$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json) Hash identifier: skz2K97Zf+lHmL0DtXse9REEd2b+QH8xplHtP3I0QGA= Subject key identifier: B7:11:4A:B0:D6:56:60:C1:FA:6C:D0:D2:75:68:F5:33:D8:7C:93:7E Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft Manifest number: 0172 Signing time: Sat 23 Aug 2025 04:26:45 +0000 Manifest this update: Sat 23 Aug 2025 04:26:44 +0000 Manifest next update: Sat 30 Aug 2025 04:26:44 +0000 Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: JWHpUtp1hXTQI5gLcQptaUFKPfyi4EqZsoo1qcywk6A=) 2: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: 28Pcqodr/XiyCXR1rm1sG8vgE+8OCqXnMRTKbKZwlik=) 3: CEB166C0E47D11EFAFC6496FC4F9AE02.roa (hash: DZtIXQ1ghN4hCYJ+ctwT88CELrMnqgkRwXBOtM2ymVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Aug 23 04:26:44 2025 GMT Not After : Aug 30 04:26:44 2025 GMT Subject: CN=68a94304-c5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:e8:72:27:e5:b7:c9:6b:6a:3d:6e:d8:d3: da:0b:c5:26:63:7c:a7:34:86:0f:e7:2a:2f:6e:0b: e4:f1:f0:6c:9b:24:37:45:b4:ea:78:75:cb:ca:38: d3:f9:78:0f:af:32:01:dd:e2:7b:2d:e3:ea:52:99: df:47:44:93:e5:f0:ea:31:c9:a5:cf:71:7e:59:9f: ed:9a:96:eb:8d:e2:b9:39:05:4b:cd:07:14:6b:73: 32:2e:79:5a:8f:b0:5c:e3:98:d9:f9:b8:a9:97:72: 6d:e4:1d:55:93:62:1f:8a:7e:06:23:93:34:b6:2c: 4a:64:74:bd:d7:00:e8:b8:c4:8b:c2:65:e6:b0:dc: fa:51:4b:fc:06:14:d4:94:b7:25:42:77:55:14:53: 97:92:25:ae:26:f1:0f:3a:fa:d5:76:d1:47:58:f3: 86:73:f4:09:aa:d4:18:6d:83:d9:a0:f2:8e:15:a9: 2c:0f:27:fa:23:30:db:7b:00:a8:e6:07:20:75:22: 76:76:13:b5:e4:f9:2a:f4:cb:b2:51:a8:7e:ce:bc: f7:15:3b:9e:3b:3a:f0:91:08:ec:1b:a0:78:13:05: f2:f7:c9:40:44:09:e5:14:ce:ae:31:9c:a0:6b:3a: c0:05:80:5f:03:ee:b9:3a:c7:97:bc:53:ad:2c:25: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:11:4A:B0:D6:56:60:C1:FA:6C:D0:D2:75:68:F5:33:D8:7C:93:7E X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:6f:a6:f0:5a:62:b9:92:20:93:81:1a:12:73:e3:0b:dc:fc: 8e:73:c0:85:5f:c2:5d:64:87:95:56:80:3e:d1:91:50:77:06: b0:0c:c7:ff:8b:00:ab:58:d1:a7:47:99:ac:b3:85:7b:bf:32: d7:34:d0:1e:31:dc:16:0d:31:4e:b9:d5:d3:fb:30:03:8f:c8: d3:5f:2a:3b:11:af:13:b8:d8:7b:b9:f5:1c:3b:aa:ea:64:05: 47:dc:af:87:53:d6:d1:39:f2:56:c4:22:80:10:0c:bd:fc:0e: 89:d4:01:70:47:31:6e:3e:29:e8:6f:e7:c4:cc:f6:ac:63:fa: 13:d7:94:bd:cb:ff:3a:c0:3a:8a:21:8c:aa:b2:d1:eb:81:f6: 1c:f7:df:4d:6d:9d:76:32:61:48:f1:e6:ad:df:13:d8:49:52: 7b:41:2f:fe:7d:2d:e5:8c:40:65:02:ef:51:ec:3e:62:12:22: d9:f6:86:25:63:74:e4:39:91:06:64:b0:b4:4c:44:1f:80:28: 32:87:ec:cd:5a:e3:ef:1d:e8:10:cf:e6:68:d5:7c:59:46:55: 3a:39:56:72:e0:a6:a6:64:51:b5:4e:79:ac:15:dd:a1:21:f8: 30:c5:5c:3f:8c:74:25:f9:9e:bd:39:44:0d:7d:62:0a:eb:47: ae:63:fd:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjUwODIzMDQyNjQ0WhcNMjUwODMwMDQyNjQ0WjAYMRYwFAYD VQQDEw02OGE5NDMwNC1jNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCnociflt8lraj1u2NPaC8UmY3ynNIYP5yovbgvk8fBsmyQ3RbTqeHXLyjjT +XgPrzIB3eJ7LePqUpnfR0ST5fDqMcmlz3F+WZ/tmpbrjeK5OQVLzQcUa3MyLnla j7Bc45jZ+bipl3Jt5B1Vk2Ifin4GI5M0tixKZHS91wDouMSLwmXmsNz6UUv8BhTU lLclQndVFFOXkiWuJvEPOvrVdtFHWPOGc/QJqtQYbYPZoPKOFaksDyf6IzDbewCo 5gcgdSJ2dhO15Pkq9MuyUah+zrz3FTueOzrwkQjsG6B4EwXy98lARAnlFM6uMZyg azrABYBfA+65OseXvFOtLCVYKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcRSrDW VmDB+mzQ0nVo9TPYfJN+MB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ TVFoQ3lWVmtCUmRUM3JBb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEb6bwWmK5kiCTgRoSc+ML3PyOc8CFX8JdZIeVVoA+0ZFQdwawDMf/ iwCrWNGnR5mss4V7vzLXNNAeMdwWDTFOudXT+zADj8jTXyo7Ea8TuNh7ufUcO6rq ZAVH3K+HU9bROfJWxCKAEAy9/A6J1AFwRzFuPinob+fEzPasY/oT15S9y/86wDqK IYyqstHrgfYc999NbZ12MmFI8eat3xPYSVJ7QS/+fS3ljEBlAu9R7D5iEiLZ9oYl Y3TkOZEGZLC0TEQfgCgyh+zNWuPvHegQz+Zo1XxZRlU6OVZy4KamZFG1TnmsFd2h IfgwxVw/jHQl+Z69OUQNfWIK60euY/3k -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:36 2025 by rpki-client