$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json) Hash identifier: z9+/AJjle7qKdCtWaCRRpuzskH2TVDnTmhUHhmQcwyQ= Subject key identifier: 49:A8:77:90:6D:DF:86:4F:6A:42:09:FF:30:AF:4D:8D:D0:57:51:06 Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft Manifest number: 0171 Signing time: Thu 21 Aug 2025 04:27:41 +0000 Manifest this update: Thu 21 Aug 2025 04:27:40 +0000 Manifest next update: Thu 28 Aug 2025 04:27:40 +0000 Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: sX/bQUQMro8Ow93uf+ue5frN09L6TcSttypmuKDuZOU=) 2: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: 28Pcqodr/XiyCXR1rm1sG8vgE+8OCqXnMRTKbKZwlik=) 3: CEB166C0E47D11EFAFC6496FC4F9AE02.roa (hash: DZtIXQ1ghN4hCYJ+ctwT88CELrMnqgkRwXBOtM2ymVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Aug 21 04:27:40 2025 GMT Not After : Aug 28 04:27:40 2025 GMT Subject: CN=68a6a03c-28c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:96:3a:37:f7:3c:07:ff:fa:4e:0e:74:ce:b9: b1:c6:cb:f4:63:45:0a:3e:eb:77:ec:b9:35:4e:c9: 6d:c9:63:a7:fe:cf:d8:44:df:07:8d:7e:13:92:2c: 90:83:cd:72:a7:ca:39:f4:62:6c:8e:37:37:a5:9a: 2d:5b:72:f2:44:a0:e8:6e:56:5a:0b:64:51:4b:8d: 35:61:94:e2:6a:d1:80:02:28:12:ee:c9:1a:e9:56: b5:3a:87:fd:b8:3d:b8:70:c3:66:27:f5:37:b9:aa: ad:f9:e5:ad:b9:80:6f:8d:a0:2d:83:26:57:f7:02: 8f:5f:e4:68:5d:e9:d9:b2:39:a0:2a:e7:21:74:fc: 4b:b4:a9:b4:7d:1a:e1:97:36:5f:0f:c6:53:ac:db: 5d:fb:b7:1c:b4:41:82:1a:f5:f4:c4:de:9c:4d:a9: c7:1e:c9:c5:b9:0a:08:47:01:6a:ba:1d:32:05:e0: 11:75:45:d1:c1:c0:08:67:87:5b:9d:cf:83:d7:7e: c3:10:c8:1f:ef:cb:90:4d:84:c8:97:38:1a:03:2b: 59:d6:e4:c4:d9:77:a1:a9:b0:92:97:08:1e:a6:04: 42:30:6c:e9:a2:46:88:e2:e0:13:6f:db:25:f5:c9: 95:6a:aa:bc:a2:fd:2b:14:4e:46:f1:55:a5:e6:c9: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A8:77:90:6D:DF:86:4F:6A:42:09:FF:30:AF:4D:8D:D0:57:51:06 X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:09:08:c1:c5:e2:b2:01:49:7d:59:2e:1e:06:c8:ad:f8:89: 8f:75:fa:15:43:96:c2:34:4a:1c:13:e7:5d:62:a7:c7:6a:cf: 5b:b4:4b:1f:7c:26:49:f6:7a:ff:48:7e:7d:46:61:48:5a:4e: 9d:7d:bd:1a:96:7b:ca:8f:ad:be:74:4b:be:8c:a2:b0:9c:13: 86:df:04:51:c6:0b:72:41:79:c2:98:5e:94:80:58:44:15:5f: 5d:75:73:fc:35:98:32:0b:c7:b0:46:8d:58:a2:fe:75:84:68: 47:3d:8b:d4:d7:14:94:2d:e8:ea:c0:ed:77:81:6f:c2:db:4a: 3c:fa:8f:3d:5d:b0:2b:99:fe:32:8c:09:f9:1d:a0:f7:fe:ef: 48:29:dd:66:54:a6:96:38:70:13:8d:1b:5c:df:73:a7:b9:52: af:81:d6:38:44:aa:d4:db:07:af:d1:99:6c:fb:bd:8b:c4:80: 4f:4a:7b:51:e1:ff:00:06:dd:7f:b5:66:02:05:68:09:40:3f: d1:2d:9e:ed:ec:d0:85:89:d6:10:dd:f3:49:16:11:00:60:e5: 01:dc:26:bd:0b:84:a6:ad:c2:87:07:54:d3:d9:12:a4:9e:aa: 8f:7c:fd:a6:2b:72:0b:b4:25:cc:af:f8:80:ba:b5:e5:f2:b0: dc:ca:5f:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjUwODIxMDQyNzQwWhcNMjUwODI4MDQyNzQwWjAYMRYwFAYD VQQDEw02OGE2YTAzYy0yOGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJY6N/c8B//6Tg50zrmxxsv0Y0UKPut37Lk1TsltyWOn/s/YRN8HjX4TkiyQ g81yp8o59GJsjjc3pZotW3LyRKDoblZaC2RRS401YZTiatGAAigS7ska6Va1Oof9 uD24cMNmJ/U3uaqt+eWtuYBvjaAtgyZX9wKPX+RoXenZsjmgKuchdPxLtKm0fRrh lzZfD8ZTrNtd+7cctEGCGvX0xN6cTanHHsnFuQoIRwFquh0yBeARdUXRwcAIZ4db nc+D137DEMgf78uQTYTIlzgaAytZ1uTE2XehqbCSlwgepgRCMGzpokaI4uATb9sl 9cmVaqq8ov0rFE5G8VWl5sn5VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmod5Bt 34ZPakIJ/zCvTY3QV1EGMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ TVFoQ3lWVmtCUmRUM3JBb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUCQjBxeKyAUl9WS4eBsit+ImPdfoVQ5bCNEocE+ddYqfHas9btEsf fCZJ9nr/SH59RmFIWk6dfb0alnvKj62+dEu+jKKwnBOG3wRRxgtyQXnCmF6UgFhE FV9ddXP8NZgyC8ewRo1Yov51hGhHPYvU1xSULejqwO13gW/C20o8+o89XbArmf4y jAn5HaD3/u9IKd1mVKaWOHATjRtc33OnuVKvgdY4RKrU2wev0Zls+72LxIBPSntR 4f8ABt1/tWYCBWgJQD/RLZ7t7NCFidYQ3fNJFhEAYOUB3Ca9C4SmrcKHB1TT2RKk nqqPfP2mK3ILtCXMr/iAurXl8rDcyl+z -----END CERTIFICATE-----Generated at Sat Aug 23 03:09:26 2025 by rpki-client