$ rpki-client -vvf rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft File: szbWhuGt3y1ceNLQ4BKNDyh-B44.mft (raw, json) Hash identifier: UBYULNV4lCSK1PXzNkMM41G5pfYg0rEy3GpEBW797yc= Subject key identifier: F5:60:16:9B:A0:18:BB:99:A0:0F:3F:11:7F:D8:76:E1:DA:EA:9C:21 Authority key identifier: B3:36:D6:86:E1:AD:DF:2D:5C:78:D2:D0:E0:12:8D:0F:28:7E:07:8E Certificate issuer: /CN=A91545AC/serialNumber=B336D686E1ADDF2D5C78D2D0E0128D0F287E078E Certificate serial: 07B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft Manifest number: 07AE Signing time: Fri 22 Aug 2025 21:27:06 +0000 Manifest this update: Fri 22 Aug 2025 21:27:05 +0000 Manifest next update: Fri 29 Aug 2025 21:27:05 +0000 Files and hashes: 1: szbWhuGt3y1ceNLQ4BKNDyh-B44.crl (hash: Gzu0a1ySUNVzXNvV1pY5q924H8vDqDKSmpVp8S6f4H8=) 2: B546148C121911EB82F65F7AC4F9AE02.roa (hash: guFQzr4GMuotnLN4g29mwWKV8rRpZXge3ak3JTxYZDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.crl rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974 (0x7b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91545AC, serialNumber=B336D686E1ADDF2D5C78D2D0E0128D0F287E078E Validity Not Before: Aug 22 21:27:05 2025 GMT Not After : Aug 29 21:27:05 2025 GMT Subject: CN=68a8e0a9-b234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:af:a5:d0:34:9c:d7:0a:b9:1f:41:c4:50: 18:2c:b4:77:e7:c0:3d:48:b3:19:9c:95:3c:9e:ae: 52:c7:fc:b4:2d:80:b5:93:50:2f:df:f8:d7:a7:1c: ce:31:8e:86:63:a2:49:dc:13:40:5d:9c:af:70:b3: 8f:c1:ea:7a:2d:44:82:e1:26:e7:30:35:9d:2e:11: 34:79:fc:d3:66:27:4d:5a:9a:7f:4b:3d:f5:3f:1a: d0:ee:fc:d2:ac:fb:b0:0a:7a:a8:54:df:de:94:cc: a9:f6:7d:2b:ec:5b:a2:3b:88:a7:95:20:c2:be:99: 8a:97:bf:6d:c0:4f:8c:b1:98:3d:70:60:02:f7:ce: 63:4d:cc:04:72:d4:c0:b6:6d:c3:fd:bb:22:e9:3f: 78:52:5d:eb:34:cc:09:f0:c2:da:78:13:3a:5b:84: ed:54:91:cd:99:d1:89:d7:1d:25:8c:dd:fb:85:08: f1:b3:0a:4e:f6:33:3b:00:60:e5:64:fd:4f:7a:4c: 1c:14:6e:b3:ab:70:64:2d:37:79:21:6c:cb:fb:da: 2e:18:72:ed:3d:e2:a4:d1:0f:47:75:8f:78:da:24: 93:0b:3a:30:08:94:6f:c2:a6:c3:ff:5a:62:2e:d5: 73:ee:b1:fd:15:1b:5a:30:ad:82:32:d4:2d:53:71: 2b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:60:16:9B:A0:18:BB:99:A0:0F:3F:11:7F:D8:76:E1:DA:EA:9C:21 X509v3 Authority Key Identifier: keyid:B3:36:D6:86:E1:AD:DF:2D:5C:78:D2:D0:E0:12:8D:0F:28:7E:07:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:69:95:88:55:aa:7b:5b:6e:4f:9a:66:51:6d:ce:5d:34:54: 