$ rpki-client -vvf rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft File: sbozBTw5ulhlU3dDESOJ4wDEiAc.mft (raw, json) Hash identifier: mk1+gfsFLEnmx0tqVG0GFyFCfPUA92u5bj2gWc/B4hI= Subject key identifier: 8A:F6:8B:2C:68:69:82:CF:D9:BD:FA:68:93:99:9A:C5:9F:42:03:B5 Authority key identifier: B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07 Certificate issuer: /CN=A9150384/serialNumber=B1BA33053C39BA5865537743112389E300C48807 Certificate serial: 0CAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft Manifest number: 0C9A Signing time: Fri 22 Aug 2025 18:22:54 +0000 Manifest this update: Fri 22 Aug 2025 18:22:53 +0000 Manifest next update: Fri 29 Aug 2025 18:22:53 +0000 Files and hashes: 1: sbozBTw5ulhlU3dDESOJ4wDEiAc.crl (hash: XbRKLw8EpT5jaOcG7m/2aXC99MyFd84TUl5yEjbuC50=) 2: 3240ED82D62D11EFB0442B5DC4F9AE02.roa (hash: 4ezgedPR9KopOZYLyZFbtl63GBaLOL0AGy6NscKrMGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3245 (0xcad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150384, serialNumber=B1BA33053C39BA5865537743112389E300C48807 Validity Not Before: Aug 22 18:22:53 2025 GMT Not After : Aug 29 18:22:53 2025 GMT Subject: CN=68a8b57d-4730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2c:7c:35:59:bb:45:ae:1f:88:2e:00:4c:62: 03:9a:07:01:7b:98:4f:9d:de:37:40:fb:7c:e1:50: fc:46:31:16:a6:77:cc:9c:f4:31:a4:a3:88:e1:32: 03:a8:02:f5:a8:6f:f0:1a:f8:c8:5f:f5:8e:22:8d: e5:88:ec:ae:c3:73:5b:46:ba:5b:28:5c:d3:e4:f9: 50:26:ca:6e:99:76:e0:95:b0:c9:10:93:b4:5a:5b: b3:15:da:b7:69:08:e1:3b:e6:3e:13:29:55:b6:ac: 40:bd:9a:51:c6:61:33:28:3f:0a:13:11:86:d9:d6: 51:ad:46:50:f1:21:a4:b1:2e:76:0a:25:65:b7:d5: 17:c7:07:83:e3:6d:e0:bf:8d:2f:3c:28:41:b5:4d: 5a:fc:e5:89:18:26:d4:b9:eb:05:e2:e1:40:d8:a8: 1b:94:34:dc:d4:b1:43:ad:6c:fa:67:64:f6:bd:1f: 0f:41:f8:d6:3d:b2:4a:16:9b:19:ce:da:1b:58:c2: 6a:16:9f:86:51:b8:61:f1:f7:84:ec:ef:97:de:aa: 70:fd:b7:41:a8:3e:c7:c8:10:2d:42:f2:24:51:7a: b5:90:9b:9c:37:0c:90:34:8a:1c:ef:81:95:e7:30: 5b:06:cf:52:a0:3e:74:18:1d:c1:d2:d3:7a:6a:ce: 3a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F6:8B:2C:68:69:82:CF:D9:BD:FA:68:93:99:9A:C5:9F:42:03:B5 X509v3 Authority Key Identifier: keyid:B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:65:75:29:3f:0b:fe:6a:c3:b9:53:69:37:9b:08:d6:6b:4d: 1e:c5:3a:7f:9d:ea:89:1f:be:68:bb:ce:48:e4:38:86:13:d4: 9e:0c:69:a4:4b:07:18:19:27:ce:04:2c:02:20:84:ec:17:03: e6:39:36:48:d3:50:6e:11:90:de:c6:2d:14:8d:59:f0:b3:f7: e7:be:ef:14:c3:df:a5:c6:8f:1d:4e:7a:56:1f:74:81:4f:f1: 70:cf:a2:d5:f4:36:23:5d:8a:f0:c8:f9:4b:18:7f:61:9e:5a: 0e:23:71:9d:2c:80:38:8b:ce:1b:39:a4:43:29:21:67:e6:84: 36:c2:96:84:82:61:63:5b:8f:88:12:45:91:57:ae:22:10:f2: 1b:5d:ee:ee:45:b0:74:cc:84:09:9d:db:dd:86:6d:df:d9:26: d4:9a:68:ce:0b:a7:d8:43:aa:a3:bf:41:b2:61:da:bd:ba:d1: 33:db:af:60:5b:0c:98:cb:9b:5f:ac:14:d2:9a:d4:ff:f2:89: 17:45:67:3a:4c:e5:e6:44:71:77:e7:92:96:9f:90:73:14:c8: 94:2a:31:a8:d3:68:ec:e4:a5:eb:d5:1a:33:63:eb:01:0e:4a: 99:54:7e:6e:62:03:8d:91:fd:6b:d0:ba:e5:82:e5:e2:ba:79: c3:b5:88:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAzODQxMTAvBgNVBAUTKEIxQkEzMzA1M0MzOUJBNTg2NTUzNzc0MzExMjM4OUUz MDBDNDg4MDcwHhcNMjUwODIyMTgyMjUzWhcNMjUwODI5MTgyMjUzWjAYMRYwFAYD VQQDEw02OGE4YjU3ZC00NzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSx8NVm7Ra4fiC4ATGIDmgcBe5hPnd43QPt84VD8RjEWpnfMnPQxpKOI4TID qAL1qG/wGvjIX/WOIo3liOyuw3NbRrpbKFzT5PlQJspumXbglbDJEJO0WluzFdq3 aQjhO+Y+EylVtqxAvZpRxmEzKD8KExGG2dZRrUZQ8SGksS52CiVlt9UXxweD423g v40vPChBtU1a/OWJGCbUuesF4uFA2KgblDTc1LFDrWz6Z2T2vR8PQfjWPbJKFpsZ ztobWMJqFp+GUbhh8feE7O+X3qpw/bdBqD7HyBAtQvIkUXq1kJucNwyQNIoc74GV 5zBbBs9SoD50GB3B0tN6as46oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr2iyxo aYLP2b36aJOZmsWfQgO1MB8GA1UdIwQYMBaAFLG6MwU8ObpYZVN3QxEjieMAxIgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDM4NC85MzdGMzcyRTAw NUExMUVBQTA5NEJEMzFDNEY5QUUwMi9zYm96QlR3NXVsaGxVM2RERVNPSjR3REVp QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nib3pCVHc1dWxobFUzZERFU09KNHdERWlBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDM4NC85MzdGMzcyRTAwNUExMUVBQTA5NEJEMzFDNEY5QUUwMi9zYm96QlR3NXVs aGxVM2RERVNPSjR3REVpQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtZXUpPwv+asO5U2k3mwjWa00exTp/neqJH75ou85I5DiGE9SeDGmk SwcYGSfOBCwCIITsFwPmOTZI01BuEZDexi0UjVnws/fnvu8Uw9+lxo8dTnpWH3SB T/Fwz6LV9DYjXYrwyPlLGH9hnloOI3GdLIA4i84bOaRDKSFn5oQ2wpaEgmFjW4+I EkWRV64iEPIbXe7uRbB0zIQJndvdhm3f2SbUmmjOC6fYQ6qjv0GyYdq9utEz269g WwyYy5tfrBTSmtT/8okXRWc6TOXmRHF355KWn5BzFMiUKjGo02js5KXr1RozY+sB DkqZVH5uYgONkf1r0LrlguXiunnDtYhN -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:10 2025 by rpki-client