$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json) Hash identifier: WMpBspuznMV/UYjrAd7e6FXYy11gVRr6UAZjszxoO2Q= Subject key identifier: 9F:57:5A:15:C6:7D:E0:CA:24:75:3B:B4:5B:BB:06:78:DE:66:30:B6 Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 0AA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft Manifest number: 0AA0 Signing time: Fri 22 Aug 2025 19:39:30 +0000 Manifest this update: Fri 22 Aug 2025 19:39:29 +0000 Manifest next update: Fri 29 Aug 2025 19:39:29 +0000 Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: tTMm5CBYkmF/c2L8lWdUUUKpHRvQrT4pcqdeTm9YHW8=) 2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 0MEjUCGRzvjz5epLH1Yc0e31fL5fFdQ31GIxJUqAOEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2726 (0xaa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: Aug 22 19:39:29 2025 GMT Not After : Aug 29 19:39:29 2025 GMT Subject: CN=68a8c772-a2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:2e:71:0c:51:41:2d:08:78:16:a5:bf:5c: 10:98:15:9c:13:5c:92:0f:43:b4:16:1e:ba:ad:01: 0e:2a:e3:4f:de:3d:ec:83:06:c6:e4:7c:ed:84:c5: e4:9a:7e:4a:5d:e4:5b:c6:89:96:bd:8c:2a:5a:13: 8c:6b:bb:c9:75:90:aa:58:01:f9:f4:e6:1b:a0:68: e5:fa:ae:ac:91:2c:37:46:b5:ca:8a:a3:98:78:1a: ac:ea:3d:14:f5:28:4b:fa:13:a2:92:43:40:46:3b: 76:a7:dd:af:35:e0:23:4b:f9:d7:52:01:ab:c6:96: 42:80:d8:55:18:2e:76:91:fe:d6:af:2f:87:d4:5d: 69:41:50:5e:8a:59:3c:6b:8d:48:16:0e:89:d9:5f: 33:a9:8e:05:74:3e:42:73:b6:99:5d:43:1c:ac:f4: c7:30:55:18:ef:c2:23:15:54:40:f2:80:e1:6a:f7: 24:4a:7c:a4:a7:a6:ad:74:f2:a6:13:e8:c0:01:d4: 61:ea:ce:f9:6e:1c:3e:bf:7a:56:4f:1f:05:be:b8: b9:f0:ca:23:62:48:a0:b7:05:48:0d:64:79:b1:6f: d0:af:78:9c:52:2e:e9:25:fb:dd:58:a8:ac:7c:2d: 25:05:51:2a:7a:2a:06:a3:c8:e1:f7:c1:12:f4:8f: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:57:5A:15:C6:7D:E0:CA:24:75:3B:B4:5B:BB:06:78:DE:66:30:B6 X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9a:e9:c9:c9:ee:a4:de:91:b2:82:64:ce:d3:44:a6:1b:80: be:9c:e1:83:b5:a0:0c:4e:70:b7:18:5a:df:8a:85:02:37:79: e3:57:e2:66:38:13:60:51:49:71:0f:fd:c9:d4:72:5e:c8:c3: 6b:69:c0:20:01:0d:cd:9c:f7:a2:0f:b4:c4:1a:bb:78:89:66: e2:4e:c6:ef:b0:ca:51:6f:78:50:c5:c4:6a:7e:35:f5:c6:e9: d3:b9:6b:4a:b9:63:f9:29:0e:f8:ad:08:e8:92:9b:7e:26:36: 7e:2d:73:52:1f:03:20:7e:b6:c9:a2:34:4e:2a:ad:eb:b1:f0: 49:51:36:8d:19:04:3e:82:b6:e9:7d:49:77:a0:97:00:5f:f7: 24:be:5c:c3:3a:e2:00:b9:ef:30:df:cf:eb:04:21:a3:4f:b3: e8:b0:b0:f9:38:d1:cd:08:ec:05:18:be:64:ee:29:cf:f0:cc: 07:57:71:1c:99:89:96:b4:8b:6b:ef:6f:5e:9c:3a:21:79:4b: 64:9d:b1:da:07:98:d0:62:09:c5:df:cc:bc:b2:64:c9:90:c9: 6a:58:a8:cf:88:08:62:56:f1:28:1e:04:73:54:11:f0:ac:47: a6:be:29:02:f3:24:c8:52:b8:a8:aa:94:c1:5b:f6:11:c7:18: d7:29:21:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjUwODIyMTkzOTI5WhcNMjUwODI5MTkzOTI5WjAYMRYwFAYD VQQDEw02OGE4Yzc3Mi1hMmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLYucQxRQS0IeBalv1wQmBWcE1ySD0O0Fh66rQEOKuNP3j3sgwbG5HzthMXk mn5KXeRbxomWvYwqWhOMa7vJdZCqWAH59OYboGjl+q6skSw3RrXKiqOYeBqs6j0U 9ShL+hOikkNARjt2p92vNeAjS/nXUgGrxpZCgNhVGC52kf7Wry+H1F1pQVBeilk8 a41IFg6J2V8zqY4FdD5Cc7aZXUMcrPTHMFUY78IjFVRA8oDhavckSnykp6atdPKm E+jAAdRh6s75bhw+v3pWTx8Fvri58MojYkigtwVIDWR5sW/Qr3icUi7pJfvdWKis fC0lBVEqeioGo8jh98ES9I8l1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9XWhXG feDKJHU7tFu7BnjeZjC2MB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3 UmtiSHZBYmlZajRXdm5rRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOmunJye6k3pGygmTO00SmG4C+nOGDtaAMTnC3GFrfioUCN3njV+Jm OBNgUUlxD/3J1HJeyMNracAgAQ3NnPeiD7TEGrt4iWbiTsbvsMpRb3hQxcRqfjX1 xunTuWtKuWP5KQ74rQjokpt+JjZ+LXNSHwMgfrbJojROKq3rsfBJUTaNGQQ+grbp fUl3oJcAX/ckvlzDOuIAue8w38/rBCGjT7PosLD5ONHNCOwFGL5k7inP8MwHV3Ec mYmWtItr729enDoheUtknbHaB5jQYgnF38y8smTJkMlqWKjPiAhiVvEoHgRzVBHw rEemvikC8yTIUrioqpTBW/YRxxjXKSFI -----END CERTIFICATE-----Generated at Sun Aug 24 05:18:11 2025 by rpki-client