$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: p++dALY82QMN3C5sSuNxRslq3ZW3Px01LYoJG4T7lUA= Subject key identifier: 32:4A:58:A4:3D:36:E9:CA:EE:D0:94:97:7A:4D:49:8D:24:A2:94:BD Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 093B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 1557 Signing time: Fri 30 May 2025 18:42:53 +0000 Manifest this update: Fri 30 May 2025 18:42:52 +0000 Manifest next update: Fri 06 Jun 2025 18:42:52 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: T+DuPoKT4fksv91FVChM7lEg7yxH+l3WQ5XBTCQbgJk=) 2: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: 8CyJAkFajN8p4zLzfXqP/Q/JYG1H6Xgou/fh8TVOZU8=) 3: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: lknVK1a919SkTgA0PG7eZEzbdPbdM/q7NMLGN6N/gRs=) 4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: x1/GarElcr5O6iE+sqK2ug/fRIYXIcradGA+fv5pzss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2363 (0x93b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: May 30 18:42:52 2025 GMT Not After : Jun 6 18:42:52 2025 GMT Subject: CN=6839fc2d-4bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:e3:ab:83:2f:c5:11:d2:34:96:43:de:68: 69:e2:e1:74:24:26:7b:4c:e0:a5:f9:c1:a7:9c:29: 54:38:ca:a8:e7:4f:9a:44:22:24:34:f0:26:88:f8: c4:99:58:28:35:91:ef:73:32:74:de:1e:0a:7a:91: ef:5f:c2:f7:ab:fe:41:68:5e:e5:9c:ec:ba:c9:c0: 63:25:dc:4d:1a:2a:84:c5:6f:7c:65:4b:87:67:a1: 4b:28:90:73:b4:b6:15:19:31:fb:35:a8:dc:f5:02: 76:23:94:79:97:f1:d3:86:e9:96:1f:8a:a7:1f:fd: 71:ac:20:71:4f:be:79:94:a8:ae:18:a2:f9:d9:cb: e4:bb:2a:47:cf:25:22:07:80:e8:18:61:78:0f:20: ed:b7:76:09:7c:5e:43:14:bc:c2:43:ca:e5:d4:ba: 02:3f:d5:18:61:8c:96:20:a2:5f:ec:47:d6:fa:06: 55:ff:5e:04:f4:d0:d0:e3:91:94:2d:98:32:67:75: c5:e7:7f:1c:e5:2d:1e:d4:d9:5c:fb:c6:2c:9d:29: a6:3e:08:fc:a4:00:c2:8d:2c:75:8a:2e:ea:62:ef: 03:0f:d8:62:da:b8:59:28:23:3b:85:f2:45:09:d6: f8:7b:2d:45:aa:40:88:0d:18:ca:22:75:ef:c1:40: 9b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4A:58:A4:3D:36:E9:CA:EE:D0:94:97:7A:4D:49:8D:24:A2:94:BD X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:a2:b7:1e:e6:ae:f9:b3:12:74:78:f2:3c:13:4e:4d:da:d1: 3e:23:f5:7b:f3:d3:b5:ae:cc:df:41:ef:61:84:93:53:fe:f9: 2b:b7:6a:bf:4a:d2:0d:ee:b0:a9:a7:53:5c:31:4e:cf:06:4f: 09:81:03:5f:9a:38:9f:cc:07:ff:ba:36:63:8e:64:92:ee:df: 5b:5f:4a:cb:5a:6e:1f:03:14:26:7f:5d:fc:b2:b6:1b:5a:09: 34:51:a8:c1:74:67:32:cf:14:00:37:8a:c4:86:c1:c2:58:79: 2a:be:e3:3a:66:b9:e5:44:06:3a:a0:67:db:d5:18:ae:cf:9e: 1e:31:3c:cc:02:03:2c:ef:aa:81:65:fa:7e:c1:84:8c:f4:01: b1:12:ac:fd:0c:02:7f:de:dc:3a:99:62:99:94:32:dd:79:a4: 4e:a0:2e:59:12:d9:a0:a5:69:1c:79:14:55:53:10:9f:8d:40: 06:15:5a:d0:35:cc:8d:50:f5:61:51:d3:1c:e7:2f:09:44:4e: ba:86:20:b1:ee:01:3b:b6:5c:f4:f0:a3:0a:b8:60:2a:0b:f8: 2a:16:40:de:20:a8:b9:23:18:29:19:63:5b:ac:66:3b:d3:db: bc:6b:c8:e3:8c:2a:12:71:db:e9:77:fd:e3:0f:af:5b:59:e6: 82:2b:ce:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjUwNTMwMTg0MjUyWhcNMjUwNjA2MTg0MjUyWjAYMRYwFAYD VQQDEw02ODM5ZmMyZC00YmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryXjq4MvxRHSNJZD3mhp4uF0JCZ7TOCl+cGnnClUOMqo50+aRCIkNPAmiPjE mVgoNZHvczJ03h4KepHvX8L3q/5BaF7lnOy6ycBjJdxNGiqExW98ZUuHZ6FLKJBz tLYVGTH7Najc9QJ2I5R5l/HThumWH4qnH/1xrCBxT755lKiuGKL52cvkuypHzyUi B4DoGGF4DyDtt3YJfF5DFLzCQ8rl1LoCP9UYYYyWIKJf7EfW+gZV/14E9NDQ45GU LZgyZ3XF538c5S0e1Nlc+8YsnSmmPgj8pADCjSx1ii7qYu8DD9hi2rhZKCM7hfJF Cdb4ey1FqkCIDRjKInXvwUCbuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJKWKQ9 NunK7tCUl3pNSY0kopS9MB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQorce5q75sxJ0ePI8E05N2tE+I/V789O1rszfQe9hhJNT/vkrt2q/ StIN7rCpp1NcMU7PBk8JgQNfmjifzAf/ujZjjmSS7t9bX0rLWm4fAxQmf138srYb Wgk0UajBdGcyzxQAN4rEhsHCWHkqvuM6ZrnlRAY6oGfb1Riuz54eMTzMAgMs76qB Zfp+wYSM9AGxEqz9DAJ/3tw6mWKZlDLdeaROoC5ZEtmgpWkceRRVUxCfjUAGFVrQ NcyNUPVhUdMc5y8JRE66hiCx7gE7tlz08KMKuGAqC/gqFkDeIKi5IxgpGWNbrGY7 09u8a8jjjCoScdvpd/3jD69bWeaCK85L -----END CERTIFICATE-----Generated at Sat May 31 17:26:14 2025 by rpki-client