$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json) Hash identifier: Yc5HZZovBCnMX99keQIb6pA+4praYUZ/dtxgzgdcfok= Subject key identifier: 1B:A8:1A:F4:C0:68:7F:97:61:B4:8C:4B:EF:16:BD:00:6B:95:B4:26 Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft Manifest number: 0285 Signing time: Sat 09 Aug 2025 02:13:29 +0000 Manifest this update: Sat 09 Aug 2025 02:13:29 +0000 Manifest next update: Sat 16 Aug 2025 02:13:28 +0000 Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: GtS79SExcSQyFnl6P7z8h2YKdCBguMHs5FKlgpLDCxQ=) 2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Validity Not Before: Aug 9 02:13:29 2025 GMT Not After : Aug 16 02:13:28 2025 GMT Subject: CN=6896aec9-1568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:58:2a:96:98:e4:72:f9:8a:46:e0:f7:ef: 1a:b7:ea:dc:1d:cc:e2:a9:fc:d7:6e:9c:6a:01:5c: 5c:81:24:7e:41:86:ec:59:5b:a3:32:42:99:e5:3c: 87:b6:38:07:26:b9:d4:23:23:79:7e:b3:a8:30:1c: e0:3f:45:c6:9d:03:0b:4d:45:b2:44:c9:b2:ee:67: 03:e1:22:25:30:cc:7a:19:81:ab:a7:ee:11:a2:06: 5e:09:e9:8d:95:07:1f:1f:0f:40:26:a1:f7:f3:ef: a6:3f:38:8f:aa:c9:33:6b:2f:e7:5d:d1:36:78:8c: d3:c1:4b:7b:f5:f9:96:95:5f:34:52:16:a1:a9:c3: ad:78:3c:89:e0:71:47:ba:b9:a1:f7:13:d6:cb:38: a4:30:f0:aa:0d:3b:32:7f:03:78:29:44:8a:eb:9d: b9:9c:f6:66:90:7d:43:97:61:24:b7:9b:79:90:75: fc:5b:a7:a6:ea:96:6d:25:24:56:42:c1:1c:91:6a: 77:34:6f:5d:38:11:b7:bf:25:05:a0:59:8c:ca:eb: 77:0b:c0:3b:94:1b:9b:5d:51:c5:e1:66:48:94:53: 1a:84:9e:99:a3:9c:e9:5b:c0:e1:54:38:e4:81:00: 94:80:0d:87:65:1a:2a:45:92:46:3e:4d:0e:f9:a8: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A8:1A:F4:C0:68:7F:97:61:B4:8C:4B:EF:16:BD:00:6B:95:B4:26 X509v3 Authority Key Identifier: keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:37:ed:b9:b8:04:42:73:d4:05:a6:d3:ca:10:67:dd:f9:19: ba:06:97:b1:a3:8a:ee:d5:c9:f5:c2:b8:a0:dd:26:5c:8e:00: 32:b8:be:dd:71:dc:df:bd:99:ef:33:98:70:1d:ec:2e:e9:49: 5b:a1:e1:3b:64:e0:5c:8a:81:2a:93:0e:63:08:b8:ef:34:18: 12:0c:2c:76:c8:73:03:ce:63:19:71:23:08:43:bd:85:61:dc: 72:c9:bc:f3:03:44:7e:e8:83:cc:6c:33:1d:64:fd:d8:c4:0a: 6f:02:c0:9b:89:c0:e1:20:8c:53:82:20:3f:33:b1:e1:e1:4f: 3f:99:7d:a8:03:d5:ae:08:81:77:63:72:b1:d6:9e:18:27:08: fa:ab:35:35:70:1c:38:b9:eb:fe:21:5f:6d:b2:9a:f1:d7:18: 2a:eb:b9:03:b2:11:55:c0:87:ac:f1:84:23:11:7b:99:69:8a: 49:ae:d1:a3:49:c9:da:2b:68:2e:ec:a6:b3:df:25:ee:1f:7a: f6:ff:05:74:e6:5f:d0:87:86:4b:c1:44:b6:5e:c9:67:44:54: 55:a5:6c:30:5f:24:5c:f0:6a:11:98:ed:ce:b8:76:ca:61:f0: 5c:9c:5e:24:7f:52:27:b3:08:c9:8c:89:1a:80:3c:e9:cc:92: b2:00:a6:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz QjIyMDE4OUQwHhcNMjUwODA5MDIxMzI5WhcNMjUwODE2MDIxMzI4WjAYMRYwFAYD VQQDEw02ODk2YWVjOS0xNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIBYKpaY5HL5ikbg9+8at+rcHcziqfzXbpxqAVxcgSR+QYbsWVujMkKZ5TyH tjgHJrnUIyN5frOoMBzgP0XGnQMLTUWyRMmy7mcD4SIlMMx6GYGrp+4RogZeCemN lQcfHw9AJqH38++mPziPqskzay/nXdE2eIzTwUt79fmWlV80UhahqcOteDyJ4HFH urmh9xPWyzikMPCqDTsyfwN4KUSK6525nPZmkH1Dl2Ekt5t5kHX8W6em6pZtJSRW QsEckWp3NG9dOBG3vyUFoFmMyut3C8A7lBubXVHF4WZIlFMahJ6Zo5zpW8DhVDjk gQCUgA2HZRoqRZJGPk0O+ajttQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuoGvTA aH+XYbSMS+8WvQBrlbQmMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2 QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQN+25uARCc9QFptPKEGfd+Rm6Bpexo4ru1cn1wrig3SZcjgAyuL7d cdzfvZnvM5hwHewu6UlboeE7ZOBcioEqkw5jCLjvNBgSDCx2yHMDzmMZcSMIQ72F YdxyybzzA0R+6IPMbDMdZP3YxApvAsCbicDhIIxTgiA/M7Hh4U8/mX2oA9WuCIF3 Y3Kx1p4YJwj6qzU1cBw4uev+IV9tsprx1xgq67kDshFVwIes8YQjEXuZaYpJrtGj ScnaK2gu7Kaz3yXuH3r2/wV05l/Qh4ZLwUS2XslnRFRVpWwwXyRc8GoRmO3OuHbK YfBcnF4kf1InswjJjIkagDzpzJKyAKbT -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:18 2025 by rpki-client