$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json) Hash identifier: t3mSHUkPB6DaSQIQZRyOwxNl0Tq28gB/BJDBIxdpCbY= Subject key identifier: 77:73:D4:93:F8:E8:04:7A:A2:69:4F:B7:9F:A9:5E:CE:B3:34:82:FF Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft Manifest number: 020B Signing time: Sat 19 Jul 2025 02:30:53 +0000 Manifest this update: Sat 19 Jul 2025 02:30:52 +0000 Manifest next update: Sat 26 Jul 2025 02:30:52 +0000 Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: 5sZLPPedsVevzjOW847g/UHVEwXLWt2Qvv18TjxEf0o=) 2: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: PE1GT2A7EmT71tkAdrtk5aTsSiGLh2+65uV6vdi3L2w=) 3: A4B9732E372211F088B77741C4F9AE02.roa (hash: mk1V1FHxB9suL0UPFLyM/A4VOyjRdsjF6s6gkTDXYcQ=) 4: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: 8t/E7tL8Lbh/a7Lj1jqywOIP2dcmbqemPtvNv/RJomk=) 5: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 88kWEiY/06EoXdAjoPmCFzf4ibe9Kqek376AzBNc9lE=) 6: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: 8cIYacmt17oQhUg55NPG9jDcGp/KP0H3kvB7HR2dORY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Jul 19 02:30:52 2025 GMT Not After : Jul 26 02:30:52 2025 GMT Subject: CN=687b035c-358c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:b8:37:4e:45:75:26:e9:68:82:8b:5d:27: e1:91:b2:65:3a:75:a0:81:6a:d0:36:cd:33:75:95: 38:ed:ba:66:b8:5f:57:90:b9:6b:ad:28:b1:97:76: 08:5f:b5:96:90:89:a8:ce:19:4f:9b:f6:f4:6d:50: b9:78:0b:76:1f:36:b8:4c:c0:22:2e:62:71:92:dd: 96:35:b5:a5:82:89:83:15:aa:c7:36:83:18:b9:1b: e2:b1:b6:6a:15:3f:5d:c6:36:3f:15:fd:74:36:53: 26:90:91:19:f5:6e:9c:67:34:2c:a7:62:1e:22:58: 0d:93:01:e9:d9:40:6e:00:00:4e:4e:e3:d4:f6:a2: 0b:3a:84:c1:28:36:57:86:6f:0b:cb:4c:ba:d4:9a: b1:6f:b4:34:a7:ce:2a:f7:62:0c:57:88:3e:f8:91: e2:65:be:bb:4b:d5:dd:fc:1d:fc:d9:01:58:1e:a1: 3c:88:79:04:a7:e1:dc:76:b1:6f:5a:38:5f:38:88: 17:ed:d0:7e:29:a8:c7:29:2d:11:4f:a0:b5:7b:34: d3:6b:6a:cb:4a:b8:82:77:e4:cb:1c:be:a2:88:6d: a9:50:87:d9:56:58:f9:10:4c:43:43:13:f2:a5:ae: d2:bc:e8:54:54:2e:bd:6c:9c:f1:cd:3b:68:e6:c3: 94:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:73:D4:93:F8:E8:04:7A:A2:69:4F:B7:9F:A9:5E:CE:B3:34:82:FF X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a3:d4:75:03:34:a1:1b:25:d3:4d:90:fd:d7:64:15:99:ce: be:47:cb:89:48:4f:7c:19:66:cf:3f:1f:40:ea:b8:95:cf:8e: fb:3c:ef:b8:91:51:66:ee:85:af:f1:42:8c:2a:fa:b1:1b:5b: a1:b9:1b:e9:f8:d3:5c:da:39:2d:f9:d0:4f:46:35:c9:d1:f7: cb:63:b4:45:08:fe:95:ed:3b:e4:09:3a:f9:e8:55:cb:12:31: 49:c1:1e:b8:98:08:8c:a4:08:0a:7a:48:57:a4:d1:8a:fe:1b: 6a:08:82:6a:cb:c5:21:c0:63:55:b3:1d:0c:d4:b1:c3:a3:68: af:b4:68:18:77:5e:26:89:98:b1:44:e1:3b:39:7f:76:b3:02: b5:b9:ad:2f:a8:27:37:a3:c8:c0:6a:d4:36:1f:0b:00:68:eb: 97:bb:6d:f5:f5:48:b5:38:f3:a3:4d:21:02:a2:59:2b:4f:00: d8:7e:c5:2e:0f:49:3b:cb:81:84:3e:37:ba:92:cf:7e:df:7b: 27:cf:ef:6f:8a:21:a1:ee:74:ed:b3:8b:e6:c2:c8:0f:9d:f9: 80:22:b7:53:2a:1b:9a:ea:dd:fb:1b:77:51:ca:3e:8d:52:c3: 5f:e7:c7:df:8e:4e:58:07:2b:ed:96:26:6d:c4:55:88:79:c3: 70:ed:95:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjUwNzE5MDIzMDUyWhcNMjUwNzI2MDIzMDUyWjAYMRYwFAYD VQQDEw02ODdiMDM1Yy0zNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypq4N05FdSbpaIKLXSfhkbJlOnWggWrQNs0zdZU47bpmuF9XkLlrrSixl3YI X7WWkImozhlPm/b0bVC5eAt2Hza4TMAiLmJxkt2WNbWlgomDFarHNoMYuRvisbZq FT9dxjY/Ff10NlMmkJEZ9W6cZzQsp2IeIlgNkwHp2UBuAABOTuPU9qILOoTBKDZX hm8Ly0y61Jqxb7Q0p84q92IMV4g++JHiZb67S9Xd/B382QFYHqE8iHkEp+HcdrFv WjhfOIgX7dB+KajHKS0RT6C1ezTTa2rLSriCd+TLHL6iiG2pUIfZVlj5EExDQxPy pa7SvOhUVC69bJzxzTto5sOUgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdz1JP4 6AR6omlPt5+pXs6zNIL/MB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzQ4RS80RDc4OTI2QTRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3 VmtMU1NFdF9BZ1d1ZmN4MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzo9R1AzShGyXTTZD912QVmc6+R8uJSE98GWbPPx9A6riVz477PO+4 kVFm7oWv8UKMKvqxG1uhuRvp+NNc2jkt+dBPRjXJ0ffLY7RFCP6V7TvkCTr56FXL EjFJwR64mAiMpAgKekhXpNGK/htqCIJqy8UhwGNVsx0M1LHDo2ivtGgYd14miZix ROE7OX92swK1ua0vqCc3o8jAatQ2HwsAaOuXu2319Ui1OPOjTSEColkrTwDYfsUu D0k7y4GEPje6ks9+33snz+9viiGh7nTts4vmwsgPnfmAIrdTKhua6t37G3dRyj6N UsNf58ffjk5YByvtliZtxFWIecNw7ZVM -----END CERTIFICATE-----Generated at Sun Jul 20 10:34:29 2025 by rpki-client