$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json) Hash identifier: a3afmJvHEyeEiq8nvrrfj39uWw+ybHQcXgkLsD37a/A= Subject key identifier: 1F:FB:ED:4D:C4:57:2C:43:6A:3F:39:51:7C:2D:D2:27:16:D5:8F:8F Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft Manifest number: 0164 Signing time: Sat 23 Aug 2025 04:07:25 +0000 Manifest this update: Sat 23 Aug 2025 04:07:24 +0000 Manifest next update: Sat 30 Aug 2025 04:07:24 +0000 Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: 553BvAZYrbcSfroukaZwzDSb0sp9mRk8ukJQhhycV7E=) 2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: aw8y769dbHtoKJEd8vQWlpw8CKdXEBliY+eMjR7xPWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: Aug 23 04:07:24 2025 GMT Not After : Aug 30 04:07:24 2025 GMT Subject: CN=68a93e7d-17b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:8a:86:5c:49:30:08:96:a5:58:18:dd:a6: 04:9f:46:07:55:96:56:32:e2:7b:8b:8f:5d:11:71: 82:21:bb:2b:a5:d8:ff:1e:9b:6b:a0:8e:f5:9c:94: 71:6e:20:6c:dc:86:0d:2d:45:bf:18:26:5c:29:98: bd:aa:7d:a0:d2:9b:0f:13:ac:0f:83:55:4c:85:b8: 58:25:9f:04:cd:ce:16:9d:94:5d:67:e6:32:90:ec: 54:33:04:82:52:47:f5:41:ab:4e:98:c7:8e:e6:8a: d3:22:fe:e3:44:e4:51:a1:03:e2:ee:ea:d3:3d:fa: dc:d5:9d:bc:a0:8b:03:38:fe:bb:d8:b5:17:ee:c3: 6d:12:54:28:10:ee:0e:e9:e4:c9:c7:d4:e7:2b:99: 22:18:cb:0f:0a:1a:f5:a6:6b:f9:b6:35:2d:0c:4c: d8:0a:ff:5c:6b:ee:c5:9a:21:fc:68:23:a3:65:4a: 0b:16:2c:9d:49:66:12:7d:0a:55:39:42:4e:76:ee: c1:1d:f1:e7:d4:b5:c7:26:9c:dd:5b:9a:44:a5:60: 9a:c5:17:f6:9e:f6:29:01:a1:f0:c5:31:af:42:cf: 4d:c3:43:e8:4f:c8:e2:de:ef:c8:93:10:90:e8:9f: a7:6c:6f:11:b5:c0:b9:13:5c:f4:f0:b1:5c:72:ed: cd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FB:ED:4D:C4:57:2C:43:6A:3F:39:51:7C:2D:D2:27:16:D5:8F:8F X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ef:cf:fa:e3:2b:9a:69:5a:16:7c:6a:5a:a7:cf:90:f8:4c: 82:50:c5:27:39:a2:8d:95:87:c6:64:e1:5e:cf:de:be:67:02: f8:19:16:bf:8c:e2:08:77:59:9e:a9:a2:85:af:b0:5d:fe:eb: c8:7c:89:6a:4e:26:b8:9f:8f:45:3a:11:f1:e6:e9:ed:06:5b: 45:f4:e0:c7:52:87:16:fc:44:b6:92:31:93:3c:57:f0:fc:21: e7:6a:4e:f6:a0:0b:d8:1c:3d:a4:72:7a:fa:1b:f1:13:36:83: 2b:36:66:2b:c6:0c:c7:75:ee:51:f1:26:c3:f3:f6:3a:44:4c: 7f:dd:55:d7:92:5d:00:e1:2e:9b:d6:d9:07:87:a1:4f:d8:60: 0c:d2:f6:34:3c:14:b9:64:e3:f8:ee:91:21:8b:bf:fc:3f:ee: 26:13:92:66:8a:b1:a1:6a:59:4b:bc:4a:05:0b:5c:64:18:3b: 20:c1:a9:5b:df:46:1a:2b:89:0a:de:8b:5a:86:fe:19:ed:93: 33:43:7b:0d:f1:e6:c6:1a:33:40:25:d1:eb:b0:b8:1c:50:4f: cc:bd:ba:d4:db:6b:a7:68:32:fe:07:d1:83:1e:4e:f8:ed:4e: 00:f5:f0:8a:21:0e:6d:06:a7:9c:dc:d4:16:50:62:f7:c6:50: 98:ef:5d:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3QzQxMTAvBgNVBAUTKDQ5REI2MUZGMDNDNTUxNjc5NUNGNzg1MDlFQTM3QTA2 MEY0NTQ3QkYwHhcNMjUwODIzMDQwNzI0WhcNMjUwODMwMDQwNzI0WjAYMRYwFAYD VQQDEw02OGE5M2U3ZC0xN2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvmKhlxJMAiWpVgY3aYEn0YHVZZWMuJ7i49dEXGCIbsrpdj/HptroI71nJRx biBs3IYNLUW/GCZcKZi9qn2g0psPE6wPg1VMhbhYJZ8Ezc4WnZRdZ+YykOxUMwSC Ukf1QatOmMeO5orTIv7jRORRoQPi7urTPfrc1Z28oIsDOP672LUX7sNtElQoEO4O 6eTJx9TnK5kiGMsPChr1pmv5tjUtDEzYCv9ca+7FmiH8aCOjZUoLFiydSWYSfQpV OUJOdu7BHfHn1LXHJpzdW5pEpWCaxRf2nvYpAaHwxTGvQs9Nw0PoT8ji3u/IkxCQ 6J+nbG8RtcC5E1z08LFccu3NzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/77U3E VyxDaj85UXwt0icW1Y+PMB8GA1UdIwQYMBaAFEnbYf8DxVFnlc94UJ6jegYPRUe/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDdDNC81OTVCRTgyQzYz NUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVXZVZ6M2hRbnFONkJnOUZS NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDdDNC81OTVCRTgyQzYzNUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVX ZVZ6M2hRbnFONkJnOUZSNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx78/64yuaaVoWfGpap8+Q+EyCUMUnOaKNlYfGZOFez96+ZwL4GRa/ jOIId1meqaKFr7Bd/uvIfIlqTia4n49FOhHx5untBltF9ODHUocW/ES2kjGTPFfw /CHnak72oAvYHD2kcnr6G/ETNoMrNmYrxgzHde5R8SbD8/Y6REx/3VXXkl0A4S6b 1tkHh6FP2GAM0vY0PBS5ZOP47pEhi7/8P+4mE5JmirGhallLvEoFC1xkGDsgwalb 30YaK4kK3otahv4Z7ZMzQ3sN8ebGGjNAJdHrsLgcUE/MvbrU22unaDL+B9GDHk74 7U4A9fCKIQ5tBqec3NQWUGL3xlCY710s -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:16 2025 by rpki-client