$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json) Hash identifier: 9sZnUJ+RVLKpSxgSanDeKt4a76ZM9NhiUkte5GKgrfM= Subject key identifier: A1:17:43:F7:72:5D:B9:24:96:EB:01:5B:AB:3F:4A:E4:42:84:34:D3 Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft Manifest number: 028C Signing time: Sat 23 Aug 2025 01:53:16 +0000 Manifest this update: Sat 23 Aug 2025 01:53:15 +0000 Manifest next update: Sat 30 Aug 2025 01:53:15 +0000 Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: bPbCIlbFhsGb8L32NjI/kfmT3GBA9HAvkQiUPR/xukM=) 2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Validity Not Before: Aug 23 01:53:15 2025 GMT Not After : Aug 30 01:53:15 2025 GMT Subject: CN=68a91f0b-88dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:bc:6f:65:2a:6a:3d:3f:ef:f7:ad:eb:3c: 78:4b:ff:c6:a1:4d:10:d6:e1:82:f5:40:7a:a7:e4: 90:75:59:76:20:3d:53:d9:25:2b:e8:1a:5c:14:b8: 0e:19:13:25:c0:c8:eb:52:0f:5b:25:a1:6a:95:5d: b2:da:79:f0:d8:9f:77:4c:27:89:9b:ee:be:91:7a: 60:a8:51:76:94:5f:ac:af:ae:7e:2b:4c:ac:10:4b: 48:8b:fa:57:b8:0e:40:99:55:9f:19:bd:71:df:e2: 79:3e:0a:e8:c3:57:dd:c9:d6:cd:12:3c:ca:23:34: 5d:40:79:18:71:63:09:b3:5e:ff:f6:54:47:24:20: 31:ad:2c:3d:fd:33:2b:db:ec:15:48:b4:99:44:80: be:eb:d3:bc:9c:c0:d1:a7:4f:1a:2f:1d:79:b4:91: 70:98:fb:61:d5:35:50:c2:e9:94:d7:f1:96:2b:35: 69:19:9b:03:de:cf:5f:53:a5:5c:34:60:4b:2c:9f: df:07:60:56:c0:99:00:ac:c5:d2:85:7a:47:7f:0a: fc:8b:3a:25:63:10:3d:98:9d:0c:b7:45:82:7c:e1: fc:a1:91:41:79:e2:75:e0:a0:13:9f:59:63:88:58: cb:13:11:19:40:6c:39:d1:5e:aa:80:8e:0c:17:e3: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:17:43:F7:72:5D:B9:24:96:EB:01:5B:AB:3F:4A:E4:42:84:34:D3 X509v3 Authority Key Identifier: keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:fe:6b:ec:ee:3b:b9:e6:2c:d6:96:af:85:42:ce:b4:b0:88: 80:e7:e1:81:35:59:65:67:9e:68:e9:f8:52:ee:42:70:b5:1d: 24:c4:c7:50:3f:11:22:93:dd:b8:fe:57:61:bb:4c:80:bd:23: 5b:fe:10:5c:ac:7d:80:f1:96:80:9c:b2:ed:9c:83:da:a3:f8: 94:37:c6:a8:5b:3a:bb:4a:8e:b8:87:4a:57:d2:1c:0a:ca:1e: f5:44:45:86:c9:76:11:63:53:be:f9:1c:e6:d3:26:41:8b:00: 10:18:3b:b7:86:1b:65:d5:f3:72:9f:87:aa:3b:70:b7:81:85: 77:5b:c3:0c:8e:30:94:5a:80:58:f4:1e:9a:90:1d:39:a2:43: 0b:30:fc:45:8c:c2:58:b6:87:16:6d:e9:35:e1:24:b5:12:3a: 72:b4:fe:cd:79:79:4c:28:a2:11:06:da:01:89:0c:8d:d2:d5: fd:60:8f:b2:aa:9f:65:ea:56:3b:4e:db:ed:15:68:1c:c5:fb: ef:c6:71:00:db:2e:b3:ca:e1:ac:ed:27:0b:7f:bc:8c:8b:ab: 2f:55:0e:07:e9:51:3d:6a:64:da:1e:98:79:5a:ae:e7:01:76: 3c:a1:39:75:c5:b6:38:0b:f4:85:2e:87:f7:88:39:50:ab:e1: ba:3f:9c:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz QjIyMDE4OUQwHhcNMjUwODIzMDE1MzE1WhcNMjUwODMwMDE1MzE1WjAYMRYwFAYD VQQDEw02OGE5MWYwYi04OGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3y8b2Uqaj0/7/et6zx4S//GoU0Q1uGC9UB6p+SQdVl2ID1T2SUr6BpcFLgO GRMlwMjrUg9bJaFqlV2y2nnw2J93TCeJm+6+kXpgqFF2lF+sr65+K0ysEEtIi/pX uA5AmVWfGb1x3+J5Pgrow1fdydbNEjzKIzRdQHkYcWMJs17/9lRHJCAxrSw9/TMr 2+wVSLSZRIC+69O8nMDRp08aLx15tJFwmPth1TVQwumU1/GWKzVpGZsD3s9fU6Vc NGBLLJ/fB2BWwJkArMXShXpHfwr8izolYxA9mJ0Mt0WCfOH8oZFBeeJ14KATn1lj iFjLExEZQGw50V6qgI4MF+PmxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEXQ/dy XbkklusBW6s/SuRChDTTMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2 QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF/mvs7ju55izWlq+FQs60sIiA5+GBNVllZ55o6fhS7kJwtR0kxMdQ PxEik924/ldhu0yAvSNb/hBcrH2A8ZaAnLLtnIPao/iUN8aoWzq7So64h0pX0hwK yh71REWGyXYRY1O++Rzm0yZBiwAQGDu3hhtl1fNyn4eqO3C3gYV3W8MMjjCUWoBY 9B6akB05okMLMPxFjMJYtocWbek14SS1EjpytP7NeXlMKKIRBtoBiQyN0tX9YI+y qp9l6lY7TtvtFWgcxfvvxnEA2y6zyuGs7ScLf7yMi6svVQ4H6VE9amTaHph5Wq7n AXY8oTl1xbY4C/SFLof3iDlQq+G6P5z6 -----END CERTIFICATE-----Generated at Sat Aug 23 19:11:56 2025 by rpki-client