$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft File: SXppmDQJrXDCF1ZAccz1vjTFG8c.mft (raw, json) Hash identifier: owcIO5bHoFGBwUU+Sih6dg564vap7+KFz5er3yEFUMw= Subject key identifier: D0:0B:28:9E:05:25:87:19:25:37:9E:C1:86:85:D2:DD:14:0D:1B:57 Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft Manifest number: 0490 Signing time: Sat 23 Aug 2025 00:16:08 +0000 Manifest this update: Sat 23 Aug 2025 00:16:08 +0000 Manifest next update: Sat 30 Aug 2025 00:16:07 +0000 Files and hashes: 1: SXppmDQJrXDCF1ZAccz1vjTFG8c.crl (hash: LKTiMUNFW1QMluqmDQlCLLyntrFsfP4Cs/ohDFjyBkQ=) 2: E9237B16683211EDA8B5DD35C4F9AE02.roa (hash: m/W09ZD2DgnbOhKrF8d5SNMRuuUCLsB529DhjnozbkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C751F, serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Validity Not Before: Aug 23 00:16:08 2025 GMT Not After : Aug 30 00:16:07 2025 GMT Subject: CN=68a90848-b8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:72:1d:81:55:5b:3f:76:38:2c:68:6b:eb:fe: f9:51:52:d2:28:6b:f8:6e:b3:4e:c4:b9:65:19:6a: 3c:97:70:71:01:14:19:0f:29:df:73:e9:d7:5c:e8: d5:ca:ff:e8:be:53:0b:b0:75:b1:64:41:ef:2d:54: 2e:5b:0f:aa:4f:29:66:75:3f:65:95:05:2f:d3:f9: e2:26:c5:9d:94:5f:14:92:2e:61:82:86:51:ea:a2: ad:fe:60:75:1d:96:3b:54:53:a6:19:d2:3b:69:18: 84:03:8c:55:bc:af:0f:16:ea:0d:2f:7b:95:8f:af: 96:ce:45:3f:76:aa:3f:22:d8:ce:8b:03:53:ee:67: 6b:8a:cd:9d:32:cb:4f:14:31:d5:3a:4f:49:0b:4d: e2:40:08:ce:2f:4c:3b:1e:eb:b8:69:0e:c1:f7:73: a3:b6:4f:0d:7e:38:fd:fd:4c:87:a8:b2:53:e9:1e: 8e:de:90:40:4f:ef:6c:d3:00:ce:5e:1c:c3:a7:a6: c7:5a:e2:27:75:49:35:80:9b:4d:cc:f0:ec:03:38: 59:06:40:4c:db:a8:86:85:81:7d:ba:9c:79:81:40: 54:7b:08:e9:e1:da:98:3f:a8:90:41:53:16:55:82: 62:0d:72:9d:11:db:ae:43:29:af:65:01:83:8e:78: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0B:28:9E:05:25:87:19:25:37:9E:C1:86:85:D2:DD:14:0D:1B:57 X509v3 Authority Key Identifier: keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:d6:2b:5c:4e:53:56:dc:9d:0a:a6:48:0b:58:37:4e:d9:9e: 89:50:39:0d:3d:3b:1c:b6:d8:80:f7:6f:88:5c:45:58:2f:98: 8c:44:24:35:28:84:91:07:6b:c3:d7:ad:cd:56:d0:8d:5e:14: 77:27:45:78:d3:17:1e:84:90:0e:6c:4c:e3:c1:b1:13:9b:c1: 03:5b:06:17:e1:e2:5a:b7:b7:9e:98:b4:06:31:b3:86:88:aa: 25:05:9d:22:3d:a4:d1:36:3d:cc:a6:c4:ec:68:df:c5:70:a9: 56:1f:87:b1:8e:08:43:11:a9:9a:a5:af:97:ed:e3:f2:2c:0e: 62:6a:1c:46:ec:8c:8f:e1:18:ea:3c:3f:28:7a:40:d8:df:4e: 3e:18:ea:92:83:64:5f:f6:ba:84:35:81:e2:da:a8:a3:99:a1: 59:99:04:fd:70:e0:92:8b:53:eb:f5:de:e2:a3:e9:61:96:53: 23:07:06:c4:b5:a9:63:ad:20:0f:94:79:43:f5:86:3d:d5:d6: 2b:35:e5:1b:15:05:44:5e:1b:99:f6:9d:e1:6d:ef:f2:cb:45: d2:78:14:60:38:37:68:00:9e:6a:9f:2e:a9:95:3b:05:74:ce: bb:bd:88:88:2b:2f:07:7d:c3:a6:68:29:4d:ac:d3:8a:7d:92: 23:eb:71:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc1MUYxMTAvBgNVBAUTKDQ5N0E2OTk4MzQwOUFENzBDMjE3NTY0MDcxQ0NGNUJF MzRDNTFCQzcwHhcNMjUwODIzMDAxNjA4WhcNMjUwODMwMDAxNjA3WjAYMRYwFAYD VQQDEw02OGE5MDg0OC1iOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XIdgVVbP3Y4LGhr6/75UVLSKGv4brNOxLllGWo8l3BxARQZDynfc+nXXOjV yv/ovlMLsHWxZEHvLVQuWw+qTylmdT9llQUv0/niJsWdlF8Uki5hgoZR6qKt/mB1 HZY7VFOmGdI7aRiEA4xVvK8PFuoNL3uVj6+WzkU/dqo/ItjOiwNT7mdris2dMstP FDHVOk9JC03iQAjOL0w7Huu4aQ7B93Ojtk8Nfjj9/UyHqLJT6R6O3pBAT+9s0wDO XhzDp6bHWuIndUk1gJtNzPDsAzhZBkBM26iGhYF9upx5gUBUewjp4dqYP6iQQVMW VYJiDXKdEduuQymvZQGDjngnhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNALKJ4F JYcZJTeewYaF0t0UDRtXMB8GA1UdIwQYMBaAFEl6aZg0Ca1wwhdWQHHM9b40xRvH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzUxRi8xODM5ODFEMjUx ODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJYRENGMVpBY2N6MXZqVEZH OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYcHBtRFFKclhEQ0YxWkFjY3oxdmpURkc4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzUxRi8xODM5ODFEMjUxODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJY RENGMVpBY2N6MXZqVEZHOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz1itcTlNW3J0KpkgLWDdO2Z6JUDkNPTscttiA92+IXEVYL5iMRCQ1 KISRB2vD163NVtCNXhR3J0V40xcehJAObEzjwbETm8EDWwYX4eJat7eemLQGMbOG iKolBZ0iPaTRNj3MpsTsaN/FcKlWH4exjghDEamapa+X7ePyLA5iahxG7IyP4Rjq PD8oekDY304+GOqSg2Rf9rqENYHi2qijmaFZmQT9cOCSi1Pr9d7io+lhllMjBwbE taljrSAPlHlD9YY91dYrNeUbFQVEXhuZ9p3hbe/yy0XSeBRgODdoAJ5qny6plTsF dM67vYiIKy8HfcOmaClNrNOKfZIj63GS -----END CERTIFICATE-----Generated at Sat Aug 23 13:52:27 2025 by rpki-client