$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft File: SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json) Hash identifier: 4SkUW1J3Ep/miqVfFsp+oSCxt3kWIBLfS5A1stPOVEo= Subject key identifier: 26:38:C6:CC:22:B8:03:8D:64:97:CB:73:66:36:9B:2F:B7:2E:F9:2F Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F Certificate issuer: /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Certificate serial: 1FF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft Manifest number: 1FE9 Signing time: Fri 22 Aug 2025 16:01:48 +0000 Manifest this update: Fri 22 Aug 2025 16:01:48 +0000 Manifest next update: Fri 29 Aug 2025 16:01:48 +0000 Files and hashes: 1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: l5BDzDuXQFOmo8OHiBE6IeM3GlJKV90XrUjQdY+esdc=) 2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: Tkmf4L8GEt+Ymff0VMzuLeDCbIi7tjYtfIPQH26ZWWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8181 (0x1ff5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Validity Not Before: Aug 22 16:01:48 2025 GMT Not After : Aug 29 16:01:48 2025 GMT Subject: CN=68a8946c-0d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:6b:ce:51:f0:c9:78:a3:7c:34:1d:85:7d: c3:5f:48:d2:5e:e2:e2:5a:ba:68:72:2d:a7:cb:d5: 7c:c1:56:5f:76:3e:f1:10:64:4f:5c:7d:22:24:c3: 2b:1d:ed:47:5d:bc:2f:77:01:1f:ae:bd:f5:ad:13: 91:47:2a:e9:b1:7a:3c:d6:0f:26:70:86:9e:18:4c: 83:d9:13:c2:6d:71:1a:52:71:2b:d6:d1:9c:83:32: 56:66:03:48:fa:42:09:5c:c4:d7:c8:72:c3:15:07: 4b:e8:b8:51:e2:b7:00:d4:f6:c0:7a:3d:c7:77:ac: aa:9a:b5:c2:b0:50:ff:35:fc:75:38:4e:ec:37:3c: e0:5b:24:bf:a6:78:a0:ad:11:91:7e:54:b4:9d:9a: 14:19:bd:19:ed:06:69:c1:d0:a2:7c:f3:e5:d2:dc: 33:91:b8:58:06:2d:bf:29:49:aa:ae:78:d0:0e:7c: 3d:a7:c2:2b:61:b3:2e:7b:be:40:6e:e3:f5:d8:98: 83:5b:3e:10:78:9d:cb:85:bc:d9:00:c5:6a:58:58: fb:47:3c:2b:8b:b4:c1:8c:13:e2:36:4b:18:b2:e6: 9e:70:ab:1e:f6:bc:ca:92:a9:77:67:b5:1d:74:3a: e9:66:7b:c9:22:bd:4e:8a:06:16:68:3c:20:8a:af: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:38:C6:CC:22:B8:03:8D:64:97:CB:73:66:36:9B:2F:B7:2E:F9:2F X509v3 Authority Key Identifier: keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ad:b3:af:e1:05:7f:46:40:4d:56:d6:99:a5:63:4c:65:4b: 00:fe:ed:30:fd:c8:29:04:d8:d0:8a:4a:d7:ec:49:78:14:55: 58:83:29:39:dc:98:d6:65:be:7f:70:56:d7:39:39:10:8e:04: 06:be:b2:e1:e1:d7:50:67:8c:4d:a3:d2:1e:9c:fb:9c:68:99: 7b:44:c0:dc:76:70:64:62:b1:b4:90:5d:cb:3a:17:f9:1c:74: 2e:04:db:a9:f3:b0:93:4f:00:90:e0:c5:cc:b3:bf:37:26:9b: 90:76:77:e1:ef:ea:45:42:70:5c:fa:90:ea:ab:62:d1:04:76: b1:c2:0e:87:90:dd:7b:8f:66:51:e3:09:33:25:1b:68:3c:3e: d6:76:d6:04:ca:c9:b7:33:3f:87:71:0a:91:e6:c4:8c:e1:9b: 9c:ab:0d:3d:92:e0:65:6d:bb:49:48:62:42:33:74:18:57:15: 33:b0:a6:ea:02:83:d2:b6:44:b9:8c:bc:bf:24:ce:00:d4:08: 85:cd:2f:57:e7:6d:8d:0a:dc:65:33:4c:be:9f:62:8b:86:db: bf:1d:c1:0d:2a:55:82:6e:76:f2:3a:e8:da:ee:c9:db:6a:8e: ba:df:56:ef:50:8e:03:99:96:20:72:83:98:2f:b3:2e:f9:18: db:a9:53:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQTkxMTAvBgNVBAUTKDRBNTc1RjJCRjMzMTI0NjJGODU2NDYxQUU5REREMEEz ODQ0QUJEMkYwHhcNMjUwODIyMTYwMTQ4WhcNMjUwODI5MTYwMTQ4WjAYMRYwFAYD VQQDEw02OGE4OTQ2Yy0wZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyhrzlHwyXijfDQdhX3DX0jSXuLiWrpoci2ny9V8wVZfdj7xEGRPXH0iJMMr He1HXbwvdwEfrr31rRORRyrpsXo81g8mcIaeGEyD2RPCbXEaUnEr1tGcgzJWZgNI +kIJXMTXyHLDFQdL6LhR4rcA1PbAej3Hd6yqmrXCsFD/Nfx1OE7sNzzgWyS/pnig rRGRflS0nZoUGb0Z7QZpwdCifPPl0twzkbhYBi2/KUmqrnjQDnw9p8IrYbMue75A buP12JiDWz4QeJ3LhbzZAMVqWFj7Rzwri7TBjBPiNksYsuaecKse9rzKkql3Z7Ud dDrpZnvJIr1OigYWaDwgiq/ZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY4xswi uAONZJfLc2Y2my+3LvkvMB8GA1UdIwQYMBaAFEpXXyvzMSRi+FZGGund0KOESr0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBOS84M0MzMTEwODMz NUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpHTDRWa1lhNmQzUW80Ukt2 UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NsZGZLX014SkdMNFZrWWE2ZDNRbzRSS3ZTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBOS84M0MzMTEwODMzNUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpH TDRWa1lhNmQzUW80Ukt2UzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2rbOv4QV/RkBNVtaZpWNMZUsA/u0w/cgpBNjQikrX7El4FFVYgyk5 3JjWZb5/cFbXOTkQjgQGvrLh4ddQZ4xNo9IenPucaJl7RMDcdnBkYrG0kF3LOhf5 HHQuBNup87CTTwCQ4MXMs783JpuQdnfh7+pFQnBc+pDqq2LRBHaxwg6HkN17j2ZR 4wkzJRtoPD7WdtYEysm3Mz+HcQqR5sSM4Zucqw09kuBlbbtJSGJCM3QYVxUzsKbq AoPStkS5jLy/JM4A1AiFzS9X522NCtxlM0y+n2KLhtu/HcENKlWCbnbyOuja7snb ao6631bvUI4DmZYgcoOYL7Mu+RjbqVOY -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:58 2025 by rpki-client