$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: omGSAEqgzDEZqmJv6ZremFUuEeZlN0PJqXXCAh3WkWQ= Subject key identifier: 20:2A:1D:45:BB:CD:78:C1:69:1C:87:4A:59:3B:49:8F:A1:3B:54:C8 Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 1558 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 154F Signing time: Fri 22 Aug 2025 16:54:08 +0000 Manifest this update: Fri 22 Aug 2025 16:54:08 +0000 Manifest next update: Fri 29 Aug 2025 16:54:08 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: SJra4gpFtHeBA375/g2Vma4Ck0J+s1beheuft56UxZY=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: UB3e/BzYZNzSWafIfT/8shx3CMwEAB4npfcc5DFGpRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5464 (0x1558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: Aug 22 16:54:08 2025 GMT Not After : Aug 29 16:54:08 2025 GMT Subject: CN=68a8a0b0-e046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:07:db:c1:35:37:fb:45:21:b8:7f:0d:d5: 9c:e5:a0:de:9f:ae:a7:99:33:74:41:06:06:12:6f: 45:52:28:13:e9:c6:6c:36:b4:05:d1:dd:7e:dd:c6: 23:17:e5:b7:6e:0f:31:9a:a8:32:a1:e7:18:4a:d8: cf:42:1b:36:66:f3:bb:a6:3b:d1:a1:14:c2:ef:10: b1:a6:dd:2d:65:ff:28:52:29:2c:30:3a:e9:e6:b6: 1d:ae:e0:95:6c:b8:60:08:41:8a:c5:2c:38:50:53: 4e:12:ac:39:8a:3a:4a:e9:fc:71:d3:44:65:26:53: 92:3a:01:8f:c1:f0:98:df:cd:a0:84:bd:a6:c5:02: 6b:18:3d:03:87:f4:38:f0:ce:9a:d2:1d:9c:cc:46: dc:2d:fc:e8:40:e6:6a:d0:f0:a6:f5:f4:1a:55:14: 94:e8:d2:cb:69:57:94:19:7b:dc:b7:69:7b:b3:8d: 7d:58:20:88:9b:ed:f6:5b:59:19:6c:67:65:93:b4: da:7d:10:69:11:5b:cf:5f:15:18:81:5a:8c:cc:f7: 8a:c6:11:7f:b3:d9:76:fe:b3:e4:8e:3b:63:81:e1: 6b:8a:31:f2:71:21:58:f4:fd:e0:f4:80:4c:10:12: 63:2a:4d:5a:a4:1a:82:ca:7f:b7:0c:de:2e:c4:45: 29:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2A:1D:45:BB:CD:78:C1:69:1C:87:4A:59:3B:49:8F:A1:3B:54:C8 X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b6:f6:9f:aa:5b:d1:27:4f:83:22:30:e3:02:76:3c:67:4a: 14:77:15:c3:4e:b3:28:eb:b3:2b:24:1c:95:fe:ad:7d:a1:29: 38:a8:72:3f:f6:6a:b1:21:8f:ba:4f:72:22:4c:7c:ae:69:59: 91:c2:3d:5e:ed:92:41:de:33:52:b4:99:0c:e0:6d:a1:c1:3b: c2:73:06:25:ef:33:ae:64:d6:e4:64:69:09:6a:02:e5:e4:ae: a7:18:36:f8:9c:22:dd:74:f4:97:99:f5:a0:69:ea:00:70:4d: a5:a9:ef:a5:ed:e0:eb:72:df:a7:a1:6c:de:2c:ab:b4:af:a8: 4d:66:b6:fd:e6:b9:4c:1c:c4:78:0c:a1:14:d1:89:01:3a:ee: 4c:79:f2:1d:10:c2:a4:42:f4:d9:a2:7b:34:9c:01:6a:16:9c: a1:ad:f2:f0:4b:f8:90:0e:d4:ed:9d:3b:de:09:e9:d9:56:44: 53:6b:03:dc:4a:45:20:79:8f:22:c3:b0:e9:6b:05:b7:85:45: e4:13:4e:97:c6:b7:a6:82:4a:53:58:ce:df:3f:fb:37:c1:07: 83:8f:07:f5:4f:b3:15:d0:54:fc:80:2a:e9:f5:45:18:2c:2c: 85:58:e3:be:0e:ca:38:41:84:2f:34:16:76:00:c5:32:47:98: 42:54:63:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUwODIyMTY1NDA4WhcNMjUwODI5MTY1NDA4WjAYMRYwFAYD VQQDEw02OGE4YTBiMC1lMDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wcH28E1N/tFIbh/DdWc5aDen66nmTN0QQYGEm9FUigT6cZsNrQF0d1+3cYj F+W3bg8xmqgyoecYStjPQhs2ZvO7pjvRoRTC7xCxpt0tZf8oUiksMDrp5rYdruCV bLhgCEGKxSw4UFNOEqw5ijpK6fxx00RlJlOSOgGPwfCY382ghL2mxQJrGD0Dh/Q4 8M6a0h2czEbcLfzoQOZq0PCm9fQaVRSU6NLLaVeUGXvct2l7s419WCCIm+32W1kZ bGdlk7TafRBpEVvPXxUYgVqMzPeKxhF/s9l2/rPkjjtjgeFrijHycSFY9P3g9IBM EBJjKk1apBqCyn+3DN4uxEUpIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAqHUW7 zXjBaRyHSlk7SY+hO1TIMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJtvafqlvRJ0+DIjDjAnY8Z0oUdxXDTrMo67MrJByV/q19oSk4qHI/ 9mqxIY+6T3IiTHyuaVmRwj1e7ZJB3jNStJkM4G2hwTvCcwYl7zOuZNbkZGkJagLl 5K6nGDb4nCLddPSXmfWgaeoAcE2lqe+l7eDrct+noWzeLKu0r6hNZrb95rlMHMR4 DKEU0YkBOu5MefIdEMKkQvTZons0nAFqFpyhrfLwS/iQDtTtnTveCenZVkRTawPc SkUgeY8iw7DpawW3hUXkE06XxremgkpTWM7fP/s3wQeDjwf1T7MV0FT8gCrp9UUY LCyFWOO+Dso4QYQvNBZ2AMUyR5hCVGME -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:20 2025 by rpki-client