$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json) Hash identifier: 6R/ePk25RJNb7yKPeQH/hGBM9h5YJ4+k5x766Cl3seM= Subject key identifier: 43:E3:D8:4B:1D:F1:EA:48:D9:D2:E8:72:CE:BD:D1:E7:8B:59:63:EC Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Certificate serial: 34A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft Manifest number: 34A0 Signing time: Sun 20 Jul 2025 15:18:54 +0000 Manifest this update: Sun 20 Jul 2025 15:18:54 +0000 Manifest next update: Sun 27 Jul 2025 15:18:54 +0000 Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: riL8eMm4EnipViSJcNczpEj+pkItbMGb7OLekXlCfTo=) 2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: rYc9zikfT0tRDa7zasMyBZpEVFa00oL4CS7Q4S+HlQg=) 3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: 0DLMcfV/Llm+3fYXZIJn54Ysw/AzVCrvYXgQgG2YQmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13477 (0x34a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Validity Not Before: Jul 20 15:18:54 2025 GMT Not After : Jul 27 15:18:54 2025 GMT Subject: CN=687d08de-a581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:e7:16:92:13:35:5b:ec:f4:6e:53:bc:95: 4a:47:81:8f:7e:5d:5b:41:b1:a9:1b:6c:3b:e8:59: 88:45:c9:99:64:03:31:76:f3:08:01:55:71:25:ff: cf:8d:6a:91:f6:ba:f5:28:1c:c3:53:2a:e6:21:70: 03:8a:67:ec:58:45:1a:d3:39:79:2c:72:82:1f:21: 76:4c:5e:e6:92:3d:89:96:8b:fa:33:c6:29:c2:be: af:82:76:f6:4e:10:c4:9c:e5:37:45:aa:7a:9e:19: 74:e9:a4:2e:5f:91:ff:2b:8f:6f:49:42:ed:db:a0: 75:0c:d4:e3:ee:26:1d:af:03:96:78:e6:ef:8e:17: e8:1f:8e:b6:ee:87:1c:2b:ce:56:59:40:b2:22:f3: 0e:12:c1:43:4c:a3:ee:be:eb:ee:36:dd:4d:a7:3a: 8b:07:19:cc:33:77:8d:35:e3:37:1c:40:23:3b:03: 53:dc:54:fd:80:28:6d:21:48:94:55:ef:40:ea:19: 81:f9:69:ff:cd:9e:4b:9c:c4:f3:55:60:36:09:69: 6a:53:9b:95:a9:02:42:39:5a:6f:26:d8:be:6c:5f: ef:cb:c4:bb:79:fc:4c:db:d8:21:58:48:54:b7:13: cb:ab:71:e1:4c:fe:bc:c5:a8:c8:9d:21:3a:8c:97: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E3:D8:4B:1D:F1:EA:48:D9:D2:E8:72:CE:BD:D1:E7:8B:59:63:EC X509v3 Authority Key Identifier: keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bd:b6:62:73:53:d6:b4:7d:5d:e4:91:a8:ee:83:e3:82:93: 99:6c:6e:e1:43:48:de:2c:68:0c:0d:db:10:8f:b9:98:4d:e9: 94:fb:14:6f:6b:fc:5c:41:de:4d:55:4f:32:a2:79:ac:9c:15: b0:b9:5d:8a:4c:b4:9f:5b:88:e5:4f:bf:00:a0:ab:e1:42:7c: fa:61:bd:a1:c7:ee:2f:c0:4c:4a:b5:fb:c2:d2:05:26:9a:fa: a5:bc:ff:59:5c:ea:47:63:a4:69:e5:c8:90:1d:85:b2:f3:21: 7a:6b:61:6d:3e:c9:98:fc:81:38:0d:ff:3f:0a:fc:62:8f:63: e7:76:b4:1b:a7:87:27:17:85:b7:ec:b7:8a:3b:7c:fb:de:d9: ce:27:77:56:1a:fc:41:d3:88:a6:46:21:52:4e:ad:57:2f:6e: 42:26:5e:dd:64:21:a5:e2:12:bf:a9:e5:84:51:67:a3:c6:77: 4f:ba:c6:2f:5f:c7:cb:3e:cf:d7:0c:9e:8d:0a:d6:ab:51:bd: 3a:73:60:b4:29:ea:b0:d0:23:40:90:9e:3f:d7:d4:1e:aa:96: 75:fd:f1:f8:84:8c:4c:ea:3a:7d:af:cf:3b:c1:66:ca:48:8b: 57:d0:8e:ac:35:f0:95:6b:d7:fb:ff:98:b9:5c:77:fb:7c:29: 9b:9a:90:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkUxMTAvBgNVBAUTKDQ5N0IxQzRFQTZEQjE1QTgzMUZCQzE3MjJBMkY2MzQ3 NDUwQ0YzNDEwHhcNMjUwNzIwMTUxODU0WhcNMjUwNzI3MTUxODU0WjAYMRYwFAYD VQQDEw02ODdkMDhkZS1hNTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp7nFpITNVvs9G5TvJVKR4GPfl1bQbGpG2w76FmIRcmZZAMxdvMIAVVxJf/P jWqR9rr1KBzDUyrmIXADimfsWEUa0zl5LHKCHyF2TF7mkj2Jlov6M8Ypwr6vgnb2 ThDEnOU3Rap6nhl06aQuX5H/K49vSULt26B1DNTj7iYdrwOWeObvjhfoH4627occ K85WWUCyIvMOEsFDTKPuvuvuNt1NpzqLBxnMM3eNNeM3HEAjOwNT3FT9gChtIUiU Ve9A6hmB+Wn/zZ5LnMTzVWA2CWlqU5uVqQJCOVpvJti+bF/vy8S7efxM29ghWEhU txPLq3HhTP68xajInSE6jJfIFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPj2Esd 8epI2dLocs690eeLWWPsMB8GA1UdIwQYMBaAFEl7HE6m2xWoMfvBciovY0dFDPNB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2RS9ERDQ1NUNEQTFE QTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZhZ3gtOEZ5S2k5alIwVU04 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYc2NUcWJiRmFneC04RnlLaTlqUjBVTTgwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2RS9ERDQ1NUNEQTFEQTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZh Z3gtOEZ5S2k5alIwVU04MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfvbZic1PWtH1d5JGo7oPjgpOZbG7hQ0jeLGgMDdsQj7mYTemU+xRv a/xcQd5NVU8yonmsnBWwuV2KTLSfW4jlT78AoKvhQnz6Yb2hx+4vwExKtfvC0gUm mvqlvP9ZXOpHY6Rp5ciQHYWy8yF6a2FtPsmY/IE4Df8/Cvxij2PndrQbp4cnF4W3 7LeKO3z73tnOJ3dWGvxB04imRiFSTq1XL25CJl7dZCGl4hK/qeWEUWejxndPusYv X8fLPs/XDJ6NCtarUb06c2C0Keqw0CNAkJ4/19QeqpZ1/fH4hIxM6jp9r887wWbK SItX0I6sNfCVa9f7/5i5XHf7fCmbmpDR -----END CERTIFICATE-----Generated at Mon Jul 21 05:51:47 2025 by rpki-client