$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json) Hash identifier: 5WKiLoMQkr1InLR/9UWy1E+3FrTZE89nlEqn1WsPPdg= Subject key identifier: 83:52:E9:0A:E8:96:4F:69:6A:ED:B9:D9:7E:60:19:BC:6E:50:E9:52 Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft Manifest number: F8 Signing time: Sat 23 Aug 2025 05:24:13 +0000 Manifest this update: Sat 23 Aug 2025 05:24:13 +0000 Manifest next update: Sat 30 Aug 2025 05:24:13 +0000 Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: fxx/vAqhBXcv1C6P5/Io1vmOf54OEld283pBBwVLyHU=) 2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: eodiFGpIfsgXUXxslrRHT6wLB6egOaD+ezHH/eHicB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: Aug 23 05:24:13 2025 GMT Not After : Aug 30 05:24:13 2025 GMT Subject: CN=68a9507d-56ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ac:40:0b:3b:9c:9e:92:bd:98:07:5c:03:54: 32:ac:92:3c:64:e6:7d:70:94:84:1f:b4:88:dd:11: 99:d2:22:36:ab:44:13:85:30:a8:ea:73:83:4c:93: ea:31:38:e8:09:55:1f:4c:b9:b4:2c:fd:da:6b:a8: 0b:2e:ac:f6:d7:ef:65:b9:f6:e0:1b:9f:17:7e:30: 43:00:91:a4:da:54:40:d6:da:64:dd:6c:07:b2:94: 0b:ce:82:2a:0f:f8:e0:22:d0:94:38:19:2b:c0:a5: fa:3c:85:36:31:bd:b2:de:8a:91:fa:49:63:4c:c2: de:f9:2b:9f:88:6c:25:6d:3d:ca:7f:b1:30:ef:9a: 99:51:8b:71:f1:6b:98:bb:36:1e:0d:47:10:e3:a9: 44:28:e5:5e:b2:4b:83:d5:88:8c:84:00:e9:54:fc: ae:1d:34:74:41:bc:e9:bf:7f:57:cc:2f:e7:78:c9: 55:81:01:ac:15:42:f8:91:52:73:24:dc:fc:bf:93: 71:90:cd:7f:da:f9:0a:47:d4:ae:b5:a5:a8:1b:e2: c5:66:d4:86:58:49:6b:04:09:d1:28:9c:23:39:b0: a9:36:96:67:60:29:7a:e6:72:22:b3:cd:ca:4a:fb: 1e:ce:26:15:ca:2f:3c:33:76:24:32:b7:94:6f:6e: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:52:E9:0A:E8:96:4F:69:6A:ED:B9:D9:7E:60:19:BC:6E:50:E9:52 X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:85:f0:56:42:ec:26:5a:be:47:4d:c1:b0:03:a6:47:cf:e9: 81:47:bc:24:fc:78:12:09:02:db:8e:05:31:af:43:69:15:2b: ca:7a:ea:d3:f1:e2:06:7f:d3:b3:5d:17:2d:df:37:7b:dd:70: 0a:64:a5:99:23:db:13:4a:5b:73:05:32:e1:af:fa:ab:97:86: 2a:1e:14:26:da:de:24:72:5b:4b:0b:6c:97:5b:f5:08:f3:a3: 4b:f0:03:42:eb:50:cd:79:5f:85:4e:56:25:27:fb:17:e5:28: c8:6e:41:11:46:28:96:94:a9:df:73:8c:ea:37:59:36:5a:65: 0e:e1:bc:4c:df:ff:b0:12:16:d7:7d:ac:f4:95:d2:41:7d:8d: c7:d6:16:b5:55:1e:7d:54:ba:e9:9e:a9:23:8c:59:83:df:22: 67:0f:e5:ba:16:53:8a:9a:35:e1:44:c0:03:8d:20:11:f1:6d: 3d:f5:e8:ef:8e:f2:7d:4e:ff:8f:7c:bc:20:e0:12:ce:25:04: ab:a1:ee:c2:35:56:0b:38:63:0a:38:32:25:2e:ab:99:bc:31: af:2f:ec:c7:11:ff:59:08:46:ca:b6:f4:9f:21:b1:6f:1a:20: 4e:2d:40:4a:5b:f5:b4:08:89:61:3a:b4:90:f0:9c:64:4d:9e: 51:c6:6f:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1 Mjg4NjM4MTEwHhcNMjUwODIzMDUyNDEzWhcNMjUwODMwMDUyNDEzWjAYMRYwFAYD VQQDEw02OGE5NTA3ZC01NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66xACzucnpK9mAdcA1QyrJI8ZOZ9cJSEH7SI3RGZ0iI2q0QThTCo6nODTJPq MTjoCVUfTLm0LP3aa6gLLqz21+9lufbgG58XfjBDAJGk2lRA1tpk3WwHspQLzoIq D/jgItCUOBkrwKX6PIU2Mb2y3oqR+kljTMLe+SufiGwlbT3Kf7Ew75qZUYtx8WuY uzYeDUcQ46lEKOVeskuD1YiMhADpVPyuHTR0Qbzpv39XzC/neMlVgQGsFUL4kVJz JNz8v5NxkM1/2vkKR9SutaWoG+LFZtSGWElrBAnRKJwjObCpNpZnYCl65nIis83K SvseziYVyi88M3YkMreUb24MGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINS6Qro lk9pau252X5gGbxuUOlSMB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUyQi9GODM2QkRFQzBDRUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURf WnJmeDVNa1AtWWRTaUdPQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAhfBWQuwmWr5HTcGwA6ZHz+mBR7wk/HgSCQLbjgUxr0NpFSvKeurT 8eIGf9OzXRct3zd73XAKZKWZI9sTSltzBTLhr/qrl4YqHhQm2t4kcltLC2yXW/UI 86NL8ANC61DNeV+FTlYlJ/sX5SjIbkERRiiWlKnfc4zqN1k2WmUO4bxM3/+wEhbX faz0ldJBfY3H1ha1VR59VLrpnqkjjFmD3yJnD+W6FlOKmjXhRMADjSAR8W099ejv jvJ9Tv+PfLwg4BLOJQSroe7CNVYLOGMKODIlLquZvDGvL+zHEf9ZCEbKtvSfIbFv GiBOLUBKW/W0CIlhOrSQ8JxkTZ5Rxm+T -----END CERTIFICATE-----Generated at Sun Aug 24 07:20:53 2025 by rpki-client