$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft File: SXppmDQJrXDCF1ZAccz1vjTFG8c.mft (raw, json) Hash identifier: 2bKhvdeP6kiqyyTsHsAL/ijsZwxjIGo5vrDNmL1lCxU= Subject key identifier: A6:DC:32:BF:6E:D9:7C:06:61:52:E7:5B:FD:71:9A:02:9A:76:24:97 Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft Manifest number: 046C Signing time: Thu 12 Jun 2025 23:44:15 +0000 Manifest this update: Thu 12 Jun 2025 23:44:14 +0000 Manifest next update: Thu 19 Jun 2025 23:44:14 +0000 Files and hashes: 1: SXppmDQJrXDCF1ZAccz1vjTFG8c.crl (hash: DnIIUuujUxqnq8qRVyQs1ItUDCdUrk7Yd55k/STl+zM=) 2: E9237B16683211EDA8B5DD35C4F9AE02.roa (hash: m/W09ZD2DgnbOhKrF8d5SNMRuuUCLsB529DhjnozbkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C751F, serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Validity Not Before: Jun 12 23:44:14 2025 GMT Not After : Jun 19 23:44:14 2025 GMT Subject: CN=684b664e-3fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:80:26:8a:19:07:48:02:b2:c1:43:eb:ea:b1: bd:6c:6b:01:be:03:c4:60:e2:fd:ba:4c:d5:a6:64: aa:50:be:a0:e5:68:4d:71:db:88:01:36:8b:84:d2: ff:5f:20:f1:bb:cc:be:9e:42:33:99:04:78:90:b2: ec:5b:32:48:65:59:c4:a7:c6:20:8b:7f:56:43:6e: 5a:b1:8e:c2:5b:05:a2:dd:0b:61:66:0c:3a:ca:43: 1f:27:1b:c1:0b:a6:9d:53:b7:d7:c1:c9:c2:1a:9b: 47:15:94:da:8f:d3:a5:a3:33:40:51:99:8b:49:87: 0b:1f:d4:2b:9f:35:90:3b:1f:f3:df:d3:4b:9a:99: 67:58:78:7b:75:3e:c1:69:2a:0f:3c:49:6c:74:07: ee:46:34:08:c2:39:57:18:5b:1a:fc:6f:11:52:64: 24:78:62:17:ac:00:59:b5:ba:0a:c1:ed:62:ba:3c: c1:25:ee:e4:50:39:0d:26:f3:6a:d7:96:98:1e:68: e1:50:86:0a:8a:fd:cb:00:84:97:a7:48:a5:86:f0: de:ad:e2:3f:22:1f:17:79:8f:25:1e:a0:39:4c:ae: 15:f0:eb:74:78:1d:58:24:ff:4b:38:d5:4d:91:94: 22:f0:fa:d8:a6:05:c7:cf:6f:71:29:12:d9:74:00: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DC:32:BF:6E:D9:7C:06:61:52:E7:5B:FD:71:9A:02:9A:76:24:97 X509v3 Authority Key Identifier: keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b0:06:cb:d9:0f:66:06:db:b1:ed:06:32:5f:ad:75:00:4b: 59:94:ba:06:42:e8:8d:0c:66:3e:51:56:3d:64:89:e6:ed:da: ca:c2:0a:16:6a:a9:d7:2c:ae:f1:c2:12:9f:6e:d2:94:70:ee: 0c:a0:8c:b5:64:5f:d1:7c:8f:b1:00:39:73:66:7a:af:14:ba: 18:b9:a8:ec:f8:61:1a:46:08:6b:23:08:96:87:65:1e:5c:47: 7c:33:f4:7f:84:2a:d3:7b:7d:7b:83:7a:ed:99:2a:90:ed:60: dd:04:f0:5b:af:f6:31:91:5f:ee:ca:65:54:be:25:c8:ce:e4: 93:f2:cb:3c:ad:bc:33:0d:57:34:00:56:f5:92:bc:de:6d:b6: 01:7f:c6:11:cd:7a:48:6a:5a:cd:22:98:3d:82:a5:82:2d:7e: d9:b4:78:ce:ce:53:c4:51:9e:d9:54:d7:cc:9c:4a:e8:bc:fb: 20:16:c1:49:f1:8b:33:13:c8:2f:a6:f2:6d:c2:fb:e5:fb:e4: 4c:02:50:ba:d5:de:63:73:33:b1:a5:ef:5c:e7:9b:3d:0c:d3: c3:2e:d2:d5:a1:be:87:a1:07:73:bf:79:9f:52:7c:98:98:ae: 43:a2:53:95:0e:70:32:3f:eb:1b:e3:d2:e3:33:f5:20:4d:0c: 1b:d9:e9:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc1MUYxMTAvBgNVBAUTKDQ5N0E2OTk4MzQwOUFENzBDMjE3NTY0MDcxQ0NGNUJF MzRDNTFCQzcwHhcNMjUwNjEyMjM0NDE0WhcNMjUwNjE5MjM0NDE0WjAYMRYwFAYD VQQDEw02ODRiNjY0ZS0zZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44AmihkHSAKywUPr6rG9bGsBvgPEYOL9ukzVpmSqUL6g5WhNcduIATaLhNL/ XyDxu8y+nkIzmQR4kLLsWzJIZVnEp8Ygi39WQ25asY7CWwWi3QthZgw6ykMfJxvB C6adU7fXwcnCGptHFZTaj9OlozNAUZmLSYcLH9QrnzWQOx/z39NLmplnWHh7dT7B aSoPPElsdAfuRjQIwjlXGFsa/G8RUmQkeGIXrABZtboKwe1iujzBJe7kUDkNJvNq 15aYHmjhUIYKiv3LAISXp0ilhvDereI/Ih8XeY8lHqA5TK4V8Ot0eB1YJP9LONVN kZQi8PrYpgXHz29xKRLZdABx1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbcMr9u 2XwGYVLnW/1xmgKadiSXMB8GA1UdIwQYMBaAFEl6aZg0Ca1wwhdWQHHM9b40xRvH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzUxRi8xODM5ODFEMjUx ODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJYRENGMVpBY2N6MXZqVEZH OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYcHBtRFFKclhEQ0YxWkFjY3oxdmpURkc4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzUxRi8xODM5ODFEMjUxODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJY RENGMVpBY2N6MXZqVEZHOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtsAbL2Q9mBtux7QYyX611AEtZlLoGQuiNDGY+UVY9ZInm7drKwgoW aqnXLK7xwhKfbtKUcO4MoIy1ZF/RfI+xADlzZnqvFLoYuajs+GEaRghrIwiWh2Ue XEd8M/R/hCrTe317g3rtmSqQ7WDdBPBbr/YxkV/uymVUviXIzuST8ss8rbwzDVc0 AFb1krzebbYBf8YRzXpIalrNIpg9gqWCLX7ZtHjOzlPEUZ7ZVNfMnErovPsgFsFJ 8YszE8gvpvJtwvvl++RMAlC61d5jczOxpe9c55s9DNPDLtLVob6HoQdzv3mfUnyY mK5DolOVDnAyP+sb49LjM/UgTQwb2ek6 -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:52 2025 by rpki-client