$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json) Hash identifier: Dp69Y2CCtddRlora7YKMgMTAeMcp+mKGhrxZ8+SHs3g= Subject key identifier: 57:47:61:5E:60:A5:B2:94:01:8E:F2:83:C3:B5:D9:1E:65:8D:E8:E5 Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Certificate serial: 026F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft Manifest number: 026B Signing time: Thu 19 Jun 2025 01:35:18 +0000 Manifest this update: Thu 19 Jun 2025 01:35:17 +0000 Manifest next update: Thu 26 Jun 2025 01:35:17 +0000 Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: GqK78eppZPGrFVRodOPy82GO4zEKveY/OE+SQEjxEyY=) 2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Validity Not Before: Jun 19 01:35:17 2025 GMT Not After : Jun 26 01:35:17 2025 GMT Subject: CN=68536956-8a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:37:d5:83:b2:09:aa:c5:ad:f9:ce:a2:4e: b4:98:1c:ec:1d:3b:c3:08:ed:9c:75:d1:dd:53:1b: f0:8d:10:78:fd:4c:6f:84:c8:06:17:5d:6c:48:ee: 9a:a0:bd:cf:15:10:72:6b:78:7f:d5:93:d8:6b:07: 66:f2:52:8c:dd:cf:f9:0c:b1:69:8d:3c:98:6a:2f: 0f:4d:38:c2:75:c1:e4:1d:c9:26:8d:02:0f:b3:2b: 67:3b:8c:0a:de:2a:03:be:e5:d0:b6:aa:6a:09:23: 48:6f:bb:83:3d:72:10:f5:fb:46:8e:eb:95:50:09: e8:5c:ed:f1:18:81:66:69:b7:42:e2:89:9d:cd:0c: 09:41:86:07:ed:6f:b2:6e:ec:ea:74:75:94:a2:a0: 5f:ec:f7:67:11:4d:6c:c0:4e:16:9b:7e:ab:1e:ab: 42:d8:5f:b2:e2:b2:ad:31:1b:be:d9:cb:51:18:88: 45:92:0c:8d:f9:12:24:69:3e:10:82:f1:94:46:92: c0:0f:48:58:99:38:a6:1a:23:d8:d0:b6:3a:1f:89: 91:ca:8c:1f:f3:78:59:89:fd:38:08:36:8c:62:70: f9:fe:85:ab:13:26:0b:99:6f:1e:7c:cf:0e:3a:3f: 5b:2b:08:e9:14:bc:c4:57:fc:30:d6:eb:7b:53:0a: 7f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:47:61:5E:60:A5:B2:94:01:8E:F2:83:C3:B5:D9:1E:65:8D:E8:E5 X509v3 Authority Key Identifier: keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:2a:a0:aa:be:0f:08:2a:13:0c:ee:ed:c1:78:b2:92:60:d6: d1:75:8b:b2:97:6a:70:6b:ec:eb:16:0f:dc:5b:a7:00:bf:65: 3a:a3:4d:13:27:32:4c:59:82:04:03:17:3b:fc:7c:39:06:50: b4:72:da:af:fd:56:d7:9c:81:e1:03:d4:29:f5:7f:0e:48:f0: 5c:39:c7:81:a5:06:56:21:2e:fc:6e:97:99:42:87:cd:16:8f: 23:41:56:52:ff:56:58:1c:58:6c:64:5e:2d:1d:c3:c3:5d:fc: 12:d9:45:55:f5:13:2b:be:21:d1:33:62:59:10:aa:e5:11:d9: 37:aa:71:ce:a3:1a:40:a1:a5:25:01:1f:d4:36:c9:12:f5:45: 0d:b6:37:0b:9a:2f:19:1a:04:30:65:40:f6:be:d5:68:26:95: a0:d3:d5:3e:45:3e:13:3f:0d:a3:84:ac:cd:c9:63:fb:03:99: 47:86:af:d7:bc:12:dc:4a:93:20:04:b4:15:c4:fc:22:6c:e3: ac:8b:ad:9b:6f:1c:59:a2:ac:8b:50:e5:c8:3a:df:21:eb:9b: 9e:2c:9e:f0:93:4a:ac:20:39:a8:8f:07:85:6b:d6:60:85:a0: 18:ce:23:0c:fd:ca:9a:be:4a:86:24:e4:8b:0f:3a:a0:fc:e5: a0:a9:2f:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz QjIyMDE4OUQwHhcNMjUwNjE5MDEzNTE3WhcNMjUwNjI2MDEzNTE3WjAYMRYwFAYD VQQDEw02ODUzNjk1Ni04YTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXo31YOyCarFrfnOok60mBzsHTvDCO2cddHdUxvwjRB4/UxvhMgGF11sSO6a oL3PFRBya3h/1ZPYawdm8lKM3c/5DLFpjTyYai8PTTjCdcHkHckmjQIPsytnO4wK 3ioDvuXQtqpqCSNIb7uDPXIQ9ftGjuuVUAnoXO3xGIFmabdC4omdzQwJQYYH7W+y buzqdHWUoqBf7PdnEU1swE4Wm36rHqtC2F+y4rKtMRu+2ctRGIhFkgyN+RIkaT4Q gvGURpLAD0hYmTimGiPY0LY6H4mRyowf83hZif04CDaMYnD5/oWrEyYLmW8efM8O Oj9bKwjpFLzEV/ww1ut7Uwp/eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdHYV5g pbKUAY7yg8O12R5ljejlMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2 QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3KqCqvg8IKhMM7u3BeLKSYNbRdYuyl2pwa+zrFg/cW6cAv2U6o00T JzJMWYIEAxc7/Hw5BlC0ctqv/VbXnIHhA9Qp9X8OSPBcOceBpQZWIS78bpeZQofN Fo8jQVZS/1ZYHFhsZF4tHcPDXfwS2UVV9RMrviHRM2JZEKrlEdk3qnHOoxpAoaUl AR/UNskS9UUNtjcLmi8ZGgQwZUD2vtVoJpWg09U+RT4TPw2jhKzNyWP7A5lHhq/X vBLcSpMgBLQVxPwibOOsi62bbxxZoqyLUOXIOt8h65ueLJ7wk0qsIDmojweFa9Zg haAYziMM/cqavkqGJOSLDzqg/OWgqS+7 -----END CERTIFICATE-----Generated at Thu Jun 19 05:12:45 2025 by rpki-client