$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft File: Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json) Hash identifier: yFhj/Ho3r3F8V26SHQOiVvXm1PcQymCEyL62IUhOsj8= Subject key identifier: 37:61:6E:D0:32:1F:EF:42:99:6E:08:2E:4A:D9:4C:D4:B0:D9:2B:B9 Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 Certificate issuer: /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft Manifest number: 8E Signing time: Sat 23 Aug 2025 06:46:07 +0000 Manifest this update: Sat 23 Aug 2025 06:46:06 +0000 Manifest next update: Sat 30 Aug 2025 06:46:06 +0000 Files and hashes: 1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: gXPvkVAjFV0kgomXLNg8hTTD9+Z5AVpoNTEX2hbnPJc=) 2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: mTvWjDqRpjoE4gToiz3x8YclXADkkIN+m00HGh0rTzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Validity Not Before: Aug 23 06:46:06 2025 GMT Not After : Aug 30 06:46:06 2025 GMT Subject: CN=68a963ae-0e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:75:57:29:12:93:2d:28:ce:c4:2f:1a:aa: 6a:bd:fb:dd:a1:db:41:5f:8c:34:73:a0:6d:dc:62: 80:34:fa:d1:af:6c:29:3e:0a:d4:2a:88:5d:f3:b3: 03:a4:ea:a5:69:f0:eb:8c:fe:18:9c:06:4b:81:77: 03:75:71:4a:14:34:ef:63:b4:61:dd:59:09:a5:b0: ba:74:14:2c:f3:98:0a:44:56:d3:85:af:9b:a2:dc: 24:0e:45:d7:d4:26:0a:a4:1e:69:65:5d:9e:e5:14: 48:01:0a:c0:9f:a7:c6:2e:9f:80:c6:ed:6f:f6:ea: bf:ad:fa:c3:4d:c4:e5:a8:ea:84:fb:dc:18:18:b7: 67:93:37:7c:ff:19:e0:90:7a:c1:13:06:b4:8b:11: 73:73:86:05:f2:86:25:b0:78:88:fb:5c:9b:3d:26: 49:0a:2f:d1:aa:23:74:e2:1a:63:06:d3:c9:43:9d: 1b:ef:8f:1f:92:f7:7c:28:86:32:e9:6c:82:c8:2e: 7e:ab:b7:d6:d7:8f:a7:20:d5:d2:35:b9:f3:2f:66: 0b:72:21:2d:f5:d7:e1:16:af:ff:73:7b:42:1f:b0: f2:c7:21:4a:1f:9a:cf:6e:28:6c:76:cc:70:ee:a6: 1b:1e:af:60:94:ce:1c:14:1e:c4:ca:a0:98:3d:e7: 10:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:61:6E:D0:32:1F:EF:42:99:6E:08:2E:4A:D9:4C:D4:B0:D9:2B:B9 X509v3 Authority Key Identifier: keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e1:18:da:63:88:12:69:a5:c5:c0:7c:a7:70:30:6b:dd:e9: 2c:ac:c5:17:8b:56:17:f4:d8:a2:e4:8b:6f:f7:da:5b:f2:18: 34:50:3c:b0:17:9b:99:7e:7d:b2:84:3d:19:31:a3:4d:9a:5e: 87:25:d5:cb:d1:8e:4d:4f:93:ee:ec:42:e7:00:7f:57:81:5e: be:15:34:c0:06:19:c7:c2:d7:70:13:7f:9a:58:54:fb:45:ad: 62:4e:f4:32:cc:ca:f1:39:68:11:1e:5c:ca:a3:93:fa:fb:d7: 6f:4e:56:fb:b3:4e:17:c8:72:95:82:fb:57:97:3a:18:f3:97: c0:2d:b7:c5:b5:8e:ee:6a:f3:31:06:39:d1:c3:be:83:9c:22: 72:5e:88:94:82:18:1b:54:9c:84:64:c8:0c:12:1b:12:94:d7: f2:7c:7b:4e:2a:0e:e2:d3:46:61:c7:19:41:e2:33:6b:08:c8: 61:99:55:e0:3c:cf:c6:93:cb:b6:98:2a:09:d2:ad:6c:d7:26: 79:8b:1a:09:bb:4d:11:09:91:97:32:c9:45:c9:69:62:8e:c8: e9:a0:08:dd:ce:be:e5:15:45:1d:9c:e0:e3:be:f2:76:98:23: 22:81:69:0b:89:ba:8f:23:9a:61:89:52:95:bf:9e:9d:f2:ac: 0c:93:a8:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM5Q0YxMTAvBgNVBAUTKDRBN0QyNkM0Q0JGMTY3MDAyNDVENjdGQkY2OTUwQjcx MjkxODk5MzkwHhcNMjUwODIzMDY0NjA2WhcNMjUwODMwMDY0NjA2WjAYMRYwFAYD VQQDEw02OGE5NjNhZS0wZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfh1VykSky0ozsQvGqpqvfvdodtBX4w0c6Bt3GKANPrRr2wpPgrUKohd87MD pOqlafDrjP4YnAZLgXcDdXFKFDTvY7Rh3VkJpbC6dBQs85gKRFbTha+botwkDkXX 1CYKpB5pZV2e5RRIAQrAn6fGLp+Axu1v9uq/rfrDTcTlqOqE+9wYGLdnkzd8/xng kHrBEwa0ixFzc4YF8oYlsHiI+1ybPSZJCi/RqiN04hpjBtPJQ50b748fkvd8KIYy 6WyCyC5+q7fW14+nINXSNbnzL2YLciEt9dfhFq//c3tCH7DyxyFKH5rPbihsdsxw 7qYbHq9glM4cFB7EyqCYPecQvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdhbtAy H+9CmW4ILkrZTNSw2Su5MB8GA1UdIwQYMBaAFEp9JsTL8WcAJF1n+/aVC3EpGJk5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzlDRi80REYyQkU1MkE5 OEMxMUVGQkEwNjg4NjRDNEY5QUUwMi9TbjBteE12eFp3QWtYV2Y3OXBVTGNTa1lt VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuMG14TXZ4WndBa1hXZjc5cFVMY1NrWW1Uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzlDRi80REYyQkU1MkE5OEMxMUVGQkEwNjg4NjRDNEY5QUUwMi9TbjBteE12eFp3 QWtYV2Y3OXBVTGNTa1ltVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+4RjaY4gSaaXFwHyncDBr3eksrMUXi1YX9Nii5Itv99pb8hg0UDyw F5uZfn2yhD0ZMaNNml6HJdXL0Y5NT5Pu7ELnAH9XgV6+FTTABhnHwtdwE3+aWFT7 Ra1iTvQyzMrxOWgRHlzKo5P6+9dvTlb7s04XyHKVgvtXlzoY85fALbfFtY7uavMx BjnRw76DnCJyXoiUghgbVJyEZMgMEhsSlNfyfHtOKg7i00ZhxxlB4jNrCMhhmVXg PM/Gk8u2mCoJ0q1s1yZ5ixoJu00RCZGXMslFyWlijsjpoAjdzr7lFUUdnODjvvJ2 mCMigWkLibqPI5phiVKVv56d8qwMk6iL -----END CERTIFICATE-----Generated at Sat Aug 23 14:17:47 2025 by rpki-client