$ rpki-client -vvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft File: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft (raw, json) Hash identifier: 8YSwvlAEwUzEZZD+SQfGsmjZ2+CCQpLWNYtC9b+zzOo= Subject key identifier: D9:6F:34:8A:02:08:5E:13:87:49:AF:75:C0:29:97:26:B8:83:C9:2A Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2 Certificate issuer: /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft Manifest number: 0A Signing time: Tue 01 Jul 2025 08:58:08 +0000 Manifest this update: Tue 01 Jul 2025 08:58:08 +0000 Manifest next update: Tue 08 Jul 2025 08:58:08 +0000 Files and hashes: 1: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl (hash: Bei+4lTKsF1ch5r8Iuux3vC1fMtiUiSLhWdrZN0P5/Q=) 2: 850105504F3D11F0A0960F7CC4F9AE02.roa (hash: ycoxpKT+DpgcLoAUSWd+EWSk4JnPGKou98k0R1luHMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2 Validity Not Before: Jul 1 08:58:08 2025 GMT Not After : Jul 8 08:58:08 2025 GMT Subject: CN=6863a320-c497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:37:a6:76:cf:e3:aa:fc:86:2f:e7:a5:7e: c9:aa:13:7a:0b:d5:3f:65:71:62:ee:c5:b2:13:3f: 54:c0:88:ed:17:35:ff:3b:7a:f9:38:13:32:4a:4a: 4e:fc:d7:19:85:bb:7d:00:25:d1:fa:96:ad:d8:98: 0a:fe:16:9b:be:f2:e2:3a:6d:b6:ea:f4:ea:0a:da: 70:71:3b:f9:54:8f:05:c5:c7:33:8c:ed:58:04:78: 24:9b:1a:dd:12:65:97:11:49:df:e3:4d:9c:33:ea: 0b:b7:26:f3:f7:fd:db:a8:8e:eb:8d:2d:1e:4c:3d: 3f:8c:4a:67:53:c4:af:b0:00:72:5e:91:1d:6b:ff: 79:c7:73:38:58:4d:39:57:08:1c:bf:bd:87:70:7a: 3f:a2:22:d9:e1:67:f7:e4:da:e1:1a:74:3a:da:18: 2b:62:df:61:01:69:63:0a:b4:be:3f:fa:98:2b:1c: b9:81:0b:12:f5:eb:13:b6:d6:fd:24:6d:e4:d0:8d: a6:2a:12:eb:1b:72:b8:c1:81:e7:82:2e:bf:79:cd: d2:c0:05:96:65:34:c6:83:d4:c9:8a:c2:5c:34:23: fc:27:05:86:c5:65:65:6e:f4:be:99:3b:88:f7:af: 54:3e:3d:92:ac:8c:22:60:7e:20:61:4e:eb:56:65: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6F:34:8A:02:08:5E:13:87:49:AF:75:C0:29:97:26:B8:83:C9:2A X509v3 Authority Key Identifier: keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d5:61:7e:ae:51:cd:d1:05:a3:6d:d5:5b:8a:8f:b5:f9:f7: 9f:a8:f3:f4:36:ce:a8:0c:e1:55:e4:c2:53:8c:c2:3a:f8:09: 2b:ec:ad:5c:fc:d9:dd:1b:64:c6:e2:36:81:5d:7c:8e:0a:77: b5:b9:c6:06:f7:e3:96:6a:cf:99:cd:cc:79:a5:4c:c3:f7:5d: f2:32:65:33:70:c2:0b:bd:38:ea:ef:ae:59:f5:24:04:a5:2e: ee:91:eb:b7:85:9c:84:fd:dd:17:3c:e9:58:5d:4c:af:ff:f5: 12:a7:02:95:03:94:79:95:4a:8b:d3:7a:01:97:6d:21:99:96: fc:50:8d:28:b5:ce:1a:90:f0:44:a9:4a:65:cb:3b:f2:c3:c0: 0e:a1:a8:68:81:0f:cc:42:2f:df:ac:6d:95:e9:8d:8b:85:02: 3b:45:3b:97:b5:9d:35:dc:39:50:fb:71:af:2d:2e:80:cf:89: e9:9d:dc:91:bc:08:bd:da:e0:08:d3:ea:66:3e:2f:fb:a5:94: 85:ed:3d:e3:71:ea:87:20:fb:8c:23:f9:76:f7:80:aa:11:5a: 93:f7:7f:be:e1:8e:c2:ae:75:d4:0a:0a:23:f3:b2:f0:3b:b8: 1f:fa:d2:f6:ed:95:bf:3f:60:fa:ce:01:b7:1c:9b:de:de:c6: 85:8a:33:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTU2RDExMC8GA1UEBRMoNDlEREQxRTRDNUE5RkM3NjY2MjZEMkZBM0I2NjM3REE4 MEVBMkZEMjAeFw0yNTA3MDEwODU4MDhaFw0yNTA3MDgwODU4MDhaMBgxFjAUBgNV BAMTDTY4NjNhMzIwLWM0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC13Temds/jqvyGL+elfsmqE3oL1T9lcWLuxbITP1TAiO0XNf87evk4EzJKSk78 1xmFu30AJdH6lq3YmAr+Fpu+8uI6bbbq9OoK2nBxO/lUjwXFxzOM7VgEeCSbGt0S ZZcRSd/jTZwz6gu3JvP3/duojuuNLR5MPT+MSmdTxK+wAHJekR1r/3nHczhYTTlX CBy/vYdwej+iItnhZ/fk2uEadDraGCti32EBaWMKtL4/+pgrHLmBCxL16xO21v0k beTQjaYqEusbcrjBgeeCLr95zdLABZZlNMaD1MmKwlw0I/wnBYbFZWVu9L6ZO4j3 r1Q+PZKsjCJgfiBhTutWZTC7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2W80igII XhOHSa91wCmXJriDySowHwYDVR0jBBgwFoAUSd3R5MWp/HZmJtL6O2Y32oDqL9Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxNTZELzdDRDNERUFDNEU4 OTExRjBBODFDNjcxNkM0RjlBRTAyL1NkM1I1TVdwX0habUp0TDZPMlkzMm9EcUw5 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2QzUjVNV3BfSFptSnRMNk8yWTMyb0RxTDlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx NTZELzdDRDNERUFDNEU4OTExRjBBODFDNjcxNkM0RjlBRTAyL1NkM1I1TVdwX0ha bUp0TDZPMlkzMm9EcUw5SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAHVYX6uUc3RBaNt1VuKj7X595+o8/Q2zqgM4VXkwlOMwjr4CSvsrVz8 2d0bZMbiNoFdfI4Kd7W5xgb345Zqz5nNzHmlTMP3XfIyZTNwwgu9OOrvrln1JASl Lu6R67eFnIT93Rc86VhdTK//9RKnApUDlHmVSovTegGXbSGZlvxQjSi1zhqQ8ESp SmXLO/LDwA6hqGiBD8xCL9+sbZXpjYuFAjtFO5e1nTXcOVD7ca8tLoDPiemd3JG8 CL3a4AjT6mY+L/ullIXtPeNx6ocg+4wj+Xb3gKoRWpP3f77hjsKuddQKCiPzsvA7 uB/60vbtlb8/YPrOAbccm97exoWKM3A= -----END CERTIFICATE-----Generated at Wed Jul 2 10:20:19 2025 by rpki-client