$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft File: SXppmDQJrXDCF1ZAccz1vjTFG8c.mft (raw, json) Hash identifier: BWJAqKTc0GoZ8RIFQi9ygCcB9f9PFRZ9HxKe+gJpUh0= Subject key identifier: EA:9D:66:C5:CE:0F:2F:DC:5E:C1:0E:85:93:4F:C2:BC:95:13:1C:9E Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft Manifest number: 0468 Signing time: Thu 05 Jun 2025 00:01:55 +0000 Manifest this update: Thu 05 Jun 2025 00:01:54 +0000 Manifest next update: Thu 12 Jun 2025 00:01:54 +0000 Files and hashes: 1: SXppmDQJrXDCF1ZAccz1vjTFG8c.crl (hash: LlkNDPBLBUpXOeUMiqpAAi8k1WSI2NvHuQNGNGXx4lQ=) 2: E9237B16683211EDA8B5DD35C4F9AE02.roa (hash: m/W09ZD2DgnbOhKrF8d5SNMRuuUCLsB529DhjnozbkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 00:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C751F, serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Validity Not Before: Jun 5 00:01:54 2025 GMT Not After : Jun 12 00:01:54 2025 GMT Subject: CN=6840de72-d34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:ee:43:41:66:5c:16:3b:38:f4:46:5c:4c: 56:05:9a:2e:92:8e:26:c2:11:d2:7f:4d:64:db:df: 2f:50:73:2e:00:17:09:ae:5a:3e:c4:c7:5d:1e:03: e7:fb:f1:13:0b:11:bf:a9:8e:0d:f3:ed:1e:f4:69: 2d:3c:61:98:a7:34:3c:e1:c7:db:23:7f:84:48:46: ee:cc:f0:a9:43:9c:00:d2:78:28:0a:7a:68:68:71: f6:f5:ba:c6:d3:5e:41:dd:71:a8:7b:ab:34:63:9d: 7d:5d:ee:50:80:72:8a:ce:2a:76:52:ac:ac:5c:5e: c4:af:49:f4:cf:d2:a8:9d:25:c8:76:f6:86:d6:07: ff:af:42:5f:73:2b:bc:b5:5f:b6:89:14:da:43:51: 70:54:84:af:16:79:58:d7:32:91:93:0f:50:3c:c5: ea:74:76:52:ea:8b:88:b2:18:f3:17:7f:26:07:8d: 20:db:d6:05:d5:57:06:61:d4:87:0f:f1:76:b9:9e: 07:5d:19:fb:aa:44:60:e3:1f:40:e1:7e:4d:6a:83: 24:d1:11:26:2a:ba:2f:5d:21:ea:44:c3:c1:38:8e: 81:38:16:f3:04:d4:a5:ce:26:01:58:a6:55:91:fc: cb:56:17:38:1d:04:da:b2:6f:0a:5e:49:91:e3:89: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9D:66:C5:CE:0F:2F:DC:5E:C1:0E:85:93:4F:C2:BC:95:13:1C:9E X509v3 Authority Key Identifier: keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:cc:0a:cf:c5:22:cc:ec:59:cd:88:d7:dd:c0:1d:dd:da:2f: a3:dd:13:a0:8d:54:4d:33:12:46:e9:02:17:20:4f:f5:7f:2b: ba:99:cc:39:0c:58:72:a5:2d:7d:1b:5b:f4:1c:b0:fd:18:e0: 52:71:41:49:ca:2c:9c:8b:79:0d:ed:bc:6e:2b:a5:ad:18:e5: 78:81:83:c3:5f:e5:4a:db:3a:62:af:47:09:d0:4e:62:1b:de: 55:9d:e5:fd:93:61:4a:8a:f6:20:c3:2d:84:37:c9:34:db:3a: 97:b9:1b:c9:44:b3:2c:28:6d:00:87:3a:76:c1:6b:c0:b8:e7: 96:78:0c:de:99:60:d1:cc:19:8e:74:d0:47:7d:ab:34:86:6f: c5:ae:79:be:1f:c3:2b:af:0d:c4:03:38:69:a5:ed:55:66:5c: e5:a5:80:24:5a:19:85:06:03:89:48:b1:1c:be:dc:40:ad:c4: 3c:94:2a:20:77:17:e0:76:9c:b1:d0:11:cf:d3:b4:07:76:f0: 00:86:77:ad:f4:98:09:56:2e:bc:9a:18:1d:7c:ef:44:bb:be: f2:b9:67:5b:f4:95:3a:9e:3a:ba:07:16:14:da:4c:2a:55:74: de:d7:ff:26:41:09:17:c7:7d:61:a6:fd:c6:16:41:80:ee:30: 56:40:39:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc1MUYxMTAvBgNVBAUTKDQ5N0E2OTk4MzQwOUFENzBDMjE3NTY0MDcxQ0NGNUJF MzRDNTFCQzcwHhcNMjUwNjA1MDAwMTU0WhcNMjUwNjEyMDAwMTU0WjAYMRYwFAYD VQQDEw02ODQwZGU3Mi1kMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKDuQ0FmXBY7OPRGXExWBZouko4mwhHSf01k298vUHMuABcJrlo+xMddHgPn +/ETCxG/qY4N8+0e9GktPGGYpzQ84cfbI3+ESEbuzPCpQ5wA0ngoCnpoaHH29brG 015B3XGoe6s0Y519Xe5QgHKKzip2UqysXF7Er0n0z9KonSXIdvaG1gf/r0Jfcyu8 tV+2iRTaQ1FwVISvFnlY1zKRkw9QPMXqdHZS6ouIshjzF38mB40g29YF1VcGYdSH D/F2uZ4HXRn7qkRg4x9A4X5NaoMk0REmKrovXSHqRMPBOI6BOBbzBNSlziYBWKZV kfzLVhc4HQTasm8KXkmR44neqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqdZsXO Dy/cXsEOhZNPwryVExyeMB8GA1UdIwQYMBaAFEl6aZg0Ca1wwhdWQHHM9b40xRvH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzUxRi8xODM5ODFEMjUx ODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJYRENGMVpBY2N6MXZqVEZH OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYcHBtRFFKclhEQ0YxWkFjY3oxdmpURkc4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzUxRi8xODM5ODFEMjUxODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJY RENGMVpBY2N6MXZqVEZHOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKzArPxSLM7FnNiNfdwB3d2i+j3ROgjVRNMxJG6QIXIE/1fyu6mcw5 DFhypS19G1v0HLD9GOBScUFJyiyci3kN7bxuK6WtGOV4gYPDX+VK2zpir0cJ0E5i G95VneX9k2FKivYgwy2EN8k02zqXuRvJRLMsKG0Ahzp2wWvAuOeWeAzemWDRzBmO dNBHfas0hm/Frnm+H8Mrrw3EAzhppe1VZlzlpYAkWhmFBgOJSLEcvtxArcQ8lCog dxfgdpyx0BHP07QHdvAAhnet9JgJVi68mhgdfO9Eu77yuWdb9JU6njq6BxYU2kwq VXTe1/8mQQkXx31hpv3GFkGA7jBWQDmL -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:10 2025 by rpki-client