$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: sMYT5wfiVvKu/JBFFZ1ToM1xx0QBuPu0qqMBfy08nfE= Subject key identifier: 94:7F:06:1C:BE:C0:06:AE:8A:70:85:96:AA:B1:33:E3:B0:A3:C6:77 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 04DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 04C2 Signing time: Thu 12 Jun 2025 23:31:01 +0000 Manifest this update: Thu 12 Jun 2025 23:31:01 +0000 Manifest next update: Thu 19 Jun 2025 23:31:01 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: 7OxgM1hLlbN3cQk6d8dDqKNrCG3GRTYq3pBcaLgzO4c=) 2: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: 00gQlkZJ/La3W11cygPUEyOgfEz6qTJK4E6QUbIb+4w=) 3: B1FD800CF32111EEB820DB5BC4F9AE02.roa (hash: h8Cn0q3McR7P4xiiOqk2s7pmYyQ4a4pHCFcF2i6fJFs=) 4: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: StmcDPPzK2yilWPNElLi3+ESljyQBtG5nEZLldO1WuA=) 5: E1B834D0F5D911EE878F7B7CC4F9AE02.roa (hash: AY+8DTHkr2vJtlLXSQfHDYYi6BNU94WVzll8RISRiyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1244 (0x4dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Jun 12 23:31:01 2025 GMT Not After : Jun 19 23:31:01 2025 GMT Subject: CN=684b6335-1675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:75:0c:5f:66:e6:cc:d1:13:33:29:9c:8d: df:57:55:1d:c1:2a:90:fb:c4:87:b2:84:20:a6:0b: 99:85:ec:34:86:70:f2:c2:4b:b0:72:8f:ba:d0:af: b7:ec:f7:b8:5d:ab:ff:ad:52:36:65:63:d9:14:1c: f3:a8:d6:5b:8b:e6:4c:18:f7:fd:48:02:40:6c:57: cc:7c:81:bb:61:0e:39:65:81:2a:47:9b:a2:74:57: 7e:b2:6a:da:ec:df:6f:c3:40:14:a5:79:28:1e:0a: c5:e3:29:0f:92:35:3d:02:d9:60:30:fb:bd:01:5a: 50:3e:2c:01:4a:ca:00:4f:5f:f8:e7:1f:aa:2a:7a: 00:e6:82:af:ce:e0:27:09:29:04:3e:7e:bd:9d:81: 0e:d4:07:2a:e2:50:01:f1:a8:60:ac:bc:3d:8f:38: 58:22:31:6d:c9:e8:dc:92:b7:1b:56:1f:ef:02:c6: b7:63:d0:f1:6f:20:a7:da:f1:d0:8f:a4:40:dd:c9: c7:5c:ef:9d:08:75:19:91:23:23:2e:b6:d5:3f:56: 47:a6:4e:82:d2:a1:31:80:e4:d9:82:f1:07:78:6a: da:64:d2:18:fd:59:ee:c8:da:bf:5f:83:47:45:f8: fb:4a:81:fe:c6:9b:a7:67:b4:22:d9:8c:7f:f5:0e: 75:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7F:06:1C:BE:C0:06:AE:8A:70:85:96:AA:B1:33:E3:B0:A3:C6:77 X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d1:58:70:2c:0f:c1:52:20:44:aa:e4:c7:38:35:96:b9:3a: c6:18:1b:4c:5a:24:d8:50:48:63:55:8e:0b:61:5e:48:f1:42: e1:01:09:f6:b8:f6:66:a3:03:fc:12:17:14:3e:e4:a1:c1:33: 06:60:73:13:f0:66:27:d3:f6:0e:68:03:be:f0:c3:28:68:78: ce:7a:5a:6b:77:e8:53:7f:de:e4:62:0a:8f:9d:1a:a5:35:b1: a9:c6:47:1d:50:49:76:a5:cd:27:6e:1a:35:6e:5d:89:83:e3: 42:16:33:24:cb:fa:60:b0:a4:e8:b0:9a:60:0d:6b:84:10:6b: f3:a0:55:d2:b9:94:2f:b9:da:38:68:d2:0f:a9:f2:b3:96:13: c6:f6:db:5b:7f:3e:6b:60:7b:3e:17:aa:13:a1:ad:24:a9:da: 33:94:6c:53:75:ce:89:5d:1e:cc:a4:d4:51:60:5e:a8:5c:dc: 33:93:f8:e9:83:ef:5c:8f:24:73:66:df:8a:df:bf:63:de:c9: ee:fa:f6:a0:2d:c1:a3:61:69:bf:ac:c4:14:a0:00:e8:89:5a: c0:82:25:2d:24:e3:cc:1b:66:f6:d1:21:bc:e4:f9:c1:39:65: 4c:de:75:00:d7:4b:70:21:96:d6:3c:da:a5:3e:3d:95:0d:5b: be:b3:92:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUwNjEyMjMzMTAxWhcNMjUwNjE5MjMzMTAxWjAYMRYwFAYD VQQDEw02ODRiNjMzNS0xNjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2591DF9m5szREzMpnI3fV1UdwSqQ+8SHsoQgpguZhew0hnDywkuwco+60K+3 7Pe4Xav/rVI2ZWPZFBzzqNZbi+ZMGPf9SAJAbFfMfIG7YQ45ZYEqR5uidFd+smra 7N9vw0AUpXkoHgrF4ykPkjU9AtlgMPu9AVpQPiwBSsoAT1/45x+qKnoA5oKvzuAn CSkEPn69nYEO1Acq4lAB8ahgrLw9jzhYIjFtyejckrcbVh/vAsa3Y9DxbyCn2vHQ j6RA3cnHXO+dCHUZkSMjLrbVP1ZHpk6C0qExgOTZgvEHeGraZNIY/VnuyNq/X4NH Rfj7SoH+xpunZ7Qi2Yx/9Q51VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJR/Bhy+ wAauinCFlqqxM+Owo8Z3MB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa0VhwLA/BUiBEquTHODWWuTrGGBtMWiTYUEhjVY4LYV5I8ULhAQn2 uPZmowP8EhcUPuShwTMGYHMT8GYn0/YOaAO+8MMoaHjOelprd+hTf97kYgqPnRql NbGpxkcdUEl2pc0nbho1bl2Jg+NCFjMky/pgsKTosJpgDWuEEGvzoFXSuZQvudo4 aNIPqfKzlhPG9ttbfz5rYHs+F6oToa0kqdozlGxTdc6JXR7MpNRRYF6oXNwzk/jp g+9cjyRzZt+K379j3snu+vagLcGjYWm/rMQUoADoiVrAgiUtJOPMG2b20SG85PnB OWVM3nUA10twIZbWPNqlPj2VDVu+s5Jd -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:09 2025 by rpki-client