$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: bRqWaAHG4chliXmMi8VOhf5Hg3Z3Ct+gXCUJ9Ri27uQ= Subject key identifier: 4B:0E:10:17:7A:D4:31:82:32:9B:04:24:5B:45:18:3F:7B:49:DC:10 Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 0691 Signing time: Fri 22 Aug 2025 22:25:14 +0000 Manifest this update: Fri 22 Aug 2025 22:25:14 +0000 Manifest next update: Fri 29 Aug 2025 22:25:14 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: mzE8ByqcSPkvsAfYs8qNLGmDqJ/vyZLKJspjimJUs8w=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 6Kv6ZSL3MazMHrERvQ2sPcXYF/GKUnOfly5I2XW62pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Aug 22 22:25:14 2025 GMT Not After : Aug 29 22:25:14 2025 GMT Subject: CN=68a8ee4a-26fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ec:a4:b0:91:df:b3:46:c0:d2:d7:1d:68:6f: 97:10:72:35:8d:06:88:c0:79:26:94:35:aa:62:77: fb:f9:08:4c:19:95:ad:a2:24:67:2c:65:6d:22:ec: 76:40:80:e3:5b:7a:7f:88:6d:3e:ca:40:7b:87:c0: 1d:00:b3:d7:97:46:41:b0:65:a6:ac:a9:36:67:53: 57:68:34:93:be:a2:25:59:f0:37:8d:e5:08:d6:9a: ac:28:30:0a:e4:aa:1f:b1:c2:25:55:53:0b:85:a2: ae:3b:d8:29:ef:29:e1:da:6e:91:4b:2d:34:dc:e7: 6d:ae:00:4f:33:53:1e:3a:41:0c:9d:d5:23:71:ad: 88:7f:cd:a5:7a:11:07:e6:c0:98:a8:e8:ba:9b:49: 13:36:c3:72:58:c2:59:29:f2:d3:41:27:69:ac:b6: a6:d7:17:65:ae:f0:14:b7:2a:44:0c:72:e4:b1:7d: e8:f8:c1:77:bf:18:87:62:89:ee:b0:16:36:3d:10: e5:33:b8:44:a0:ad:55:3b:93:57:cb:86:38:7e:2f: 3d:6a:30:6a:c2:21:86:1b:b9:2c:4d:04:bd:12:4b: 0c:0a:36:36:6d:d3:26:ba:5a:9f:48:df:e9:3f:70: 41:d7:df:5d:a2:6b:0e:cc:86:2b:09:61:f7:a3:f0: a8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0E:10:17:7A:D4:31:82:32:9B:04:24:5B:45:18:3F:7B:49:DC:10 X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:3c:dc:93:43:69:16:77:a6:c9:a5:0e:29:f9:c4:fb:53:a2: 35:36:29:ea:8f:70:a2:09:6d:b7:16:3e:41:83:7a:0c:ff:b2: e1:3a:7c:44:38:f1:21:7d:a5:ad:cb:c6:93:af:27:62:08:90: 4f:70:52:4a:46:4d:96:97:74:d9:c7:c3:f8:f0:47:b5:44:1a: 85:13:96:cb:27:aa:0b:2f:3d:1e:39:ee:fa:60:66:b2:a9:e1: 67:ed:5a:c3:9e:42:ab:e7:62:6e:15:57:04:a6:13:26:b8:66: 1d:5c:56:fa:1c:48:39:c4:4b:8b:c9:c4:2a:a3:05:49:bd:94: 40:94:05:5d:27:a9:eb:26:bf:37:2e:c6:d7:34:87:e4:26:dd: 9b:7b:fc:6c:c1:9f:19:26:17:ae:49:09:9b:49:3a:bf:61:b5: 9f:e2:44:ec:af:6e:93:74:23:8f:50:d5:b0:ea:a1:e0:19:c4: 1d:ec:10:2a:5d:f0:af:f7:9b:76:55:05:81:d7:8c:95:41:80: 85:d9:3a:27:1e:44:2a:44:a2:bc:6f:ec:3f:3a:f1:a0:2d:ed: eb:cb:63:11:4a:63:f3:78:c1:0d:2d:21:7f:17:00:ff:ce:6b: 2e:51:92:d9:21:3d:68:a0:b7:e2:a2:0a:d6:46:29:b1:e2:2c: 45:a1:0c:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjUwODIyMjIyNTE0WhcNMjUwODI5MjIyNTE0WjAYMRYwFAYD VQQDEw02OGE4ZWU0YS0yNmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeyksJHfs0bA0tcdaG+XEHI1jQaIwHkmlDWqYnf7+QhMGZWtoiRnLGVtIux2 QIDjW3p/iG0+ykB7h8AdALPXl0ZBsGWmrKk2Z1NXaDSTvqIlWfA3jeUI1pqsKDAK 5KofscIlVVMLhaKuO9gp7ynh2m6RSy003OdtrgBPM1MeOkEMndUjca2If82lehEH 5sCYqOi6m0kTNsNyWMJZKfLTQSdprLam1xdlrvAUtypEDHLksX3o+MF3vxiHYonu sBY2PRDlM7hEoK1VO5NXy4Y4fi89ajBqwiGGG7ksTQS9EksMCjY2bdMmulqfSN/p P3BB199domsOzIYrCWH3o/CopwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsOEBd6 1DGCMpsEJFtFGD97SdwQMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZPNyTQ2kWd6bJpQ4p+cT7U6I1Ninqj3CiCW23Fj5Bg3oM/7LhOnxE OPEhfaWty8aTrydiCJBPcFJKRk2Wl3TZx8P48Ee1RBqFE5bLJ6oLLz0eOe76YGay qeFn7VrDnkKr52JuFVcEphMmuGYdXFb6HEg5xEuLycQqowVJvZRAlAVdJ6nrJr83 LsbXNIfkJt2be/xswZ8ZJheuSQmbSTq/YbWf4kTsr26TdCOPUNWw6qHgGcQd7BAq XfCv95t2VQWB14yVQYCF2TonHkQqRKK8b+w/OvGgLe3ry2MRSmPzeMENLSF/FwD/ zmsuUZLZIT1ooLfiogrWRimx4ixFoQxj -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:26 2025 by rpki-client