$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft File: SihlGpSsY59qsTJHTTHrDfzm3Hk.mft (raw, json) Hash identifier: nJ8T8mtRIomDl92gjGIR0YJaiOehrh+cGZZIdnj4mZg= Subject key identifier: E8:B1:83:10:61:51:0F:80:3A:79:2F:7A:42:C9:1B:0E:5B:C0:27:75 Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 Certificate issuer: /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79 Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft Manifest number: 04C0 Signing time: Sat 31 May 2025 00:03:42 +0000 Manifest this update: Sat 31 May 2025 00:03:42 +0000 Manifest next update: Sat 07 Jun 2025 00:03:42 +0000 Files and hashes: 1: SihlGpSsY59qsTJHTTHrDfzm3Hk.crl (hash: zR98TOXkMI0Mgyg5ucuhOcq4CC3x1dora+XbgSH0R14=) 2: A64296622BAA11EC9618D864C4F9AE02.roa (hash: OMr4Dz07a9K+JRAHryD2B9Vl/J9RaoHPdVjAOTh62ZI=) 3: C420EBE06EC911EC8A5A940AC4F9AE02.roa (hash: t0Udbj/BMaf/sH0WctEk56jZ3TVW9akvyOH3KkeFZWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122373, serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79 Validity Not Before: May 31 00:03:42 2025 GMT Not After : Jun 7 00:03:42 2025 GMT Subject: CN=683a475e-385d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:13:23:f0:c7:bf:e1:bb:71:53:04:59:18: 57:a6:69:9f:69:5d:fa:09:6a:34:31:2a:03:06:54: 98:e0:24:5e:71:97:3b:02:33:b4:a7:fc:f0:35:b5: cd:a7:48:80:6c:04:e8:0e:c6:d8:2c:12:40:f3:a4: 84:fb:dd:0b:09:8a:f3:c5:a4:ac:b0:97:52:8e:ee: da:8a:bd:82:ea:83:91:54:00:a8:a4:6c:7e:35:2f: 9e:f0:2c:1e:67:ea:e8:46:1e:54:e2:61:f9:2f:a5: c7:6d:34:e9:fb:97:83:53:ea:c3:41:9d:e2:a7:8b: 51:75:b2:d9:ea:29:4d:25:5f:07:de:39:c7:fa:3f: dd:58:9a:8a:e5:1a:75:69:84:a5:b6:56:39:ca:d4: 66:dc:f6:1b:28:a7:b8:7d:88:7b:b2:0e:9d:92:bf: f5:c2:c8:ef:a7:46:00:eb:19:a1:41:d9:30:d4:98: c6:64:98:07:e7:c3:85:c7:a5:0f:a4:98:79:d9:8d: c1:2b:4c:94:f5:29:cc:6d:7e:e4:13:2a:df:bf:34: 66:27:16:78:0e:d7:5d:07:33:c1:55:d8:44:23:a5: 00:c1:0d:1a:da:f8:f9:17:52:ed:f8:86:4f:c5:f1: d1:44:6f:24:0f:41:27:c2:50:4d:5f:67:56:58:c8: f7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B1:83:10:61:51:0F:80:3A:79:2F:7A:42:C9:1B:0E:5B:C0:27:75 X509v3 Authority Key Identifier: keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:db:b2:92:40:b9:59:7a:2f:a4:c7:9c:d7:a9:26:aa:f7:9b: 5c:41:76:3e:45:89:4e:f5:32:13:e6:62:00:3d:c8:10:1f:6d: 52:3e:dc:c3:63:fa:2d:00:44:5f:62:14:ed:32:4f:1f:62:7f: 88:34:b5:01:4e:99:c1:39:cf:b7:bb:ee:2e:4f:24:2e:0e:d4: 51:93:2d:05:04:5f:d9:d9:ee:63:b2:26:bf:f4:69:4b:b8:33: a8:9a:8e:5f:e2:4b:3f:09:13:b9:b9:07:4a:b2:ac:e8:ef:17: a0:00:e0:b6:68:45:6c:e0:31:68:1b:43:18:77:5a:4a:37:61: c9:b1:ab:65:96:9c:8e:ab:da:2c:bf:1f:1a:33:df:91:51:06: 8f:23:8f:b4:89:ce:69:c7:16:38:2e:8e:41:03:91:44:d1:78: dd:28:1e:50:58:ca:bb:68:10:8b:eb:21:e2:a8:13:d2:dc:a7: d0:dd:5e:a3:66:5f:11:6d:e6:83:6e:94:a1:f7:ca:1c:a8:fd: 3f:d3:d9:ae:1e:7e:0b:e9:a8:71:80:6d:a3:a9:3c:dd:25:66: 84:cd:c8:fa:e5:2b:23:43:7d:f7:d3:ff:02:96:ed:ad:e2:25: 80:fe:ef:bc:47:60:cb:89:f7:8b:28:5f:f0:f3:f0:0a:28:bd: 4f:0a:2d:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIzNzMxMTAvBgNVBAUTKDRBMjg2NTFBOTRBQzYzOUY2QUIxMzI0NzREMzFFQjBE RkNFNkRDNzkwHhcNMjUwNTMxMDAwMzQyWhcNMjUwNjA3MDAwMzQyWjAYMRYwFAYD VQQDEw02ODNhNDc1ZS0zODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDkTI/DHv+G7cVMEWRhXpmmfaV36CWo0MSoDBlSY4CRecZc7AjO0p/zwNbXN p0iAbAToDsbYLBJA86SE+90LCYrzxaSssJdSju7air2C6oORVACopGx+NS+e8Cwe Z+roRh5U4mH5L6XHbTTp+5eDU+rDQZ3ip4tRdbLZ6ilNJV8H3jnH+j/dWJqK5Rp1 aYSltlY5ytRm3PYbKKe4fYh7sg6dkr/1wsjvp0YA6xmhQdkw1JjGZJgH58OFx6UP pJh52Y3BK0yU9SnMbX7kEyrfvzRmJxZ4DtddBzPBVdhEI6UAwQ0a2vj5F1Lt+IZP xfHRRG8kD0EnwlBNX2dWWMj3LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOixgxBh UQ+AOnkvekLJGw5bwCd1MB8GA1UdIwQYMBaAFEooZRqUrGOfarEyR00x6w385tx5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM3My8yQzAwNkJCODJC MkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1OXFzVEpIVFRIckRmem0z SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpaGxHcFNzWTU5cXNUSkhUVEhyRGZ6bTNIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjM3My8yQzAwNkJCODJCMkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1 OXFzVEpIVFRIckRmem0zSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY27KSQLlZei+kx5zXqSaq95tcQXY+RYlO9TIT5mIAPcgQH21SPtzD Y/otAERfYhTtMk8fYn+INLUBTpnBOc+3u+4uTyQuDtRRky0FBF/Z2e5jsia/9GlL uDOomo5f4ks/CRO5uQdKsqzo7xegAOC2aEVs4DFoG0MYd1pKN2HJsatllpyOq9os vx8aM9+RUQaPI4+0ic5pxxY4Lo5BA5FE0XjdKB5QWMq7aBCL6yHiqBPS3KfQ3V6j Zl8RbeaDbpSh98ocqP0/09muHn4L6ahxgG2jqTzdJWaEzcj65SsjQ3330/8Clu2t 4iWA/u+8R2DLifeLKF/w8/AKKL1PCi3O -----END CERTIFICATE-----Generated at Sat May 31 17:45:04 2025 by rpki-client