$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft File: SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft (raw, json) Hash identifier: rK9e18QqsOQ2dnd4GtgHCCUeiDdWBJDoj6+gnb94ry4= Subject key identifier: DE:C7:A8:25:AD:77:A9:9D:A7:44:18:1F:66:7A:C1:D4:C1:8A:57:7A Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A Certificate issuer: /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A Certificate serial: 0C29 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft Manifest number: 0C22 Signing time: Fri 18 Jul 2025 17:18:09 +0000 Manifest this update: Fri 18 Jul 2025 17:18:09 +0000 Manifest next update: Fri 25 Jul 2025 17:18:09 +0000 Files and hashes: 1: SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl (hash: 66M6v+VIZjc/gLMjDWPJr3wjMRS+LWMvGnU6O2IvU3A=) 2: AB138380985F11EEBA5D186DC4F9AE02.roa (hash: F/Rw9IBSfAAu9SS5Zj7ZXQURqKcO45qHbFvRjzx84SU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3113 (0xc29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A Validity Not Before: Jul 18 17:18:09 2025 GMT Not After : Jul 25 17:18:09 2025 GMT Subject: CN=687a81d1-88e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:c8:a5:38:81:f3:f5:e8:72:24:5e:61:56: 65:9e:88:69:f1:0b:d8:3b:40:32:e8:17:06:94:f0: cb:04:83:ac:99:2b:61:4b:34:20:4d:88:90:bc:a7: 3c:b7:3f:c1:2d:5a:dc:27:1c:0a:9a:be:d8:ce:9b: 1b:3f:2a:0b:57:bf:08:23:52:67:c8:3d:93:90:63: 0a:e6:33:89:58:27:57:f9:c0:46:00:14:f5:7e:0d: 60:14:8a:1e:a2:f3:ec:88:c1:72:7f:3c:3e:8c:8c: 72:4a:5d:c2:3d:b3:34:66:b6:e4:61:fb:71:f0:41: 60:35:99:52:1e:01:23:f5:79:19:29:a6:8c:8e:a7: 41:55:a5:41:7e:5b:86:3d:ad:b8:28:8d:94:fe:ad: c0:38:88:04:ab:7b:c6:fc:12:be:7b:c4:b4:a8:28: 98:78:38:88:1a:7b:53:a3:55:96:d3:2e:ca:e9:12: c6:de:ed:1f:65:1d:20:4a:21:73:8b:0d:62:71:1c: 0c:dc:bf:fd:d2:fd:b7:62:83:2f:be:de:ec:d2:85: fd:72:ad:87:b3:86:23:1c:5c:13:66:da:b2:79:0f: e1:f3:62:11:32:2f:7a:e9:5a:fa:0c:e8:59:21:f5: c0:67:72:4d:0c:b6:55:64:bc:cc:f6:69:76:64:48: 1b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C7:A8:25:AD:77:A9:9D:A7:44:18:1F:66:7A:C1:D4:C1:8A:57:7A X509v3 Authority Key Identifier: keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ed:ed:04:e3:10:1c:8e:87:fa:f7:f6:8a:ac:1b:b6:6c:cb: f5:d7:c5:f5:f4:f7:d6:43:ad:4d:08:08:a3:2c:74:d1:f0:9a: 38:02:13:a8:98:3a:82:1e:eb:61:ff:ff:a5:50:98:e5:c9:3c: 5d:7d:a2:c3:fe:4e:ba:a7:a8:2f:df:a2:13:ac:c7:8c:93:73: b0:60:ef:ff:3a:78:33:e9:e4:2b:08:f0:b4:7b:6f:29:13:38: e0:12:d0:f3:e4:41:77:73:0b:af:a8:6f:7c:c0:76:9e:1b:48: 80:4d:be:c2:69:70:b2:54:29:d8:df:48:e9:e0:a0:2d:fa:38: 80:d3:6c:70:81:9a:0e:32:07:83:5c:b3:d5:51:56:fb:b5:b4: c9:48:2a:39:3d:47:13:df:46:ae:2b:22:66:10:e6:eb:79:ce: b1:ba:a3:ae:39:25:0e:72:25:31:1d:1e:6f:68:4a:53:d2:f4: 07:28:50:f3:b5:64:14:13:9d:7c:6e:94:20:f9:c9:bd:24:f0: ca:19:9d:2a:5a:51:a0:15:33:79:eb:a6:02:5d:28:45:bc:45: cf:97:01:d9:c8:4b:eb:62:b7:e5:88:f0:95:dc:b3:36:2e:0b: 29:62:ab:2b:d7:e0:93:9d:3b:c6:a3:55:71:6b:a7:b8:05:90: 9a:28:75:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDQ4NTJFODcyNkMxNDQ4QTEwNDBDQ0ZBMDQzQjgzMTRB QUU0QzRFOUEwHhcNMjUwNzE4MTcxODA5WhcNMjUwNzI1MTcxODA5WjAYMRYwFAYD VQQDEw02ODdhODFkMS04OGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4/IpTiB8/XociReYVZlnohp8QvYO0Ay6BcGlPDLBIOsmSthSzQgTYiQvKc8 tz/BLVrcJxwKmr7YzpsbPyoLV78II1JnyD2TkGMK5jOJWCdX+cBGABT1fg1gFIoe ovPsiMFyfzw+jIxySl3CPbM0ZrbkYftx8EFgNZlSHgEj9XkZKaaMjqdBVaVBfluG Pa24KI2U/q3AOIgEq3vG/BK+e8S0qCiYeDiIGntTo1WW0y7K6RLG3u0fZR0gSiFz iw1icRwM3L/90v23YoMvvt7s0oX9cq2Hs4YjHFwTZtqyeQ/h82IRMi966Vr6DOhZ IfXAZ3JNDLZVZLzM9ml2ZEgb8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7HqCWt d6mdp0QYH2Z6wdTBild6MB8GA1UdIwQYMBaAFEhS6HJsFEihBAzPoEO4MUquTE6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9DMUNCMkRGMjEw RDgxMUVBOUJEMUE1NURDNEY5QUUwMi9TRkxvY213VVNLRUVETS1nUTdneFNxNU1U cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1NGTG9jbXdVU0tFRURNLWdRN2d4U3E1TVRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkNERi9DMUNCMkRGMjEwRDgxMUVBOUJEMUE1NURDNEY5QUUwMi9TRkxvY213VVNL RUVETS1nUTdneFNxNU1UcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx7e0E4xAcjof69/aKrBu2bMv118X19PfWQ61NCAijLHTR8Jo4AhOo mDqCHuth//+lUJjlyTxdfaLD/k66p6gv36ITrMeMk3OwYO//Ongz6eQrCPC0e28p EzjgEtDz5EF3cwuvqG98wHaeG0iATb7CaXCyVCnY30jp4KAt+jiA02xwgZoOMgeD XLPVUVb7tbTJSCo5PUcT30auKyJmEObrec6xuqOuOSUOciUxHR5vaEpT0vQHKFDz tWQUE518bpQg+cm9JPDKGZ0qWlGgFTN566YCXShFvEXPlwHZyEvrYrfliPCV3LM2 LgspYqsr1+CTnTvGo1Vxa6e4BZCaKHVH -----END CERTIFICATE-----Generated at Sun Jul 20 14:14:02 2025 by rpki-client