$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json) Hash identifier: CT5WKVgVjgt9vUSxyBx8SakpliCnwigdZ3qy8wlPd7I= Subject key identifier: 34:4B:A8:7B:B8:D2:81:98:0A:66:54:D8:EF:21:91:2B:AD:C6:C1:64 Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Certificate serial: 0784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft Manifest number: 077F Signing time: Fri 22 Aug 2025 21:38:28 +0000 Manifest this update: Fri 22 Aug 2025 21:38:28 +0000 Manifest next update: Fri 29 Aug 2025 21:38:28 +0000 Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: hrCP522YLJWzmE2LXpsASENCVWRzBOD6EHR/yCQMM44=) 2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1924 (0x784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Validity Not Before: Aug 22 21:38:28 2025 GMT Not After : Aug 29 21:38:28 2025 GMT Subject: CN=68a8e354-eee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:08:02:a1:57:14:5d:d7:6e:11:8c:66:4b:f8: f0:8f:f7:4f:ec:1d:56:e0:4c:62:99:13:89:7c:1f: 4a:e1:97:4b:b0:92:44:08:e9:09:cf:ec:81:19:78: 20:02:bf:92:d1:08:18:5d:9e:99:44:a2:de:66:53: a1:2f:7d:1b:8c:2d:64:64:b9:84:0b:6f:d8:26:0c: c5:9b:70:79:95:23:6f:32:5a:9d:f1:23:99:40:ea: 48:75:a0:03:6f:b9:57:0b:8e:2e:f3:10:1b:c9:55: 85:11:b3:4e:fc:9a:80:78:f2:9b:63:c4:15:bf:3b: b8:79:54:6c:29:1e:a8:f9:0d:aa:7a:9c:46:ef:b1: 0c:1d:38:ea:ba:70:59:6d:65:8f:cb:30:71:8f:46: e3:2f:cc:77:84:60:46:0e:b0:72:0d:b7:ea:ff:6d: d1:24:89:67:92:79:29:47:97:9b:59:9c:f9:ff:17: e6:4e:9c:cd:60:82:b7:9a:56:43:d4:2a:9a:c5:d0: 22:2b:c8:44:9b:43:9e:2e:6a:33:12:1b:fd:42:92: 0a:25:dc:5e:28:cf:6c:e4:75:1a:d0:35:22:7a:2e: 8e:09:dc:74:93:30:4b:fb:56:19:6b:8f:f8:d7:60: f2:79:33:4b:7b:ef:ee:de:73:8f:6d:b5:88:aa:e1: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4B:A8:7B:B8:D2:81:98:0A:66:54:D8:EF:21:91:2B:AD:C6:C1:64 X509v3 Authority Key Identifier: keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:e7:40:79:f7:b2:2f:ae:3f:a8:fd:24:3f:5a:af:99:5b:32: cc:ac:dd:be:eb:5d:8f:d1:f6:31:db:87:c6:da:bd:b3:fa:9c: ab:b4:1a:7c:fc:5f:b8:1c:6f:8b:2f:65:8b:d3:03:24:4a:9c: 94:f9:75:40:7e:7e:f7:61:a9:a0:08:42:24:d6:e5:6f:e8:0f: 87:7b:3b:2e:a1:21:48:48:75:3f:82:b8:a1:42:a3:df:5d:66: b2:4d:73:6a:0d:17:74:d3:f8:59:68:e6:f7:c1:23:45:0c:ea: 20:a9:ac:f9:92:89:aa:2a:fb:59:8e:38:43:7f:5c:54:c2:5d: ee:83:01:7d:59:fa:95:2f:16:f4:b2:c5:d0:63:00:cd:f6:e1: b9:cc:aa:18:08:ed:ba:87:36:34:50:a7:3e:7a:1e:56:46:8f: 80:84:00:86:f5:b7:4b:e2:cf:e4:bb:c9:ea:7f:1f:be:1c:79: b4:88:91:00:56:f1:da:bb:a9:60:e5:49:3c:7c:36:64:36:7c: f4:da:f2:54:8f:78:35:12:f3:9e:b2:92:24:d7:a3:9b:f5:17: f2:de:8e:3d:a9:bd:b8:81:3a:59:aa:fb:43:2b:ec:30:59:0b: 84:05:b5:b4:db:d4:f3:cc:7d:aa:24:63:e4:4c:64:89:2d:bc: d8:d1:0c:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1 Qjg4MDk4RDEwHhcNMjUwODIyMjEzODI4WhcNMjUwODI5MjEzODI4WjAYMRYwFAYD VQQDEw02OGE4ZTM1NC1lZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ggCoVcUXdduEYxmS/jwj/dP7B1W4EximROJfB9K4ZdLsJJECOkJz+yBGXgg Ar+S0QgYXZ6ZRKLeZlOhL30bjC1kZLmEC2/YJgzFm3B5lSNvMlqd8SOZQOpIdaAD b7lXC44u8xAbyVWFEbNO/JqAePKbY8QVvzu4eVRsKR6o+Q2qepxG77EMHTjqunBZ bWWPyzBxj0bjL8x3hGBGDrByDbfq/23RJIlnknkpR5ebWZz5/xfmTpzNYIK3mlZD 1CqaxdAiK8hEm0OeLmozEhv9QpIKJdxeKM9s5HUa0DUiei6OCdx0kzBL+1YZa4/4 12DyeTNLe+/u3nOPbbWIquHZXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRLqHu4 0oGYCmZU2O8hkSutxsFkMB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl50B597Ivrj+o/SQ/Wq+ZWzLMrN2+612P0fYx24fG2r2z+pyrtBp8 /F+4HG+LL2WL0wMkSpyU+XVAfn73YamgCEIk1uVv6A+HezsuoSFISHU/grihQqPf XWayTXNqDRd00/hZaOb3wSNFDOogqaz5komqKvtZjjhDf1xUwl3ugwF9WfqVLxb0 ssXQYwDN9uG5zKoYCO26hzY0UKc+eh5WRo+AhACG9bdL4s/ku8nqfx++HHm0iJEA VvHau6lg5Uk8fDZkNnz02vJUj3g1EvOespIk16Ob9Rfy3o49qb24gTpZqvtDK+ww WQuEBbW029TzzH2qJGPkTGSJLbzY0QyO -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:22 2025 by rpki-client