$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft File: SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json) Hash identifier: 0xYy2CJgn1RRruiZfYdz6ox+QlSXG/sYCdcKKXZPx+Q= Subject key identifier: DF:B5:E6:03:F7:B9:F2:DD:E4:15:D1:FD:6A:83:8B:42:D6:28:52:8B Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft Manifest number: 0252 Signing time: Sat 23 Aug 2025 02:03:22 +0000 Manifest this update: Sat 23 Aug 2025 02:03:21 +0000 Manifest next update: Sat 30 Aug 2025 02:03:21 +0000 Files and hashes: 1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: Fl+ZBo7zet9+DfmfgKMkI281GouPxzrdFMBWD3dIjSA=) 2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: NLbyCuuj3PUuIvgjWrH/YA9s60d6QDG0BkYDeVifH9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D167, serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Validity Not Before: Aug 23 02:03:21 2025 GMT Not After : Aug 30 02:03:21 2025 GMT Subject: CN=68a9216a-30a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:d5:e3:69:64:50:63:7a:4d:7e:52:fb:87: 67:bd:02:bf:eb:58:63:72:b1:27:7b:9d:85:7d:0d: 92:32:f8:d3:41:d6:fa:42:cd:a0:e0:d5:40:6e:75: 5b:3f:09:9f:c8:e6:da:76:03:dd:39:66:d2:b1:56: a8:1d:30:67:96:2c:2c:8f:2a:9d:64:08:07:d5:eb: 43:85:db:55:d5:ce:cc:3c:90:df:b7:fc:1c:77:20: ce:32:87:1b:55:0a:8a:29:88:b5:d5:87:f9:a4:6f: 37:6f:d8:ab:b1:f1:21:40:70:d9:ad:62:41:a5:6e: e2:bd:64:c1:8b:9b:39:4f:cc:ee:f7:ce:b3:6c:62: 90:b2:fe:27:b4:d3:b3:76:1f:ba:53:c2:cf:33:b0: 03:c1:12:12:08:e9:12:13:b1:f1:42:c4:ec:80:d8: 6f:7f:99:fd:af:d3:22:76:92:51:a8:ba:15:26:1d: 25:88:c8:1e:bb:2f:2f:f3:8e:5c:6e:e2:00:a1:aa: ad:26:8e:e1:0f:44:15:df:44:fa:2c:5f:cd:20:82: f5:80:1b:33:e0:e9:81:79:2c:04:d7:a6:bd:be:94: eb:e0:a9:43:67:ae:e1:0c:aa:10:5e:24:aa:87:45: c2:40:6f:b2:12:b4:0b:88:99:a6:ff:65:c7:c1:3d: 70:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B5:E6:03:F7:B9:F2:DD:E4:15:D1:FD:6A:83:8B:42:D6:28:52:8B X509v3 Authority Key Identifier: keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:8b:ff:e2:81:69:9e:79:50:f4:89:75:92:1a:1c:a0:56:9a: d0:12:30:f4:d6:b3:1f:3e:09:7c:23:51:c4:35:15:5e:03:b5: 3b:52:97:ba:08:18:ca:ce:2c:c7:b0:69:de:fd:5f:97:98:55: df:18:20:34:6e:98:10:a6:93:1f:dd:4c:d6:57:13:fc:44:f9: 0c:1f:a0:d4:ed:72:84:95:23:e4:80:f6:68:4d:ba:8f:6d:85: 54:d5:3c:98:ca:aa:04:11:ae:9b:a4:a0:73:2e:75:7e:24:8f: 0b:c6:64:74:9c:cc:97:6f:c1:6b:d5:6e:1e:26:6a:18:79:66: ee:e7:3e:88:7d:36:41:1b:2c:a4:b3:32:cd:a8:e5:0c:d4:cf: 76:06:11:64:89:5c:8d:d3:78:25:40:9c:3c:cc:d3:e5:57:e5: e2:0a:6e:38:d8:9a:0d:d6:d5:42:01:3f:f3:29:1f:86:e4:db: 0e:50:12:89:06:38:a3:c6:d1:55:6b:6b:48:37:80:95:59:2a: cf:4a:1b:a3:37:76:23:8a:a6:6a:7c:2b:f5:54:50:85:6d:88: 7e:42:83:a2:c8:ea:22:ef:e0:4d:08:64:1b:1f:76:9a:f7:93: 53:60:09:e9:9c:79:72:ea:6b:67:6f:1d:8e:93:93:bc:fd:06: b6:d0:9d:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3 RDY5OTMyNDgwHhcNMjUwODIzMDIwMzIxWhcNMjUwODMwMDIwMzIxWjAYMRYwFAYD VQQDEw02OGE5MjE2YS0zMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPzV42lkUGN6TX5S+4dnvQK/61hjcrEne52FfQ2SMvjTQdb6Qs2g4NVAbnVb PwmfyObadgPdOWbSsVaoHTBnliwsjyqdZAgH1etDhdtV1c7MPJDft/wcdyDOMocb VQqKKYi11Yf5pG83b9irsfEhQHDZrWJBpW7ivWTBi5s5T8zu986zbGKQsv4ntNOz dh+6U8LPM7ADwRISCOkSE7HxQsTsgNhvf5n9r9MidpJRqLoVJh0liMgeuy8v845c buIAoaqtJo7hD0QV30T6LF/NIIL1gBsz4OmBeSwE16a9vpTr4KlDZ67hDKoQXiSq h0XCQG+yErQLiJmm/2XHwT1wQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+15gP3 ufLd5BXR/WqDi0LWKFKLMB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2i//igWmeeVD0iXWSGhygVprQEjD01rMfPgl8I1HENRVeA7U7Upe6 CBjKzizHsGne/V+XmFXfGCA0bpgQppMf3UzWVxP8RPkMH6DU7XKElSPkgPZoTbqP bYVU1TyYyqoEEa6bpKBzLnV+JI8LxmR0nMyXb8Fr1W4eJmoYeWbu5z6IfTZBGyyk szLNqOUM1M92BhFkiVyN03glQJw8zNPlV+XiCm442JoN1tVCAT/zKR+G5NsOUBKJ BjijxtFVa2tIN4CVWSrPShujN3YjiqZqfCv1VFCFbYh+QoOiyOoi7+BNCGQbH3aa 95NTYAnpnHly6mtnbx2Ok5O8/Qa20J3C -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:13 2025 by rpki-client