$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json) Hash identifier: t57jI368kyF4gEfoxSzeIrx+BVWB3cHPRc1JtkfTyZg= Subject key identifier: 9B:65:25:1F:DD:E3:4C:10:DA:3C:92:6F:41:95:04:E7:40:DE:CB:6C Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Certificate serial: 065D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft Manifest number: 065D Signing time: Fri 22 Aug 2025 22:42:59 +0000 Manifest this update: Fri 22 Aug 2025 22:42:59 +0000 Manifest next update: Fri 29 Aug 2025 22:42:59 +0000 Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: 9Loe3tPY8ugwHVcx96+bIBv9QTRq5Fh5p313VPpprm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Validity Not Before: Aug 22 22:42:59 2025 GMT Not After : Aug 29 22:42:59 2025 GMT Subject: CN=68a8f273-4833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:5b:be:af:2a:04:64:59:72:eb:31:d0:59: 87:be:b3:c5:9b:e4:52:23:ce:c1:0e:7e:cf:ea:3b: e0:32:02:09:b6:e3:37:51:70:07:71:60:7f:05:18: a0:8b:03:dd:15:34:ca:b4:1f:71:2b:7e:68:72:c0: 05:ef:97:80:a8:1c:f3:6b:77:96:33:04:73:b8:1b: 1b:4e:4a:7b:6e:84:57:d2:03:88:74:d8:87:da:7c: d7:67:dd:87:e1:20:36:00:25:7f:0d:b7:b2:f0:0d: 62:7c:a7:0d:79:81:2b:90:89:ad:cf:d8:3f:0f:f2: 32:e1:ec:fe:d3:c9:b7:36:a1:6d:0f:8f:6f:d7:ee: 99:6b:74:ee:7f:da:70:7e:c9:ef:97:01:85:2d:65: 76:7a:62:0b:d9:d0:2f:d2:8c:5d:12:a1:85:62:68: b9:ae:c1:58:25:74:6e:5e:6e:36:38:e6:73:5b:02: ba:70:cb:4b:27:ba:b9:8d:e6:64:dc:d5:54:d4:d5: a5:4d:d4:fe:7e:9c:8f:82:02:42:16:72:a9:2b:3d: 2f:f4:7a:a6:db:69:c6:11:ae:03:50:9c:c3:38:7a: 3a:4c:c2:6f:12:90:b4:fe:67:6b:44:ba:ae:02:da: 47:f4:7f:74:0c:02:05:87:8e:20:ec:12:ed:2f:38: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:65:25:1F:DD:E3:4C:10:DA:3C:92:6F:41:95:04:E7:40:DE:CB:6C X509v3 Authority Key Identifier: keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1d:a4:94:f5:22:fe:02:62:9c:48:57:fe:63:37:e8:c2:35: 98:95:4f:58:97:d8:8c:0b:22:d0:c2:f8:b0:0b:d6:a8:47:64: d4:2b:16:0f:2f:40:93:1c:1f:bb:1d:a3:8f:13:d5:7b:c1:32: e5:01:26:51:1e:ef:50:1f:eb:3a:7d:b3:16:a1:e3:06:eb:0b: 81:c7:4c:8e:b2:c8:70:c6:ee:a4:26:23:32:14:3b:16:3e:0d: 08:9b:43:d7:a8:04:e2:96:5d:21:83:24:ca:15:04:2b:21:61: fc:28:ad:db:1b:c7:d7:e0:47:75:42:a2:fc:be:99:77:41:f1: a6:10:b6:a6:e9:de:c3:c1:b6:53:27:fc:b5:38:9b:b3:aa:a4: c8:7a:a3:d4:39:52:8f:bf:9f:0e:3b:07:54:f5:55:04:df:dc: 12:ae:e1:66:a6:01:d5:d1:b1:ae:89:a5:77:f9:1d:13:f0:a1: 41:6f:42:aa:8e:b4:14:3b:ac:29:bb:d4:4e:2f:fd:2d:73:3c: 16:3f:3c:22:61:55:2c:10:73:82:7a:41:e3:80:ac:76:6c:16: ba:b2:d4:1d:52:84:34:c9:68:1d:7a:e3:48:31:18:11:16:1d: 25:cd:ff:0e:85:8c:72:60:72:a6:e1:23:83:ee:35:8d:4c:ad: dd:5c:ce:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG NTlDMjdFOUUwHhcNMjUwODIyMjI0MjU5WhcNMjUwODI5MjI0MjU5WjAYMRYwFAYD VQQDEw02OGE4ZjI3My00ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5tbvq8qBGRZcusx0FmHvrPFm+RSI87BDn7P6jvgMgIJtuM3UXAHcWB/BRig iwPdFTTKtB9xK35ocsAF75eAqBzza3eWMwRzuBsbTkp7boRX0gOIdNiH2nzXZ92H 4SA2ACV/Dbey8A1ifKcNeYErkImtz9g/D/Iy4ez+08m3NqFtD49v1+6Za3Tuf9pw fsnvlwGFLWV2emIL2dAv0oxdEqGFYmi5rsFYJXRuXm42OOZzWwK6cMtLJ7q5jeZk 3NVU1NWlTdT+fpyPggJCFnKpKz0v9Hqm22nGEa4DUJzDOHo6TMJvEpC0/mdrRLqu AtpH9H90DAIFh44g7BLtLzizlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtlJR/d 40wQ2jySb0GVBOdA3stsMB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNHaSU9SL+AmKcSFf+YzfowjWYlU9Yl9iMCyLQwviwC9aoR2TUKxYP L0CTHB+7HaOPE9V7wTLlASZRHu9QH+s6fbMWoeMG6wuBx0yOsshwxu6kJiMyFDsW Pg0Im0PXqATill0hgyTKFQQrIWH8KK3bG8fX4Ed1QqL8vpl3QfGmELam6d7DwbZT J/y1OJuzqqTIeqPUOVKPv58OOwdU9VUE39wSruFmpgHV0bGuiaV3+R0T8KFBb0Kq jrQUO6wpu9ROL/0tczwWPzwiYVUsEHOCekHjgKx2bBa6stQdUoQ0yWgdeuNIMRgR Fh0lzf8OhYxyYHKm4SOD7jWNTK3dXM6a -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:36 2025 by rpki-client