$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json) Hash identifier: 6003lQyrs+BfkN90vjxyWj7LuRh7P+0MaIMcvfKXgEs= Subject key identifier: F3:0A:A0:70:DD:2C:86:E6:BD:0B:09:0C:85:55:DB:E9:AB:BF:2D:82 Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft Manifest number: E5 Signing time: Fri 25 Jul 2025 05:41:59 +0000 Manifest this update: Fri 25 Jul 2025 05:41:59 +0000 Manifest next update: Fri 01 Aug 2025 05:41:59 +0000 Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: HaOQafqIsoS2Tn5DXTGyZzFMLf+qjtQEegwkYek1qgg=) 2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: yRSzHrzurf6XSOu6xC9tCIXU5IVd5pxNWSd3g3cqSyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 05:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: Jul 25 05:41:59 2025 GMT Not After : Aug 1 05:41:59 2025 GMT Subject: CN=68831927-64c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:71:49:c6:02:40:de:08:c7:1d:fe:1f:70: d5:12:e9:b6:c8:b3:17:a8:c4:20:05:b6:12:dd:23: 98:92:96:20:7a:29:a5:0a:46:14:5e:ea:9f:1b:8f: a1:1b:fa:93:bb:cc:07:97:af:da:77:26:a5:08:c1: c1:74:79:8d:1a:8e:a3:2a:50:63:cb:8c:a7:65:46: ac:29:e3:e6:af:06:d8:13:fb:de:48:b2:6b:8a:ec: 84:d5:fd:dc:7c:09:ce:4d:17:b5:f3:8c:f1:bb:14: d5:a6:fa:b1:e4:44:2d:86:46:f9:3b:e0:7e:e2:34: b6:47:aa:0f:e4:41:bc:d4:6d:5b:7f:bb:6e:e0:57: 6b:c6:2f:64:d9:3e:b0:fa:fd:8c:f4:26:a9:33:df: 17:de:bd:d1:18:87:d3:64:24:d6:f7:85:db:c5:d2: 20:b0:37:d6:9e:a9:f8:64:4d:c1:2d:85:02:a1:e3: a4:c1:6d:09:8b:88:08:38:41:f7:ec:22:97:bb:07: b8:17:71:3c:6b:23:e8:26:e3:1c:d8:82:b2:c7:be: b8:bf:02:02:e3:b7:7b:ac:e1:1e:f0:81:6c:0a:98: 5c:a9:05:d5:1b:d4:c3:c8:55:fe:aa:6b:c8:18:2e: fa:c2:1b:d3:b3:dd:e0:17:9f:7f:73:0f:6f:79:ca: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0A:A0:70:DD:2C:86:E6:BD:0B:09:0C:85:55:DB:E9:AB:BF:2D:82 X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:62:28:78:db:06:a4:66:25:c6:38:c5:d5:46:29:41:bb:ee: 8e:15:e3:90:8c:15:f2:ff:b0:80:72:78:ef:c2:fa:46:cb:9f: 2b:26:17:c7:95:16:4f:0a:ee:2d:d6:a0:50:cb:af:09:77:f5: 40:5e:5e:3b:89:44:d1:5e:d2:a0:54:97:b5:b0:5e:ba:b7:aa: 7c:55:f1:5f:f3:29:f1:01:0b:a1:c0:4e:82:34:3f:80:01:4a: 09:ba:63:ea:02:69:ea:97:05:36:37:bd:97:dc:a7:69:83:d4: 3b:05:fd:79:01:33:5c:76:a6:91:bd:97:14:8f:d3:f7:43:5c: e1:60:b1:20:48:f4:7b:b0:ea:be:c2:81:64:6a:45:9e:54:87: 8e:3a:5c:25:95:a9:b1:32:63:5a:a0:a1:04:9b:cc:fe:88:74: 50:57:fd:7e:44:e4:7b:12:d3:7e:b4:7d:76:e8:79:39:14:b1: dd:8d:15:0b:18:8b:3c:3c:46:da:07:1c:ab:e6:c6:2c:f8:76: b1:8b:2b:41:27:14:62:2f:fe:ea:f3:93:40:f3:5a:d6:63:fc: 18:0d:58:c1:3a:95:b9:c4:40:2a:9f:6d:87:dc:31:65:df:dd: fa:7e:69:06:1b:06:2f:30:09:09:66:8b:5f:6c:d2:24:c2:12: ea:88:b3:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1 Mjg4NjM4MTEwHhcNMjUwNzI1MDU0MTU5WhcNMjUwODAxMDU0MTU5WjAYMRYwFAYD VQQDEw02ODgzMTkyNy02NGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2B5xScYCQN4Ixx3+H3DVEum2yLMXqMQgBbYS3SOYkpYgeimlCkYUXuqfG4+h G/qTu8wHl6/adyalCMHBdHmNGo6jKlBjy4ynZUasKePmrwbYE/veSLJriuyE1f3c fAnOTRe184zxuxTVpvqx5EQthkb5O+B+4jS2R6oP5EG81G1bf7tu4Fdrxi9k2T6w +v2M9CapM98X3r3RGIfTZCTW94XbxdIgsDfWnqn4ZE3BLYUCoeOkwW0Ji4gIOEH3 7CKXuwe4F3E8ayPoJuMc2IKyx764vwIC47d7rOEe8IFsCphcqQXVG9TDyFX+qmvI GC76whvTs93gF59/cw9vecpZXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMKoHDd LIbmvQsJDIVV2+mrvy2CMB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUyQi9GODM2QkRFQzBDRUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURf WnJmeDVNa1AtWWRTaUdPQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOYih42wakZiXGOMXVRilBu+6OFeOQjBXy/7CAcnjvwvpGy58rJhfH lRZPCu4t1qBQy68Jd/VAXl47iUTRXtKgVJe1sF66t6p8VfFf8ynxAQuhwE6CND+A AUoJumPqAmnqlwU2N72X3Kdpg9Q7Bf15ATNcdqaRvZcUj9P3Q1zhYLEgSPR7sOq+ woFkakWeVIeOOlwllamxMmNaoKEEm8z+iHRQV/1+ROR7EtN+tH126Hk5FLHdjRUL GIs8PEbaBxyr5sYs+HaxiytBJxRiL/7q85NA81rWY/wYDVjBOpW5xEAqn22H3DFl 3936fmkGGwYvMAkJZotfbNIkwhLqiLMc -----END CERTIFICATE-----Generated at Sat Jul 26 12:01:38 2025 by rpki-client