$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft File: scWMB4UVntc2lq-zEtI1z0DzxEE.mft (raw, json) Hash identifier: F7xR0j17SS/ZdIjfditillL4P15tpfo3a2HaZR+e2EU= Subject key identifier: 1B:16:EA:2F:CB:98:AD:E3:DC:2D:C1:66:B0:35:5C:55:07:31:A7:6F Authority key identifier: B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41 Certificate issuer: /CN=A91D6DBD/serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft Manifest number: 0131 Signing time: Fri 13 Jun 2025 03:32:31 +0000 Manifest this update: Fri 13 Jun 2025 03:32:30 +0000 Manifest next update: Fri 20 Jun 2025 03:32:30 +0000 Files and hashes: 1: scWMB4UVntc2lq-zEtI1z0DzxEE.crl (hash: /PANfCSFe7ubS7vUNvxPgBqNHAZZ6SPCRnFlEncTHYQ=) 2: FA39CA70790E11EE86665E43C4F9AE02.roa (hash: PywpmG3Ulp9yYEUj3QCP+G6Bg3pUo/7QBSMXR75Q4mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD, serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441 Validity Not Before: Jun 13 03:32:30 2025 GMT Not After : Jun 20 03:32:30 2025 GMT Subject: CN=684b9bce-b3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:69:51:9a:20:9e:b6:13:26:65:b2:47:09: 17:26:5b:42:d0:12:12:05:5b:39:ec:bd:41:3b:8a: bb:de:74:4a:de:1a:e5:bf:ac:4e:44:cb:7f:9e:fc: bd:51:ba:d9:7e:b0:5a:f6:11:de:20:15:50:ac:c2: 64:1e:09:4f:4b:e9:04:39:f9:7c:6f:70:4d:f5:c4: c8:46:5f:44:dc:26:70:f5:2a:68:1c:d5:b4:54:9d: f6:0d:53:76:7b:27:86:8a:38:9b:29:d0:34:ac:ba: ec:9a:b5:e0:a2:25:d6:47:d3:d4:e9:47:2e:a0:bf: fc:8a:39:82:cf:19:9e:b4:14:70:32:23:4d:c8:a5: 7b:ab:4d:c9:07:c4:6d:b5:51:d5:cf:5d:a4:22:40: 0b:db:b0:10:e4:21:77:c4:ab:3c:45:21:e4:c1:0b: 71:65:f8:2c:2c:3a:28:c6:33:9a:96:b9:2c:52:58: 0c:11:37:09:4c:e2:ce:66:54:d1:69:1f:1e:d3:8c: 62:b0:4a:cd:d4:8e:5e:9b:6e:f7:8c:8d:35:ed:3e: da:35:d4:01:e1:db:a4:a6:c7:41:03:80:77:e9:e7: ec:2a:b6:93:99:0c:05:ce:13:31:68:8e:19:6a:72: 45:05:2f:0f:6a:0d:07:e4:b2:38:4b:06:bf:df:e0: 60:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:16:EA:2F:CB:98:AD:E3:DC:2D:C1:66:B0:35:5C:55:07:31:A7:6F X509v3 Authority Key Identifier: keyid:B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:0f:86:2a:d3:80:e8:93:21:01:3c:74:fe:2f:1e:d9:e8:54: f3:7e:06:f2:58:1f:53:37:63:3e:c4:16:72:37:a0:5e:e4:eb: 09:32:7d:af:05:18:37:da:b9:56:da:73:04:74:85:f2:98:9c: dc:9a:24:29:07:07:81:7e:98:e6:15:c5:6a:46:f8:52:08:11: 80:44:4d:7e:5e:e0:33:aa:c6:02:ec:09:31:25:74:32:10:8b: e9:d7:c5:10:60:0c:b0:c5:b9:ea:fe:1d:42:c1:a9:8d:b1:a1: 41:e0:25:84:5a:61:0f:86:86:03:a8:fc:73:2d:63:93:bf:60: e4:bf:a8:27:41:d4:cb:35:b8:4c:24:04:20:83:13:29:0d:00: 81:08:61:05:dc:5e:54:b8:96:91:9e:87:dc:5d:71:5e:50:db: b3:cd:c2:f1:2e:6c:37:cf:2c:1b:aa:31:4c:7b:a5:04:3b:85: 9f:f4:1e:09:35:39:f8:b4:29:0d:a8:8c:06:ac:d7:52:8e:d4: 7d:c8:ea:10:c8:2e:89:c9:92:27:e1:1e:38:56:e2:45:f3:04: b3:71:4e:a1:a4:20:be:f2:35:49:de:35:b2:c9:41:cc:83:07: fb:80:c6:e8:7a:f6:77:aa:7e:03:25:78:a8:cf:1d:fe:4a:3f: 51:47:3c:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKEIxQzU4QzA3ODUxNTlFRDczNjk2QUZCMzEyRDIzNUNG NDBGM0M0NDEwHhcNMjUwNjEzMDMzMjMwWhcNMjUwNjIwMDMzMjMwWjAYMRYwFAYD VQQDEw02ODRiOWJjZS1iM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2BpUZognrYTJmWyRwkXJltC0BISBVs57L1BO4q73nRK3hrlv6xORMt/nvy9 UbrZfrBa9hHeIBVQrMJkHglPS+kEOfl8b3BN9cTIRl9E3CZw9SpoHNW0VJ32DVN2 eyeGijibKdA0rLrsmrXgoiXWR9PU6UcuoL/8ijmCzxmetBRwMiNNyKV7q03JB8Rt tVHVz12kIkAL27AQ5CF3xKs8RSHkwQtxZfgsLDooxjOalrksUlgMETcJTOLOZlTR aR8e04xisErN1I5em273jI017T7aNdQB4dukpsdBA4B36efsKraTmQwFzhMxaI4Z anJFBS8Pag0H5LI4Swa/3+BgvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsW6i/L mK3j3C3BZrA1XFUHMadvMB8GA1UdIwQYMBaAFLHFjAeFFZ7XNpavsxLSNc9A88RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC8wMkFBNDk1MDc5 MEExMUVFOTlFREQxMUZDNEY5QUUwMi9zY1dNQjRVVm50YzJscS16RXRJMXowRHp4 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjV01CNFVWbnRjMmxxLXpFdEkxejBEenhFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC8wMkFBNDk1MDc5MEExMUVFOTlFREQxMUZDNEY5QUUwMi9zY1dNQjRVVm50 YzJscS16RXRJMXowRHp4RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAD4Yq04DokyEBPHT+Lx7Z6FTzfgbyWB9TN2M+xBZyN6Be5OsJMn2v BRg32rlW2nMEdIXymJzcmiQpBweBfpjmFcVqRvhSCBGARE1+XuAzqsYC7AkxJXQy EIvp18UQYAywxbnq/h1CwamNsaFB4CWEWmEPhoYDqPxzLWOTv2Dkv6gnQdTLNbhM JAQggxMpDQCBCGEF3F5UuJaRnofcXXFeUNuzzcLxLmw3zywbqjFMe6UEO4Wf9B4J NTn4tCkNqIwGrNdSjtR9yOoQyC6JyZIn4R44VuJF8wSzcU6hpCC+8jVJ3jWyyUHM gwf7gMboevZ3qn4DJXiozx3+Sj9RRzxM -----END CERTIFICATE-----Generated at Sat Jun 14 19:05:53 2025 by rpki-client