$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft File: sdV2wMeOXPWNSDeibJJjxj8TFd0.mft (raw, json) Hash identifier: /wQNecJ+aw0ylsWLT2MmR5S7rkkl8nG49vTeq9myD7E= Subject key identifier: 97:B3:82:5A:93:09:92:4B:33:28:1A:B4:47:A6:A8:13:C7:4D:EE:DD Authority key identifier: B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD Certificate issuer: /CN=A914EB5A/serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft Manifest number: 0126 Signing time: Mon 21 Jul 2025 04:45:46 +0000 Manifest this update: Mon 21 Jul 2025 04:45:46 +0000 Manifest next update: Mon 28 Jul 2025 04:45:46 +0000 Files and hashes: 1: sdV2wMeOXPWNSDeibJJjxj8TFd0.crl (hash: izothKTrqpkBOkXosS0js1iM17089gU1eJTGMqaCAs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB5A, serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Validity Not Before: Jul 21 04:45:46 2025 GMT Not After : Jul 28 04:45:46 2025 GMT Subject: CN=687dc5fa-4965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:e6:2f:20:36:9b:89:34:79:c2:0f:cf:99: 20:92:69:3f:4d:c4:92:93:ec:1d:02:25:b4:69:a3: 6b:a5:8c:1e:45:15:d4:74:f3:f9:ec:47:17:66:bf: 1a:b5:4e:44:8b:50:44:ae:a1:32:00:9d:52:a2:a5: cd:fd:b9:08:6f:02:67:65:49:6f:94:6e:11:e4:74: d3:dd:9c:48:e2:77:dd:3c:58:1e:0f:31:01:69:d1: 67:3a:22:f0:72:a5:d4:ce:8d:be:73:98:73:67:87: aa:f7:b5:ca:fd:94:2e:82:6e:94:87:16:b6:1f:f6: 9c:31:f8:93:b1:4f:64:32:62:c3:32:fc:7e:eb:17: a4:59:a3:33:2f:bb:4f:d9:91:2f:95:a7:4d:77:58: 24:17:a5:47:da:19:9b:7a:79:c0:c0:86:76:ab:ff: 93:93:59:62:ef:14:7b:c6:94:6a:e8:cd:61:f5:75: 33:b8:08:8f:4c:0c:09:2d:21:af:c5:17:fd:c6:f7: b6:ba:20:59:56:47:38:ce:9f:03:c8:b8:b5:b4:a2: e6:5d:e7:c5:0a:fb:ea:04:38:e4:8d:d9:ca:e1:92: f5:58:61:fb:06:31:cf:b8:60:0c:ef:6a:f7:62:d9: c2:bc:8f:0a:84:d0:55:d4:5c:00:cc:56:0c:08:c0: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B3:82:5A:93:09:92:4B:33:28:1A:B4:47:A6:A8:13:C7:4D:EE:DD X509v3 Authority Key Identifier: keyid:B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0a:6e:22:6a:88:4f:65:c1:eb:3e:3d:66:1d:fb:8f:1d:2b: d8:6c:79:d0:1b:5f:50:eb:65:33:f4:b4:5a:9f:9c:a8:33:75: e2:b2:1a:2a:9f:24:4e:7d:25:a7:4e:5d:38:a2:2e:eb:e2:c7: 8e:7f:72:9b:9a:13:95:a7:7e:cd:e2:71:69:5d:a2:17:7e:5c: 3c:5c:43:36:89:cc:76:aa:fb:aa:88:78:9f:b2:0f:6c:0d:06: bb:43:f1:c2:7a:f9:aa:b5:04:a2:ee:e2:69:74:8d:e5:6e:fd: a8:b0:74:dc:84:ce:37:17:b9:ce:91:f9:c2:e1:73:13:ca:9b: f0:e0:3f:a6:1e:40:28:eb:a9:2d:e9:4a:d7:0e:0b:96:c4:ba: 68:30:4f:1a:63:63:0a:3b:e0:52:e1:e4:c2:5d:66:1a:76:a6: 63:15:b1:e4:64:4c:3b:4a:f2:90:ee:07:ad:f5:c6:52:a5:2a: 90:ea:70:dd:18:89:25:c3:42:79:e6:1c:8c:c6:aa:5d:ab:1d: 9f:b5:c2:9d:11:b6:a8:d8:41:f2:80:dc:b0:db:9e:cb:01:cf: 91:f3:8b:a0:fd:82:30:84:37:ec:14:32:9a:5c:29:19:3a:5e: 4e:0e:b1:a5:ae:b4:57:7d:5f:c0:e0:2f:a0:f7:be:00:16:72: fe:7d:5f:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCNUExMTAvBgNVBAUTKEIxRDU3NkMwQzc4RTVDRjU4RDQ4MzdBMjZDOTI2M0M2 M0YxMzE1REQwHhcNMjUwNzIxMDQ0NTQ2WhcNMjUwNzI4MDQ0NTQ2WjAYMRYwFAYD VQQDEw02ODdkYzVmYS00OTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwjmLyA2m4k0ecIPz5kgkmk/TcSSk+wdAiW0aaNrpYweRRXUdPP57EcXZr8a tU5Ei1BErqEyAJ1SoqXN/bkIbwJnZUlvlG4R5HTT3ZxI4nfdPFgeDzEBadFnOiLw cqXUzo2+c5hzZ4eq97XK/ZQugm6Uhxa2H/acMfiTsU9kMmLDMvx+6xekWaMzL7tP 2ZEvladNd1gkF6VH2hmbennAwIZ2q/+Tk1li7xR7xpRq6M1h9XUzuAiPTAwJLSGv xRf9xve2uiBZVkc4zp8DyLi1tKLmXefFCvvqBDjkjdnK4ZL1WGH7BjHPuGAM72r3 YtnCvI8KhNBV1FwAzFYMCMDBqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJezglqT CZJLMygatEemqBPHTe7dMB8GA1UdIwQYMBaAFLHVdsDHjlz1jUg3omySY8Y/ExXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI1QS83QzA3NUUxOEEz QjMxMUVFQUQ2NjI5MTlDNEY5QUUwMi9zZFYyd01lT1hQV05TRGVpYkpKanhqOFRG ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NkVjJ3TWVPWFBXTlNEZWliSkpqeGo4VEZkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI1QS83QzA3NUUxOEEzQjMxMUVFQUQ2NjI5MTlDNEY5QUUwMi9zZFYyd01lT1hQ V05TRGVpYkpKanhqOFRGZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuCm4iaohPZcHrPj1mHfuPHSvYbHnQG19Q62Uz9LRan5yoM3Xishoq nyROfSWnTl04oi7r4seOf3KbmhOVp37N4nFpXaIXflw8XEM2icx2qvuqiHifsg9s DQa7Q/HCevmqtQSi7uJpdI3lbv2osHTchM43F7nOkfnC4XMTypvw4D+mHkAo66kt 6UrXDguWxLpoME8aY2MKO+BS4eTCXWYadqZjFbHkZEw7SvKQ7get9cZSpSqQ6nDd GIklw0J55hyMxqpdqx2ftcKdEbao2EHygNyw257LAc+R84ug/YIwhDfsFDKaXCkZ Ol5ODrGlrrRXfV/A4C+g974AFnL+fV9x -----END CERTIFICATE-----Generated at Mon Jul 21 13:23:50 2025 by rpki-client