$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json) Hash identifier: 5Z13YUXTh98Bs0BccJFbq7DK1txWvr5JpaSDVHecYFc= Subject key identifier: 0B:BA:7A:EF:09:B1:49:3F:11:E5:1A:99:95:7B:82:A2:79:BC:76:0D Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft Manifest number: 013C Signing time: Thu 05 Jun 2025 03:47:36 +0000 Manifest this update: Thu 05 Jun 2025 03:47:36 +0000 Manifest next update: Thu 12 Jun 2025 03:47:36 +0000 Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: GdoijlwdzwtJ5fKGWW80VYGCzafiCZYofC+vlXoZPbM=) 2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: aw8y769dbHtoKJEd8vQWlpw8CKdXEBliY+eMjR7xPWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 03:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: Jun 5 03:47:36 2025 GMT Not After : Jun 12 03:47:36 2025 GMT Subject: CN=68411358-79b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:07:f3:d8:22:9e:56:bb:6b:11:34:86:58: 23:f8:f3:88:9a:8b:d7:ec:c1:1c:4a:99:18:bc:cf: a3:85:97:cb:71:e9:3a:12:80:6f:2e:3e:77:46:fb: 5f:5a:41:91:73:73:a5:58:81:c3:58:58:06:e4:5c: 7d:58:c3:ef:36:36:62:f6:33:63:98:8b:0d:10:13: 2a:46:c6:bb:ab:93:ca:ec:6a:2d:d1:32:28:19:47: 55:42:06:67:e1:8f:6f:63:2b:a7:bc:d6:9f:52:15: 8b:c3:be:7d:89:5f:14:c1:d7:dd:22:f0:99:09:92: d0:7a:65:fa:d8:55:c7:e4:e8:42:b7:21:50:a8:8c: 33:bc:71:5e:f5:a7:fc:fc:0a:91:0f:44:d1:d0:5e: c5:39:71:4c:42:7b:90:83:1a:98:21:fb:68:3a:dc: 67:03:89:5f:e2:84:bb:d8:e7:95:d8:79:f5:eb:7e: e6:1b:e3:4e:1a:f8:03:e2:b9:59:fe:c3:df:27:04: fe:1a:bd:7a:9b:7c:b2:be:1b:6a:2f:86:9b:66:25: 4a:af:fb:ea:c1:f3:fc:8b:18:34:0b:03:79:ca:46: 11:b3:55:bf:4c:1f:53:82:11:65:7a:99:a2:b8:1f: fd:cb:df:ed:c5:0c:c4:e9:0b:42:2f:c8:35:28:b1: db:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BA:7A:EF:09:B1:49:3F:11:E5:1A:99:95:7B:82:A2:79:BC:76:0D X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fd:39:bf:2b:07:a0:37:e4:46:d4:58:30:b1:64:99:c2:1c: d8:ba:9f:bb:b8:bd:c7:99:1d:a6:b6:18:02:aa:c5:1f:64:43: 00:53:02:01:b5:b7:e6:ce:02:41:7a:90:76:33:30:35:d6:1e: b0:f2:bb:d7:59:07:36:45:75:bb:c1:11:26:24:4d:26:37:10: 53:7b:1c:99:4d:c1:72:31:91:ee:92:67:5e:5a:48:90:8e:c0: d3:68:85:03:8a:b2:8a:67:62:da:62:44:39:06:a8:55:69:4a: 19:74:1c:59:e4:95:9a:25:15:9a:5c:e5:f3:c9:2c:bb:b6:44: 51:40:3e:04:e1:6e:32:41:e8:b9:c4:6c:88:f2:83:ae:17:92: 98:c3:0f:5a:ee:30:24:29:ed:ae:c6:60:38:a7:a3:a1:71:37: 1e:99:c8:b9:f7:95:80:3d:5a:62:09:2d:dd:61:b2:99:16:a3: 84:33:67:af:74:00:05:54:65:08:d9:57:5b:67:33:2d:61:64: 2a:90:13:d9:f8:61:70:c4:37:76:73:8f:32:ee:ba:10:70:7b: 41:6f:b5:eb:44:97:10:72:c1:e7:90:76:4b:b1:4e:f1:8c:18: f7:da:01:ca:99:10:10:98:12:1f:c4:80:41:30:80:17:59:c5: 28:31:fc:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3QzQxMTAvBgNVBAUTKDQ5REI2MUZGMDNDNTUxNjc5NUNGNzg1MDlFQTM3QTA2 MEY0NTQ3QkYwHhcNMjUwNjA1MDM0NzM2WhcNMjUwNjEyMDM0NzM2WjAYMRYwFAYD VQQDEw02ODQxMTM1OC03OWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TMH89ginla7axE0hlgj+POImovX7MEcSpkYvM+jhZfLcek6EoBvLj53Rvtf WkGRc3OlWIHDWFgG5Fx9WMPvNjZi9jNjmIsNEBMqRsa7q5PK7Got0TIoGUdVQgZn 4Y9vYyunvNafUhWLw759iV8UwdfdIvCZCZLQemX62FXH5OhCtyFQqIwzvHFe9af8 /AqRD0TR0F7FOXFMQnuQgxqYIftoOtxnA4lf4oS72OeV2Hn1637mG+NOGvgD4rlZ /sPfJwT+Gr16m3yyvhtqL4abZiVKr/vqwfP8ixg0CwN5ykYRs1W/TB9TghFlepmi uB/9y9/txQzE6QtCL8g1KLHbBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAu6eu8J sUk/EeUamZV7gqJ5vHYNMB8GA1UdIwQYMBaAFEnbYf8DxVFnlc94UJ6jegYPRUe/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDdDNC81OTVCRTgyQzYz NUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVXZVZ6M2hRbnFONkJnOUZS NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDdDNC81OTVCRTgyQzYzNUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVX ZVZ6M2hRbnFONkJnOUZSNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9/Tm/KwegN+RG1FgwsWSZwhzYup+7uL3HmR2mthgCqsUfZEMAUwIB tbfmzgJBepB2MzA11h6w8rvXWQc2RXW7wREmJE0mNxBTexyZTcFyMZHukmdeWkiQ jsDTaIUDirKKZ2LaYkQ5BqhVaUoZdBxZ5JWaJRWaXOXzySy7tkRRQD4E4W4yQei5 xGyI8oOuF5KYww9a7jAkKe2uxmA4p6OhcTcemci595WAPVpiCS3dYbKZFqOEM2ev dAAFVGUI2VdbZzMtYWQqkBPZ+GFwxDd2c48y7roQcHtBb7XrRJcQcsHnkHZLsU7x jBj32gHKmRAQmBIfxIBBMIAXWcUoMfxc -----END CERTIFICATE-----Generated at Fri Jun 6 16:33:24 2025 by rpki-client