$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft File: _SW6lhEBtc5gFJk850iP228IpCM.mft (raw, json) Hash identifier: Fvzddw8BRJ7/kNCSkCOZ9QEr/YQEc9DKr7vEjK5+u9s= Subject key identifier: 25:57:14:91:88:C1:7E:F0:D4:C6:F2:06:1D:74:0F:5C:94:39:08:77 Authority key identifier: FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 Certificate issuer: /CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Certificate serial: 0846 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft Manifest number: 1417 Signing time: Fri 22 Aug 2025 18:58:20 +0000 Manifest this update: Fri 22 Aug 2025 18:58:19 +0000 Manifest next update: Fri 29 Aug 2025 18:58:19 +0000 Files and hashes: 1: _SW6lhEBtc5gFJk850iP228IpCM.crl (hash: KZqKs9EF5ITaLWZs9D8X6AgWVMnTIA24e3HYlxjI9pE=) 2: 9412C93EDC6F11EABFEF2548C4F9AE02.roa (hash: rU8D6mpdC1BmC/amQMPPP7kqQ/zxbdarw0Ro6gKcd88=) 3: 949F398CDC6F11EABFEF2548C4F9AE02.roa (hash: IQeY/vSsnV7lGmsF5ET0EctBxomkDxr65Km/1S0yvs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2118 (0x846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4, serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Validity Not Before: Aug 22 18:58:19 2025 GMT Not After : Aug 29 18:58:19 2025 GMT Subject: CN=68a8bdcb-2280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1b:65:b9:55:46:91:60:8f:c5:a1:68:7f:cb: fb:40:4a:0f:95:86:52:40:9d:48:1f:f3:78:0c:58: 22:14:0a:d3:7c:44:4a:bb:2d:e9:3d:e0:79:7a:da: 56:27:71:d6:2a:1b:c7:89:e2:25:0e:0e:37:50:d3: b3:ac:92:42:bf:a7:48:bc:c9:6e:13:9e:0a:e3:5e: 06:d0:30:37:d8:f0:fd:66:26:e3:dc:8b:09:57:19: a1:92:e0:bd:dc:af:5e:1b:6e:64:ef:ea:b7:42:cc: 15:2a:c2:d3:94:f2:5c:7d:8c:2c:fb:10:2a:02:66: bd:7a:68:44:19:63:7a:f8:ca:9f:70:0e:eb:a4:d9: 2b:c3:32:71:51:fe:30:24:8b:de:31:84:a6:bb:8e: a4:93:fc:28:f3:09:b8:dc:76:8f:e2:d9:60:27:ef: b5:29:33:ac:f2:cc:1d:95:a7:e9:0d:9c:78:c8:f6: 76:62:69:f5:13:30:65:d4:99:16:63:8a:2c:f2:06: 3f:bc:1d:52:b9:12:99:4d:4e:8c:46:47:63:74:cc: 9f:ef:fa:42:99:cd:a1:7d:6b:05:81:9f:be:25:cb: f5:64:24:30:48:1e:01:2d:c4:5d:a2:03:38:c5:52: de:1a:fa:54:f7:3d:07:85:8f:dd:04:78:47:90:6b: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:57:14:91:88:C1:7E:F0:D4:C6:F2:06:1D:74:0F:5C:94:39:08:77 X509v3 Authority Key Identifier: keyid:FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:a6:4f:41:fc:42:a9:a6:b4:e7:8f:8e:1a:1a:2d:ed:99:a7: 47:e2:9a:f7:c5:48:d6:54:a7:96:82:9d:6d:73:98:33:55:84: fa:91:4d:72:8e:c0:83:b7:91:92:19:49:e9:e5:81:f0:d9:ca: 7a:d0:aa:c1:98:d6:f7:12:b9:54:e4:e4:dc:b8:2c:bf:5b:20: f6:f0:04:d3:83:f8:b1:b2:67:42:0e:5d:0f:9e:02:f1:e2:76: 35:9b:14:2b:83:30:9c:fb:cb:63:d1:f9:c8:48:2c:62:80:3e: 48:74:6d:68:b3:d8:35:be:a2:f0:15:fa:83:9d:e9:5c:6d:42: 18:8f:3e:f6:3d:e1:83:47:7b:55:aa:7e:e4:f3:68:d2:95:f2: 0f:18:30:d2:eb:6b:9a:cc:d4:6f:46:82:d9:6e:27:0f:c5:33: 54:67:d4:65:e6:98:5b:5b:d2:ec:be:09:e6:22:b5:3e:55:c0: c5:4f:73:90:45:96:2b:07:6a:1d:9f:4a:c6:a6:c0:5d:5f:62: cd:72:be:ae:d1:bc:01:dd:ba:81:40:c1:bd:94:3b:7f:b4:77: bf:4f:fd:ec:ba:14:48:d3:c4:2a:a4:de:02:3d:dd:87:59:66: 80:e0:83:74:1b:1c:88:bc:3c:20:af:66:24:d4:34:a8:b1:18: f8:44:05:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKEZEMjVCQTk2MTEwMUI1Q0U2MDE0OTkzQ0U3NDg4RkRC NkYwOEE0MjMwHhcNMjUwODIyMTg1ODE5WhcNMjUwODI5MTg1ODE5WjAYMRYwFAYD VQQDEw02OGE4YmRjYi0yMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xtluVVGkWCPxaFof8v7QEoPlYZSQJ1IH/N4DFgiFArTfERKuy3pPeB5etpW J3HWKhvHieIlDg43UNOzrJJCv6dIvMluE54K414G0DA32PD9Zibj3IsJVxmhkuC9 3K9eG25k7+q3QswVKsLTlPJcfYws+xAqAma9emhEGWN6+MqfcA7rpNkrwzJxUf4w JIveMYSmu46kk/wo8wm43HaP4tlgJ++1KTOs8swdlafpDZx4yPZ2Ymn1EzBl1JkW Y4os8gY/vB1SuRKZTU6MRkdjdMyf7/pCmc2hfWsFgZ++Jcv1ZCQwSB4BLcRdogM4 xVLeGvpU9z0HhY/dBHhHkGuZFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVXFJGI wX7w1MbyBh10D1yUOQh3MB8GA1UdIwQYMBaAFP0lupYRAbXOYBSZPOdIj9tvCKQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9fU1c2bGhFQnRjNWdGSms4NTBpUDIyOElw Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19TVzZsaEVCdGM1Z0ZKazg1MGlQMjI4SXBDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9fU1c2bGhFQnRj NWdGSms4NTBpUDIyOElwQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnpk9B/EKpprTnj44aGi3tmadH4pr3xUjWVKeWgp1tc5gzVYT6kU1y jsCDt5GSGUnp5YHw2cp60KrBmNb3ErlU5OTcuCy/WyD28ATTg/ixsmdCDl0PngLx 4nY1mxQrgzCc+8tj0fnISCxigD5IdG1os9g1vqLwFfqDnelcbUIYjz72PeGDR3tV qn7k82jSlfIPGDDS62uazNRvRoLZbicPxTNUZ9Rl5phbW9LsvgnmIrU+VcDFT3OQ RZYrB2odn0rGpsBdX2LNcr6u0bwB3bqBQMG9lDt/tHe/T/3suhRI08QqpN4CPd2H WWaA4IN0GxyIvDwgr2Yk1DSosRj4RAVR -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:50 2025 by rpki-client