$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft File: sUCvBJGbRROCWm6lfhq55UN548g.mft (raw, json) Hash identifier: A3KQVuPtFzCrCbFxTRHzHZHj73FID+D6mL4/CGsoFBk= Subject key identifier: 66:58:2A:79:AD:6E:83:27:23:96:59:5F:E3:AA:17:00:D9:A3:FB:9B Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 Certificate issuer: /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Certificate serial: 0B3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft Manifest number: 0B34 Signing time: Fri 06 Jun 2025 19:13:07 +0000 Manifest this update: Fri 06 Jun 2025 19:13:07 +0000 Manifest next update: Fri 13 Jun 2025 19:13:07 +0000 Files and hashes: 1: sUCvBJGbRROCWm6lfhq55UN548g.crl (hash: hK0vLwRYKajeVgJvuSv8qKPj5+aEGb7jFkpZnb/Us+U=) 2: B6EF8F5E3A9011EA957A6A34C4F9AE02.roa (hash: MMg6miblGYwiWs8actEKJcMi2SqNBUoJuKwgQQDzl38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 19:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EBFD, serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Validity Not Before: Jun 6 19:13:07 2025 GMT Not After : Jun 13 19:13:07 2025 GMT Subject: CN=68433dc3-611c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:69:41:c6:c6:c5:e4:ed:e6:71:f2:f9:1c:5e: 07:1e:69:d0:4e:c3:ad:08:9a:bc:74:01:3b:b0:e7: 98:a6:c3:54:6a:75:18:02:e2:b4:06:df:99:8b:bf: be:cb:30:a6:e3:90:9b:ba:df:39:4d:dc:b1:5a:36: c2:03:e5:e7:d0:03:78:3d:6f:5e:c8:88:03:2b:24: 29:79:c1:8f:90:c4:bd:c8:1b:3b:3a:62:35:19:1f: 5f:42:3b:19:df:66:66:ef:e4:0c:3e:d1:ae:dc:91: 11:fa:7d:84:c1:bf:15:c0:a6:7e:d7:9e:48:e4:e5: b8:04:8c:51:8f:c8:d2:76:d7:08:d3:56:ab:df:c4: 2c:6f:e5:0e:a5:17:83:56:01:20:6f:2c:64:57:1e: da:b9:ea:e0:92:28:61:08:7d:b2:cb:32:58:1e:43: ea:8d:d6:79:f1:17:b3:e0:8c:1d:73:cd:0c:b4:40: eb:d8:91:d0:09:85:d1:30:55:fd:41:e9:35:88:ba: bd:8c:dd:67:c9:20:f7:a1:7c:2f:37:d0:70:a8:e3: 44:a9:aa:24:51:3f:67:c7:18:2a:eb:2d:b7:5a:06: 7e:4e:cc:e7:50:6d:d7:ae:5e:b9:5d:7e:36:7a:12: ba:83:9a:01:1e:0f:1b:3d:a6:d0:28:e8:64:11:bb: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:58:2A:79:AD:6E:83:27:23:96:59:5F:E3:AA:17:00:D9:A3:FB:9B X509v3 Authority Key Identifier: keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:e4:9e:37:fe:3e:15:ff:7c:cb:de:77:90:cf:1c:76:81:0e: e6:75:52:76:82:3b:c1:70:b8:c2:3c:42:1f:d5:3e:1b:f5:a1: 40:dd:d5:b8:c5:d6:bb:fd:19:1d:f3:07:b0:66:55:1a:06:fc: 45:a6:07:31:07:0c:8e:31:3c:71:58:6d:c9:9e:b5:34:d3:ab: ed:1f:9a:e1:dd:7e:a4:ba:84:79:17:a7:10:0b:09:87:89:4c: dd:88:c7:32:e9:50:c7:57:81:3f:4a:1a:be:96:e8:e2:b2:19: ce:2f:a5:d2:97:81:2d:0d:d7:97:e8:45:38:07:a1:c8:23:f5: a5:ff:39:e9:10:39:f6:f3:91:54:3f:b8:81:25:1f:ed:d0:fd: be:70:88:e8:01:ff:be:b3:72:46:2f:b8:70:1a:9a:db:15:af: 89:dc:d5:07:82:18:44:f9:14:15:3c:96:0e:80:c4:09:86:fe: aa:8e:25:f0:6f:c1:98:b4:a2:8a:e3:7c:06:17:e5:81:c8:e5: ed:d7:e2:a8:1c:1d:f6:8e:3a:03:12:4e:da:a9:6d:be:f9:6e: 74:ab:a2:b5:59:72:c0:ff:0f:6f:72:84:b4:b2:c0:27:8c:97: c2:5e:b5:3b:da:fc:07:df:84:f4:77:27:fa:40:07:dc:37:e6: b5:fe:f0:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VCRkQxMTAvBgNVBAUTKEIxNDBBRjA0OTE5QjQ1MTM4MjVBNkVBNTdFMUFCOUU1 NDM3OUUzQzgwHhcNMjUwNjA2MTkxMzA3WhcNMjUwNjEzMTkxMzA3WjAYMRYwFAYD VQQDEw02ODQzM2RjMy02MTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WlBxsbF5O3mcfL5HF4HHmnQTsOtCJq8dAE7sOeYpsNUanUYAuK0Bt+Zi7++ yzCm45Cbut85TdyxWjbCA+Xn0AN4PW9eyIgDKyQpecGPkMS9yBs7OmI1GR9fQjsZ 32Zm7+QMPtGu3JER+n2Ewb8VwKZ+155I5OW4BIxRj8jSdtcI01ar38Qsb+UOpReD VgEgbyxkVx7auergkihhCH2yyzJYHkPqjdZ58Rez4Iwdc80MtEDr2JHQCYXRMFX9 Qek1iLq9jN1nySD3oXwvN9BwqONEqaokUT9nxxgq6y23WgZ+TsznUG3Xrl65XX42 ehK6g5oBHg8bPabQKOhkEbtSCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZYKnmt boMnI5ZZX+OqFwDZo/ubMB8GA1UdIwQYMBaAFLFArwSRm0UTglpupX4aueVDeePI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUJGRC9GN0NFNjI5QTNB OEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJST0NXbTZsZmhxNTVVTjU0 OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQ3ZCSkdiUlJPQ1dtNmxmaHE1NVVONTQ4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUJGRC9GN0NFNjI5QTNBOEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJS T0NXbTZsZmhxNTVVTjU0OGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC5J43/j4V/3zL3neQzxx2gQ7mdVJ2gjvBcLjCPEIf1T4b9aFA3dW4 xda7/Rkd8wewZlUaBvxFpgcxBwyOMTxxWG3JnrU006vtH5rh3X6kuoR5F6cQCwmH iUzdiMcy6VDHV4E/Shq+lujishnOL6XSl4EtDdeX6EU4B6HII/Wl/znpEDn285FU P7iBJR/t0P2+cIjoAf++s3JGL7hwGprbFa+J3NUHghhE+RQVPJYOgMQJhv6qjiXw b8GYtKKK43wGF+WByOXt1+KoHB32jjoDEk7aqW2++W50q6K1WXLA/w9vcoS0ssAn jJfCXrU72vwH34T0dyf6QAfcN+a1/vBA -----END CERTIFICATE-----Generated at Sat Jun 7 06:22:19 2025 by rpki-client