$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft File: sdV2wMeOXPWNSDeibJJjxj8TFd0.mft (raw, json) Hash identifier: tMxS26b0ZYg1SbcCxYXb73fubA75UUgFkIOYdog+8eY= Subject key identifier: 63:51:C1:93:0E:1A:A0:F1:7D:DF:7C:07:63:80:00:64:28:9B:CF:F3 Authority key identifier: B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD Certificate issuer: /CN=A914EB5A/serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft Manifest number: 0137 Signing time: Sat 23 Aug 2025 04:37:23 +0000 Manifest this update: Sat 23 Aug 2025 04:37:23 +0000 Manifest next update: Sat 30 Aug 2025 04:37:23 +0000 Files and hashes: 1: sdV2wMeOXPWNSDeibJJjxj8TFd0.crl (hash: 0lDKlTGzXVDdqm+h2EEeg00zu0VsQjQyQBt4Wyy0mng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB5A, serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Validity Not Before: Aug 23 04:37:23 2025 GMT Not After : Aug 30 04:37:23 2025 GMT Subject: CN=68a94583-b110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:9a:0c:c4:b1:9f:1e:f5:6a:be:27:89:4e: f6:9e:39:66:c4:14:b4:79:6a:09:e5:0c:b1:f7:99: 88:24:b9:f5:b1:7a:a7:af:16:b2:21:2a:23:a2:d8: cc:c1:3c:3b:55:df:a8:1d:e5:ca:60:8b:42:5d:f2: 1e:3c:19:29:99:8f:bd:3d:74:e6:08:c3:83:89:e9: 0f:f8:f1:d8:ee:b0:99:78:31:b9:53:9a:4c:ff:4a: a1:66:8e:47:97:b4:a3:73:37:e4:b1:0d:17:0b:d0: 5d:3f:4b:7e:19:1b:33:6f:eb:d4:1b:0d:f7:43:e8: 9a:b0:c3:c8:8e:dc:7d:9a:36:98:44:46:b6:11:da: 66:6e:fc:6c:e1:ed:5d:58:45:25:08:39:80:4c:5a: 5c:f6:4a:0c:42:8a:5b:c2:ef:9d:4d:15:7e:a9:31: 07:2d:51:f2:f1:02:ea:20:64:92:0d:3b:be:7e:d2: 47:e1:fd:36:eb:d3:4d:d6:dc:2c:58:0e:99:53:3f: db:45:f6:3d:9b:87:4c:84:4a:09:95:cf:73:3e:5e: 93:34:c5:99:5b:01:27:cb:0c:94:fd:e4:8a:df:b8: 00:34:c8:78:31:5c:e0:8a:8d:d0:24:79:ae:6e:04: 14:08:a9:40:e7:6a:f1:e2:f4:d3:81:cd:c1:dd:8d: 07:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:51:C1:93:0E:1A:A0:F1:7D:DF:7C:07:63:80:00:64:28:9B:CF:F3 X509v3 Authority Key Identifier: keyid:B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:67:1f:9a:37:3d:a4:18:35:9a:d3:14:60:87:2d:bb:bd:49: 03:95:85:6b:8a:fd:ab:fa:2b:ee:ef:f9:b8:76:e9:fa:15:52: 7f:66:4a:56:89:53:a0:40:d9:9e:b9:49:a9:b9:0a:67:3f:db: 14:eb:ce:9a:3a:56:40:d6:a2:01:ee:e3:d9:b9:34:c3:60:a8: 44:a9:27:f9:85:de:f7:6c:5b:55:32:06:74:a3:9d:9f:80:3d: fd:59:f9:5e:d8:95:0c:e9:5b:66:28:67:e8:ba:11:80:29:f6: 96:95:2f:15:3b:71:60:10:2b:3f:ac:25:eb:de:ad:a8:fa:9c: 1d:63:44:3d:24:a3:a0:82:17:06:71:4e:99:c7:d6:6f:e3:2e: 9a:b2:9a:2e:21:24:f6:73:6b:59:4c:1d:f5:80:9c:6c:48:e2: c5:ee:55:7a:c8:48:e8:b4:d7:43:dc:ef:54:a9:8a:dd:07:04: 6e:40:74:8c:0e:a9:70:c3:00:2a:30:3a:c9:99:75:38:c8:86: 92:29:bc:5f:d0:6b:b7:59:6d:61:8d:58:95:e1:9f:59:54:51: 57:43:9b:20:00:a0:41:13:86:26:a9:e3:80:d9:47:96:a1:a0: f1:35:da:22:06:40:0e:dd:d5:98:a5:63:93:52:dc:80:03:a4: 11:7c:d8:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCNUExMTAvBgNVBAUTKEIxRDU3NkMwQzc4RTVDRjU4RDQ4MzdBMjZDOTI2M0M2 M0YxMzE1REQwHhcNMjUwODIzMDQzNzIzWhcNMjUwODMwMDQzNzIzWjAYMRYwFAYD VQQDEw02OGE5NDU4My1iMTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6iaDMSxnx71ar4niU72njlmxBS0eWoJ5Qyx95mIJLn1sXqnrxayISojotjM wTw7Vd+oHeXKYItCXfIePBkpmY+9PXTmCMODiekP+PHY7rCZeDG5U5pM/0qhZo5H l7SjczfksQ0XC9BdP0t+GRszb+vUGw33Q+iasMPIjtx9mjaYREa2Edpmbvxs4e1d WEUlCDmATFpc9koMQopbwu+dTRV+qTEHLVHy8QLqIGSSDTu+ftJH4f0269NN1tws WA6ZUz/bRfY9m4dMhEoJlc9zPl6TNMWZWwEnywyU/eSK37gANMh4MVzgio3QJHmu bgQUCKlA52rx4vTTgc3B3Y0HdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNRwZMO GqDxfd98B2OAAGQom8/zMB8GA1UdIwQYMBaAFLHVdsDHjlz1jUg3omySY8Y/ExXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI1QS83QzA3NUUxOEEz QjMxMUVFQUQ2NjI5MTlDNEY5QUUwMi9zZFYyd01lT1hQV05TRGVpYkpKanhqOFRG ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NkVjJ3TWVPWFBXTlNEZWliSkpqeGo4VEZkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI1QS83QzA3NUUxOEEzQjMxMUVFQUQ2NjI5MTlDNEY5QUUwMi9zZFYyd01lT1hQ V05TRGVpYkpKanhqOFRGZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Zx+aNz2kGDWa0xRghy27vUkDlYVriv2r+ivu7/m4dun6FVJ/ZkpW iVOgQNmeuUmpuQpnP9sU686aOlZA1qIB7uPZuTTDYKhEqSf5hd73bFtVMgZ0o52f gD39Wfle2JUM6VtmKGfouhGAKfaWlS8VO3FgECs/rCXr3q2o+pwdY0Q9JKOgghcG cU6Zx9Zv4y6aspouIST2c2tZTB31gJxsSOLF7lV6yEjotNdD3O9UqYrdBwRuQHSM DqlwwwAqMDrJmXU4yIaSKbxf0Gu3WW1hjViV4Z9ZVFFXQ5sgAKBBE4YmqeOA2UeW oaDxNdoiBkAO3dWYpWOTUtyAA6QRfNi6 -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:56 2025 by rpki-client