$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json) Hash identifier: NneSrQGg+jN5FXFeSAhXEXcq9+n5ksUU8J/t8GdYNdc= Subject key identifier: C0:34:98:4F:46:94:50:2A:55:DF:50:B8:AD:5E:6E:CD:BB:3C:B0:BB Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft Manifest number: 0168 Signing time: Tue 17 Jun 2025 03:02:31 +0000 Manifest this update: Tue 17 Jun 2025 03:02:31 +0000 Manifest next update: Tue 24 Jun 2025 03:02:31 +0000 Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: uaQ2CMci9nMu0jKcbJHYTaQBf+GVLuqBxaq/tFRm+UY=) 2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 54qHC7QVMBwoC0O3cMcEci4Yy+Xl8hxRZfIa8v1MHj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Validity Not Before: Jun 17 03:02:31 2025 GMT Not After : Jun 24 03:02:31 2025 GMT Subject: CN=6850dac7-84ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5f:b4:94:d6:5c:d8:2d:2a:45:37:df:75:c6: 41:ed:72:d7:f7:33:51:0c:19:df:ec:47:6c:4b:7a: 6d:fd:e5:ec:7b:64:93:a3:44:6a:9c:3e:45:c6:17: 16:65:1e:99:c7:34:6e:28:d9:08:37:35:60:d0:a4: 6f:06:29:05:7d:5a:5a:0f:db:05:d3:80:70:24:7c: 20:6b:51:58:7a:db:01:bb:09:f3:57:53:8f:d0:e6: b1:96:12:7a:0c:99:d1:6f:56:a3:a1:06:e4:ce:01: 72:1a:5a:35:0b:8e:7d:68:41:16:db:9d:9f:0e:a8: 86:da:a3:9b:b5:2b:d5:bc:c1:12:20:2c:7f:42:fe: e3:f5:22:6b:7a:d1:61:cf:f0:13:45:fd:20:2d:df: 68:67:a1:44:02:5e:41:95:53:55:74:14:95:05:d6: 64:f4:cd:41:45:68:c3:60:82:e3:e3:35:6d:d5:84: 5b:1a:f9:21:1e:13:9e:83:4f:7e:76:de:6e:84:33: 6b:97:ac:39:16:00:3a:2e:51:1e:11:bf:a4:ed:ba: b1:b2:df:d0:41:8e:50:7c:6b:2a:b0:29:95:7d:60: e1:02:40:38:40:4d:1a:d2:42:13:eb:2c:a7:db:97: 70:d2:cd:9a:c8:6b:80:fd:dc:52:15:98:55:65:37: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:34:98:4F:46:94:50:2A:55:DF:50:B8:AD:5E:6E:CD:BB:3C:B0:BB X509v3 Authority Key Identifier: keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:25:6a:b7:97:f7:82:e4:b8:74:54:b1:16:3a:77:0b:d5:ee: 66:1e:e9:f3:68:30:1e:81:03:5c:fa:36:4c:d2:6a:b9:f1:8a: 0f:26:78:96:ae:f7:0f:46:29:85:06:f5:1d:59:95:ad:c4:d6: 26:60:c1:a5:8b:47:91:c2:44:6a:f0:54:f3:7d:89:79:cf:b1: e8:81:0f:23:af:49:e5:46:22:f8:af:67:d8:1c:e0:b2:21:28: b6:fe:aa:e3:c2:b3:27:d3:10:3a:45:45:a7:fa:98:eb:63:8a: f6:93:12:41:14:9e:1e:38:02:75:cd:b8:58:48:36:0d:47:ea: f3:97:ec:5b:f5:c6:c0:dd:90:00:b8:4e:4e:e2:86:70:97:7c: 7b:9d:84:3a:ab:f4:33:49:6a:6c:fd:ce:f9:30:40:b5:56:11: da:c5:2e:88:0d:3f:03:7d:74:94:96:d9:9b:eb:db:58:8f:e7: 89:50:08:09:08:2c:a4:3f:51:e2:90:29:56:52:ec:3f:c8:ad: 74:73:25:0a:94:70:01:cc:72:31:aa:65:8a:3b:97:d3:79:c1: e3:dc:33:f6:93:df:fe:7c:6b:5c:04:a4:72:df:9d:4a:fd:ad: 71:7d:b3:34:d1:4a:7a:e9:c1:59:aa:ed:36:bf:13:fe:98:59: 4b:6e:4a:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD NEY4OTdCNzYwHhcNMjUwNjE3MDMwMjMxWhcNMjUwNjI0MDMwMjMxWjAYMRYwFAYD VQQDEw02ODUwZGFjNy04NGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01+0lNZc2C0qRTffdcZB7XLX9zNRDBnf7EdsS3pt/eXse2STo0RqnD5FxhcW ZR6ZxzRuKNkINzVg0KRvBikFfVpaD9sF04BwJHwga1FYetsBuwnzV1OP0OaxlhJ6 DJnRb1ajoQbkzgFyGlo1C459aEEW252fDqiG2qObtSvVvMESICx/Qv7j9SJretFh z/ATRf0gLd9oZ6FEAl5BlVNVdBSVBdZk9M1BRWjDYILj4zVt1YRbGvkhHhOeg09+ dt5uhDNrl6w5FgA6LlEeEb+k7bqxst/QQY5QfGsqsCmVfWDhAkA4QE0a0kIT6yyn 25dw0s2ayGuA/dxSFZhVZTfzqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMA0mE9G lFAqVd9QuK1ebs27PLC7MB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1 eHptLXBzMVo1NUxFLUplM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEJWq3l/eC5Lh0VLEWOncL1e5mHunzaDAegQNc+jZM0mq58YoPJniW rvcPRimFBvUdWZWtxNYmYMGli0eRwkRq8FTzfYl5z7HogQ8jr0nlRiL4r2fYHOCy ISi2/qrjwrMn0xA6RUWn+pjrY4r2kxJBFJ4eOAJ1zbhYSDYNR+rzl+xb9cbA3ZAA uE5O4oZwl3x7nYQ6q/QzSWps/c75MEC1VhHaxS6IDT8DfXSUltmb69tYj+eJUAgJ CCykP1HikClWUuw/yK10cyUKlHABzHIxqmWKO5fTecHj3DP2k9/+fGtcBKRy351K /a1xfbM00Up66cFZqu02vxP+mFlLbkrd -----END CERTIFICATE-----Generated at Wed Jun 18 03:12:07 2025 by rpki-client