$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: W1oesk9249HX/MdNjj7Tg994HbuuOs4M10JAEzoC5kg= Subject key identifier: 8C:88:4F:4A:9D:F4:80:C9:28:F3:85:51:F9:69:1E:27:17:B3:DD:CE Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 04E7 Signing time: Sat 23 Aug 2025 00:01:45 +0000 Manifest this update: Sat 23 Aug 2025 00:01:45 +0000 Manifest next update: Sat 30 Aug 2025 00:01:45 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: LdtQm90nRzbgNeb+YGfWrVu+xuyOkEnTWHN3qw5UGz8=) 2: 1BEFBED451B911F097C15C49C4F9AE02.roa (hash: ZvucB2E7NeTigUiBDA7qRL8qFkVVJvyXSrzFIulP+x8=) 3: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: 00gQlkZJ/La3W11cygPUEyOgfEz6qTJK4E6QUbIb+4w=) 4: 1CC78D4651B911F097C15C49C4F9AE02.roa (hash: CBpPhJ6pPqhVc/HJrSFukBxQwV65YTwQkZm/veGYg0U=) 5: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: StmcDPPzK2yilWPNElLi3+ESljyQBtG5nEZLldO1WuA=) 6: 1D854DF451B911F097C15C49C4F9AE02.roa (hash: xaxaySmnWqQ+K7erniFCyus+l9/HXrQPK69GxtJF7qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Aug 23 00:01:45 2025 GMT Not After : Aug 30 00:01:45 2025 GMT Subject: CN=68a904e9-3ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:ba:19:1b:c5:98:ec:dd:08:a3:b7:a2:ed: 77:14:b0:7b:a9:85:3d:2d:af:47:5e:02:c0:51:c5: 6d:6e:a3:46:97:fe:7a:56:2d:29:1b:d2:b8:da:d8: ab:da:f4:22:e6:1c:d6:42:4f:7e:a9:f5:6b:e6:c3: 6b:f4:3f:57:1b:3f:5a:75:59:4c:f3:c6:7c:5f:89: a9:c8:8a:3d:e7:8e:6a:cc:21:7c:a3:9b:cb:48:45: 11:8d:37:ea:6f:c4:41:bb:30:2e:e0:c8:c9:71:e9: fb:8d:70:7e:b6:29:9f:9d:51:f4:a2:3b:24:74:ee: 2b:b2:0f:8f:98:b7:da:c0:c5:2f:9d:5d:eb:e3:e1: 14:09:5d:39:2d:20:af:ca:be:ce:1f:fc:ac:d2:d3: 41:de:d4:58:95:66:31:05:b0:7e:48:d8:b7:d1:4d: c4:17:e6:85:0a:eb:ac:03:47:9c:2a:89:7e:fb:b9: 33:11:65:98:9d:25:71:98:c1:16:d0:7c:4a:b0:ca: 37:7e:bc:45:9b:8b:f0:3a:0b:02:cb:ed:a0:7d:37: 31:0b:fe:eb:3a:5f:93:30:b8:87:5e:6b:46:e8:cb: dc:3b:af:cc:85:86:41:52:00:7a:4c:d8:5f:ba:82: 02:fb:81:da:46:59:57:b3:40:9d:e5:66:92:ab:c9: 7b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:88:4F:4A:9D:F4:80:C9:28:F3:85:51:F9:69:1E:27:17:B3:DD:CE X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:12:60:f1:c2:8b:09:ec:5f:ab:d4:a4:ea:3e:4a:0d:70:fd: d5:fb:f4:f1:de:6c:79:27:12:63:3d:7a:ae:07:14:be:77:59: d5:57:af:d1:b5:19:9a:9c:ca:cb:46:8c:85:a1:31:c0:a1:94: 56:c1:dd:7a:47:dd:68:d1:bb:37:0c:ea:04:51:e9:56:10:de: 49:4c:61:02:c0:97:c2:4a:a7:7d:a6:02:43:9c:e1:84:bd:63: 5a:d8:36:e0:c8:33:fa:05:8c:90:5b:f5:3c:1a:ef:20:ce:8f: aa:74:ab:0c:7c:b0:51:22:9d:87:d6:0f:a5:2a:7b:90:59:bb: 73:e1:d1:3a:45:e4:10:3b:f1:0d:c0:f4:16:93:85:76:40:c4: ff:c6:5f:b0:81:e3:4b:ae:ce:c3:c7:1e:92:6e:a1:54:e7:12: 4f:fd:80:d8:e8:6e:27:d1:47:10:61:29:49:c4:db:36:12:3c: 43:7d:7b:f6:9a:8e:41:7a:2b:ef:77:79:08:61:19:c4:ef:42: 16:d1:f4:f9:33:4c:65:77:16:91:89:b4:86:30:8e:b8:af:6a: d5:d6:c3:1a:dc:5a:12:5d:d8:27:6d:2e:0d:56:1f:f3:d9:98: eb:cf:6f:f5:77:99:f7:1c:e8:86:10:8e:5c:a3:ea:f7:c5:f9: 1a:25:b9:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUwODIzMDAwMTQ1WhcNMjUwODMwMDAwMTQ1WjAYMRYwFAYD VQQDEw02OGE5MDRlOS0zY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFW6GRvFmOzdCKO3ou13FLB7qYU9La9HXgLAUcVtbqNGl/56Vi0pG9K42tir 2vQi5hzWQk9+qfVr5sNr9D9XGz9adVlM88Z8X4mpyIo9545qzCF8o5vLSEURjTfq b8RBuzAu4MjJcen7jXB+timfnVH0ojskdO4rsg+PmLfawMUvnV3r4+EUCV05LSCv yr7OH/ys0tNB3tRYlWYxBbB+SNi30U3EF+aFCuusA0ecKol++7kzEWWYnSVxmMEW 0HxKsMo3frxFm4vwOgsCy+2gfTcxC/7rOl+TMLiHXmtG6MvcO6/MhYZBUgB6TNhf uoIC+4HaRllXs0Cd5WaSq8l7NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyIT0qd 9IDJKPOFUflpHicXs93OMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjEmDxwosJ7F+r1KTqPkoNcP3V+/Tx3mx5JxJjPXquBxS+d1nVV6/R tRmanMrLRoyFoTHAoZRWwd16R91o0bs3DOoEUelWEN5JTGECwJfCSqd9pgJDnOGE vWNa2DbgyDP6BYyQW/U8Gu8gzo+qdKsMfLBRIp2H1g+lKnuQWbtz4dE6ReQQO/EN wPQWk4V2QMT/xl+wgeNLrs7Dxx6SbqFU5xJP/YDY6G4n0UcQYSlJxNs2EjxDfXv2 mo5Beivvd3kIYRnE70IW0fT5M0xldxaRibSGMI64r2rV1sMa3FoSXdgnbS4NVh/z 2Zjrz2/1d5n3HOiGEI5co+r3xfkaJbla -----END CERTIFICATE-----Generated at Sat Aug 23 10:26:13 2025 by rpki-client