$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft File: Satd0R3JItzI8j3VqSxplN1wNQQ.mft (raw, json) Hash identifier: 3gfpnyDzUjnBKOipb/tc1TjwS3M8NhmrueInTN5XMLg= Subject key identifier: 8A:5A:77:7A:A8:15:F6:F7:F9:CA:31:C7:E2:5E:42:FA:4F:79:55:E5 Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Certificate serial: 037F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft Manifest number: 0377 Signing time: Sat 23 Aug 2025 01:08:29 +0000 Manifest this update: Sat 23 Aug 2025 01:08:29 +0000 Manifest next update: Sat 30 Aug 2025 01:08:29 +0000 Files and hashes: 1: Satd0R3JItzI8j3VqSxplN1wNQQ.crl (hash: Pp2cRdI0rWeXCL408o+afbGGqgHqMZznbjSAwGcABWE=) 2: 718673B6BB7F11EC9E187F19C4F9AE02.roa (hash: O8VxzFOTQcqKK+CbKNz7Oarn0uADD/6F4h0/93MvW2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 895 (0x37f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Validity Not Before: Aug 23 01:08:29 2025 GMT Not After : Aug 30 01:08:29 2025 GMT Subject: CN=68a9148d-b3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:9f:ac:d1:84:81:c7:7d:c4:e3:7d:ce:8e: 7b:1b:0c:89:0a:cc:4f:bd:9c:2e:73:89:ef:58:8c: da:57:6c:3e:d1:ac:5d:f2:cf:43:0b:43:88:6c:68: e1:40:cf:9d:bf:d7:62:09:67:9e:1b:ae:35:be:f5: 53:4c:7b:e1:77:dd:20:64:68:60:51:6f:88:67:03: f7:bc:66:73:a5:54:ce:43:45:47:cc:74:79:90:3a: d2:ec:12:2c:ba:5b:53:e9:8f:93:e6:b3:f9:46:ca: 16:3e:85:72:f7:90:92:14:15:d1:9e:17:f8:69:aa: 0e:b8:f8:19:58:5f:23:73:34:80:36:ad:a5:bf:ec: 48:26:a1:0f:4e:52:b6:99:48:af:b8:5d:96:db:68: b0:03:b7:83:7c:ee:d1:d3:d2:80:78:c3:30:0b:f8: 56:0f:11:83:7a:0f:e5:b2:a2:20:3c:60:57:d5:b9: 05:ba:36:f6:c3:04:d6:c0:74:54:cb:36:2f:e4:a6: 87:fe:28:f7:1f:07:f6:b9:bc:67:79:e2:be:57:e6: 4b:b7:7d:66:cb:e1:e5:b6:5c:20:69:ac:2a:27:40: 16:43:2c:cb:08:07:23:c7:84:33:6a:be:9d:08:1f: e1:1b:7e:ce:09:61:4a:be:c8:69:e1:99:9a:54:b8: 2b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5A:77:7A:A8:15:F6:F7:F9:CA:31:C7:E2:5E:42:FA:4F:79:55:E5 X509v3 Authority Key Identifier: keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a3:ac:73:00:7d:d4:7b:22:30:31:75:a2:47:bc:a0:87:b9: 45:23:f0:a2:98:47:ce:c1:c4:9f:f2:76:a1:3e:31:b7:33:ab: 5e:30:d2:c1:5a:c1:7b:1c:a5:70:b9:a1:58:29:ce:05:36:27: 40:c7:aa:14:f6:22:e7:d9:6d:45:ae:bc:d4:92:dc:21:89:f3: 7b:b0:5d:e6:49:fe:5d:32:0a:fd:3b:21:23:9f:5a:ed:63:ef: e8:1e:02:47:db:77:29:b0:6c:bf:71:06:35:81:36:05:59:22: 19:06:1a:d2:72:9f:2a:5a:e1:4e:70:4a:ca:54:9d:58:e3:fa: 16:18:ad:b3:9f:59:b3:0a:29:38:9a:e2:37:1c:97:cd:d4:f3: bf:b1:00:dd:33:d4:dc:0a:9c:60:80:41:25:63:ad:2b:a1:c0: 99:2b:87:a9:a2:92:36:41:4e:0e:1b:7c:e1:08:74:99:8e:39: 02:5e:39:8f:89:07:6c:01:49:70:5f:1e:f3:db:39:7d:f6:26: 40:b1:15:73:13:43:67:f0:28:87:28:5e:09:1a:46:13:79:40: 42:a9:7c:44:16:1d:c3:28:bd:5f:3a:8b:0f:ba:94:6e:1e:ae: e8:ef:c5:14:f8:21:ee:a8:9a:4b:68:4a:c9:55:01:02:62:d8: fa:98:80:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0 REQ3MDM1MDQwHhcNMjUwODIzMDEwODI5WhcNMjUwODMwMDEwODI5WjAYMRYwFAYD VQQDEw02OGE5MTQ4ZC1iM2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzqfrNGEgcd9xON9zo57GwyJCsxPvZwuc4nvWIzaV2w+0axd8s9DC0OIbGjh QM+dv9diCWeeG641vvVTTHvhd90gZGhgUW+IZwP3vGZzpVTOQ0VHzHR5kDrS7BIs ultT6Y+T5rP5RsoWPoVy95CSFBXRnhf4aaoOuPgZWF8jczSANq2lv+xIJqEPTlK2 mUivuF2W22iwA7eDfO7R09KAeMMwC/hWDxGDeg/lsqIgPGBX1bkFujb2wwTWwHRU yzYv5KaH/ij3Hwf2ubxneeK+V+ZLt31my+HltlwgaawqJ0AWQyzLCAcjx4Qzar6d CB/hG37OCWFKvshp4ZmaVLgr2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpad3qo Ffb3+coxx+JeQvpPeVXlMB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTkzQi8xMDNDN0QxQ0JCN0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0 ekk4ajNWcVN4cGxOMXdOUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBao6xzAH3UeyIwMXWiR7ygh7lFI/CimEfOwcSf8nahPjG3M6teMNLB WsF7HKVwuaFYKc4FNidAx6oU9iLn2W1FrrzUktwhifN7sF3mSf5dMgr9OyEjn1rt Y+/oHgJH23cpsGy/cQY1gTYFWSIZBhrScp8qWuFOcErKVJ1Y4/oWGK2zn1mzCik4 muI3HJfN1PO/sQDdM9TcCpxggEElY60rocCZK4epopI2QU4OG3zhCHSZjjkCXjmP iQdsAUlwXx7z2zl99iZAsRVzE0Nn8CiHKF4JGkYTeUBCqXxEFh3DKL1fOosPupRu Hq7o78UU+CHuqJpLaErJVQECYtj6mIDW -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:56 2025 by rpki-client