$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft File: SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json) Hash identifier: sAOM4+yr0fPoETISokKOtKx+f/R0YZhveItgvwAbUPY= Subject key identifier: 13:9F:C7:7C:EA:90:E7:63:A7:B5:D8:92:4C:AD:4A:DC:0D:1F:5E:64 Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 Certificate issuer: /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft Manifest number: 0321 Signing time: Sat 23 Aug 2025 01:23:56 +0000 Manifest this update: Sat 23 Aug 2025 01:23:55 +0000 Manifest next update: Sat 30 Aug 2025 01:23:55 +0000 Files and hashes: 1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: 7n9b75NbdP7qQmAxuawpfHlwhel5Q0QM7dMf/b4LbBQ=) 2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: ScBhfI+tDJwM84UfKu4S2Ej+l19uK9BKKc4lKatvgAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Validity Not Before: Aug 23 01:23:55 2025 GMT Not After : Aug 30 01:23:55 2025 GMT Subject: CN=68a9182b-b6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f8:e7:3d:d1:ee:7d:07:99:18:6d:cf:8b:87: 22:a9:99:1b:5d:ad:d9:dc:1b:cc:f8:90:3d:6c:07: 3a:87:dc:72:d9:36:04:22:66:19:2f:3e:06:68:01: 4a:ae:a1:0e:fa:d5:7b:0c:4a:7f:45:15:08:c1:9e: bf:c9:f9:c2:80:29:2e:99:7c:5a:00:57:74:59:4a: e1:6f:1c:2b:bc:b1:5a:50:c2:b5:ee:f8:63:a3:f1: 60:02:7f:27:df:00:9a:df:9d:44:73:88:a7:1d:a5: 52:49:1f:02:e0:f9:ae:e2:d8:b6:92:43:58:e7:da: f8:8c:b6:15:97:aa:0e:29:94:67:47:de:83:a2:fa: 1a:9d:68:4f:1f:11:e8:9e:2e:e2:d0:e8:97:2a:b5: 99:9a:dc:a3:62:d1:b3:09:c8:e8:00:08:d0:c0:84: 2b:72:81:90:9e:62:53:07:f4:f9:d5:87:ab:82:c2: 27:e5:69:9e:4b:cc:76:f3:52:fd:43:d4:67:63:ba: 78:4e:10:35:5e:ef:0e:9f:ec:8f:1f:26:35:74:e2: 81:bc:0a:85:b0:59:69:3f:bb:02:06:dc:0d:7b:82: 36:3b:8a:1e:79:45:fb:5d:ce:3b:f5:87:7b:fc:7d: e1:41:cb:99:d4:64:1e:8b:b7:21:27:67:0c:48:23: 53:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9F:C7:7C:EA:90:E7:63:A7:B5:D8:92:4C:AD:4A:DC:0D:1F:5E:64 X509v3 Authority Key Identifier: keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ed:1c:9d:c2:10:c4:07:56:70:c0:73:e4:75:22:15:d8:26: 71:ea:b7:21:ed:f9:a0:96:ef:e5:f4:42:46:83:60:0b:31:5b: f6:d6:62:d6:a7:c9:82:00:10:bb:5e:99:53:8a:6d:c3:ac:49: 07:b2:94:42:aa:a2:97:15:cf:72:2a:6a:24:96:8f:7b:d2:2a: 24:02:b1:13:26:2c:c7:33:bc:10:de:25:08:b4:06:d9:f6:e4: 63:f0:90:4a:44:28:33:20:0e:4a:55:0f:e7:19:f6:95:0c:4c: 8c:be:ac:9d:6d:46:f2:98:c0:4f:f5:64:9b:78:ea:17:6e:89: a2:57:22:74:23:cd:04:08:ac:32:89:c4:fa:18:57:a8:19:9d: b0:28:03:22:fb:e0:01:fb:6f:e1:64:68:8c:8a:0e:71:9f:00: 9a:f9:1d:19:f8:86:1f:5c:d7:84:58:97:74:32:3d:34:f8:9b: 6c:25:7f:42:1f:84:c9:e7:8b:48:b4:4a:da:e0:5c:5d:b1:f9: 88:5f:d5:08:6c:ba:36:c7:b1:b4:13:c4:93:0b:8b:11:b5:d8: d1:fa:33:21:f0:ee:a6:87:33:ef:73:b0:57:eb:75:e6:f3:0c: 19:dc:c1:e6:ca:fd:ed:2e:b8:56:ec:53:31:6d:dc:b3:3e:1c: cc:bb:80:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwRDAxMTAvBgNVBAUTKDRCM0M2OTU2QjA0NDkwMDEwMDg1OEMwREU1MEVCOUE0 NjJCMDhDQzcwHhcNMjUwODIzMDEyMzU1WhcNMjUwODMwMDEyMzU1WjAYMRYwFAYD VQQDEw02OGE5MTgyYi1iNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPjnPdHufQeZGG3Pi4ciqZkbXa3Z3BvM+JA9bAc6h9xy2TYEImYZLz4GaAFK rqEO+tV7DEp/RRUIwZ6/yfnCgCkumXxaAFd0WUrhbxwrvLFaUMK17vhjo/FgAn8n 3wCa351Ec4inHaVSSR8C4Pmu4ti2kkNY59r4jLYVl6oOKZRnR96DovoanWhPHxHo ni7i0OiXKrWZmtyjYtGzCcjoAAjQwIQrcoGQnmJTB/T51YergsIn5WmeS8x281L9 Q9RnY7p4ThA1Xu8On+yPHyY1dOKBvAqFsFlpP7sCBtwNe4I2O4oeeUX7Xc479Yd7 /H3hQcuZ1GQei7chJ2cMSCNTPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOfx3zq kOdjp7XYkkytStwNH15kMB8GA1UdIwQYMBaAFEs8aVawRJABAIWMDeUOuaRisIzH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjBEMC85M0ZCN0Y0RURC RjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtBRUFoWXdONVE2NXBHS3dq TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6eHBWckJFa0FFQWhZd041UTY1cEdLd2pNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjBEMC85M0ZCN0Y0RURCRjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtB RUFoWXdONVE2NXBHS3dqTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx7RydwhDEB1ZwwHPkdSIV2CZx6rch7fmglu/l9EJGg2ALMVv21mLW p8mCABC7XplTim3DrEkHspRCqqKXFc9yKmoklo970iokArETJizHM7wQ3iUItAbZ 9uRj8JBKRCgzIA5KVQ/nGfaVDEyMvqydbUbymMBP9WSbeOoXbomiVyJ0I80ECKwy icT6GFeoGZ2wKAMi++AB+2/hZGiMig5xnwCa+R0Z+IYfXNeEWJd0Mj00+JtsJX9C H4TJ54tItEra4FxdsfmIX9UIbLo2x7G0E8STC4sRtdjR+jMh8O6mhzPvc7BX63Xm 8wwZ3MHmyv3tLrhW7FMxbdyzPhzMu4DQ -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:21 2025 by rpki-client