$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: 1plOnuLXLeMC8P/xW5zBnQTc+z2hTLubazR79ErMShk= Subject key identifier: 35:78:AF:E8:F0:E3:A4:38:54:C1:0E:2D:B9:27:D0:59:3F:63:12:65 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 07F3 Signing time: Thu 12 Jun 2025 20:44:45 +0000 Manifest this update: Thu 12 Jun 2025 20:44:45 +0000 Manifest next update: Thu 19 Jun 2025 20:44:45 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: 8ZjNNzqU5yX5hpDNOHxmpDBfy5SzuyNuS5/3s3CPYbA=) 2: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: wAmduclXNrZKRu8/pqGkayPdmVyxI/8+xrVLzFoQnO8=) 3: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: tNP9+2nzm8wftPIS9csYEXaUq+mqRmQ5CYwfV6WquDE=) 4: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 6ixsZ+U2NSefvVb36mPlfQcQ8GQSyjxzHzBxsc46ols=) 5: 67FF0960076911EF8569F157C4F9AE02.roa (hash: QiY4AYjpAOfJUKdo2bWSjao/45XX+9doU5egkrwqJ78=) 6: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: jw0xm0XxEdyeTKSbIjmLJq8kg/lPA+5yh93w4gEj5Qo=) 7: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: StO4PQ6ffihfvooMv19fGDjAg2vQbPTwXqeeTRzTihQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Jun 12 20:44:45 2025 GMT Not After : Jun 19 20:44:45 2025 GMT Subject: CN=684b3c3d-4b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e3:de:f9:33:55:b1:ce:41:e9:7e:20:d4:b4: a1:b6:d1:10:c9:22:b3:e4:f9:57:0b:48:b8:1f:9e: b6:ca:ac:d8:d7:cb:c3:9f:ea:7c:51:8d:99:e6:db: 70:79:71:44:e4:0e:1d:9b:44:1e:83:fd:1c:ad:da: c5:aa:be:ec:37:01:82:11:fc:b0:01:6d:75:ff:5d: b7:92:19:fc:00:26:0d:b0:14:e3:04:f1:45:06:66: da:0a:a6:1f:22:d0:54:c0:ea:d5:45:0c:83:12:f8: ea:d2:bf:04:da:61:08:d4:29:18:cc:95:5a:f6:a2: 52:e1:5b:9b:e3:40:f3:97:49:59:3a:fd:d1:ec:9f: 87:f2:3d:de:6f:e0:87:15:f5:62:01:5d:85:ae:4d: ea:5b:55:36:6e:84:c0:a4:5f:39:45:48:52:bd:9d: c0:ec:31:cf:34:e0:01:d2:9e:70:a3:25:46:b7:a7: 0e:8b:8d:c8:df:87:88:e9:33:18:1e:cb:2b:89:9a: f6:48:a4:85:ad:4e:cf:3e:1b:fe:6e:fc:54:5e:73: f9:f0:4e:63:e2:5b:e3:37:e3:bb:78:f5:6d:b6:bd: 0f:3e:b4:25:de:cb:09:a2:63:19:28:1f:c5:8e:ff: 47:f6:5c:57:aa:0b:a6:02:fa:02:2a:da:fc:70:ef: 15:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:78:AF:E8:F0:E3:A4:38:54:C1:0E:2D:B9:27:D0:59:3F:63:12:65 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:24:13:ad:28:61:c1:a8:c6:e9:a6:fe:a1:7f:c4:9a:5e:0b: d9:91:46:01:76:a4:aa:00:a3:24:37:9b:0c:85:cd:85:ce:cf: 74:6f:14:bd:92:d9:f9:a6:29:93:5e:34:ff:bb:bc:61:3b:7b: 0e:20:b5:5c:36:3f:d1:2a:9b:20:74:c8:20:a4:25:92:69:53: 5b:a4:e7:88:e4:c0:ae:7a:fd:33:f5:71:6b:23:c2:03:0d:ce: a1:d3:fc:b8:dc:1c:ab:60:7b:41:ec:4c:b6:db:01:c9:ef:bb: 46:b1:f3:24:02:d5:5d:25:cf:4d:0d:54:bb:84:93:41:c8:70: 62:e6:1c:fe:dc:13:95:d6:53:88:81:76:5d:66:9d:4b:bb:3f: 7d:c7:26:c7:e3:1f:c0:39:b9:7b:37:8a:a1:60:ac:9c:ba:73: e0:e3:44:35:43:38:02:e0:6b:5d:48:76:6d:80:b2:af:61:13: 6c:98:dc:95:e5:40:36:fc:1d:e3:ac:b6:4e:da:81:a3:e1:e5: 68:b7:40:cb:85:09:f9:f9:7e:6a:d9:a1:28:da:b5:d7:6f:9d: f6:fe:bb:27:15:73:36:0a:f0:f5:26:6a:22:e5:e9:7b:1b:e7: 0c:e0:6a:2c:3a:df:6e:56:44:12:b4:f4:d3:4b:e3:5a:ed:f8: 88:54:c5:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjUwNjEyMjA0NDQ1WhcNMjUwNjE5MjA0NDQ1WjAYMRYwFAYD VQQDEw02ODRiM2MzZC00YjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOPe+TNVsc5B6X4g1LShttEQySKz5PlXC0i4H562yqzY18vDn+p8UY2Z5ttw eXFE5A4dm0Qeg/0crdrFqr7sNwGCEfywAW11/123khn8ACYNsBTjBPFFBmbaCqYf ItBUwOrVRQyDEvjq0r8E2mEI1CkYzJVa9qJS4Vub40Dzl0lZOv3R7J+H8j3eb+CH FfViAV2Frk3qW1U2boTApF85RUhSvZ3A7DHPNOAB0p5woyVGt6cOi43I34eI6TMY HssriZr2SKSFrU7PPhv+bvxUXnP58E5j4lvjN+O7ePVttr0PPrQl3ssJomMZKB/F jv9H9lxXqgumAvoCKtr8cO8VeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDV4r+jw 46Q4VMEOLbkn0Fk/YxJlMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2JBOtKGHBqMbppv6hf8SaXgvZkUYBdqSqAKMkN5sMhc2Fzs90bxS9 ktn5pimTXjT/u7xhO3sOILVcNj/RKpsgdMggpCWSaVNbpOeI5MCuev0z9XFrI8ID Dc6h0/y43ByrYHtB7Ey22wHJ77tGsfMkAtVdJc9NDVS7hJNByHBi5hz+3BOV1lOI gXZdZp1Luz99xybH4x/AObl7N4qhYKycunPg40Q1QzgC4GtdSHZtgLKvYRNsmNyV 5UA2/B3jrLZO2oGj4eVot0DLhQn5+X5q2aEo2rXXb532/rsnFXM2CvD1Jmoi5el7 G+cM4GosOt9uVkQStPTTS+Na7fiIVMXG -----END CERTIFICATE-----Generated at Sat Jun 14 17:54:36 2025 by rpki-client