$ rpki-client -vvf 0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft File: 52840422D0B72BA9927DE0FF73535FDF163521A4.mft (raw, json) Hash identifier: 9Yc7Gi9SORw55ttGkEf0yIFT4H1nR7iymRO0QyhS6E0= Subject key identifier: CD:9E:74:80:7C:E7:C2:40:27:CD:18:25:DD:59:5D:18:E7:42:7E:A8 Authority key identifier: 52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 Certificate issuer: /CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Certificate serial: 23686745D821236A4CB6421E1FB60F53F89D7522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject info access: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft Manifest number: 0635 Signing time: Fri 24 Oct 2025 00:04:17 +0000 Manifest this update: Thu 23 Oct 2025 23:59:17 +0000 Manifest next update: Sat 25 Oct 2025 02:20:17 +0000 Files and hashes: 1: 52840422D0B72BA9927DE0FF73535FDF163521A4.crl (hash: 5hnhTAEmnByp3VH4f9eUDqxrRUlJVwWGn9F57Ylgujw=) 2: 3130332e3230312e3132382e302f32322d3234203d3e203233393539.roa (hash: euakz2tH0t+6W2UrkVW4TdO1cFAouzA/wKh47M8X1Ds=) 3: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: of2lUbNuQom6rR9aba5WRy88RY/aB/ddNJAkiL5owZ0=) 4: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: Y4yo/btWNJYOnxXH2L7ym8zj4X3k7WkR14OJ99bejXo=) 5: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: NzvxeOISCBxGqvrzZjBZu0oMo4rqIXiZ91cAneYGZFA=) 6: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: CC8E23Yh7/HhtCNdi2KuY5mXbENB/iwBI2NRmwM7MTw=) Validation: OK Signature path: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 02:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:68:67:45:d8:21:23:6a:4c:b6:42:1e:1f:b6:0f:53:f8:9d:75:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Validity Not Before: Oct 23 23:59:17 2025 GMT Not After : Oct 25 02:20:17 2025 GMT Subject: CN=CD9E74807CE7C24027CD1825DD595D18E7427EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:8e:bb:42:33:4e:ee:01:4a:d0:75:54:8f: 9d:10:c2:73:f6:f8:5b:34:b5:4a:d7:dc:c7:eb:a4: 5b:14:05:7c:73:65:8c:d4:66:12:49:a2:b1:96:0a: e2:95:e4:95:2e:3a:d0:3c:ef:61:bb:4c:74:e6:00: 06:66:29:f9:30:2b:8d:1a:d8:9c:3a:37:c0:15:2d: fc:dd:38:59:b1:8a:92:75:c1:c8:0c:6e:aa:5f:c1: 43:bc:40:ef:01:08:72:4d:1c:c7:14:d9:31:94:97: 5a:4c:dd:46:40:fd:f9:86:09:39:93:66:0a:82:fa: a5:c5:6e:49:74:91:66:c1:51:03:c2:d0:8c:a9:8e: 53:03:de:e6:8c:9d:e0:0c:60:94:06:e9:fc:e9:d3: 1b:a2:9e:ac:7f:f2:de:b7:ad:93:4c:31:9c:e5:4f: 3a:83:cd:a4:62:fe:98:fe:1c:b3:c7:d6:dc:3a:e8: 3c:cc:f5:be:5f:5d:9d:f4:78:1e:84:9c:55:df:3d: d5:3f:04:25:c1:19:f8:ef:7d:90:81:22:82:78:b4: f8:e6:06:b4:8a:c3:c7:4c:05:20:e1:33:d2:f8:37: f0:df:c7:0c:a9:60:07:4f:3f:17:bb:06:1b:4c:23: