$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: 6+/qmhckdVtyoP9T/kdNii1lqTJSm/MP+5dh8aOWrIE= Subject key identifier: 30:76:DB:40:48:D5:4F:43:C4:7A:31:A4:C6:4E:D7:F7:DD:81:0B:0C Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0CCC Signing time: Fri 22 Aug 2025 18:16:15 +0000 Manifest this update: Fri 22 Aug 2025 18:16:15 +0000 Manifest next update: Fri 29 Aug 2025 18:16:15 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: y5t1sv6ZfhuVZWYXMYUXNdjKhyx3ZZCoJNf6Pri+JZk=) 2: 7A89B302E7E511EFA8BD237AC4F9AE02.roa (hash: 3cZWclJtX3V6aTw+zOu2W0FHd/b2ev4flaWcS3tJ/J0=) 3: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: KypfxpsYSUZAZe6pLsx6D3j38tcpQYPu6XyVBPdIPY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Aug 22 18:16:15 2025 GMT Not After : Aug 29 18:16:15 2025 GMT Subject: CN=68a8b3ef-798e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:e5:1b:38:25:ce:d8:7a:aa:59:85:cb:f2: 37:05:15:cd:2a:fe:1e:ba:51:db:fc:d2:62:bd:63: ce:82:29:15:07:5c:e6:cc:91:42:5b:c0:ea:e4:c2: ce:9a:78:49:b2:dc:37:f9:44:5f:f1:f5:c3:da:66: bd:b3:fe:1e:88:5c:bb:ff:9a:a4:eb:1a:50:20:75: 7d:f4:96:d1:03:36:65:41:58:04:37:e0:19:9d:a3: 54:58:9c:8a:5d:71:c4:a4:d0:a5:10:25:3c:61:5b: 4e:c9:d0:11:1f:25:d5:46:78:59:f7:23:77:f8:27: fc:1f:19:33:77:3d:76:22:0b:13:87:97:a7:9f:9f: bc:d8:ab:c0:f3:69:14:8c:1c:6b:0a:9f:2e:ce:86: 29:ce:cf:47:ed:83:5e:3b:65:6c:87:ff:bf:df:e6: 83:ba:65:45:90:8c:38:49:76:f7:94:98:56:99:9e: a4:bd:24:1d:75:b4:fe:0d:f5:59:f4:a3:8b:ad:2c: fc:4f:b3:ac:40:02:18:fb:48:36:d8:cd:94:89:84: d9:42:95:af:0f:0c:ef:15:1c:70:8a:e0:d6:3d:fb: 95:ff:87:8c:a0:e8:a2:39:5f:be:7b:c6:95:0a:fa: 96:bc:c7:70:93:ea:cf:36:7a:9a:eb:21:29:b1:02: 2d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:76:DB:40:48:D5:4F:43:C4:7A:31:A4:C6:4E:D7:F7:DD:81:0B:0C X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ec:40:c9:35:01:33:28:54:0f:44:fe:c4:c3:f5:ee:d2:97: eb:2c:3e:09:cb:50:1e:c0:93:4f:7e:92:a1:84:ed:67:69:f5: 7c:1c:58:69:52:80:72:3d:6e:93:9b:21:49:c1:22:ce:82:8c: f6:0d:95:02:c3:58:0d:d6:6d:89:3a:1c:9a:70:ef:da:ba:01: 28:12:0d:b0:a7:0d:6f:3e:cd:78:8e:83:ca:e4:5c:05:f7:bf: cb:68:49:05:d7:41:c8:58:90:86:8c:66:08:14:91:f5:93:c4: 59:c9:6f:66:0b:df:2c:c5:51:da:49:cf:d0:84:2b:da:4e:0e: 2a:15:72:d9:42:73:fa:3c:54:a6:75:cb:95:d2:ad:ab:a1:07: d4:e0:92:76:dc:99:f1:79:8d:f2:6c:db:bc:10:0c:3a:54:d4: 66:9c:a7:6c:2b:7c:05:63:f4:3e:21:97:1e:96:31:25:cb:40: e8:10:27:dd:84:7d:29:50:1e:71:43:82:c0:a3:62:51:49:3a: 31:b2:a8:67:49:c1:87:87:73:56:4c:07:2f:a2:ac:19:08:1f: 4b:70:ed:51:00:9f:b1:8e:a4:51:b5:05:1d:36:bc:61:94:98: eb:b5:da:9e:bc:fe:08:78:22:c5:3a:2a:55:c0:b7:a1:82:69: 30:8c:bf:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwODIyMTgxNjE1WhcNMjUwODI5MTgxNjE1WjAYMRYwFAYD VQQDEw02OGE4YjNlZi03OThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5TlGzglzth6qlmFy/I3BRXNKv4eulHb/NJivWPOgikVB1zmzJFCW8Dq5MLO mnhJstw3+URf8fXD2ma9s/4eiFy7/5qk6xpQIHV99JbRAzZlQVgEN+AZnaNUWJyK XXHEpNClECU8YVtOydARHyXVRnhZ9yN3+Cf8Hxkzdz12IgsTh5enn5+82KvA82kU jBxrCp8uzoYpzs9H7YNeO2Vsh/+/3+aDumVFkIw4SXb3lJhWmZ6kvSQddbT+DfVZ 9KOLrSz8T7OsQAIY+0g22M2UiYTZQpWvDwzvFRxwiuDWPfuV/4eMoOiiOV++e8aV CvqWvMdwk+rPNnqa6yEpsQIt9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDB220BI 1U9DxHoxpMZO1/fdgQsMMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU7EDJNQEzKFQPRP7Ew/Xu0pfrLD4Jy1AewJNPfpKhhO1nafV8HFhp UoByPW6TmyFJwSLOgoz2DZUCw1gN1m2JOhyacO/augEoEg2wpw1vPs14joPK5FwF 97/LaEkF10HIWJCGjGYIFJH1k8RZyW9mC98sxVHaSc/QhCvaTg4qFXLZQnP6PFSm dcuV0q2roQfU4JJ23JnxeY3ybNu8EAw6VNRmnKdsK3wFY/Q+IZceljEly0DoECfd hH0pUB5xQ4LAo2JRSToxsqhnScGHh3NWTAcvoqwZCB9LcO1RAJ+xjqRRtQUdNrxh lJjrtdqevP4IeCLFOipVwLehgmkwjL8F -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:24 2025 by rpki-client