$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft File: sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json) Hash identifier: cH6jLPanMkvN9V34uvg5LuYEHeVxWmRYglvCiym5/rc= Subject key identifier: 68:75:48:26:B5:BB:7F:E9:75:59:A6:FE:9C:51:EA:31:5D:90:FA:75 Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD Certificate issuer: /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft Manifest number: 61 Signing time: Sat 31 May 2025 06:38:48 +0000 Manifest this update: Sat 31 May 2025 06:38:48 +0000 Manifest next update: Sat 07 Jun 2025 06:38:48 +0000 Files and hashes: 1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: 5XB96OixJAoUUksjRtIs/FGa9lEf5hufRQZvmnHFZpc=) 2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: KPgMUtF2z6om6dSm7+mB/ufWiwTV8TpJVcH2+or0fgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Validity Not Before: May 31 06:38:48 2025 GMT Not After : Jun 7 06:38:48 2025 GMT Subject: CN=683aa3f8-8645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:dc:37:e3:95:fd:47:9d:a8:c2:3b:32:26: 44:7c:7d:6f:2f:19:36:a1:7f:fc:1f:16:3b:13:f8: d7:88:92:a7:f3:0c:df:43:f0:28:d6:d3:8d:cc:9e: 7d:a3:61:60:12:60:b2:ea:99:04:cd:3a:43:29:ce: 63:18:f1:21:a6:7d:0c:a2:9b:65:f9:ca:b1:6b:cf: f0:a1:41:2a:9a:21:1b:5f:c5:63:77:ba:77:86:d0: da:9a:ab:cf:3a:9d:b8:b9:ad:f3:ec:aa:ae:d2:e7: 0c:c9:96:4a:fe:54:01:cf:dd:50:bc:f5:1d:a9:7c: 77:32:5a:40:51:4c:b6:d4:73:13:71:28:1e:98:38: f0:cc:a4:78:87:ab:1e:6f:36:7d:e6:ab:27:95:13: 95:a8:3f:3e:bb:fa:a0:a2:38:c9:73:e6:ed:a0:e6: 0b:5f:5d:2a:e1:45:e6:7e:d2:89:5f:4e:0d:d9:76: ba:f3:3e:31:08:5f:35:af:0a:a2:8d:5f:3d:90:de: fa:b4:08:0b:9a:60:67:83:c7:3a:81:ff:92:81:b8: 0b:26:34:a8:13:ec:be:48:08:a7:7c:a3:75:78:c1: 3a:d1:37:0b:2b:6b:29:59:f7:0b:74:09:7b:f0:10: 8e:f9:ea:c6:2c:32:77:7e:59:aa:b4:08:c9:3d:35: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:75:48:26:B5:BB:7F:E9:75:59:A6:FE:9C:51:EA:31:5D:90:FA:75 X509v3 Authority Key Identifier: keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4c:b6:02:ed:e7:3e:95:84:f6:54:40:af:9d:ca:f6:29:0c: 6a:46:12:84:38:29:21:67:85:0d:04:d9:dd:5e:b0:8a:b1:af: 51:10:04:dd:64:c7:0d:12:1c:6a:60:3b:73:89:a6:53:ec:0b: b8:c4:9a:1c:f7:13:6d:6b:8c:d0:21:00:09:f9:1c:df:e3:7c: 76:ad:f1:24:bb:8c:a5:d8:e4:83:39:bc:38:dc:33:26:da:e7: ea:0b:08:2e:c8:69:25:83:fc:49:16:f3:0e:82:02:05:c5:6e: 61:51:44:a5:3d:a4:3d:f4:1b:af:85:fd:76:c8:31:16:fd:7c: 5f:db:4e:d4:ee:ab:39:6c:3a:de:fb:cd:24:31:7f:16:bd:ae: b3:0e:aa:1c:8e:60:fa:5e:49:ee:c4:73:2b:3f:f9:b8:51:a3: 47:60:79:a5:89:0f:34:64:a3:ac:a5:a1:0a:be:45:fb:19:d5: b2:2e:ce:66:67:34:cc:b0:fc:13:dd:e8:6d:6e:4b:2f:38:b9: 73:7d:c4:f1:36:ae:f2:50:e4:dc:70:9d:4d:93:f9:bd:50:6e: 24:13:47:fd:de:00:91:fd:25:e6:33:4c:64:9b:aa:1d:94:59: 62:5a:88:f0:44:9d:bd:27:3d:35:cd:97:2e:b8:f2:e0:38:7c: 83:e5:d6:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTBGRTExMC8GA1UEBRMoQjAyNzk1RDJFMDlFM0FBQTNFMzZEMkI1OTJEMkUwRTlG QkI3RUZCRDAeFw0yNTA1MzEwNjM4NDhaFw0yNTA2MDcwNjM4NDhaMBgxFjAUBgNV BAMTDTY4M2FhM2Y4LTg2NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs2Nw345X9R52owjsyJkR8fW8vGTahf/wfFjsT+NeIkqfzDN9D8CjW043Mnn2j YWASYLLqmQTNOkMpzmMY8SGmfQyim2X5yrFrz/ChQSqaIRtfxWN3uneG0Nqaq886 nbi5rfPsqq7S5wzJlkr+VAHP3VC89R2pfHcyWkBRTLbUcxNxKB6YOPDMpHiHqx5v Nn3mqyeVE5WoPz67+qCiOMlz5u2g5gtfXSrhReZ+0olfTg3ZdrrzPjEIXzWvCqKN Xz2Q3vq0CAuaYGeDxzqB/5KBuAsmNKgT7L5ICKd8o3V4wTrRNwsraylZ9wt0CXvw EI756sYsMnd+Waq0CMk9NclNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaHVIJrW7 f+l1Wab+nFHqMV2Q+nUwHwYDVR0jBBgwFoAUsCeV0uCeOqo+NtK1ktLg6fu3770w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMEZFLzM3MzM0QkUyQUJD QTExRUZBOTk0RDEyOUM0RjlBRTAyL3NDZVYwdUNlT3FvLU50SzFrdExnNmZ1Mzc3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0NlVjB1Q2VPcW8tTnRLMWt0TGc2ZnUzNzcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MEZFLzM3MzM0QkUyQUJDQTExRUZBOTk0RDEyOUM0RjlBRTAyL3NDZVYwdUNlT3Fv LU50SzFrdExnNmZ1Mzc3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlMtgLt5z6VhPZUQK+dyvYpDGpGEoQ4KSFnhQ0E2d1esIqxr1EQBN1k xw0SHGpgO3OJplPsC7jEmhz3E21rjNAhAAn5HN/jfHat8SS7jKXY5IM5vDjcMyba 5+oLCC7IaSWD/EkW8w6CAgXFbmFRRKU9pD30G6+F/XbIMRb9fF/bTtTuqzlsOt77 zSQxfxa9rrMOqhyOYPpeSe7Ecys/+bhRo0dgeaWJDzRko6yloQq+RfsZ1bIuzmZn NMyw/BPd6G1uSy84uXN9xPE2rvJQ5NxwnU2T+b1QbiQTR/3eAJH9JeYzTGSbqh2U WWJaiPBEnb0nPTXNly648uA4fIPl1nI= -----END CERTIFICATE-----Generated at Sat May 31 17:50:41 2025 by rpki-client