fa:c7:30:01:13:97:d2:d9:bb:7c:2c:f5:78:00:81: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9E:74:80:7C:E7:C2:40:27:CD:18:25:DD:59:5D:18:E7:42:7E:A8 X509v3 Authority Key Identifier: keyid:52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5c:7c:9f:ab:b6:8e:a6:63:3c:c0:8e:83:6c:40:ae:0c:d5: 97:38:ef:cd:cf:fe:1a:c4:fd:ac:b6:70:da:5b:d5:be:67:60: 62:4b:38:c4:23:31:e8:0f:e7:0d:df:02:8f:55:d3:cf:d6:94: 37:7c:59:d1:e9:ff:09:32:55:2f:8b:32:f8:23:44:5b:99:a5: 5d:ad:dc:0c:83:b5:eb:0a:d5:e5:df:3f:bc:93:13:e4:8b:0a: d4:08:d2:19:6a:d0:da:b8:7b:c6:2f:33:29:43:8b:5e:c3:1b: db:70:ed:e6:ae:d3:e7:51:2f:5a:d3:dd:6f:85:34:23:d0:24: 5c:b7:20:25:8d:9d:68:ce:2f:ff:e0:c9:00:b8:15:82:8e:1d: bb:ac:7b:e1:88:fa:5a:10:7a:02:a7:4f:88:85:04:b5:0d:30: 1d:ed:c8:f9:ec:df:cb:d1:68:26:8d:09:09:0b:f4:7b:b2:1b: 91:eb:52:57:f0:69:34:5c:ad:c6:b9:45:ac:86:25:e0:3d:30: 12:f7:88:8a:2d:70:68:c9:1f:c7:07:49:1f:9a:2a:7d:76:c5: 5d:cc:e2:9a:2e:d7:33:c6:ee:0d:2b:3c:32:56:79:9f:87:eb: d9:97:76:9f:80:7d:fb:f0:93:05:16:10:1c:21:9a:df:0a:f4: 14:ef:74:b8 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUI2hnRdghI2pMtkIeH7YPU/iddSIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1Mjg0MDQyMkQw QjcyQkE5OTI3REUwRkY3MzUzNUZERjE2MzUyMUE0MB4XDTI1MTAyMzIzNTkxN1oX DTI1MTAyNTAyMjAxN1owMzExMC8GA1UEAxMoQ0Q5RTc0ODA3Q0U3QzI0MDI3Q0Qx ODI1REQ1OTVEMThFNzQyN0VBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDPjrtCM07uAUrQdVSPnRDCc/b4WzS1Stfcx+ukWxQFfHNljNRmEkmisZYK 4pXklS460DzvYbtMdOYABmYp+TArjRrYnDo3wBUt/N04WbGKknXByAxuql/BQ7xA 7wEIck0cxxTZMZSXWkzdRkD9+YYJOZNmCoL6pcVuSXSRZsFRA8LQjKmOUwPe5oyd 4AxglAbp/OnTG6KerH/y3retk0wxnOVPOoPNpGL+mP4cs8fW3DroPMz1vl9dnfR4 HoScVd891T8EJcEZ+O99kIEigni0+OYGtIrDx0wFIOEz0vg38N/HDKlgB08/F7sG G0wj+scwAROX0tm7fCz1eACBodcCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTNnnSA fOfCQCfNGCXdWV0Y50J+qDAfBgNVHSMEGDAWgBRShAQi0LcrqZJ94P9zU1/fFjUh pDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzkvNTI4NDA0MjJEMEI3MkJBOTkyN0RFMEZGNzM1MzVGREYxNjM1 MjFBNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvVW9RRUl0QzNLNm1TZmVEX2MxTmYzeFkxSWFRLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM5LzUy ODQwNDIyRDBCNzJCQTk5MjdERTBGRjczNTM1RkRGMTYzNTIxQTQubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBsXHyfq7aOpmM8wI6DbECuDNWXOO/Nz/4axP2stnDaW9W+Z2BiSzjEIzHoD+cN 3wKPVdPP1pQ3fFnR6f8JMlUvizL4I0RbmaVdrdwMg7XrCtXl3z+8kxPkiwrUCNIZ atDauHvGLzMpQ4tewxvbcO3mrtPnUS9a091vhTQj0CRctyAljZ1ozi//4MkAuBWC jh27rHvhiPpaEHoCp0+IhQS1DTAd7cj57N/L0WgmjQkJC/R7shuR61JX8Gk0XK3G uUWshiXgPTAS94iKLXBoyR/HB0kfmip9dsVdzOKaLtczxu4NKzwyVnmfh+vZl3af gH378JMFFhAcIZrfCvQU73S4 -----END CERTIFICATE-----Generated at Fri Oct 24 06:06:56 2025 by rpki-client