$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft File: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft (raw, json) Hash identifier: gs3XtNZBv5TJxuYvIoDf+RwQhVJdpBx2HIB0fwMwTvY= Subject key identifier: 35:2F:2E:83:55:47:F8:01:31:68:AB:77:0B:45:41:6C:EC:98:77:26 Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 Certificate issuer: /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Certificate serial: 04CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft Manifest number: 04C6 Signing time: Wed 04 Jun 2025 23:40:59 +0000 Manifest this update: Wed 04 Jun 2025 23:40:58 +0000 Manifest next update: Wed 11 Jun 2025 23:40:58 +0000 Files and hashes: 1: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl (hash: ACzhBDSYlvUGcZEdBrplGN/uyMhggraNMiEi2z9VF+s=) 2: 1443F7BA200411EE84DAD06BC4F9AE02.roa (hash: zLQo77q+5IMP6DcnXVEpDBCRchvfQ2yuvBtuKyjQHYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 23:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192E6F, serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Validity Not Before: Jun 4 23:40:58 2025 GMT Not After : Jun 11 23:40:58 2025 GMT Subject: CN=6840d98b-eb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:63:cc:dd:86:14:d1:46:b6:eb:18:e0:34: 76:71:3b:59:1e:ec:7a:11:42:b3:1c:fd:d7:f5:34: c2:8e:d9:f6:f6:4d:1d:4f:c7:02:70:12:20:a2:d8: 04:4e:81:43:d6:3c:f1:31:cb:06:df:d8:8b:1b:ce: 11:93:16:72:61:ef:52:eb:f7:9b:4f:c9:37:bf:25: 33:e9:f8:71:59:e9:40:1a:e5:04:69:98:ca:97:32: 3c:7e:3d:49:71:0b:18:b7:2b:48:42:3a:92:f9:ce: 25:3b:83:41:dc:d1:a4:d7:25:45:59:f5:07:cc:96: 3e:25:f9:db:ac:bc:5d:eb:9a:31:51:16:31:47:50: 56:02:50:48:a0:11:ff:13:6a:a5:54:70:b6:2e:05: 0f:44:c3:46:1f:6b:c2:4b:78:b2:72:dd:be:53:4a: bf:c8:6b:86:5d:5d:38:ef:78:c2:b4:0e:8a:0f:2f: 5a:c4:42:8a:c3:bc:e6:5e:21:fd:d0:36:d3:0b:b6: 8b:dc:74:2e:c0:3b:c9:6f:d1:6a:78:4a:10:24:bd: d1:94:0a:d0:59:f5:f7:96:90:17:d6:68:91:6a:81: 66:a7:0c:80:f7:11:0c:3a:10:b7:d1:c7:bb:18:9e: 7c:1e:81:e8:b7:a7:ae:70:10:47:d1:4a:b3:0e:00: 76:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2F:2E:83:55:47:F8:01:31:68:AB:77:0B:45:41:6C:EC:98:77:26 X509v3 Authority Key Identifier: keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:15:c8:8f:c3:b6:e7:1b:f0:c6:99:c4:19:83:16:de:9d:38: 1c:84:0b:f6:3a:74:a5:c7:7e:18:0a:5d:d9:f4:97:c3:f4:f9: 08:cb:e1:eb:84:94:e4:e7:0a:0c:bf:48:6d:4f:96:83:60:c1: ca:01:b9:31:8c:b1:e1:16:3b:ea:2e:1e:2f:92:88:d4:fb:16: 28:19:ce:99:1b:d3:91:a0:7d:12:ea:8e:34:e2:7b:3e:55:1d: d5:c3:8d:55:30:72:53:9a:f8:a4:47:3a:f9:96:ce:9f:85:9f: b9:00:39:71:2e:35:01:90:7d:d1:a4:2f:00:ad:20:4c:a7:d7: 87:d3:d7:7d:c0:85:60:6f:e2:de:ca:40:a7:d8:60:6b:3c:1f: ee:56:c9:20:b2:b9:9b:f0:b4:23:c9:c7:db:e5:eb:ad:1d:ee: fd:a8:54:ae:ad:b8:be:12:bd:f7:90:ef:f0:0d:8d:e2:9e:2d: dc:e2:35:0b:20:2e:cd:18:0f:76:38:71:7e:8c:b7:18:d4:31: 65:1d:95:96:33:7b:63:d2:e6:57:3f:98:0a:5d:e7:b4:89:80: e2:2d:9c:19:92:fa:c9:8c:3b:1b:37:bc:bd:15:7c:e5:2e:34: eb:55:e6:f9:66:e5:a6:f4:7d:1c:67:9e:f8:d2:ca:34:ec:59: 73:e7:a0:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFNkYxMTAvBgNVBAUTKDkzRjQ5REQzRURDOUQ1OTI3MUFGRTEzMTNDOTIxREU2 NkMyMjIwNjQwHhcNMjUwNjA0MjM0MDU4WhcNMjUwNjExMjM0MDU4WjAYMRYwFAYD VQQDEw02ODQwZDk4Yi1lYjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtytjzN2GFNFGtusY4DR2cTtZHux6EUKzHP3X9TTCjtn29k0dT8cCcBIgotgE ToFD1jzxMcsG39iLG84RkxZyYe9S6/ebT8k3vyUz6fhxWelAGuUEaZjKlzI8fj1J cQsYtytIQjqS+c4lO4NB3NGk1yVFWfUHzJY+JfnbrLxd65oxURYxR1BWAlBIoBH/ E2qlVHC2LgUPRMNGH2vCS3iyct2+U0q/yGuGXV0473jCtA6KDy9axEKKw7zmXiH9 0DbTC7aL3HQuwDvJb9FqeEoQJL3RlArQWfX3lpAX1miRaoFmpwyA9xEMOhC30ce7 GJ58HoHot6eucBBH0UqzDgB2gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUvLoNV R/gBMWirdwtFQWzsmHcmMB8GA1UdIwQYMBaAFJP0ndPtydWSca/hMTySHeZsIiBk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkU2Ri82MkVCMURGRTI2 QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFaSnhyLUV4UEpJZDVtd2lJ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tfU2QwLTNKMVpKeHItRXhQSklkNW13aUlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkU2Ri82MkVCMURGRTI2QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFa SnhyLUV4UEpJZDVtd2lJR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+FciPw7bnG/DGmcQZgxbenTgchAv2OnSlx34YCl3Z9JfD9PkIy+Hr hJTk5woMv0htT5aDYMHKAbkxjLHhFjvqLh4vkojU+xYoGc6ZG9ORoH0S6o404ns+ VR3Vw41VMHJTmvikRzr5ls6fhZ+5ADlxLjUBkH3RpC8ArSBMp9eH09d9wIVgb+Le ykCn2GBrPB/uVskgsrmb8LQjycfb5eutHe79qFSurbi+Er33kO/wDY3ini3c4jUL IC7NGA92OHF+jLcY1DFlHZWWM3tj0uZXP5gKXee0iYDiLZwZkvrJjDsbN7y9FXzl LjTrVeb5ZuWm9H0cZ5740so07Flz56Ax -----END CERTIFICATE-----Generated at Thu Jun 5 18:36:48 2025 by rpki-client