$ rpki-client -vvf rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft File: sc_l-mpxIskE6xEO8agpgPw9-ko.mft (raw, json) Hash identifier: p6mCqbNJ/vqKzl3WHca0BZV4vSOJXSK1P70WFgcBovw= Subject key identifier: 34:F5:69:6A:E8:63:DE:F4:FE:BE:C4:BC:E2:56:7F:5F:C8:D3:70:E9 Authority key identifier: B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A Certificate issuer: /CN=A91E75B7/serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A Certificate serial: 06AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft Manifest number: 06A8 Signing time: Fri 22 Aug 2025 22:18:36 +0000 Manifest this update: Fri 22 Aug 2025 22:18:36 +0000 Manifest next update: Fri 29 Aug 2025 22:18:36 +0000 Files and hashes: 1: sc_l-mpxIskE6xEO8agpgPw9-ko.crl (hash: ztCRGsOkyrECDut8Dtyxm3Yio3Zes2b5h+JPD4HGc4Q=) 2: AD0B0E5E762711EBBD5D544FC4F9AE02.roa (hash: sRmBeQkX3ZH6lPD83kjqFke2bsVl1aLInDxD3kBzJvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1710 (0x6ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E75B7, serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A Validity Not Before: Aug 22 22:18:36 2025 GMT Not After : Aug 29 22:18:36 2025 GMT Subject: CN=68a8ecbc-b8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:07:6e:88:04:1b:b9:66:1b:5e:61:63:ac:0e: 05:00:8d:d9:f3:dc:5d:b1:95:e9:e9:46:d1:8a:64: 07:79:fc:89:cc:a5:5a:d8:26:9f:0d:c0:f9:d3:45: 6d:c1:9c:0b:7c:ac:93:de:da:9e:9a:00:6d:a9:ee: cd:d8:7a:17:a6:81:80:e3:c4:ef:da:bc:7a:1e:fb: 19:2d:54:b0:6a:de:10:27:28:fe:a9:89:a0:e0:27: 09:77:b3:6a:a2:88:ce:bf:e8:6b:bb:4c:f6:7d:38: 38:bd:7d:7a:14:34:94:d9:a6:7a:7d:bd:89:32:90: f0:06:4a:c1:0f:d9:7b:0b:0a:34:9b:9b:43:e2:42: b3:f5:98:07:ad:e3:07:08:29:16:48:b9:4d:03:a4: ab:ab:ac:69:f3:f2:59:66:ff:a9:2a:f3:93:ad:1d: 58:d2:aa:cd:8b:d1:54:f9:41:8b:83:dd:03:09:24: 0f:6c:5e:18:10:96:3d:c5:2d:91:24:45:d6:b6:53: 0d:aa:9e:60:e5:62:bd:ac:d6:f2:18:d2:92:f5:36: 02:7b:16:fc:e1:30:b8:48:50:d4:33:6f:c9:0e:a3: 6b:5b:0d:25:b4:de:ea:af:3c:43:ff:64:7e:17:b2: 09:88:9f:da:61:29:01:ec:d7:72:6d:be:d3:a7:fc: 2d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F5:69:6A:E8:63:DE:F4:FE:BE:C4:BC:E2:56:7F:5F:C8:D3:70:E9 X509v3 Authority Key Identifier: keyid:B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:61:00:f8:46:ff:5f:54:4e:c2:b5:32:22:d2:06:9e:d1:4e: 5a:bc:85:20:6c:e6:c3:2b:3f:05:e6:f9:b2:2d:40:8f:f7:3a: a8:1e:87:56:80:a4:41:eb:5f:23:ac:5a:d7:17:08:59:9a:32: 8f:7c:78:c1:98:b6:b7:0d:14:72:fb:f4:cb:a2:f8:1c:20:2d: 66:96:83:e5:5c:9a:e6:24:5c:58:c7:98:03:2b:68:26:0a:99: 77:ba:9b:4b:72:9a:ab:4a:90:b6:a6:1d:fe:3c:d8:bb:43:3b: 61:b3:d6:5d:a1:66:5e:ee:c9:41:13:b7:7f:a5:e2:50:5d:19: 35:29:45:7d:fb:a1:82:57:3d:23:44:bc:bd:92:58:a5:ed:2d: 07:28:46:32:c1:15:0e:09:01:ae:2d:72:2d:c2:9d:65:8b:a1: 0c:b3:92:61:2d:b8:37:8b:c3:9e:0d:be:7d:c9:a5:19:17:34: c5:fc:c6:76:ea:86:7d:4f:bf:13:7a:8a:c8:a4:bc:40:17:e4: 6e:5b:90:72:06:03:66:74:c7:d6:57:62:17:7f:98:1c:cd:a9: 2b:ce:3f:00:12:dd:ef:a8:79:0c:28:21:2a:75:93:e7:8f:82: e6:91:7c:cd:33:14:a2:09:0a:cf:1e:2b:ef:60:ae:60:37:65: fb:1d:ad:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1QjcxMTAvBgNVBAUTKEIxQ0ZFNUZBNkE3MTIyQzkwNEVCMTEwRUYxQTgyOTgw RkMzREZBNEEwHhcNMjUwODIyMjIxODM2WhcNMjUwODI5MjIxODM2WjAYMRYwFAYD VQQDEw02OGE4ZWNiYy1iOGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAduiAQbuWYbXmFjrA4FAI3Z89xdsZXp6UbRimQHefyJzKVa2CafDcD500Vt wZwLfKyT3tqemgBtqe7N2HoXpoGA48Tv2rx6HvsZLVSwat4QJyj+qYmg4CcJd7Nq oojOv+hru0z2fTg4vX16FDSU2aZ6fb2JMpDwBkrBD9l7Cwo0m5tD4kKz9ZgHreMH CCkWSLlNA6Srq6xp8/JZZv+pKvOTrR1Y0qrNi9FU+UGLg90DCSQPbF4YEJY9xS2R JEXWtlMNqp5g5WK9rNbyGNKS9TYCexb84TC4SFDUM2/JDqNrWw0ltN7qrzxD/2R+ F7IJiJ/aYSkB7Ndybb7Tp/wt/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDT1aWro Y970/r7EvOJWf1/I03DpMB8GA1UdIwQYMBaAFLHP5fpqcSLJBOsRDvGoKYD8PfpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzVCNy83RkVENUUxRTc2 MjYxMUVCOERGQ0UwNEVDNEY5QUUwMi9zY19sLW1weElza0U2eEVPOGFncGdQdzkt a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjX2wtbXB4SXNrRTZ4RU84YWdwZ1B3OS1rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzVCNy83RkVENUUxRTc2MjYxMUVCOERGQ0UwNEVDNEY5QUUwMi9zY19sLW1weElz a0U2eEVPOGFncGdQdzkta28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7YQD4Rv9fVE7CtTIi0gae0U5avIUgbObDKz8F5vmyLUCP9zqoHodW gKRB618jrFrXFwhZmjKPfHjBmLa3DRRy+/TLovgcIC1mloPlXJrmJFxYx5gDK2gm Cpl3uptLcpqrSpC2ph3+PNi7Qzths9ZdoWZe7slBE7d/peJQXRk1KUV9+6GCVz0j RLy9klil7S0HKEYywRUOCQGuLXItwp1li6EMs5JhLbg3i8OeDb59yaUZFzTF/MZ2 6oZ9T78TeorIpLxAF+RuW5ByBgNmdMfWV2IXf5gczakrzj8AEt3vqHkMKCEqdZPn j4LmkXzNMxSiCQrPHivvYK5gN2X7Ha3U -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:50 2025 by rpki-client