$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft File: SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json) Hash identifier: Z2xDTC4acjNJ7N/p9geJi4pi/ZQ3W9z9IsM6UowcE1U= Subject key identifier: E6:E6:2B:90:99:EC:6E:BE:33:F0:8B:04:80:55:94:65:F8:F5:84:06 Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft Manifest number: 0241 Signing time: Mon 21 Jul 2025 02:10:36 +0000 Manifest this update: Mon 21 Jul 2025 02:10:35 +0000 Manifest next update: Mon 28 Jul 2025 02:10:35 +0000 Files and hashes: 1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: 8Dha/RpM9S5BDsYQU4eoIU6CHltCtBEq++oHDGdvwJc=) 2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: NLbyCuuj3PUuIvgjWrH/YA9s60d6QDG0BkYDeVifH9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D167, serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Validity Not Before: Jul 21 02:10:35 2025 GMT Not After : Jul 28 02:10:35 2025 GMT Subject: CN=687da19b-5ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6a:d9:48:f7:f2:d3:c4:5b:ec:f8:77:02:4a: 65:68:cf:fd:82:a0:46:2b:d0:76:38:9b:d9:7d:eb: cf:1d:df:90:52:71:c9:d2:60:7e:e5:98:67:d4:3b: a0:4b:51:69:ef:5e:86:ef:69:06:f5:77:42:4a:fc: b0:74:2a:32:c3:81:16:89:8f:a5:fb:2e:ca:32:90: 63:c2:3c:35:79:14:30:f0:01:dc:e4:f4:78:59:ab: d6:c6:e2:9c:d2:32:17:ea:d9:7a:df:50:b8:f9:18: a4:48:03:f6:ce:23:43:8a:ad:13:51:cc:0b:84:10: 8b:d3:8f:14:4b:9c:0c:77:ab:ad:f3:a1:fa:de:05: a7:36:06:3d:09:db:73:99:3e:a8:e9:0c:d9:d1:da: a1:14:4f:08:b1:e8:af:17:bd:af:3c:96:e9:f0:62: 93:22:74:98:43:d9:1e:34:8c:85:6f:e9:f9:81:2f: 5d:c7:b2:d0:f1:cf:c0:23:f6:19:52:40:e3:2c:a6: cd:3e:12:02:1a:5d:4c:7c:46:3d:1a:7d:ba:bd:15: 6c:64:46:2a:50:61:51:80:82:1f:51:ee:44:56:76: 72:b6:9b:88:3f:3d:8a:6b:e4:7d:b5:40:1a:c7:43: ed:35:ae:b2:c1:b2:70:d3:c5:00:32:89:15:e6:71: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E6:2B:90:99:EC:6E:BE:33:F0:8B:04:80:55:94:65:F8:F5:84:06 X509v3 Authority Key Identifier: keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:0e:b5:f2:dd:de:eb:86:29:30:9c:6b:cb:84:fa:e4:09:72: 1c:f7:6e:45:96:33:1a:6b:fb:c1:48:bc:65:47:14:42:60:75: 30:28:a3:56:4b:f6:8e:b2:b4:e8:97:25:ca:03:98:80:71:d7: 40:ed:91:87:0c:43:6d:bb:62:59:0a:d8:a2:1c:ac:17:54:04: 1b:e8:ff:a6:c6:46:92:64:80:c9:cd:18:da:97:cf:78:37:60: d7:94:ed:9a:ea:79:c1:b7:07:2b:6d:aa:90:03:3c:18:38:53: 53:59:6d:d2:fa:4d:df:eb:0a:51:4f:6e:96:3b:2d:18:7c:7a: 48:19:4c:f9:5a:b8:a4:f7:82:d4:f1:64:ea:83:de:15:cf:f1: 81:63:75:43:b9:71:b1:74:53:31:cc:04:27:63:1f:0d:4b:b7: 7e:db:57:08:04:39:b6:48:54:56:44:ed:fa:69:d9:7e:9f:f8: 12:db:35:41:99:5e:b4:6d:d1:36:a6:da:35:e6:4c:2e:1e:4b: f1:a6:44:ac:5a:b6:e3:93:1f:34:eb:fa:b4:de:d2:59:cd:7a: 29:4d:cd:ec:bc:ef:f9:1e:95:a2:dc:37:4e:b5:02:9f:be:e9: 32:0b:0c:34:48:da:04:14:89:d5:2f:01:49:22:27:ac:5b:a2: bf:14:3f:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3 RDY5OTMyNDgwHhcNMjUwNzIxMDIxMDM1WhcNMjUwNzI4MDIxMDM1WjAYMRYwFAYD VQQDEw02ODdkYTE5Yi01ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82rZSPfy08Rb7Ph3AkplaM/9gqBGK9B2OJvZfevPHd+QUnHJ0mB+5Zhn1Dug S1Fp716G72kG9XdCSvywdCoyw4EWiY+l+y7KMpBjwjw1eRQw8AHc5PR4WavWxuKc 0jIX6tl631C4+RikSAP2ziNDiq0TUcwLhBCL048US5wMd6ut86H63gWnNgY9Cdtz mT6o6QzZ0dqhFE8IseivF72vPJbp8GKTInSYQ9keNIyFb+n5gS9dx7LQ8c/AI/YZ UkDjLKbNPhICGl1MfEY9Gn26vRVsZEYqUGFRgIIfUe5EVnZytpuIPz2Ka+R9tUAa x0PtNa6ywbJw08UAMokV5nFHrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObmK5CZ 7G6+M/CLBIBVlGX49YQGMB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJDrXy3d7rhikwnGvLhPrkCXIc925FljMaa/vBSLxlRxRCYHUwKKNW S/aOsrTolyXKA5iAcddA7ZGHDENtu2JZCtiiHKwXVAQb6P+mxkaSZIDJzRjal894 N2DXlO2a6nnBtwcrbaqQAzwYOFNTWW3S+k3f6wpRT26WOy0YfHpIGUz5Wrik94LU 8WTqg94Vz/GBY3VDuXGxdFMxzAQnYx8NS7d+21cIBDm2SFRWRO36adl+n/gS2zVB mV60bdE2pto15kwuHkvxpkSsWrbjkx806/q03tJZzXopTc3svO/5HpWi3DdOtQKf vukyCww0SNoEFInVLwFJIiesW6K/FD+b -----END CERTIFICATE-----Generated at Mon Jul 21 07:49:22 2025 by rpki-client