$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft File: SLmUWYf2drRs7T3hKEmoo49AaLU.mft (raw, json) Hash identifier: ETYqtG+rGlXLQaAo5ETI5I+eXDST1vo4Dt8zO0rWzoA= Subject key identifier: 3A:B9:B7:FF:DA:09:CD:B7:E9:71:81:CA:51:FD:AE:82:08:C3:97:79 Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 Certificate issuer: /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Certificate serial: 07F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft Manifest number: 07E3 Signing time: Mon 16 Jun 2025 20:51:11 +0000 Manifest this update: Mon 16 Jun 2025 20:51:10 +0000 Manifest next update: Mon 23 Jun 2025 20:51:10 +0000 Files and hashes: 1: SLmUWYf2drRs7T3hKEmoo49AaLU.crl (hash: o1pZphhmr22nNHoTfsFvtoExAWnamdbjS+pdO0XIrTc=) 2: 37A46070F6F211EA922F482BC4F9AE02.roa (hash: ulbSY28XJFQuMyMRnX4bdktKm/xcu3tL1ZMG0ew7F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2038 (0x7f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BAB, serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Validity Not Before: Jun 16 20:51:10 2025 GMT Not After : Jun 23 20:51:10 2025 GMT Subject: CN=685083be-6d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:2d:65:3c:a0:c2:e5:f2:34:2a:27:17:97: f7:3f:da:0b:c0:33:9c:a6:59:7c:d5:7f:50:7b:7f: 5d:25:37:2b:39:c3:0e:40:64:44:eb:e2:58:eb:9f: e0:cc:07:75:8d:ec:b5:04:55:6a:32:5e:6d:a5:67: 53:0c:68:1a:c1:53:6f:58:8a:af:07:2f:c1:34:1c: e5:a5:3d:76:4e:43:15:77:11:d4:c3:22:fe:68:b2: 90:7c:71:b1:ee:59:72:23:01:c0:af:06:9e:7a:a2: 44:5d:bf:21:c1:32:f6:6c:26:8d:3f:49:c8:3e:92: a5:b2:15:71:79:f1:f4:d2:60:23:79:cf:54:21:2d: 69:78:3d:05:4e:92:e3:af:6e:e2:74:28:f0:02:fc: 1d:91:53:24:11:61:79:1c:e4:f8:ed:51:d4:5d:84: fd:33:34:76:8b:c1:e9:04:7c:a5:50:02:26:63:a5: 70:d5:bb:0d:04:0e:5d:0b:d7:3d:21:7c:f7:92:7d: 76:0c:9b:25:d9:d9:47:36:ef:55:ea:a6:eb:8e:1f: b2:d3:f3:55:82:37:2c:91:99:4a:82:c4:a7:e8:d6: bc:33:d2:ea:43:19:af:eb:1d:ba:a4:65:e8:82:0b: f1:b8:0f:67:ec:e2:05:a3:4b:15:d7:ad:52:06:e6: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B9:B7:FF:DA:09:CD:B7:E9:71:81:CA:51:FD:AE:82:08:C3:97:79 X509v3 Authority Key Identifier: keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9a:52:5a:35:4e:20:b1:25:40:97:54:6f:97:19:e5:31:32: b2:fb:8a:f6:9c:d6:fa:b2:e7:a2:e5:a3:f8:ea:ec:a9:b7:0e: 53:86:d3:3a:9d:47:90:a7:9a:73:3e:51:e2:55:15:79:67:2d: 95:49:3c:bf:a6:a8:6c:be:36:ea:f2:64:05:2e:55:6d:ef:fc: a6:79:fd:4f:3a:ca:c9:dd:9e:67:a6:bb:c0:4e:93:62:27:eb: 6b:10:75:a7:87:6e:23:4a:1b:83:d0:ff:cf:39:fb:b5:e8:9e: 31:c5:f2:c9:db:60:24:cd:38:67:49:45:0e:e7:1a:b4:00:c5: b1:2f:8c:5e:bc:b2:04:49:b8:3b:38:d7:42:0b:ef:72:3a:53: 71:cb:e3:2e:af:88:f8:09:cf:2f:ae:22:18:9f:3c:d8:8b:f6: 7c:b3:b8:b5:80:7d:d3:53:9d:07:74:44:29:12:67:b5:43:00: 84:fb:aa:bf:a8:e6:87:a3:b1:73:1c:53:26:2e:99:99:51:8c: 49:37:6b:40:54:0d:31:b1:77:a4:71:f9:a2:e0:fb:09:1e:78: 93:20:28:ce:f7:dd:1d:19:45:d5:a5:0f:3b:50:c5:19:b2:4c: 25:45:c8:e0:0f:e7:0c:b2:71:dd:d8:e2:23:49:a6:73:a2:f0: a3:f5:c2:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCQUIxMTAvBgNVBAUTKDQ4Qjk5NDU5ODdGNjc2QjQ2Q0VEM0RFMTI4NDlBOEEz OEY0MDY4QjUwHhcNMjUwNjE2MjA1MTEwWhcNMjUwNjIzMjA1MTEwWjAYMRYwFAYD VQQDEw02ODUwODNiZS02ZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmMtZTygwuXyNConF5f3P9oLwDOcpll81X9Qe39dJTcrOcMOQGRE6+JY65/g zAd1jey1BFVqMl5tpWdTDGgawVNvWIqvBy/BNBzlpT12TkMVdxHUwyL+aLKQfHGx 7llyIwHArwaeeqJEXb8hwTL2bCaNP0nIPpKlshVxefH00mAjec9UIS1peD0FTpLj r27idCjwAvwdkVMkEWF5HOT47VHUXYT9MzR2i8HpBHylUAImY6Vw1bsNBA5dC9c9 IXz3kn12DJsl2dlHNu9V6qbrjh+y0/NVgjcskZlKgsSn6Na8M9LqQxmv6x26pGXo ggvxuA9n7OIFo0sV161SBuZhswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDq5t//a Cc236XGBylH9roIIw5d5MB8GA1UdIwQYMBaAFEi5lFmH9na0bO094ShJqKOPQGi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUJBQi8wQjk3NjAxQUY2 NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRyUnM3VDNoS0Vtb280OUFh TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMbVVXWWYyZHJSczdUM2hLRW1vbzQ5QWFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUJBQi8wQjk3NjAxQUY2NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRy UnM3VDNoS0Vtb280OUFhTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdmlJaNU4gsSVAl1RvlxnlMTKy+4r2nNb6suei5aP46uyptw5ThtM6 nUeQp5pzPlHiVRV5Zy2VSTy/pqhsvjbq8mQFLlVt7/ymef1POsrJ3Z5nprvATpNi J+trEHWnh24jShuD0P/POfu16J4xxfLJ22AkzThnSUUO5xq0AMWxL4xevLIESbg7 ONdCC+9yOlNxy+Mur4j4Cc8vriIYnzzYi/Z8s7i1gH3TU50HdEQpEme1QwCE+6q/ qOaHo7FzHFMmLpmZUYxJN2tAVA0xsXekcfmi4PsJHniTICjO990dGUXVpQ87UMUZ skwlRcjgD+cMsnHd2OIjSaZzovCj9cJV -----END CERTIFICATE-----Generated at Tue Jun 17 09:00:24 2025 by rpki-client