$ rpki-client -vvf rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft File: SKOukZPdEbs3NMcFR26Yw_94uEE.mft (raw, json) Hash identifier: /JI/Ids5UUhGky+ap7YHx2hLxwRtdnZ/L9c5Nt/aGPQ= Subject key identifier: 92:67:34:9C:C4:1F:2E:DB:F0:DA:35:E5:C3:B5:CD:37:9B:B3:41:B8 Authority key identifier: 48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41 Certificate issuer: /CN=A916534C/serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841 Certificate serial: 0805 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft Manifest number: 07FD Signing time: Fri 22 Aug 2025 21:05:54 +0000 Manifest this update: Fri 22 Aug 2025 21:05:53 +0000 Manifest next update: Fri 29 Aug 2025 21:05:53 +0000 Files and hashes: 1: SKOukZPdEbs3NMcFR26Yw_94uEE.crl (hash: VmGG1UmXoX8udsn29JFErUpVPnNvaIw/gebgZz+kRnc=) 2: FB54EFD2F31711EABD181553C4F9AE02.roa (hash: bCPJBkn9emdc8QIWrm8jMUVZ7T/2TjesHwvqUFZpfEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2053 (0x805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916534C, serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841 Validity Not Before: Aug 22 21:05:53 2025 GMT Not After : Aug 29 21:05:53 2025 GMT Subject: CN=68a8dbb1-9566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1a:80:12:f6:1f:45:ba:02:07:91:52:ae:ef: a6:7d:29:62:de:58:11:6f:7e:1f:f6:41:b1:74:81: 46:63:b3:ee:5f:f6:91:58:2a:8d:ef:2c:67:2c:e1: 85:7f:c0:6d:14:db:8b:3f:c9:f4:39:3f:7f:79:95: 5b:02:b8:e9:9b:94:fe:91:dc:8e:b8:01:c0:18:4a: f4:06:f6:a4:0c:dc:de:4e:5e:ed:00:62:76:b6:29: 5b:84:07:0b:57:44:fc:64:9a:74:98:78:e7:f6:6f: be:fa:69:62:09:9a:64:8a:06:e2:99:fa:d7:ca:e2: a5:7a:0d:8e:f8:2d:11:a7:7e:f3:5a:af:90:dc:6d: 4f:25:4d:cf:95:be:c3:9b:f3:59:26:c1:11:37:b1: a4:bb:71:ba:5e:1b:ce:04:bf:ff:3e:7f:66:4b:91: 9f:d0:8e:94:cf:cc:7c:3a:7c:a6:18:9c:ad:13:41: ea:5d:ff:54:ab:f4:bc:17:e5:a8:82:52:40:e2:40: 70:48:f2:99:31:37:b0:41:99:4d:0a:59:ac:54:18: cb:fe:b2:ec:97:9a:9e:c7:cf:00:be:a5:c2:47:f3: f4:96:27:05:74:21:9b:4e:8c:b9:98:d2:90:14:71: 3e:0e:5a:f1:fb:8a:3a:cc:fc:4d:1a:0c:e1:df:62: a4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:67:34:9C:C4:1F:2E:DB:F0:DA:35:E5:C3:B5:CD:37:9B:B3:41:B8 X509v3 Authority Key Identifier: keyid:48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:03:77:0d:45:95:ae:3b:af:04:05:c8:ef:e1:46:80:4b:d5: f5:b0:d0:95:6c:4f:24:a4:3b:31:88:df:7f:c3:77:0a:dc:6b: cf:2b:a3:7c:d2:42:1d:e9:fd:bf:b4:89:18:b5:2d:46:7e:1e: a8:7b:79:e4:1a:c1:d1:41:7f:77:6b:da:19:68:4b:2b:f8:d7: ce:71:cc:e8:27:e7:ec:c0:99:36:1c:f6:49:a0:d5:29:93:30: 77:ce:b2:55:6c:db:13:6b:1a:48:73:0f:11:c4:81:d9:38:c4: cc:42:f3:fc:a7:90:ca:3a:10:e4:9f:36:cd:26:07:b4:80:75: b2:c8:25:37:3e:8d:20:08:72:74:ad:4d:84:e3:87:14:56:23: bd:c1:e0:85:d3:f7:f9:f4:dc:11:ab:00:6f:84:be:12:80:1e: 1d:51:6f:76:0a:db:f8:74:d0:81:de:00:82:92:02:45:db:ef: e2:19:d1:b1:14:4a:3e:ad:ca:6b:80:c2:fb:3a:87:40:25:76: 4f:5f:bc:aa:2a:fa:93:a5:0e:d9:71:e8:82:55:d4:91:b0:b0: df:4c:a6:f9:e9:8c:ba:e0:7c:00:d4:17:3e:b9:cf:0e:04:8a: aa:9f:2f:8a:05:e4:ee:45:02:da:81:56:15:50:50:33:6a:92: ee:ec:b9:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzNEMxMTAvBgNVBAUTKDQ4QTNBRTkxOTNERDExQkIzNzM0QzcwNTQ3NkU5OEMz RkY3OEI4NDEwHhcNMjUwODIyMjEwNTUzWhcNMjUwODI5MjEwNTUzWjAYMRYwFAYD VQQDEw02OGE4ZGJiMS05NTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hqAEvYfRboCB5FSru+mfSli3lgRb34f9kGxdIFGY7PuX/aRWCqN7yxnLOGF f8BtFNuLP8n0OT9/eZVbArjpm5T+kdyOuAHAGEr0BvakDNzeTl7tAGJ2tilbhAcL V0T8ZJp0mHjn9m+++mliCZpkigbimfrXyuKleg2O+C0Rp37zWq+Q3G1PJU3Plb7D m/NZJsERN7Gku3G6XhvOBL//Pn9mS5Gf0I6Uz8x8OnymGJytE0HqXf9Uq/S8F+Wo glJA4kBwSPKZMTewQZlNClmsVBjL/rLsl5qex88AvqXCR/P0licFdCGbToy5mNKQ FHE+Dlrx+4o6zPxNGgzh32Kk5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJnNJzE Hy7b8No15cO1zTebs0G4MB8GA1UdIwQYMBaAFEijrpGT3RG7NzTHBUdumMP/eLhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM0Qy9FRkUyNUYwNEYz MEQxMUVBODc1Nzc0MzVDNEY5QUUwMi9TS091a1pQZEViczNOTWNGUjI2WXdfOTR1 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NLT3VrWlBkRWJzM05NY0ZSMjZZd185NHVFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTM0Qy9FRkUyNUYwNEYzMEQxMUVBODc1Nzc0MzVDNEY5QUUwMi9TS091a1pQZEVi czNOTWNGUjI2WXdfOTR1RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKA3cNRZWuO68EBcjv4UaAS9X1sNCVbE8kpDsxiN9/w3cK3GvPK6N8 0kId6f2/tIkYtS1Gfh6oe3nkGsHRQX93a9oZaEsr+NfOcczoJ+fswJk2HPZJoNUp kzB3zrJVbNsTaxpIcw8RxIHZOMTMQvP8p5DKOhDknzbNJge0gHWyyCU3Po0gCHJ0 rU2E44cUViO9weCF0/f59NwRqwBvhL4SgB4dUW92Ctv4dNCB3gCCkgJF2+/iGdGx FEo+rcprgML7OodAJXZPX7yqKvqTpQ7ZceiCVdSRsLDfTKb56Yy64HwA1Bc+uc8O BIqqny+KBeTuRQLagVYVUFAzapLu7Lm8 -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:23 2025 by rpki-client