$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json) Hash identifier: nwGSXxfleEOpl5y2GR8sTbu84sZ9eIWvFp5ZHEq+7nE= Subject key identifier: 0D:53:69:0A:CE:D6:42:8C:C0:8E:23:40:AE:5C:E5:7A:76:64:D6:68 Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Certificate serial: 0761 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft Manifest number: 075C Signing time: Sat 14 Jun 2025 21:21:27 +0000 Manifest this update: Sat 14 Jun 2025 21:21:26 +0000 Manifest next update: Sat 21 Jun 2025 21:21:26 +0000 Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: NFJWpp/TK0KiUUdTdwNdnKkx14ZMA+CK4dhNvxlsgtc=) 2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1889 (0x761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Validity Not Before: Jun 14 21:21:26 2025 GMT Not After : Jun 21 21:21:26 2025 GMT Subject: CN=684de7d7-611c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:23:6d:2e:26:26:56:1a:ce:e4:b8:7b:3d: 54:ed:2c:dc:f2:82:4b:01:0d:81:53:36:9d:ff:6f: 84:1d:c0:10:0b:b8:28:82:88:17:86:50:44:c8:04: 5d:d8:fc:91:d1:77:a7:06:7b:38:d1:17:e8:08:b4: 52:90:4e:2e:6b:46:2b:af:f1:77:2f:62:9b:2f:0b: 49:65:99:60:47:25:3e:93:9a:28:1b:50:54:fe:a5: 80:13:bd:23:53:84:fd:d0:1d:c3:f1:41:06:b0:b6: 60:e4:3e:7b:70:b7:c9:e0:b3:5d:93:c5:db:07:a1: ee:d6:02:67:db:e2:77:cc:f5:7e:f1:7c:6d:ed:0f: 84:e1:b6:c8:09:24:a0:aa:ca:0c:1e:4d:19:22:2b: 2c:6b:98:4f:44:83:7b:0a:e6:76:b6:7a:47:e5:3e: 2f:ff:3a:fc:cd:ae:b6:72:9e:81:63:06:bf:e3:11: 9d:9d:7f:cc:28:3c:1e:f7:c8:89:f2:64:6f:16:48: f6:4e:e9:35:a6:02:c4:e0:35:5d:43:f0:ab:2f:c4: 6e:8d:25:af:31:bb:fa:61:29:ff:95:3b:48:62:b8: 3d:d2:fc:b2:d8:f8:64:1c:93:ef:d9:a1:06:7f:80: 17:37:1d:58:5b:14:4e:99:9b:19:9e:b1:f7:de:c3: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:53:69:0A:CE:D6:42:8C:C0:8E:23:40:AE:5C:E5:7A:76:64:D6:68 X509v3 Authority Key Identifier: keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:69:96:05:ff:ed:a1:2e:6c:f0:ae:95:2a:7f:16:7c:8b:1f: a1:bf:91:60:84:cf:a0:a1:21:9e:8f:6c:a5:c9:cf:45:19:dd: 85:16:2f:cd:2d:19:d0:7d:59:bb:9f:98:a2:a6:28:8b:a7:79: 07:c3:25:2f:3f:dc:23:04:bf:2c:ad:aa:14:d9:56:71:64:96: c3:32:08:77:88:e0:e7:20:b9:43:a7:a7:10:c9:86:e1:8c:60: dd:75:4f:b7:a5:db:2c:22:ce:25:10:ff:d8:2a:de:0d:29:b3: 35:d0:b0:2d:2b:b0:fe:e1:21:51:68:27:7f:f5:b9:aa:f1:8e: 2e:d4:45:f5:b6:15:e8:18:1a:85:92:a8:7f:0b:a0:c9:0a:fd: 1b:1b:09:6a:2d:da:14:80:b2:97:86:96:8f:22:4b:5c:63:57: 9b:59:46:44:fb:d7:ff:51:40:0b:18:69:25:15:8e:c5:60:99: c6:33:64:0c:4b:66:60:d9:ae:90:8f:0b:5a:f6:e5:c9:fe:87: f8:8f:20:5e:c6:6c:cc:00:c1:b4:69:87:c6:23:e9:f0:82:d4: dd:f8:d0:3c:ad:0c:52:8b:de:5c:65:62:3c:9c:28:21:d1:71: 28:96:4c:fe:c4:9f:fc:4f:ea:65:ed:a9:bd:25:b7:83:f3:29: 59:18:e0:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1 Qjg4MDk4RDEwHhcNMjUwNjE0MjEyMTI2WhcNMjUwNjIxMjEyMTI2WjAYMRYwFAYD VQQDEw02ODRkZTdkNy02MTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtn8jbS4mJlYazuS4ez1U7Szc8oJLAQ2BUzad/2+EHcAQC7gogogXhlBEyARd 2PyR0XenBns40RfoCLRSkE4ua0Yrr/F3L2KbLwtJZZlgRyU+k5ooG1BU/qWAE70j U4T90B3D8UEGsLZg5D57cLfJ4LNdk8XbB6Hu1gJn2+J3zPV+8Xxt7Q+E4bbICSSg qsoMHk0ZIissa5hPRIN7CuZ2tnpH5T4v/zr8za62cp6BYwa/4xGdnX/MKDwe98iJ 8mRvFkj2Tuk1pgLE4DVdQ/CrL8RujSWvMbv6YSn/lTtIYrg90vyy2PhkHJPv2aEG f4AXNx1YWxROmZsZnrH33sN4ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1TaQrO 1kKMwI4jQK5c5Xp2ZNZoMB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1aZYF/+2hLmzwrpUqfxZ8ix+hv5FghM+goSGej2ylyc9FGd2FFi/N LRnQfVm7n5iipiiLp3kHwyUvP9wjBL8sraoU2VZxZJbDMgh3iODnILlDp6cQyYbh jGDddU+3pdssIs4lEP/YKt4NKbM10LAtK7D+4SFRaCd/9bmq8Y4u1EX1thXoGBqF kqh/C6DJCv0bGwlqLdoUgLKXhpaPIktcY1ebWUZE+9f/UUALGGklFY7FYJnGM2QM S2Zg2a6Qjwta9uXJ/of4jyBexmzMAMG0aYfGI+nwgtTd+NA8rQxSi95cZWI8nCgh 0XEolkz+xJ/8T+pl7am9JbeD8ylZGOCT -----END CERTIFICATE-----Generated at Sun Jun 15 08:37:19 2025 by rpki-client