$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: VX38YPnLHXaO0Xf0Yoh7oJUdiYIunJLXfYDnUGZaDAA= Subject key identifier: 95:49:83:9B:24:A8:2B:9E:3E:9E:D3:CE:7D:4E:92:FE:76:DC:9C:5B Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 048E Signing time: Sat 23 Aug 2025 00:15:15 +0000 Manifest this update: Sat 23 Aug 2025 00:15:15 +0000 Manifest next update: Sat 30 Aug 2025 00:15:15 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: ep2o4kCqe8LsV4oyNlFWM7Ijv+2aFcJxHZot+oxnhn8=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: P2DNiNhjlpF64BsKz4nEdQOFVD1WxrPx8iOejuhEZGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: Aug 23 00:15:15 2025 GMT Not After : Aug 30 00:15:15 2025 GMT Subject: CN=68a90813-4634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:94:18:84:75:c3:ee:c7:78:fe:e9:30:b5: 5a:0e:a6:72:e6:ae:5c:6f:de:70:0c:d0:42:36:8e: a3:17:10:3f:b8:d8:d2:97:9e:38:1e:bb:7d:36:2e: 35:5a:46:e3:77:14:43:68:d4:52:e4:56:ba:c6:2a: e3:91:f2:4f:e3:4e:51:6f:14:5f:80:b5:d6:f8:a6: ca:b3:28:d7:88:eb:4b:df:db:18:07:85:13:04:47: 51:f8:fe:43:99:0b:26:e9:99:00:08:83:19:9e:51: e8:79:b0:cf:d9:2d:18:f7:ee:e9:9e:76:e9:d9:36: 33:e6:a0:68:e4:7e:ee:c4:09:c3:68:f2:ef:07:41: 88:c8:3f:ee:fd:33:91:eb:eb:6d:3d:8f:54:0d:a4: 9e:87:69:5d:e3:61:83:25:c8:a2:3c:01:e9:f6:cd: 91:6c:1c:84:dc:1f:fe:09:03:6c:c4:28:d1:aa:6b: c0:a9:8a:af:e6:97:6b:e4:5b:c3:95:17:0f:40:a1: 28:8e:3a:e4:2b:33:ee:b2:d5:12:5d:d2:aa:8c:ca: a3:3a:b9:8a:13:33:df:ae:4c:b0:7f:73:94:01:a7: c0:3a:65:ab:d5:a5:e8:d6:13:93:b2:4d:47:ce:21: b6:dd:c0:5e:ad:5c:72:4d:9e:ce:c4:5e:d4:16:60: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:49:83:9B:24:A8:2B:9E:3E:9E:D3:CE:7D:4E:92:FE:76:DC:9C:5B X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b4:50:91:05:c9:2d:d9:22:ea:32:c8:f4:38:fd:fe:88:6d: 33:58:f8:28:31:6e:cc:b5:e0:9b:d7:7b:0d:e3:bd:b2:99:3c: 39:a9:2d:42:0a:21:09:e5:d8:07:13:51:20:91:64:db:d8:3e: 84:e3:e5:f1:36:63:25:45:93:37:4a:6f:6a:18:98:cf:b0:ff: 97:df:32:fe:97:de:34:94:bf:92:d8:d3:03:eb:a5:f2:fb:ba: 8a:53:01:00:c2:11:53:cf:ae:78:ba:7d:6c:3e:17:d2:b8:2d: 96:a0:99:c3:16:61:23:f2:74:84:d8:07:cc:26:45:f7:2d:c3: 7a:5c:35:c8:61:90:bc:9c:40:a8:b3:be:e9:15:87:fd:8e:fd: 21:7c:a5:ac:ba:79:67:1a:b7:69:3b:71:5a:be:7f:37:70:56: 05:a6:51:6a:8f:f3:b7:4d:1d:68:fd:3a:67:47:cd:ae:94:d6: 7c:ee:ee:9b:3c:30:39:2d:d6:d9:9b:98:55:2f:cf:90:10:85: d0:4d:27:0d:61:5f:f5:29:6c:6e:7c:b1:49:97:9b:3a:20:c6: e9:81:18:3d:b3:d7:84:93:66:e1:96:49:a2:8f:42:13:bf:79: 92:2b:43:ca:13:04:bc:99:b6:19:4a:6a:a3:23:0c:7e:59:de: aa:8c:9c:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjUwODIzMDAxNTE1WhcNMjUwODMwMDAxNTE1WjAYMRYwFAYD VQQDEw02OGE5MDgxMy00NjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwneUGIR1w+7HeP7pMLVaDqZy5q5cb95wDNBCNo6jFxA/uNjSl544Hrt9Ni41 WkbjdxRDaNRS5Fa6xirjkfJP405RbxRfgLXW+KbKsyjXiOtL39sYB4UTBEdR+P5D mQsm6ZkACIMZnlHoebDP2S0Y9+7pnnbp2TYz5qBo5H7uxAnDaPLvB0GIyD/u/TOR 6+ttPY9UDaSeh2ld42GDJciiPAHp9s2RbByE3B/+CQNsxCjRqmvAqYqv5pdr5FvD lRcPQKEojjrkKzPustUSXdKqjMqjOrmKEzPfrkywf3OUAafAOmWr1aXo1hOTsk1H ziG23cBerVxyTZ7OxF7UFmDeGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVJg5sk qCuePp7Tzn1Okv523JxbMB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWtFCRBckt2SLqMsj0OP3+iG0zWPgoMW7MteCb13sN472ymTw5qS1C CiEJ5dgHE1EgkWTb2D6E4+XxNmMlRZM3Sm9qGJjPsP+X3zL+l940lL+S2NMD66Xy +7qKUwEAwhFTz654un1sPhfSuC2WoJnDFmEj8nSE2AfMJkX3LcN6XDXIYZC8nECo s77pFYf9jv0hfKWsunlnGrdpO3Favn83cFYFplFqj/O3TR1o/TpnR82ulNZ87u6b PDA5LdbZm5hVL8+QEIXQTScNYV/1KWxufLFJl5s6IMbpgRg9s9eEk2bhlkmij0IT v3mSK0PKEwS8mbYZSmqjIwx+Wd6qjJwq -----END CERTIFICATE-----Generated at Sun Aug 24 01:03:29 2025 by rpki-client