8 X509v3 Authority Key Identifier: keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:88:9b:ed:89:e7:9c:a9:6d:a1:b0:ab:db:af:32:57:21:1a: b0:84:b4:ba:8d:c7:b8:f9:54:f7:de:32:bc:5b:eb:91:0c:ca: e7:9f:5d:68:8f:8b:fc:6f:c1:ad:8b:86:3d:7d:1f:32:d2:0a: 3c:ea:77:44:4f:1a:fa:9a:0d:c7:cd:82:10:d7:ec:01:41:22: f9:c7:70:1d:cd:fe:a0:e5:81:dc:b2:96:a4:87:a0:04:39:a3: 69:94:32:d5:7f:96:83:7c:03:f4:4c:3b:9e:72:eb:e7:16:c1: b4:48:27:ab:95:ad:3a:97:91:87:b5:0e:5b:0c:36:72:fd:fa: be:2d:36:e9:a4:97:d8:30:54:e1:aa:81:33:84:d5:4c:79:34: 82:a8:4e:c3:28:db:df:07:66:7a:53:9a:cc:cc:b8:7a:13:a6: 15:8b:ac:25:b0:94:02:69:7f:37:37:69:89:61:5e:51:08:6d: b4:d9:a1:0f:d8:03:a5:0a:1a:38:c8:8a:8d:00:26:9c:ab:1a: 38:36:73:91:d7:29:4b:3b:c7:db:15:2b:e4:eb:18:26:c3:1d: 82:61:18:85:c5:20:60:e9:3d:23:f1:dd:24:85:73:e8:d6:94: 7c:f6:c9:52:67:c9:05:ad:e3:ad:98:93:ec:10:bf:d1:77:63: 13:af:64:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM0RkYxMTAvBgNVBAUTKDQ5NDc1QjU5NzVGMTk3OTg5NUEzQzZFNDQxODNFNEJD QTJFODM0NkYwHhcNMjUwNjEzMDUzMjIxWhcNMjUwNjIwMDUzMjIxWjAYMRYwFAYD VQQDEw02ODRiYjdlNS05ZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxQ7ErSTbMisH3M0wnD1kdOfW3XsHr+U+7FM95KYA4dPswJS05XgKwZoQ2+C MS6AHlWxRygFZt8iEf8p/LODlIG2EjjGOwg9Y/c5oBsdKXIyxdK5ooH43tQjwf9b n3thkH53E1pMOFBmGYP9BT97Ll24HJKlxl7/AtE3QPLXDcJ5b2Jwl3AZN8xUYBPN rnSeWCIX4dR/TTeGEHOpaZsHuMMNujaWqjJtbH94gkB17wXVkxAxZE2Z6h8kRAYR RF+uINzd0i+lw04zO6dGzqXQL7l6RWG2pSFs7Lx1HfSVCgXQnVcIHAS6FaDZVqVV 7IKAYbfZjmd4SyI0SDCuI3mbRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAlI7pn 7XZYRC/ZWR+1RGr1canIMB8GA1UdIwQYMBaAFElHW1l18ZeYlaPG5EGD5Lyi6DRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzRGRi85QzU2QkU0Mjg0 NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1aVZvOGJrUVlQa3ZLTG9O RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVZGJXWFh4bDVpVm84YmtRWVBrdktMb05HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzRGRi85QzU2QkU0Mjg0NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1 aVZvOGJrUVlQa3ZLTG9ORzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmiJvtieecqW2hsKvbrzJXIRqwhLS6jce4+VT33jK8W+uRDMrnn11o j4v8b8Gti4Y9fR8y0go86ndETxr6mg3HzYIQ1+wBQSL5x3Adzf6g5YHcspakh6AE OaNplDLVf5aDfAP0TDuecuvnFsG0SCerla06l5GHtQ5bDDZy/fq+LTbppJfYMFTh qoEzhNVMeTSCqE7DKNvfB2Z6U5rMzLh6E6YVi6wlsJQCaX83N2mJYV5RCG202aEP 2AOlCho4yIqNACacqxo4NnOR1ylLO8fbFSvk6xgmwx2CYRiFxSBg6T0j8d0khXPo 1pR89slSZ8kFreOtmJPsEL/Rd2MTr2SO -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:24 2025 by rpki-client