$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft File: scWMB4UVntc2lq-zEtI1z0DzxEE.mft (raw, json) Hash identifier: /pl2fO5/ZL2/LJwqgz5YkjHV/mfGoM26neOLBWmnrvc= Subject key identifier: FE:C7:F6:8D:51:05:F1:E4:88:A4:04:9F:B1:93:78:23:D0:BC:AF:0B Authority key identifier: B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41 Certificate issuer: /CN=A91D6DBD/serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft Manifest number: 0155 Signing time: Sat 23 Aug 2025 04:18:07 +0000 Manifest this update: Sat 23 Aug 2025 04:18:07 +0000 Manifest next update: Sat 30 Aug 2025 04:18:07 +0000 Files and hashes: 1: scWMB4UVntc2lq-zEtI1z0DzxEE.crl (hash: YwX5kAjPBB03mqbxCjbOyBgRq+9amSJzg2bg7736L5o=) 2: FA39CA70790E11EE86665E43C4F9AE02.roa (hash: PywpmG3Ulp9yYEUj3QCP+G6Bg3pUo/7QBSMXR75Q4mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD, serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441 Validity Not Before: Aug 23 04:18:07 2025 GMT Not After : Aug 30 04:18:07 2025 GMT Subject: CN=68a940ff-8e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:90:6a:ca:4b:3a:ce:6b:05:ad:23:66:fd: aa:c0:c9:38:ab:1b:53:c6:f7:b1:7a:a1:b3:16:3b: b4:d9:27:60:38:63:6a:3a:c1:5e:38:89:a8:55:05: 16:b2:46:e9:42:f5:53:37:cf:9f:17:3b:28:71:55: 9e:d4:34:0d:60:e2:b1:fc:15:7f:b1:6c:5a:d9:77: 53:94:56:bd:5f:d9:a9:a4:0a:e3:ba:13:2a:5e:be: 04:df:f0:96:63:21:ce:71:7f:8d:82:0c:dc:d4:4d: 97:65:1c:9f:dc:6e:34:d3:86:8f:09:3f:52:8b:64: cc:47:44:17:f9:06:3a:8a:62:99:c9:b4:9d:f3:42: 4b:c3:af:46:f2:14:ea:44:31:5e:e9:4e:fa:e5:da: 90:d2:ee:37:b3:37:0f:59:28:8a:0d:d3:e6:bf:d0: 6a:33:93:61:53:9e:3d:e6:b0:c2:3e:3e:09:9c:43: 36:50:26:d2:ab:4a:d9:9e:72:1c:f4:44:e8:ac:b2: 90:1f:59:7e:97:5f:d5:4e:8d:01:00:00:d0:bc:04: dd:c3:92:ca:87:7f:92:0b:ee:d5:67:47:4e:36:50: c2:ae:00:8d:d9:e7:a3:6d:e0:a6:63:b6:0d:46:ce: 53:37:76:16:1a:a8:52:d2:00:7d:19:f8:5e:1f:9d: 68:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C7:F6:8D:51:05:F1:E4:88:A4:04:9F:B1:93:78:23:D0:BC:AF:0B X509v3 Authority Key Identifier: keyid:B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a4:41:9e:61:aa:da:a2:5b:ba:8f:28:7b:03:77:01:d5:34: ed:17:da:65:af:65:90:0f:7e:17:aa:a5:cc:c4:ea:ac:63:a9: 70:36:49:b0:b8:12:a6:03:e6:e3:77:7c:14:84:a1:6e:ad:17: 7a:f8:7c:32:23:d3:2d:ea:48:ba:8d:be:a4:4e:0f:6b:c8:8e: a5:94:1a:25:b9:74:79:48:3c:a8:cc:27:b2:90:13:b5:75:b6: a2:5b:21:39:07:61:61:ac:a9:3a:2d:b5:b2:d5:bb:39:dd:f3: 5c:53:28:9a:94:40:df:a5:33:47:aa:df:0e:79:b5:43:20:77: 1b:2d:fa:13:84:b0:c3:27:b1:8f:0a:d9:3c:e6:38:48:88:16: 7a:50:d0:92:00:58:fd:12:fa:b6:e3:33:09:03:6b:10:04:d6: 28:53:d4:20:7b:a1:92:fe:46:55:25:71:de:d0:70:0b:2a:ca: 18:17:f4:ce:26:30:9d:4f:04:50:e8:b6:d4:91:65:03:4e:96: 85:5d:2c:b2:d3:2b:8f:95:3b:23:2d:8f:bf:84:ff:8c:77:23: 1c:19:11:f2:ba:f1:21:37:9f:e2:52:d1:16:32:13:63:8d:7a: e2:86:b5:ff:0e:f0:ec:f3:41:2b:5c:1a:05:a3:1d:f8:ce:3a: 67:6a:81:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKEIxQzU4QzA3ODUxNTlFRDczNjk2QUZCMzEyRDIzNUNG NDBGM0M0NDEwHhcNMjUwODIzMDQxODA3WhcNMjUwODMwMDQxODA3WjAYMRYwFAYD VQQDEw02OGE5NDBmZi04ZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+OQaspLOs5rBa0jZv2qwMk4qxtTxvexeqGzFju02SdgOGNqOsFeOImoVQUW skbpQvVTN8+fFzsocVWe1DQNYOKx/BV/sWxa2XdTlFa9X9mppArjuhMqXr4E3/CW YyHOcX+Nggzc1E2XZRyf3G4004aPCT9Si2TMR0QX+QY6imKZybSd80JLw69G8hTq RDFe6U765dqQ0u43szcPWSiKDdPmv9BqM5NhU5495rDCPj4JnEM2UCbSq0rZnnIc 9ETorLKQH1l+l1/VTo0BAADQvATdw5LKh3+SC+7VZ0dONlDCrgCN2eejbeCmY7YN Rs5TN3YWGqhS0gB9GfheH51oOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7H9o1R BfHkiKQEn7GTeCPQvK8LMB8GA1UdIwQYMBaAFLHFjAeFFZ7XNpavsxLSNc9A88RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC8wMkFBNDk1MDc5 MEExMUVFOTlFREQxMUZDNEY5QUUwMi9zY1dNQjRVVm50YzJscS16RXRJMXowRHp4 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjV01CNFVWbnRjMmxxLXpFdEkxejBEenhFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC8wMkFBNDk1MDc5MEExMUVFOTlFREQxMUZDNEY5QUUwMi9zY1dNQjRVVm50 YzJscS16RXRJMXowRHp4RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSpEGeYaraolu6jyh7A3cB1TTtF9plr2WQD34XqqXMxOqsY6lwNkmw uBKmA+bjd3wUhKFurRd6+HwyI9Mt6ki6jb6kTg9ryI6llBoluXR5SDyozCeykBO1 dbaiWyE5B2FhrKk6LbWy1bs53fNcUyialEDfpTNHqt8OebVDIHcbLfoThLDDJ7GP Ctk85jhIiBZ6UNCSAFj9Evq24zMJA2sQBNYoU9Qge6GS/kZVJXHe0HALKsoYF/TO JjCdTwRQ6LbUkWUDTpaFXSyy0yuPlTsjLY+/hP+MdyMcGRHyuvEhN5/iUtEWMhNj jXrihrX/DvDs80ErXBoFox34zjpnaoHx -----END CERTIFICATE-----Generated at Sun Aug 24 03:04:07 2025 by rpki-client