$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft File: sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json) Hash identifier: YuK4oJp+Ie104l5pNttDJSF+IZUWOnjzpl0wXmV5VpI= Subject key identifier: C5:B4:F1:1C:7A:29:62:A3:F6:1B:05:AB:AB:40:53:7B:07:D8:53:DA Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD Certificate issuer: /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft Manifest number: 8C Signing time: Sat 23 Aug 2025 06:46:59 +0000 Manifest this update: Sat 23 Aug 2025 06:46:59 +0000 Manifest next update: Sat 30 Aug 2025 06:46:59 +0000 Files and hashes: 1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: kg+gfOtp8adZ7PMzPgx0081ghPo2+1eeyjpxo4t/p5A=) 2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: KPgMUtF2z6om6dSm7+mB/ufWiwTV8TpJVcH2+or0fgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Validity Not Before: Aug 23 06:46:59 2025 GMT Not After : Aug 30 06:46:59 2025 GMT Subject: CN=68a963e3-d463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:34:6f:92:8b:75:e1:1e:a2:37:aa:37:99: 95:94:46:2e:99:28:94:1e:fe:21:52:93:03:1a:b6: 74:87:eb:a7:c2:cf:ce:7c:65:1a:95:b2:c4:91:12: f2:e8:80:96:67:41:ba:ad:e5:2c:3a:77:8e:13:35: b3:44:26:3d:a3:7d:d5:18:01:65:df:ef:cc:7d:e7: f9:6c:6b:db:37:d5:d9:52:a2:4b:df:18:1a:59:57: 13:03:7d:5c:3e:fb:4a:00:15:73:85:ba:3a:91:56: 14:8e:c6:ba:a7:2f:bf:1d:b7:06:36:d2:22:9b:18: 4a:e3:c2:88:6c:3f:63:53:4f:47:7b:73:ad:f0:71: c6:05:0f:df:ba:4d:7b:f5:f9:18:ac:4d:fb:54:39: 91:b7:b8:55:74:6e:3f:de:d7:e9:ae:11:b7:15:7c: c5:a9:30:67:5e:df:a5:06:d8:59:21:7a:5c:cb:56: 50:01:a7:1f:9c:53:9e:8f:9d:b6:ad:64:d1:a3:e0: ce:aa:2e:9f:d7:6a:a1:1d:a4:6d:57:f5:fc:49:4d: ce:e3:e6:77:c1:e7:de:ef:51:ce:64:c5:f6:1f:4e: 58:5e:ea:ba:e8:48:bd:0a:b9:c3:e7:c3:2a:33:f1: 7e:88:ea:ba:23:3e:c7:17:31:1d:e2:fb:de:a2:19: da:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B4:F1:1C:7A:29:62:A3:F6:1B:05:AB:AB:40:53:7B:07:D8:53:DA X509v3 Authority Key Identifier: keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:84:8b:8c:84:40:b6:d9:14:74:96:9e:cd:87:c4:21:59:74: b7:b7:39:68:e9:3a:ef:3e:23:4d:67:37:ca:13:af:6e:bc:5a: 2b:96:f1:e0:51:24:4e:a0:c9:6c:d5:99:bc:40:c9:5e:2a:01: 91:75:61:84:64:fd:62:c3:b5:4c:ed:06:f9:df:00:a5:6c:9f: 27:5a:60:8b:54:40:c0:46:65:f2:02:3e:91:bd:a1:7b:f5:38: 68:4b:51:5b:07:44:43:e8:c4:79:6a:b0:85:0a:e2:c0:10:28: 9d:a7:ec:4d:4f:32:b6:7a:57:e4:77:d9:89:af:ac:6b:ae:96: 2c:62:ca:d8:75:5a:76:7f:8b:fe:11:1c:1d:fc:cc:da:15:bb: 32:b8:7c:67:0b:a0:3e:5d:8e:4b:4f:39:56:fb:7f:28:81:6d: 2f:43:99:aa:a2:0d:6b:d8:ed:92:25:48:d7:ed:9d:1e:c7:68: aa:31:e2:d7:47:0a:5d:f7:ce:94:3a:5d:47:2e:2b:ca:3d:84: 72:05:08:0a:41:ee:1b:4b:41:eb:2d:51:41:e3:e6:f3:19:b0: e8:98:b3:36:4a:62:c7:6d:f2:67:39:b8:39:74:5e:5f:12:5c: 8e:71:03:47:08:a2:b0:70:c8:3d:ad:ab:26:65:a3:53:d7:b1: 08:ad:f8:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKEIwMjc5NUQyRTA5RTNBQUEzRTM2RDJCNTkyRDJFMEU5 RkJCN0VGQkQwHhcNMjUwODIzMDY0NjU5WhcNMjUwODMwMDY0NjU5WjAYMRYwFAYD VQQDEw02OGE5NjNlMy1kNDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbk0b5KLdeEeojeqN5mVlEYumSiUHv4hUpMDGrZ0h+unws/OfGUalbLEkRLy 6ICWZ0G6reUsOneOEzWzRCY9o33VGAFl3+/Mfef5bGvbN9XZUqJL3xgaWVcTA31c PvtKABVzhbo6kVYUjsa6py+/HbcGNtIimxhK48KIbD9jU09He3Ot8HHGBQ/fuk17 9fkYrE37VDmRt7hVdG4/3tfprhG3FXzFqTBnXt+lBthZIXpcy1ZQAacfnFOej522 rWTRo+DOqi6f12qhHaRtV/X8SU3O4+Z3wefe71HOZMX2H05YXuq66Ei9CrnD58Mq M/F+iOq6Iz7HFzEd4vveohna+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW08Rx6 KWKj9hsFq6tAU3sH2FPaMB8GA1UdIwQYMBaAFLAnldLgnjqqPjbStZLS4On7t++9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8zNzMzNEJFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9zQ2VWMHVDZU9xby1OdEsxa3RMZzZmdTM3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NDZVYwdUNlT3FvLU50SzFrdExnNmZ1Mzc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8zNzMzNEJFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9zQ2VWMHVDZU9x by1OdEsxa3RMZzZmdTM3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBihIuMhEC22RR0lp7Nh8QhWXS3tzlo6TrvPiNNZzfKE69uvForlvHg USROoMls1Zm8QMleKgGRdWGEZP1iw7VM7Qb53wClbJ8nWmCLVEDARmXyAj6RvaF7 9ThoS1FbB0RD6MR5arCFCuLAECidp+xNTzK2elfkd9mJr6xrrpYsYsrYdVp2f4v+ ERwd/MzaFbsyuHxnC6A+XY5LTzlW+38ogW0vQ5mqog1r2O2SJUjX7Z0ex2iqMeLX Rwpd986UOl1HLivKPYRyBQgKQe4bS0HrLVFB4+bzGbDomLM2SmLHbfJnObg5dF5f ElyOcQNHCKKwcMg9rasmZaNT17EIrfih -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:54 2025 by rpki-client