$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json) Hash identifier: 8FBRzA9x62JqagNf99/PVzqEWTYL4ujlQD1VijgPFo4= Subject key identifier: EC:95:CB:30:37:56:CA:52:79:45:05:7C:7F:79:38:06:CA:47:E2:75 Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1F3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft Manifest number: 1F2E Signing time: Fri 22 Aug 2025 16:04:22 +0000 Manifest this update: Fri 22 Aug 2025 16:04:21 +0000 Manifest next update: Fri 29 Aug 2025 16:04:21 +0000 Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: Q7ZUBjn2XWybVjrQ0XA8Q9anFXbolhIXQPR81qNQjdQ=) 2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: BczHzIbLkzNL4updWdbsFHqnEhXAUmCVG50paNnAJDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7998 (0x1f3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Aug 22 16:04:21 2025 GMT Not After : Aug 29 16:04:21 2025 GMT Subject: CN=68a89505-97aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:c7:67:a1:96:01:81:8d:a1:d2:05:19:8d: 77:a4:3d:2f:8d:9e:6a:2b:1e:15:44:ce:ed:ca:8a: 92:38:e4:47:99:1a:e2:c9:67:78:84:41:06:c7:a9: 06:0d:31:d4:89:ba:a3:1f:e4:95:dc:3a:52:ee:7e: 9f:ee:30:a2:5d:c1:46:ed:e6:1c:45:7a:9b:94:65: 60:95:24:df:c9:3a:cc:a4:7a:19:9b:9b:cb:75:3b: 69:5b:5a:e1:81:41:6e:45:90:f7:7d:94:82:67:95: 4e:e5:51:75:33:28:6d:e5:e5:1a:35:3d:80:c8:a2: 53:50:90:2f:f2:d2:d2:05:73:25:2c:7b:92:d7:db: c3:58:70:89:eb:d8:70:ee:6d:00:11:dd:ff:37:ba: e4:6f:4c:1a:40:e2:68:ff:66:d2:78:65:ba:f7:28: 62:1b:c3:c3:3e:f4:b3:15:c1:df:28:3e:3a:2a:74: d3:74:b3:ab:44:da:bd:7a:8e:3e:24:92:78:23:19: 43:40:4f:40:5b:16:29:eb:84:0d:73:bf:af:1e:f2: b0:43:d1:50:5b:b0:58:b8:d5:95:66:6c:3e:62:43: 4d:81:c1:58:a7:45:12:1d:0b:6e:54:93:4b:ef:7a: 84:9f:3b:03:60:b4:a7:49:a7:39:7d:61:73:70:20: 35:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:95:CB:30:37:56:CA:52:79:45:05:7C:7F:79:38:06:CA:47:E2:75 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b3:7b:4e:91:e8:3b:a8:c8:da:a8:87:41:96:e7:be:68:53: 53:e3:cc:a3:e0:a9:31:8d:fd:d7:39:ff:03:b9:28:30:5a:80: cd:b5:2e:69:1d:18:0a:77:8a:26:24:c0:a9:45:86:99:05:c8: a5:15:e7:18:5b:4a:3a:1e:63:4e:f0:db:fd:99:9b:11:6f:b1: c1:9a:0d:6b:c6:da:fb:4d:5d:42:6a:50:c1:2a:15:c0:eb:75: a5:ed:99:fa:03:d7:a5:d0:c8:50:15:16:f0:34:14:5d:80:1a: 86:2d:17:dd:1d:8d:de:c4:fb:37:ec:f9:c0:48:c0:ce:fa:c1: 1c:68:52:46:97:5e:c0:a7:48:8f:a2:9b:e2:12:c0:f7:89:4a: eb:1f:31:a7:f8:82:9a:2e:2e:a5:d5:c8:05:9d:cc:f3:ee:e0: bb:f5:95:d4:ac:37:a3:b6:c2:5d:1e:d0:da:e1:c1:6d:40:33: 58:f2:c7:cb:d7:46:f8:4d:38:ca:ed:c8:19:8d:52:d6:e1:c7: 54:42:84:3e:83:fe:e8:76:b6:11:25:c1:d6:78:81:43:ba:ba: aa:df:df:9f:31:4e:0c:44:f6:42:be:ca:87:52:79:76:a2:11: 00:33:e3:c7:2f:e1:2a:b4:4d:f6:5a:69:05:b2:2b:35:82:c1: c8:07:c8:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjUwODIyMTYwNDIxWhcNMjUwODI5MTYwNDIxWjAYMRYwFAYD VQQDEw02OGE4OTUwNS05N2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jvHZ6GWAYGNodIFGY13pD0vjZ5qKx4VRM7tyoqSOORHmRriyWd4hEEGx6kG DTHUibqjH+SV3DpS7n6f7jCiXcFG7eYcRXqblGVglSTfyTrMpHoZm5vLdTtpW1rh gUFuRZD3fZSCZ5VO5VF1Myht5eUaNT2AyKJTUJAv8tLSBXMlLHuS19vDWHCJ69hw 7m0AEd3/N7rkb0waQOJo/2bSeGW69yhiG8PDPvSzFcHfKD46KnTTdLOrRNq9eo4+ JJJ4IxlDQE9AWxYp64QNc7+vHvKwQ9FQW7BYuNWVZmw+YkNNgcFYp0USHQtuVJNL 73qEnzsDYLSnSac5fWFzcCA1RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyVyzA3 VspSeUUFfH95OAbKR+J1MB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR XzNhZGFxN3ZtZkptRUV6VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5s3tOkeg7qMjaqIdBlue+aFNT48yj4Kkxjf3XOf8DuSgwWoDNtS5p HRgKd4omJMCpRYaZBcilFecYW0o6HmNO8Nv9mZsRb7HBmg1rxtr7TV1CalDBKhXA 63Wl7Zn6A9el0MhQFRbwNBRdgBqGLRfdHY3exPs37PnASMDO+sEcaFJGl17Ap0iP opviEsD3iUrrHzGn+IKaLi6l1cgFnczz7uC79ZXUrDejtsJdHtDa4cFtQDNY8sfL 10b4TTjK7cgZjVLW4cdUQoQ+g/7odrYRJcHWeIFDurqq39+fMU4MRPZCvsqHUnl2 ohEAM+PHL+EqtE32WmkFsis1gsHIB8gP -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:23 2025 by rpki-client