$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: EA8rsPCX85QK6FwIxknd391xwBG/PA13TgA2znrpxq8= Subject key identifier: 3F:DE:68:9D:04:B4:CB:23:74:75:36:CA:55:69:DF:D6:B8:95:EB:67 Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 0666 Signing time: Fri 30 May 2025 22:36:09 +0000 Manifest this update: Fri 30 May 2025 22:36:08 +0000 Manifest next update: Fri 06 Jun 2025 22:36:08 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: wTpqPU4uQPdS6cxiQOsIcfeFpRpidoinn7g8yjTVzss=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 6Kv6ZSL3MazMHrERvQ2sPcXYF/GKUnOfly5I2XW62pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: May 30 22:36:08 2025 GMT Not After : Jun 6 22:36:08 2025 GMT Subject: CN=683a32d9-fec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:c2:b7:ae:8f:bf:2a:97:cf:95:39:8a:1c: 2c:de:6e:a1:20:2b:51:c2:62:50:74:ea:4b:1e:83: f9:23:c9:f6:b8:96:28:39:1d:bc:0b:7b:72:e8:40: 08:87:18:db:6d:39:82:18:bc:56:ab:00:16:23:cd: f4:56:1e:80:87:29:ab:aa:3e:48:63:31:9e:be:d8: 46:18:68:a7:61:f6:f0:5b:c8:8f:6e:ce:8a:65:33: f2:66:10:4e:50:a3:0f:9e:0d:a0:c9:75:fe:ec:2c: 79:5e:19:b3:0b:e6:76:d6:6e:36:ce:e9:53:6d:e1: 96:1b:f5:25:ee:8c:09:a9:60:21:ae:83:be:c8:4e: d8:48:bf:83:71:f5:59:9c:c6:18:70:62:e6:04:2c: b5:7d:67:5c:0e:51:c7:c0:85:bc:a1:62:e4:f5:ad: 5d:e4:46:21:ff:92:f5:4b:ba:8e:2b:e1:fa:75:5c: 3e:5c:ff:7c:71:71:b6:ab:20:16:8a:59:2b:eb:ad: 79:52:30:3e:cb:57:0b:59:2d:85:69:2f:3c:50:60: aa:9f:c4:81:9e:27:64:22:26:49:85:8a:a5:a9:8d: ea:81:57:e9:2c:1f:1d:4e:55:79:17:dc:e6:5e:7c: a0:02:20:e3:0a:46:9a:d2:9d:47:cd:df:94:80:d1: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DE:68:9D:04:B4:CB:23:74:75:36:CA:55:69:DF:D6:B8:95:EB:67 X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:69:57:43:60:5a:fe:ad:29:f7:97:5c:68:55:a2:c0:5e:82: db:ae:7a:8e:57:c2:79:3c:c0:bb:e0:8a:b2:14:25:8e:2d:f9: 4f:4f:2e:15:62:1f:d2:1c:46:ea:5f:92:ab:0f:df:fa:d7:e8: 32:36:c5:d5:39:4b:b7:b6:9d:7e:f5:d9:7f:42:c7:90:aa:be: c0:a5:cc:4d:82:32:49:d2:15:70:68:b8:92:1f:51:d7:6d:33: 8e:ab:99:32:44:b6:a1:06:84:14:b3:06:50:1f:79:13:fe:5c: 9d:6b:76:bf:cd:6b:09:2f:bf:e3:01:a8:4a:7d:08:35:59:fc: 27:13:39:a3:d5:fb:f1:91:7d:46:14:6e:61:02:fc:86:c1:29: 5b:c8:1f:71:29:b3:b6:88:ba:3c:da:71:2e:70:74:6a:21:88: 44:9a:c2:30:a3:3b:9d:88:25:7c:a1:57:0a:ab:62:b3:94:40: 66:9a:59:e3:d0:e9:23:ea:7a:d1:65:07:96:6b:1f:18:14:38: df:39:51:ea:47:2f:35:07:94:0b:d6:31:83:32:a7:26:71:3e: e0:10:52:a9:0f:be:5a:aa:0b:e0:96:73:99:82:28:10:51:51: 9c:36:c6:1a:61:ad:9b:7e:24:3c:3b:66:17:00:0b:6a:6e:4c: 21:f6:05:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjUwNTMwMjIzNjA4WhcNMjUwNjA2MjIzNjA4WjAYMRYwFAYD VQQDEw02ODNhMzJkOS1mZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOLCt66PvyqXz5U5ihws3m6hICtRwmJQdOpLHoP5I8n2uJYoOR28C3ty6EAI hxjbbTmCGLxWqwAWI830Vh6Ahymrqj5IYzGevthGGGinYfbwW8iPbs6KZTPyZhBO UKMPng2gyXX+7Cx5XhmzC+Z21m42zulTbeGWG/Ul7owJqWAhroO+yE7YSL+DcfVZ nMYYcGLmBCy1fWdcDlHHwIW8oWLk9a1d5EYh/5L1S7qOK+H6dVw+XP98cXG2qyAW ilkr6615UjA+y1cLWS2FaS88UGCqn8SBnidkIiZJhYqlqY3qgVfpLB8dTlV5F9zm XnygAiDjCkaa0p1Hzd+UgNEeAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/eaJ0E tMsjdHU2ylVp39a4letnMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVaVdDYFr+rSn3l1xoVaLAXoLbrnqOV8J5PMC74IqyFCWOLflPTy4V Yh/SHEbqX5KrD9/61+gyNsXVOUu3tp1+9dl/QseQqr7ApcxNgjJJ0hVwaLiSH1HX bTOOq5kyRLahBoQUswZQH3kT/lyda3a/zWsJL7/jAahKfQg1WfwnEzmj1fvxkX1G FG5hAvyGwSlbyB9xKbO2iLo82nEucHRqIYhEmsIwozudiCV8oVcKq2KzlEBmmlnj 0Okj6nrRZQeWax8YFDjfOVHqRy81B5QL1jGDMqcmcT7gEFKpD75aqgvglnOZgigQ UVGcNsYaYa2bfiQ8O2YXAAtqbkwh9gWQ -----END CERTIFICATE-----Generated at Sat May 31 17:41:02 2025 by rpki-client