$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: Vktp08hLGntlL8iQqEX5xI0YVM8XpnJtFH4FzGujr20= Subject key identifier: C0:DF:70:27:58:DB:F8:BD:EB:AA:13:16:67:64:BE:57:7A:26:63:EF Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 1537 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 152E Signing time: Wed 18 Jun 2025 16:47:42 +0000 Manifest this update: Wed 18 Jun 2025 16:47:41 +0000 Manifest next update: Wed 25 Jun 2025 16:47:41 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: JheDdcw0WbxSApmm1xsOVXAldKXfuVNFLf/wBChDrak=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: UB3e/BzYZNzSWafIfT/8shx3CMwEAB4npfcc5DFGpRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5431 (0x1537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: Jun 18 16:47:41 2025 GMT Not After : Jun 25 16:47:41 2025 GMT Subject: CN=6852edae-600f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:90:f0:8f:a7:01:3c:84:5b:69:36:cd:7d: df:59:d9:6f:d2:e7:da:39:d7:bd:a5:f2:5e:73:72: 4a:87:07:ca:73:65:86:9e:e2:97:69:42:2b:e6:41: b7:e6:c6:f7:23:66:8a:b9:8f:68:5c:49:fe:63:86: bc:de:0e:41:d4:7d:5e:2a:73:b8:e2:1c:db:ed:b0: 17:d8:78:d1:4e:2c:ea:69:3c:a9:a4:b1:b8:9b:ad: ce:1b:9b:22:53:85:63:a9:54:16:7f:99:0f:fd:c6: ea:f6:99:38:70:a3:5a:0d:47:5e:3f:1b:b2:1d:b5: f8:bc:a7:bc:9f:c7:87:4d:f3:88:e3:c7:ed:2f:11: 81:44:11:b9:df:8a:3e:61:63:f8:74:30:27:20:de: 45:2d:7c:30:20:d6:53:fb:c9:bb:0b:f8:44:80:74: ef:b9:e7:b9:e0:d1:3e:12:dc:34:35:3b:d5:32:7e: f9:b1:a9:92:33:bd:f9:16:0e:48:21:8f:f2:44:bb: ae:aa:59:6b:e4:ac:18:8f:a4:41:39:85:99:8e:d3: 49:f7:36:a2:ec:e8:aa:e4:f8:4a:6c:26:93:75:db: b5:13:34:a9:72:1f:69:8f:2e:45:a5:5f:0e:fc:ca: 69:f5:36:41:ec:88:16:f0:62:3b:d2:13:8f:93:f3: f5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DF:70:27:58:DB:F8:BD:EB:AA:13:16:67:64:BE:57:7A:26:63:EF X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:58:d7:0f:57:32:03:cc:2b:d7:f6:57:eb:20:18:e6:d0:ae: 41:5d:1f:33:f1:d5:cb:d6:ca:ae:79:a1:38:89:50:4a:ca:ed: 0e:1c:ee:50:00:6f:17:81:ad:3e:cb:33:d8:b4:89:a6:3a:3b: 44:30:b0:1f:81:31:5d:af:ab:29:e7:76:7e:ed:28:f8:14:94: e2:bb:ff:29:74:63:20:54:70:36:b6:2d:bf:23:43:d4:f2:a1: 31:56:74:2d:85:7b:9d:7f:bc:29:22:2f:10:66:1e:5e:04:39: e5:ba:35:12:ec:ca:84:6d:d8:15:86:7f:e5:53:39:b4:38:52: bd:90:cb:15:bb:12:15:97:4e:de:c6:6d:20:d0:bd:36:c0:82: be:d4:59:98:b8:e5:c9:3a:6b:08:f0:e7:39:b8:54:68:c5:33: 0b:9b:02:4c:0f:66:e2:da:5f:cb:c7:61:5b:98:1a:bd:2f:1d: a5:da:71:19:d9:15:d5:27:fc:0f:fe:e2:f8:c5:b3:c6:7b:d9: 02:44:2b:e5:9f:1c:4f:7f:05:ca:c6:b5:62:14:71:c4:ae:c5: 4c:e5:10:1c:62:17:f5:07:ba:77:06:d9:55:a3:ec:e7:46:19: e1:d9:b7:18:52:96:64:f9:7e:03:e8:2f:2f:15:38:7a:20:9c: 27:e2:62:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUwNjE4MTY0NzQxWhcNMjUwNjI1MTY0NzQxWjAYMRYwFAYD VQQDEw02ODUyZWRhZS02MDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLeQ8I+nATyEW2k2zX3fWdlv0ufaOde9pfJec3JKhwfKc2WGnuKXaUIr5kG3 5sb3I2aKuY9oXEn+Y4a83g5B1H1eKnO44hzb7bAX2HjRTizqaTyppLG4m63OG5si U4VjqVQWf5kP/cbq9pk4cKNaDUdePxuyHbX4vKe8n8eHTfOI48ftLxGBRBG534o+ YWP4dDAnIN5FLXwwINZT+8m7C/hEgHTvuee54NE+Etw0NTvVMn75samSM735Fg5I IY/yRLuuqllr5KwYj6RBOYWZjtNJ9zai7Oiq5PhKbCaTddu1EzSpch9pjy5FpV8O /Mpp9TZB7IgW8GI70hOPk/P10wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDfcCdY 2/i966oTFmdkvld6JmPvMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCWNcPVzIDzCvX9lfrIBjm0K5BXR8z8dXL1squeaE4iVBKyu0OHO5Q AG8Xga0+yzPYtImmOjtEMLAfgTFdr6sp53Z+7Sj4FJTiu/8pdGMgVHA2ti2/I0PU 8qExVnQthXudf7wpIi8QZh5eBDnlujUS7MqEbdgVhn/lUzm0OFK9kMsVuxIVl07e xm0g0L02wIK+1FmYuOXJOmsI8Oc5uFRoxTMLmwJMD2bi2l/Lx2FbmBq9Lx2l2nEZ 2RXVJ/wP/uL4xbPGe9kCRCvlnxxPfwXKxrViFHHErsVM5RAcYhf1B7p3BtlVo+zn Rhnh2bcYUpZk+X4D6C8vFTh6IJwn4mIE -----END CERTIFICATE-----Generated at Fri Jun 20 03:22:55 2025 by rpki-client