$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft File: sae05J_PFfDFALickX8mZHJQ8K4.mft (raw, json) Hash identifier: JKUR4+Pn4b9nxysyx8GW1XGNIyPEKPGVKds+IfHwoT8= Subject key identifier: FE:E3:3A:39:32:ED:B5:BB:0A:DE:3B:5E:70:E8:88:04:58:A7:2A:B6 Authority key identifier: B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE Certificate issuer: /CN=A914B462/serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft Manifest number: 33 Signing time: Sat 23 Aug 2025 07:52:00 +0000 Manifest this update: Sat 23 Aug 2025 07:51:59 +0000 Manifest next update: Sat 30 Aug 2025 07:51:59 +0000 Files and hashes: 1: sae05J_PFfDFALickX8mZHJQ8K4.crl (hash: 5/KOFxTjxA/FUW/ZyMMy6XbMirsxVi1QYVpAwQ2vsGQ=) 2: BA4C0E94330911F08D233546C4F9AE02.roa (hash: dP93uYFjOQGVmzTzM0xXMIjOeOKOZofW9HJX5/7YBks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B462, serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE Validity Not Before: Aug 23 07:51:59 2025 GMT Not After : Aug 30 07:51:59 2025 GMT Subject: CN=68a9731f-480b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:4a:a2:66:38:9f:11:95:53:45:03:a4:00: e2:4d:1f:4e:b3:f6:d2:73:f9:15:0f:d6:fe:e7:97: 3a:97:cf:c1:71:44:c5:af:a8:fa:f1:af:20:8f:a5: 1a:a7:ce:6d:e3:fa:01:5a:a0:9b:d6:3f:e6:15:f2: c9:f5:ff:a2:10:9b:8e:99:c3:60:95:86:e2:b9:54: be:d0:2e:ee:4c:d8:ab:a7:40:92:e6:61:16:43:d3: 0f:82:03:fa:04:00:12:7f:73:3e:f6:61:98:fa:90: ca:67:92:c3:fe:12:f7:70:d4:22:44:dc:2e:2a:4d: fe:52:3d:73:31:1c:52:15:10:a6:c3:37:cf:9a:77: 4b:f3:7f:24:75:80:cf:be:b8:ef:be:e1:38:dc:2b: 7a:99:59:9f:b0:1c:39:8a:99:0b:eb:a3:1b:a8:6d: 42:7b:09:e5:5a:22:8c:92:79:68:6b:18:f4:d6:54: e2:2e:7a:bf:75:26:7b:a7:88:ec:92:40:09:06:46: 58:99:75:c3:4d:29:fd:73:0f:eb:7d:ba:d6:ad:50: bf:4b:f5:1a:00:cc:30:e2:4e:bf:67:80:a8:92:a5: 6d:e3:ca:c9:f5:7e:3f:d3:a4:85:b5:6a:2e:0d:95: 78:31:4f:69:a1:7c:d2:01:f3:56:c6:a4:db:16:2a: 8c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E3:3A:39:32:ED:B5:BB:0A:DE:3B:5E:70:E8:88:04:58:A7:2A:B6 X509v3 Authority Key Identifier: keyid:B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:55:38:5d:b2:cb:c0:01:5f:19:e4:c9:3f:76:48:08:0e:85: f6:e7:cd:ab:24:ee:b0:62:ce:d4:5d:56:16:3b:e0:65:dc:bb: 37:de:53:8d:15:2a:97:4a:e9:1e:cf:43:89:f4:88:dd:6f:07: 54:51:53:e8:15:80:64:b0:af:13:5f:bb:de:13:21:bd:97:b0: 26:d8:71:39:16:5f:c0:ea:25:c4:68:08:c8:7d:01:59:a7:f9: 12:02:b9:ba:97:5b:9c:19:25:82:8e:75:ac:9b:b8:35:5e:b4: 22:82:c0:d3:bc:17:a6:61:82:37:31:05:83:17:d7:30:7d:33: f9:72:0d:20:34:23:bd:3d:b5:fa:88:ef:2d:19:d3:af:ef:ab: cf:94:47:b5:f3:90:5b:24:82:b6:5d:31:9f:96:61:b3:5b:32: 69:c4:32:34:3e:09:4b:6c:a4:a1:69:15:88:27:ec:68:cb:cb: 6f:4a:f3:e8:27:9c:43:19:6a:3f:fd:54:67:bb:18:75:c4:ac: e0:a2:dc:9b:aa:64:d0:e7:0d:9b:be:e3:e9:a3:5e:38:bd:3a: 92:84:b1:e3:61:09:d8:33:84:63:c8:7c:ff:08:fe:aa:ae:ba: 9e:83:0f:1a:0b:a9:fc:71:07:9f:d4:1e:32:5a:dd:c9:c2:fd: 3f:89:0e:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ2MjExMC8GA1UEBRMoQjFBN0I0RTQ5RkNGMTVGMEM1MDBCODlDOTE3RjI2NjQ3 MjUwRjBBRTAeFw0yNTA4MjMwNzUxNTlaFw0yNTA4MzAwNzUxNTlaMBgxFjAUBgNV BAMTDTY4YTk3MzFmLTQ4MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1vkqiZjifEZVTRQOkAOJNH06z9tJz+RUP1v7nlzqXz8FxRMWvqPrxryCPpRqn zm3j+gFaoJvWP+YV8sn1/6IQm46Zw2CVhuK5VL7QLu5M2KunQJLmYRZD0w+CA/oE ABJ/cz72YZj6kMpnksP+Evdw1CJE3C4qTf5SPXMxHFIVEKbDN8+ad0vzfyR1gM++ uO++4TjcK3qZWZ+wHDmKmQvroxuobUJ7CeVaIoySeWhrGPTWVOIuer91JnuniOyS QAkGRliZdcNNKf1zD+t9utatUL9L9RoAzDDiTr9ngKiSpW3jysn1fj/TpIW1ai4N lXgxT2mhfNIB81bGpNsWKoxRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/uM6OTLt tbsK3jtecOiIBFinKrYwHwYDVR0jBBgwFoAUsae05J/PFfDFALickX8mZHJQ8K4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDYyL0FBQkU2RjYyMzJG RjExRjA4NTlCNUEyREM0RjlBRTAyL3NhZTA1Sl9QRmZERkFMaWNrWDhtWkhKUThL NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2FlMDVKX1BGZkRGQUxpY2tYOG1aSEpROEs0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDYyL0FBQkU2RjYyMzJGRjExRjA4NTlCNUEyREM0RjlBRTAyL3NhZTA1Sl9QRmZE RkFMaWNrWDhtWkhKUThLNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZVOF2yy8ABXxnkyT92SAgOhfbnzask7rBiztRdVhY74GXcuzfeU40V KpdK6R7PQ4n0iN1vB1RRU+gVgGSwrxNfu94TIb2XsCbYcTkWX8DqJcRoCMh9AVmn +RICubqXW5wZJYKOdaybuDVetCKCwNO8F6ZhgjcxBYMX1zB9M/lyDSA0I709tfqI 7y0Z06/vq8+UR7XzkFskgrZdMZ+WYbNbMmnEMjQ+CUtspKFpFYgn7GjLy29K8+gn nEMZaj/9VGe7GHXErOCi3JuqZNDnDZu+4+mjXji9OpKEseNhCdgzhGPIfP8I/qqu up6DDxoLqfxxB5/UHjJa3cnC/T+JDg0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:36:55 2025 by rpki-client