$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json) Hash identifier: hdUPr+4w+1GhSjZzOTxjkTDyMD/zqi8wQlGDSjXo4X0= Subject key identifier: A9:C1:57:FE:31:C7:75:A3:A5:2F:E8:F8:E6:3D:CC:66:B8:87:5A:DA Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft Manifest number: 021D Signing time: Sat 23 Aug 2025 02:15:29 +0000 Manifest this update: Sat 23 Aug 2025 02:15:28 +0000 Manifest next update: Sat 30 Aug 2025 02:15:28 +0000 Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: cIChHhXsqdhG9aM4B575VYZg486THlbTpODxWap8nu8=) 2: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: PE1GT2A7EmT71tkAdrtk5aTsSiGLh2+65uV6vdi3L2w=) 3: A4B9732E372211F088B77741C4F9AE02.roa (hash: mk1V1FHxB9suL0UPFLyM/A4VOyjRdsjF6s6gkTDXYcQ=) 4: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: 8t/E7tL8Lbh/a7Lj1jqywOIP2dcmbqemPtvNv/RJomk=) 5: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 88kWEiY/06EoXdAjoPmCFzf4ibe9Kqek376AzBNc9lE=) 6: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: 8cIYacmt17oQhUg55NPG9jDcGp/KP0H3kvB7HR2dORY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Aug 23 02:15:28 2025 GMT Not After : Aug 30 02:15:28 2025 GMT Subject: CN=68a92440-3cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:1a:df:7b:6d:bf:94:e9:98:96:33:ac:aa: d6:69:cd:6e:32:50:3f:d2:51:26:e4:1a:4c:6c:bc: 4f:a9:0a:a1:b4:f6:3c:47:4b:d5:81:b9:ae:79:b5: 43:33:93:31:93:5b:57:3d:02:56:ba:9b:d2:f5:d6: e3:d7:c9:d0:64:0b:b9:32:53:8b:1d:93:55:3e:c0: 79:67:58:89:c1:2e:93:b0:0f:e3:c2:40:10:50:fa: ef:54:4b:a3:a4:32:b6:54:87:5c:8d:0f:91:77:a5: 72:fc:70:af:33:95:b3:35:88:e2:46:8f:cb:82:fd: 8a:24:df:35:26:ae:71:71:dd:76:88:e7:d8:2e:51: d8:52:7b:6b:68:8a:f2:69:d6:4e:76:6d:14:b7:4f: b3:f5:43:85:1a:08:44:4d:c9:44:3d:43:22:92:2d: b4:ef:a7:09:8c:d0:10:81:3e:6f:cb:6e:63:d9:e9: 70:12:a3:58:fe:c2:21:59:f7:89:9e:39:08:b4:c9: aa:6e:66:ca:f3:d3:36:b9:dc:8b:bf:0a:27:de:4c: 8f:da:f5:be:cd:e5:f1:34:dd:64:5e:a5:c5:ae:7e: 33:92:54:b1:42:81:e2:57:e7:ba:79:94:f3:84:26: e4:39:89:bd:6f:11:1b:58:0f:87:b3:76:a7:60:2f: 06:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C1:57:FE:31:C7:75:A3:A5:2F:E8:F8:E6:3D:CC:66:B8:87:5A:DA X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4d:e5:dd:89:eb:2e:2b:33:94:21:9a:f8:67:22:ca:f2:8e: ab:8f:ac:53:64:47:76:0f:b4:98:02:93:92:01:a3:c2:5b:24: 28:21:b6:4b:73:b3:a2:a7:40:00:a3:b4:fb:1e:00:8b:b6:1e: ea:34:a0:77:15:ff:8b:61:d7:86:2d:ba:9c:54:d1:16:1f:fd: 5f:a5:cc:92:e5:f2:f4:7e:b6:38:ec:dc:32:ac:66:d2:99:b3: e0:8a:06:20:c3:73:84:e7:af:28:e3:c7:5e:e9:d4:eb:ce:17: 6e:82:f2:34:d5:1b:34:43:cb:58:cb:5a:9a:0c:ba:b5:e2:9b: 4b:b9:42:f1:be:cb:5e:07:21:2c:d8:0b:f7:c3:8a:62:8c:b3: 4d:1e:32:09:fa:63:bc:dd:a0:4d:a4:b4:02:a4:be:e0:a0:41: 3f:66:42:19:17:6e:b2:7b:d7:ef:d5:76:a8:f1:82:ed:2d:43: ef:86:44:bc:d9:eb:53:77:6b:32:d1:06:64:a1:38:2e:e4:5a: 00:ab:c6:f5:a1:e5:c2:ba:d2:e7:3e:29:60:13:12:21:49:90: 96:73:e6:07:cc:34:f0:42:36:0f:2d:30:d0:5b:b6:86:2f:fd: 5e:b1:f3:25:0b:97:b1:87:b7:d5:cc:f2:e5:6f:2a:c5:94:54: d3:b3:04:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjUwODIzMDIxNTI4WhcNMjUwODMwMDIxNTI4WjAYMRYwFAYD VQQDEw02OGE5MjQ0MC0zY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxi8a33ttv5TpmJYzrKrWac1uMlA/0lEm5BpMbLxPqQqhtPY8R0vVgbmuebVD M5Mxk1tXPQJWupvS9dbj18nQZAu5MlOLHZNVPsB5Z1iJwS6TsA/jwkAQUPrvVEuj pDK2VIdcjQ+Rd6Vy/HCvM5WzNYjiRo/Lgv2KJN81Jq5xcd12iOfYLlHYUntraIry adZOdm0Ut0+z9UOFGghETclEPUMiki2076cJjNAQgT5vy25j2elwEqNY/sIhWfeJ njkItMmqbmbK89M2udyLvwon3kyP2vW+zeXxNN1kXqXFrn4zklSxQoHiV+e6eZTz hCbkOYm9bxEbWA+Hs3anYC8GAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnBV/4x x3WjpS/o+OY9zGa4h1raMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzQ4RS80RDc4OTI2QTRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3 VmtMU1NFdF9BZ1d1ZmN4MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuTeXdiesuKzOUIZr4ZyLK8o6rj6xTZEd2D7SYApOSAaPCWyQoIbZL c7Oip0AAo7T7HgCLth7qNKB3Ff+LYdeGLbqcVNEWH/1fpcyS5fL0frY47NwyrGbS mbPgigYgw3OE568o48de6dTrzhdugvI01Rs0Q8tYy1qaDLq14ptLuULxvsteByEs 2Av3w4pijLNNHjIJ+mO83aBNpLQCpL7goEE/ZkIZF26ye9fv1Xao8YLtLUPvhkS8 2etTd2sy0QZkoTgu5FoAq8b1oeXCutLnPilgExIhSZCWc+YHzDTwQjYPLTDQW7aG L/1esfMlC5exh7fVzPLlbyrFlFTTswSb -----END CERTIFICATE-----Generated at Sat Aug 23 10:25:06 2025 by rpki-client