$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json) Hash identifier: VnNyN1ZsCcWghvR+S7NhZP1M7j04oXpQUBwl9DjUWGI= Subject key identifier: D1:7B:76:DC:8D:E3:29:EF:84:35:24:B7:0D:CD:53:BC:76:30:F4:6C Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft Manifest number: 01B0 Signing time: Sat 23 Aug 2025 03:16:43 +0000 Manifest this update: Sat 23 Aug 2025 03:16:42 +0000 Manifest next update: Sat 30 Aug 2025 03:16:42 +0000 Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: bbsuT7Q+sMulvGty1FTSnnvxLKIhPxmqPY272rNlKPI=) 2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: H97m0xGfwTSK15tOF7js1ABWMy5iF+l3/IsWtR98xbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Validity Not Before: Aug 23 03:16:42 2025 GMT Not After : Aug 30 03:16:42 2025 GMT Subject: CN=68a9329b-3c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:24:27:fd:13:bc:66:4e:43:05:7d:8a:98: 58:bb:8b:53:9a:62:3f:ed:b8:81:92:05:2c:d3:9b: 02:02:71:14:21:8b:b4:bd:f6:26:8e:7a:21:8d:81: c7:3b:8b:0a:a3:b4:91:29:9b:33:c2:3e:d5:d0:8c: 3e:8d:cb:66:e7:61:ba:50:74:be:7e:1d:4d:4e:72: 21:c5:e2:d7:b8:64:2e:43:f4:92:ac:61:d6:c6:43: 23:29:7c:e4:48:50:97:d2:82:c6:a1:bd:80:41:f2: 9a:d7:f1:26:a3:a8:88:ba:46:2a:81:76:a5:9d:d4: f2:d1:f3:e4:37:45:e2:b2:fb:58:7f:3f:31:95:a9: ee:05:ee:13:32:41:d9:64:11:9d:a4:cb:33:b2:d7: 30:45:73:8b:fe:3a:76:d8:71:db:9f:62:24:a6:45: 40:e8:21:32:f6:f9:e3:0b:65:70:6f:35:4c:fb:f4: b3:cd:a8:15:0a:e4:96:98:07:8c:ea:99:58:33:de: 5d:24:10:a4:de:cc:60:f5:f9:dd:ab:0d:cf:62:54: 02:3b:c5:ed:b2:4e:58:d0:e4:39:86:d1:15:cc:58: c6:e7:5b:10:96:05:25:ad:9d:91:69:a4:67:3c:bb: 78:bf:78:aa:96:8d:f0:4c:d9:bf:6f:74:ce:9f:b2: 7d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7B:76:DC:8D:E3:29:EF:84:35:24:B7:0D:CD:53:BC:76:30:F4:6C X509v3 Authority Key Identifier: keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:39:a8:fc:bb:8c:1d:e4:74:ad:1f:90:a0:58:59:37:af:31: 5d:cf:15:14:bf:70:4b:67:13:c6:39:00:6b:4c:36:07:00:ab: aa:fa:74:11:a5:66:ea:0e:21:b4:ed:83:fb:c7:b2:a7:f0:dd: 78:a0:50:2f:fa:4a:52:8c:8a:e9:ec:1e:cb:60:7e:05:ba:14: fd:02:65:b0:06:70:0f:34:09:ba:92:d9:28:68:83:29:ad:6c: 06:f9:29:dd:1a:4d:4a:fa:e4:d6:1b:5e:07:97:ef:2e:59:49: 9b:60:c0:69:00:0e:89:20:18:1b:b3:4d:ba:19:41:cc:aa:65: 5a:21:cf:7a:53:a0:23:4d:d2:62:d4:77:75:c4:b5:05:35:2a: 95:87:83:a6:7b:ea:c2:67:ae:09:da:8a:69:11:b4:a6:5b:c1: 17:01:52:bb:32:29:ca:dc:bc:20:ba:41:e0:ef:ec:0c:a0:31: 82:70:d9:0e:3e:36:c7:c7:37:ee:86:63:06:b1:68:fe:a6:c1: 7a:97:e4:b3:fc:a7:e3:c9:ba:c4:64:1a:3b:9b:69:62:cc:12: cd:32:a2:96:55:4d:99:10:82:31:c8:a7:ef:f9:1d:05:34:df: 78:ab:84:c3:4c:90:e3:7f:91:fe:a9:8d:7f:8d:15:b7:78:cf: c8:1e:05:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzOTYxMTAvBgNVBAUTKDQ5RDBGNDA2OTcyQTgwNUIxRTdBOUZDMjBGQjNBOUND Qjc2NjJBQ0UwHhcNMjUwODIzMDMxNjQyWhcNMjUwODMwMDMxNjQyWjAYMRYwFAYD VQQDEw02OGE5MzI5Yi0zYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiAkJ/0TvGZOQwV9iphYu4tTmmI/7biBkgUs05sCAnEUIYu0vfYmjnohjYHH O4sKo7SRKZszwj7V0Iw+jctm52G6UHS+fh1NTnIhxeLXuGQuQ/SSrGHWxkMjKXzk SFCX0oLGob2AQfKa1/Emo6iIukYqgXalndTy0fPkN0XisvtYfz8xlanuBe4TMkHZ ZBGdpMszstcwRXOL/jp22HHbn2IkpkVA6CEy9vnjC2VwbzVM+/SzzagVCuSWmAeM 6plYM95dJBCk3sxg9fndqw3PYlQCO8Xtsk5Y0OQ5htEVzFjG51sQlgUlrZ2RaaRn PLt4v3iqlo3wTNm/b3TOn7J9DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF7dtyN 4ynvhDUktw3NU7x2MPRsMB8GA1UdIwQYMBaAFEnQ9AaXKoBbHnqfwg+zqcy3ZirO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDM5Ni85NUQwREY3QUVG OUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdGc2VlcF9DRDdPcHpMZG1L czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkRDBCcGNxZ0ZzZWVwX0NEN09wekxkbUtzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDM5Ni85NUQwREY3QUVGOUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdG c2VlcF9DRDdPcHpMZG1LczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiOaj8u4wd5HStH5CgWFk3rzFdzxUUv3BLZxPGOQBrTDYHAKuq+nQR pWbqDiG07YP7x7Kn8N14oFAv+kpSjIrp7B7LYH4FuhT9AmWwBnAPNAm6ktkoaIMp rWwG+SndGk1K+uTWG14Hl+8uWUmbYMBpAA6JIBgbs026GUHMqmVaIc96U6AjTdJi 1Hd1xLUFNSqVh4Ome+rCZ64J2oppEbSmW8EXAVK7MinK3LwgukHg7+wMoDGCcNkO PjbHxzfuhmMGsWj+psF6l+Sz/KfjybrEZBo7m2lizBLNMqKWVU2ZEIIxyKfv+R0F NN94q4TDTJDjf5H+qY1/jRW3eM/IHgWQ -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:47 2025 by rpki-client