$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json) Hash identifier: Gj0CaMUL/YoQ0tyPcG+YBacs++3I2DEkg8uJ5HE+yHo= Subject key identifier: 5F:52:A3:8A:2C:1D:E1:F0:A5:BB:36:81:7E:A1:83:E1:87:00:FA:DA Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft Manifest number: 0E Signing time: Fri 05 Sep 2025 18:42:45 +0000 Manifest this update: Fri 05 Sep 2025 18:42:44 +0000 Manifest next update: Fri 12 Sep 2025 18:42:44 +0000 Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: 55i+B2eC9Ne/dyxa7nhVGjxg2FJs+xSyZjY6gSR/1W0=) 2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: eUyFtijE7ulYYeR6FE4HWasF4D8cnPdrEPGMIUGgb2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 18:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Validity Not Before: Sep 5 18:42:44 2025 GMT Not After : Sep 12 18:42:44 2025 GMT Subject: CN=68bb2f25-a59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:6a:7d:10:89:65:90:a5:3a:f3:8c:7a:39: d1:59:f1:1f:b1:d5:c6:de:e4:77:a0:36:ed:b3:0a: 8f:99:b1:33:c9:36:ae:a3:ae:04:4b:37:41:c7:25: bc:ea:16:2d:aa:d0:6c:ef:02:a8:5e:dd:76:3f:ea: 0a:72:f9:32:e1:51:f0:51:cc:74:3d:8e:31:24:01: ab:9a:bd:46:54:2e:c7:b5:7d:29:62:87:c4:4d:9c: b7:76:97:46:e7:d8:da:de:de:5c:40:5c:33:7d:4b: 03:0b:79:f2:51:70:c1:e1:05:b9:6f:7a:b5:58:a1: 7e:9a:53:25:f8:a8:77:a3:1d:cb:ee:07:48:94:71: 15:19:7f:f3:17:fe:f8:9d:d6:57:c7:c9:0a:98:1f: 19:e6:37:79:11:17:ef:e6:35:7d:7c:34:5a:72:c3: 9d:b7:9c:9a:55:78:76:4a:0b:2c:94:d8:b9:48:f4: b4:98:48:cd:84:8c:ad:38:f1:fe:1c:66:c5:a0:a4: 48:c3:b1:a5:8c:34:81:e5:3e:9f:2a:cf:7e:0b:13: 52:08:d1:a2:32:98:36:5e:ea:35:85:03:73:7c:88: 14:b7:1d:d8:57:4e:59:3e:a9:6c:e9:dd:a7:fa:f3: 9e:9d:b4:bb:3e:69:65:fb:c2:19:83:da:bf:d7:89: 60:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:52:A3:8A:2C:1D:E1:F0:A5:BB:36:81:7E:A1:83:E1:87:00:FA:DA X509v3 Authority Key Identifier: keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:67:fb:46:0a:81:fe:82:14:81:a6:95:b4:e7:87:0d:5a:5c: b3:4c:0c:ac:1c:dc:a9:b4:9f:e4:0a:83:ff:f2:2a:98:90:90: 84:78:79:39:09:ee:1f:6f:42:78:12:0e:d1:32:ac:ee:14:c2: b8:e0:82:5f:5b:8f:59:91:fc:04:9b:77:dc:84:8e:14:66:0c: 80:3b:5c:e3:da:d6:c7:59:6d:d3:65:f6:ae:1f:44:9b:60:60: df:bb:7e:3d:25:b4:d5:0c:82:65:bf:9b:eb:77:1e:b6:1c:8d: 3f:eb:36:15:2c:5b:e0:42:86:e8:b3:df:ff:e2:eb:88:4e:a7: 9f:d9:25:2c:55:d2:23:14:fd:dc:23:15:56:79:a3:57:36:f7: 3a:e5:59:07:19:61:56:21:4b:3c:7e:df:cb:6f:91:9d:b2:3d: 2b:cb:8a:eb:94:80:28:12:05:10:87:af:20:8a:f4:c3:da:ff: dc:33:05:ef:7a:a5:43:c5:63:03:68:28:28:fc:72:96:08:3e: b7:37:6f:18:b6:86:73:39:2a:52:ad:74:c3:8c:89:bd:3e:14: 19:ad:29:6b:63:64:c6:f9:a6:4d:05:87:43:27:55:d7:c7:07: 75:ad:25:3d:ae:fd:9d:ae:f3:d8:ae:78:cb:1e:b8:ac:3a:e9: a0:4c:2b:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNDk3QkI3MjcxODI3OURCQ0M5ODVEQkE2RDM5QjM2NTY3 RjQ0RTdBQTAeFw0yNTA5MDUxODQyNDRaFw0yNTA5MTIxODQyNDRaMBgxFjAUBgNV BAMTDTY4YmIyZjI1LWE1OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDdWp9EIllkKU684x6OdFZ8R+x1cbe5HegNu2zCo+ZsTPJNq6jrgRLN0HHJbzq Fi2q0GzvAqhe3XY/6gpy+TLhUfBRzHQ9jjEkAauavUZULse1fSlih8RNnLd2l0bn 2Nre3lxAXDN9SwMLefJRcMHhBblverVYoX6aUyX4qHejHcvuB0iUcRUZf/MX/vid 1lfHyQqYHxnmN3kRF+/mNX18NFpyw523nJpVeHZKCyyU2LlI9LSYSM2EjK048f4c ZsWgpEjDsaWMNIHlPp8qz34LE1II0aIymDZe6jWFA3N8iBS3HdhXTlk+qWzp3af6 856dtLs+aWX7whmD2r/XiWCzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX1Kjiiwd 4fCluzaBfqGD4YcA+towHwYDVR0jBBgwFoAUSXu3JxgnnbzJhdum05s2Vn9E56ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0IyQ0VBN0Y2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1h1M0p4Z25uYnpKaGR1bTA1czJWbjlFNTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0IyQ0VBN0Y2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6 SmhkdW0wNXMyVm45RTU2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFNn+0YKgf6CFIGmlbTnhw1aXLNMDKwc3Km0n+QKg//yKpiQkIR4eTkJ 7h9vQngSDtEyrO4Uwrjggl9bj1mR/ASbd9yEjhRmDIA7XOPa1sdZbdNl9q4fRJtg YN+7fj0ltNUMgmW/m+t3HrYcjT/rNhUsW+BChuiz3//i64hOp5/ZJSxV0iMU/dwj FVZ5o1c29zrlWQcZYVYhSzx+38tvkZ2yPSvLiuuUgCgSBRCHryCK9MPa/9wzBe96 pUPFYwNoKCj8cpYIPrc3bxi2hnM5KlKtdMOMib0+FBmtKWtjZMb5pk0Fh0MnVdfH B3WtJT2u/Z2u89iueMseuKw66aBMKxY= -----END CERTIFICATE-----Generated at Sat Sep 6 20:51:59 2025 by rpki-client