$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: X3g1UxG9AuqI6pe8BE+s31O0epWhqMM9qVY3TNE9ZXs= Subject key identifier: 31:A3:8C:25:A8:A7:FC:92:E2:3A:06:FC:E2:1C:F8:4B:4F:21:5F:49 Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 0346 Signing time: Sat 19 Jul 2025 01:27:59 +0000 Manifest this update: Sat 19 Jul 2025 01:27:59 +0000 Manifest next update: Sat 26 Jul 2025 01:27:59 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: qW00n9a0x4pd0JqBpbP7cqXPuC30Q6jZXWRfwsUcQ5I=) 2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: lFHgwGcK464NIp9pshKfZeaAiyOHIGVlEkjl7qvlWTc=) 3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: Z+nT9PoRzTDCsdNOaBI1d+PkQHDUifBiuJhBYkV5ETQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Jul 19 01:27:59 2025 GMT Not After : Jul 26 01:27:59 2025 GMT Subject: CN=687af49f-496a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:74:d5:dd:bc:f6:13:95:4d:92:bc:5e:11:5f: 9b:5d:57:ef:c6:44:20:16:13:ad:ad:78:59:d8:0f: eb:e1:a3:53:66:2c:61:be:a0:80:2e:9c:d7:b8:1f: 40:db:bd:18:81:91:55:4c:6f:6f:1e:7e:e6:80:e2: e2:7e:60:d8:84:e8:79:fb:35:0d:f5:84:ce:8d:2c: ad:39:6e:21:bf:3f:31:5f:f4:a7:b4:d3:a5:e7:76: 8d:4f:69:8a:0e:bf:db:2d:c3:f3:9e:22:8e:b9:b6: 22:b8:12:07:b1:51:2a:a5:4a:bd:f6:b8:08:08:95: 13:48:11:bb:05:69:57:ac:f8:a2:69:3d:97:bf:88: 75:87:cc:7d:fa:f1:a4:4e:3d:fd:4a:3c:55:23:a5: 08:ea:f5:aa:31:29:04:fa:39:1c:e0:54:c4:e3:60: e4:8a:24:7f:7d:4e:a4:f4:d5:e7:0b:c1:f7:fd:b0: 08:d7:de:6c:bb:83:ff:dd:f5:c5:f5:0b:4e:d3:46: 63:89:0a:18:d1:d3:a2:ea:01:e7:53:bd:bb:34:c6: 96:76:d8:d3:7f:c2:28:12:ee:8d:b6:eb:8e:46:c1: 26:0c:e1:dd:7d:75:de:90:5b:42:2f:87:7f:08:d3: 9c:4f:38:02:a2:89:65:79:05:49:89:1d:b7:35:49: b9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A3:8C:25:A8:A7:FC:92:E2:3A:06:FC:E2:1C:F8:4B:4F:21:5F:49 X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:fa:87:9f:43:44:b9:87:3b:8b:f3:d9:c4:48:96:85:83:ba: 61:0c:4e:ef:64:0c:93:a9:a4:15:be:5f:97:ca:e3:40:6b:38: 8e:8a:6d:8e:00:49:c7:f5:1a:5c:07:ab:5f:33:54:8e:3d:e3: 23:20:b6:fe:66:cc:af:68:d0:14:04:40:e5:cc:93:8b:02:8f: c3:85:50:16:2c:de:fe:f1:76:50:fb:0a:51:49:a0:53:f7:e8: bf:dd:6b:b0:7b:02:49:66:f2:4a:40:8e:16:31:b1:24:ca:14: 8b:9d:93:8d:96:1e:fc:a9:78:ee:f1:62:fd:8f:f7:8a:55:4d: c0:22:4a:23:cc:15:8d:c5:07:16:1c:2e:c5:4b:85:30:fc:f6: 20:57:75:a7:4b:36:e7:54:98:74:82:71:f5:f9:b0:0b:cb:57: e6:4b:0c:34:2e:f4:b9:94:ec:1b:19:35:da:21:f5:94:b0:aa: 57:ab:45:db:d4:e1:df:bb:9e:e9:51:85:26:b8:fb:95:84:fd: bb:22:8a:af:01:59:9e:d1:10:d1:43:68:de:63:87:8b:33:1b: c5:e9:7f:af:1c:78:19:32:04:fe:ff:eb:4b:77:3b:18:d9:f1: a5:d0:23:0e:e5:68:f5:69:42:f9:02:33:8f:2a:0e:eb:0c:03: d1:33:33:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUwNzE5MDEyNzU5WhcNMjUwNzI2MDEyNzU5WjAYMRYwFAYD VQQDEw02ODdhZjQ5Zi00OTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXTV3bz2E5VNkrxeEV+bXVfvxkQgFhOtrXhZ2A/r4aNTZixhvqCALpzXuB9A 270YgZFVTG9vHn7mgOLifmDYhOh5+zUN9YTOjSytOW4hvz8xX/SntNOl53aNT2mK Dr/bLcPzniKOubYiuBIHsVEqpUq99rgICJUTSBG7BWlXrPiiaT2Xv4h1h8x9+vGk Tj39SjxVI6UI6vWqMSkE+jkc4FTE42DkiiR/fU6k9NXnC8H3/bAI195su4P/3fXF 9QtO00ZjiQoY0dOi6gHnU727NMaWdtjTf8IoEu6NtuuORsEmDOHdfXXekFtCL4d/ CNOcTzgCoolleQVJiR23NUm5aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGjjCWo p/yS4joG/OIc+EtPIV9JMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe+oefQ0S5hzuL89nESJaFg7phDE7vZAyTqaQVvl+XyuNAaziOim2O AEnH9RpcB6tfM1SOPeMjILb+ZsyvaNAUBEDlzJOLAo/DhVAWLN7+8XZQ+wpRSaBT 9+i/3WuwewJJZvJKQI4WMbEkyhSLnZONlh78qXju8WL9j/eKVU3AIkojzBWNxQcW HC7FS4Uw/PYgV3WnSzbnVJh0gnH1+bALy1fmSww0LvS5lOwbGTXaIfWUsKpXq0Xb 1OHfu57pUYUmuPuVhP27IoqvAVme0RDRQ2jeY4eLMxvF6X+vHHgZMgT+/+tLdzsY 2fGl0CMO5Wj1aUL5AjOPKg7rDAPRMzPk -----END CERTIFICATE-----Generated at Sun Jul 20 13:04:02 2025 by rpki-client