60:05:12:8d:f4:27:c1:bb:5d:43:22:3c:4b:d0:43:e5:a3:e5: 2f:17:9a:b5:e4:7c:82:27:d4:bd:43:8f:69:f4:fa:e3:3b:19: cf:f4:db:a8:6d:33:69:01:09:fa:ce:13:62:20:9b:de:1a:eb: 5f:28:32:4f:22:90:1b:61:cb:5d:8e:c8:8d:18:1e:bc:85:82: 32:ff:3a:67:b1:e7:ae:3d:07:01:5d:48:2e:ea:7a:e5:45:56: 23:be:7a:ee:41:a0:7c:37:3d:7b:b2:0b:ea:b4:c0:22:34:ac: 61:ec:64:d6:f4:fb:1c:70:ec:2e:9a:f5:f0:2e:9d:9e:1c:a8: 06:b4:c0:b4:ea:d0:e5:11:38:23:12:ba:63:b4:a4:c6:49:3a: 7f:e5:19:04:b6:a5:98:c1:90:2a:20:e1:5d:5d:e9:95:ff:0e: d0:ae:af:fa:74:88:9a:6d:7d:e4:76:16:db:01:40:e5:27:c0: bc:5e:93:00:f1:a1:30:e7:eb:81:a6:5c:0c:d9:38:82:97:57: 1d:91:6d:d9:5f:1c:f3:9b:f1:39:a9:e2:d3:60:b9:de:9c:68: ee:98:c1:5f:76:2d:aa:7a:f0:fe:d0:9f:9b:d0:8b:7d:f5:5b: d3:53:c2:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1QUMxMTAvBgNVBAUTKEIzMzZENjg2RTFBRERGMkQ1Qzc4RDJEMEUwMTI4RDBG Mjg3RTA3OEUwHhcNMjUwODIyMjEyNzA1WhcNMjUwODI5MjEyNzA1WjAYMRYwFAYD VQQDEw02OGE4ZTBhOS1iMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDGvpdA0nNcKuR9BxFAYLLR358A9SLMZnJU8nq5Sx/y0LYC1k1Av3/jXpxzO MY6GY6JJ3BNAXZyvcLOPwep6LUSC4SbnMDWdLhE0efzTZidNWpp/Sz31PxrQ7vzS rPuwCnqoVN/elMyp9n0r7FuiO4inlSDCvpmKl79twE+MsZg9cGAC985jTcwEctTA tm3D/bsi6T94Ul3rNMwJ8MLaeBM6W4TtVJHNmdGJ1x0ljN37hQjxswpO9jM7AGDl ZP1PekwcFG6zq3BkLTd5IWzL+9ouGHLtPeKk0Q9HdY942iSTCzowCJRvwqbD/1pi LtVz7rH9FRtaMK2CMtQtU3ErQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVgFpug GLuZoA8/EX/YduHa6pwhMB8GA1UdIwQYMBaAFLM21obhrd8tXHjS0OASjQ8ofgeO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDVBQy84QTU2OEE4MjEy MTgxMUVCQjE4NTJDNzlDNEY5QUUwMi9zemJXaHVHdDN5MWNlTkxRNEJLTkR5aC1C NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N6YldodUd0M3kxY2VOTFE0QktORHloLUI0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDVBQy84QTU2OEE4MjEyMTgxMUVCQjE4NTJDNzlDNEY5QUUwMi9zemJXaHVHdDN5 MWNlTkxRNEJLTkR5aC1CNDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsaZWIVap7W25PmmZRbc5dNFRgBRKN9CfBu11DIjxL0EPlo+UvF5q1 5HyCJ9S9Q49p9PrjOxnP9NuobTNpAQn6zhNiIJveGutfKDJPIpAbYctdjsiNGB68 hYIy/zpnseeuPQcBXUgu6nrlRVYjvnruQaB8Nz17sgvqtMAiNKxh7GTW9PsccOwu mvXwLp2eHKgGtMC06tDlETgjErpjtKTGSTp/5RkEtqWYwZAqIOFdXemV/w7Qrq/6 dIiabX3kdhbbAUDlJ8C8XpMA8aEw5+uBplwM2TiCl1cdkW3ZXxzzm/E5qeLTYLne nGjumMFfdi2qevD+0J+b0It99VvTU8Li -----END CERTIFICATE-----Generated at Sun Aug 24 00:58:05 2025 by rpki-client