$ rpki-client -vvf rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft File: SyWxRyDwREuz1mj5Y1hDVPf6whM.mft (raw, json) Hash identifier: Yw4s9wECBCXyiisILDUlYRjocv+qxu8Chd/KOBFtrdc= Subject key identifier: 99:78:AC:31:81:41:CE:10:B3:84:FD:87:BD:41:8F:14:94:16:CC:01 Authority key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 Certificate issuer: /CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft Manifest number: 0113 Signing time: Sat 23 Aug 2025 05:01:52 +0000 Manifest this update: Sat 23 Aug 2025 05:01:52 +0000 Manifest next update: Sat 30 Aug 2025 05:01:52 +0000 Files and hashes: 1: SyWxRyDwREuz1mj5Y1hDVPf6whM.crl (hash: i/YfC3kwUbzJ+lITvQLTddljC+q4HvH5yMdpn5khars=) 2: D0F245E0D76711EE99C72C29C4F9AE02.roa (hash: 9VKla165NEuwDujrYh1FdBvK2ZH/U/K5NZJL+RjIV7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650EA, serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Validity Not Before: Aug 23 05:01:52 2025 GMT Not After : Aug 30 05:01:52 2025 GMT Subject: CN=68a94b40-5a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:bd:e0:39:da:84:02:1c:7d:9a:5a:0e:b9: eb:f9:b0:53:50:01:26:16:30:2d:e3:7b:f1:e0:7b: dc:35:e9:41:23:63:23:92:b6:d4:0a:43:5e:d6:ce: 70:c3:44:c0:f9:6e:81:d8:c5:2f:ea:ec:d1:b1:d3: 3b:dc:eb:91:47:db:22:86:50:56:44:ec:83:2e:17: 95:8f:8b:ac:e2:04:83:1c:c5:64:e1:3f:fd:70:05: 8c:ee:17:67:f8:2b:1c:1d:ab:cb:47:88:d7:19:15: 33:a9:5b:83:9b:e7:6d:fc:a4:86:8e:88:30:18:f6: 77:ec:5e:79:3d:eb:ca:83:00:7e:3e:4e:cb:49:90: 2d:dd:d9:68:fe:14:b5:80:1f:df:0f:1c:29:36:ec: e5:36:60:dc:c5:78:31:d3:0a:72:30:0b:ea:ee:ff: 4e:52:6c:70:4a:ed:83:c7:32:67:08:da:81:04:ec: f4:69:17:9f:15:b1:15:de:c3:7b:33:62:18:54:98: dd:f5:50:73:9a:38:a8:96:e5:72:c6:10:63:0e:3d: 3f:f4:a0:8a:33:0c:8e:7c:c8:5b:7b:c2:6b:e9:10: 5a:4f:7f:f9:dd:d5:38:3d:19:01:d2:63:9f:1b:35: 15:a0:73:59:d3:92:49:06:b6:63:09:b4:e3:3f:bf: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:78:AC:31:81:41:CE:10:B3:84:FD:87:BD:41:8F:14:94:16:CC:01 X509v3 Authority Key Identifier: keyid:4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8b:6c:83:23:d8:6c:3b:43:a4:c3:a5:14:4c:2f:d6:0f:d7: c0:ef:c4:94:9e:6d:16:ec:8d:92:8a:fc:0f:09:ec:b1:81:f9: 79:6f:fd:98:a9:22:7e:f3:28:8d:97:ac:82:a5:e9:44:da:0f: 8c:71:5e:f7:8f:c6:7a:88:e8:fa:8c:b6:4f:47:9e:e9:28:72: d1:41:2e:bb:33:95:ed:5b:3b:8c:84:e1:8e:ac:a6:37:25:ec: c8:7f:8f:15:07:ec:4a:12:58:98:39:04:ba:4c:38:4f:d7:78: e7:c8:ea:cc:34:0b:74:83:bd:ea:8b:0e:ff:2d:13:b6:1e:8c: 00:8d:83:30:40:23:ed:25:76:d6:30:b0:c3:20:65:d8:c5:e2: e6:2d:f5:b2:ee:db:cf:b5:fc:74:f8:68:20:29:d6:14:c4:f5: cc:0d:05:14:f0:4c:6a:36:18:5a:ea:aa:e3:58:bd:8e:00:2e: bc:b8:72:48:2a:89:f7:21:d7:40:0b:71:dc:56:31:1a:58:e8: a2:17:25:0c:c9:29:1c:d7:76:c7:00:40:34:c9:86:06:c4:0c: c2:64:87:dd:0c:60:e3:86:ba:66:6f:16:e3:46:5c:86:22:ef: ae:b6:23:ca:29:68:0d:4e:d3:7c:c1:14:d4:ad:32:ac:a3:d1: f7:86:20:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUwRUExMTAvBgNVBAUTKDRCMjVCMTQ3MjBGMDQ0NEJCM0Q2NjhGOTYzNTg0MzU0 RjdGQUMyMTMwHhcNMjUwODIzMDUwMTUyWhcNMjUwODMwMDUwMTUyWjAYMRYwFAYD VQQDEw02OGE5NGI0MC01YTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKS94DnahAIcfZpaDrnr+bBTUAEmFjAt43vx4HvcNelBI2MjkrbUCkNe1s5w w0TA+W6B2MUv6uzRsdM73OuRR9sihlBWROyDLheVj4us4gSDHMVk4T/9cAWM7hdn +CscHavLR4jXGRUzqVuDm+dt/KSGjogwGPZ37F55PevKgwB+Pk7LSZAt3dlo/hS1 gB/fDxwpNuzlNmDcxXgx0wpyMAvq7v9OUmxwSu2DxzJnCNqBBOz0aRefFbEV3sN7 M2IYVJjd9VBzmjioluVyxhBjDj0/9KCKMwyOfMhbe8Jr6RBaT3/53dU4PRkB0mOf GzUVoHNZ05JJBrZjCbTjP79VzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJl4rDGB Qc4Qs4T9h71BjxSUFswBMB8GA1UdIwQYMBaAFEslsUcg8ERLs9Zo+WNYQ1T3+sIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBFQS81MjFEMUFEOEQ3 NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JFdXoxbWo1WTFoRFZQZjZ3 aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N5V3hSeUR3UkV1ejFtajVZMWhEVlBmNndoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTBFQS81MjFEMUFEOEQ3NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JF dXoxbWo1WTFoRFZQZjZ3aE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbi2yDI9hsO0Okw6UUTC/WD9fA78SUnm0W7I2SivwPCeyxgfl5b/2Y qSJ+8yiNl6yCpelE2g+McV73j8Z6iOj6jLZPR57pKHLRQS67M5XtWzuMhOGOrKY3 JezIf48VB+xKEliYOQS6TDhP13jnyOrMNAt0g73qiw7/LRO2HowAjYMwQCPtJXbW MLDDIGXYxeLmLfWy7tvPtfx0+GggKdYUxPXMDQUU8ExqNhha6qrjWL2OAC68uHJI Kon3IddAC3HcVjEaWOiiFyUMySkc13bHAEA0yYYGxAzCZIfdDGDjhrpmbxbjRlyG Iu+utiPKKWgNTtN8wRTUrTKso9H3hiCD -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:19 2025 by rpki-client