$ rpki-client -vvf rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft File: sc_l-mpxIskE6xEO8agpgPw9-ko.mft (raw, json) Hash identifier: 65GspkDGfmwW8ESQ+LWHkVKE4yFNM3mbk5xB/nS2bPY= Subject key identifier: C8:C6:CD:28:B1:7F:C5:D9:5B:C4:63:6C:26:A5:70:A5:8D:59:30:BE Authority key identifier: B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A Certificate issuer: /CN=A91E75B7/serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft Manifest number: 067D Signing time: Fri 30 May 2025 22:29:36 +0000 Manifest this update: Fri 30 May 2025 22:29:35 +0000 Manifest next update: Fri 06 Jun 2025 22:29:35 +0000 Files and hashes: 1: sc_l-mpxIskE6xEO8agpgPw9-ko.crl (hash: SFuowoW0Ktgxd9MMzCkd2atuw1l3+oMNVNSi7PEoTdw=) 2: AD0B0E5E762711EBBD5D544FC4F9AE02.roa (hash: sRmBeQkX3ZH6lPD83kjqFke2bsVl1aLInDxD3kBzJvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E75B7, serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A Validity Not Before: May 30 22:29:35 2025 GMT Not After : Jun 6 22:29:35 2025 GMT Subject: CN=683a3150-b7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:a5:51:4f:6f:bb:74:c3:b3:15:d6:fc:07: 8e:4a:0e:81:c1:62:bc:98:73:8a:5d:75:5f:b1:29: ec:24:d9:8d:9f:2a:7f:64:d6:92:2f:2b:57:f6:29: 07:b7:cf:32:f0:fd:cf:49:99:c9:9a:42:c5:e2:cc: 3f:ee:0c:12:f0:48:c9:ec:04:82:98:6c:ce:5e:4b: 28:21:ec:26:98:06:e1:95:8e:da:c9:f0:8f:96:3c: 0b:17:44:39:f5:9a:28:1d:bc:79:ae:30:ad:e8:3e: e3:3b:a9:9f:24:18:f5:56:6c:5c:d6:62:ed:44:a0: e9:a9:bc:78:d5:0d:43:36:79:de:3b:0c:e6:ac:97: df:2d:16:54:ff:46:79:a2:d1:80:c8:7b:a6:fa:33: e8:e7:1f:ba:da:e1:b6:d4:cc:08:16:70:c5:8c:c2: c9:1f:47:cf:94:10:94:e1:9a:a3:e7:be:07:6b:1a: 50:e5:79:c6:60:60:4d:d5:f7:b0:cd:0d:ed:46:e0: 6a:2d:52:77:33:0c:dc:b7:f4:71:63:10:3e:f5:30: 3f:90:34:b5:2e:46:14:2e:03:96:c3:a9:6d:d7:fb: d8:f0:af:af:6b:1d:62:04:82:96:ea:e9:2d:10:0e: b8:dd:72:62:d1:ff:cf:f1:af:2c:93:01:f6:32:ec: c1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C6:CD:28:B1:7F:C5:D9:5B:C4:63:6C:26:A5:70:A5:8D:59:30:BE X509v3 Authority Key Identifier: keyid:B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fc:ef:13:5b:aa:11:5e:7d:dc:eb:af:f2:13:d0:e9:14:6c: 30:34:65:14:d1:ed:d3:29:47:0f:96:e3:be:82:8a:1c:9e:ba: e3:17:92:f9:17:69:3a:24:f8:81:36:88:9a:07:04:cc:0c:a0: f9:b0:41:03:87:e1:ea:e0:3e:54:8e:fc:3a:d0:68:b2:e8:6d: 32:bc:0b:7d:c7:d4:c8:73:5d:53:8c:32:22:99:31:fb:1e:c0: 6b:8f:92:7f:03:62:bb:66:34:49:6e:bf:21:61:8d:dd:2b:89: 4f:a1:2a:6b:3e:3d:10:95:da:3c:c0:a6:dd:ba:36:f2:6e:ba: 84:1f:9a:86:67:67:15:56:b9:6d:d0:29:d2:7a:5f:ad:24:97: 91:bb:0a:49:09:29:de:85:08:ce:6e:8c:ba:e9:fc:65:f0:47: 12:bc:1a:b9:53:c9:4a:67:3f:e6:77:8f:cb:45:ab:2b:ba:31: ca:53:1e:84:5a:c4:ce:e0:cf:a2:c2:fc:50:12:3b:c8:93:55: 6e:bc:9e:60:10:53:e4:02:fa:74:0a:9e:ef:9d:b8:9e:81:84: be:a4:62:a4:40:66:fb:03:52:17:89:3f:fe:1c:6f:29:52:a8: c5:a1:1c:92:3a:9f:bf:45:e6:80:3c:52:66:b7:93:b6:09:22: bc:36:30:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1QjcxMTAvBgNVBAUTKEIxQ0ZFNUZBNkE3MTIyQzkwNEVCMTEwRUYxQTgyOTgw RkMzREZBNEEwHhcNMjUwNTMwMjIyOTM1WhcNMjUwNjA2MjIyOTM1WjAYMRYwFAYD VQQDEw02ODNhMzE1MC1iN2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTelUU9vu3TDsxXW/AeOSg6BwWK8mHOKXXVfsSnsJNmNnyp/ZNaSLytX9ikH t88y8P3PSZnJmkLF4sw/7gwS8EjJ7ASCmGzOXksoIewmmAbhlY7ayfCPljwLF0Q5 9ZooHbx5rjCt6D7jO6mfJBj1Vmxc1mLtRKDpqbx41Q1DNnneOwzmrJffLRZU/0Z5 otGAyHum+jPo5x+62uG21MwIFnDFjMLJH0fPlBCU4Zqj574HaxpQ5XnGYGBN1few zQ3tRuBqLVJ3Mwzct/RxYxA+9TA/kDS1LkYULgOWw6lt1/vY8K+vax1iBIKW6ukt EA643XJi0f/P8a8skwH2MuzBFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjGzSix f8XZW8RjbCalcKWNWTC+MB8GA1UdIwQYMBaAFLHP5fpqcSLJBOsRDvGoKYD8PfpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzVCNy83RkVENUUxRTc2 MjYxMUVCOERGQ0UwNEVDNEY5QUUwMi9zY19sLW1weElza0U2eEVPOGFncGdQdzkt a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjX2wtbXB4SXNrRTZ4RU84YWdwZ1B3OS1rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzVCNy83RkVENUUxRTc2MjYxMUVCOERGQ0UwNEVDNEY5QUUwMi9zY19sLW1weElz a0U2eEVPOGFncGdQdzkta28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm/O8TW6oRXn3c66/yE9DpFGwwNGUU0e3TKUcPluO+goocnrrjF5L5 F2k6JPiBNoiaBwTMDKD5sEEDh+Hq4D5Ujvw60Giy6G0yvAt9x9TIc11TjDIimTH7 HsBrj5J/A2K7ZjRJbr8hYY3dK4lPoSprPj0Qldo8wKbdujbybrqEH5qGZ2cVVrlt 0CnSel+tJJeRuwpJCSnehQjOboy66fxl8EcSvBq5U8lKZz/md4/LRasrujHKUx6E WsTO4M+iwvxQEjvIk1VuvJ5gEFPkAvp0Cp7vnbiegYS+pGKkQGb7A1IXiT/+HG8p UqjFoRySOp+/ReaAPFJmt5O2CSK8NjDY -----END CERTIFICATE-----Generated at Sat May 31 16:25:56 2025 by rpki-client