$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json) Hash identifier: iX2atflSuY4UgMyNHPfxmfls0tMfTB0gI2RNqr0nj/o= Subject key identifier: 59:CF:AE:68:75:1A:14:67:AD:4B:40:04:25:A5:0B:D4:14:94:7D:72 Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Certificate serial: 0EE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft Manifest number: 0EDE Signing time: Mon 08 Sep 2025 17:40:26 +0000 Manifest this update: Mon 08 Sep 2025 17:40:25 +0000 Manifest next update: Mon 15 Sep 2025 17:40:25 +0000 Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: o+1DG451NJvN2hw6Tt6C8jW97poYMh334PnLEg2kNuI=) 2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: IptQh9J7jeiBWTQD/hPt8ei062oDoKw0nZ49KCuQKMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3815 (0xee7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E898, serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Validity Not Before: Sep 8 17:40:25 2025 GMT Not After : Sep 15 17:40:25 2025 GMT Subject: CN=68bf1509-6c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:56:c6:18:23:61:36:19:7a:83:e5:1e:e2: 3a:57:14:02:11:b4:37:65:3d:f1:7e:c8:f5:fb:44: f5:d6:1a:af:6b:5a:58:04:28:54:8d:ee:65:8e:a0: 88:d3:bd:f1:22:e5:30:03:20:51:78:36:e5:db:03: 8c:d7:47:35:1a:87:a0:25:59:e1:b6:c7:d7:cf:35: 63:ec:e7:36:a1:33:f0:85:f9:fc:80:83:43:8a:e1: 61:57:82:af:46:0c:82:fc:ab:14:90:2c:73:60:7d: 8d:5a:b1:6b:ab:41:fb:e9:5c:6b:f4:fc:56:e1:ba: e5:ee:32:ae:d0:40:55:06:94:e1:0b:f2:01:6c:87: f2:0d:57:c9:ea:6e:06:68:cd:d0:d1:3f:f9:31:6f: 8e:b4:20:45:79:c2:6e:1c:69:1e:d8:7b:9a:19:4e: fe:25:aa:91:4e:8e:bf:5f:13:a3:a9:40:ec:90:bb: 79:4c:5f:c0:be:9a:6c:1c:d0:7c:10:ca:22:a4:1d: cf:b5:a4:c9:dd:3b:5f:95:52:60:1e:cd:3a:3e:2f: 2f:88:bb:01:09:16:52:d0:ed:0b:13:00:9c:62:4d: 9b:01:6e:b1:fe:35:78:13:62:97:2a:cb:a2:00:fa: 9a:b8:8c:6c:2b:de:c7:7b:92:50:7b:0a:fc:72:3b: c6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CF:AE:68:75:1A:14:67:AD:4B:40:04:25:A5:0B:D4:14:94:7D:72 X509v3 Authority Key Identifier: keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:54:87:ed:04:47:a0:71:4a:0a:59:f9:7e:ad:7e:d7:13:1b: a5:be:f4:22:ac:70:be:53:0a:d5:11:78:96:96:f9:d7:bb:71: cf:a1:47:97:c2:6f:b8:63:a8:ce:96:60:b9:1b:68:0a:77:ac: 98:a3:2f:36:cf:e5:25:95:49:28:a9:a1:7a:8f:7e:89:1e:e4: b8:be:d6:ef:b6:56:87:01:59:ad:41:f4:1d:a7:27:9d:61:c4: f7:76:f1:01:c5:50:f0:3e:8a:f4:b2:b7:5e:6d:13:6d:10:27: cc:cc:ae:30:3b:0a:7f:45:85:be:67:3c:c8:71:60:0c:8f:d4: d8:26:6e:f9:39:2f:58:73:d3:0d:11:a1:f8:ad:6f:e4:66:ec: 9f:48:49:ee:01:b2:48:97:bb:8f:ef:38:62:7c:ad:59:35:19: 1d:e1:6c:51:e0:80:df:2b:d7:bd:2e:c5:96:6c:6b:55:af:be: 9c:5f:a5:5f:75:19:23:d0:04:bf:48:21:2f:8e:c3:a7:3b:3a: cc:f4:ef:be:a6:20:85:13:a1:b1:d7:3e:0b:00:57:c1:55:ae: 91:f9:c1:a8:b0:be:2f:76:be:56:c6:4f:65:7e:d9:52:03:ec: 24:90:e7:b5:fc:e7:b0:fd:d6:0a:82:c5:8e:ed:0a:1b:27:be: a6:0a:7a:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4OTgxMTAvBgNVBAUTKDQ4MkRBREI5OTJERTJDRjFCRjk5MDgzNjQ3OEUxOTk0 NDk5NUIxRTAwHhcNMjUwOTA4MTc0MDI1WhcNMjUwOTE1MTc0MDI1WjAYMRYwFAYD VQQDEw02OGJmMTUwOS02YzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwddWxhgjYTYZeoPlHuI6VxQCEbQ3ZT3xfsj1+0T11hqva1pYBChUje5ljqCI 073xIuUwAyBReDbl2wOM10c1GoegJVnhtsfXzzVj7Oc2oTPwhfn8gINDiuFhV4Kv RgyC/KsUkCxzYH2NWrFrq0H76Vxr9PxW4brl7jKu0EBVBpThC/IBbIfyDVfJ6m4G aM3Q0T/5MW+OtCBFecJuHGke2HuaGU7+JaqRTo6/XxOjqUDskLt5TF/AvppsHNB8 EMoipB3PtaTJ3TtflVJgHs06Pi8viLsBCRZS0O0LEwCcYk2bAW6x/jV4E2KXKsui APqauIxsK97He5JQewr8cjvGHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnPrmh1 GhRnrUtABCWlC9QUlH1yMB8GA1UdIwQYMBaAFEgtrbmS3izxv5kINkeOGZRJlbHg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg5OC8yMTFDNjQ0NjhD MjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQR19tUWcyUjQ0WmxFbVZz ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMnR1WkxlTFBHX21RZzJSNDRabEVtVnNlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg5OC8yMTFDNjQ0NjhDMjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQ R19tUWcyUjQ0WmxFbVZzZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgVIftBEegcUoKWfl+rX7XExulvvQirHC+UwrVEXiWlvnXu3HPoUeX wm+4Y6jOlmC5G2gKd6yYoy82z+UllUkoqaF6j36JHuS4vtbvtlaHAVmtQfQdpyed YcT3dvEBxVDwPor0srdebRNtECfMzK4wOwp/RYW+ZzzIcWAMj9TYJm75OS9Yc9MN EaH4rW/kZuyfSEnuAbJIl7uP7zhifK1ZNRkd4WxR4IDfK9e9LsWWbGtVr76cX6Vf dRkj0AS/SCEvjsOnOzrM9O++piCFE6Gx1z4LAFfBVa6R+cGosL4vdr5Wxk9lftlS A+wkkOe1/Oew/dYKgsWO7QobJ76mCnpr -----END CERTIFICATE-----Generated at Tue Sep 9 13:18:06 2025 by rpki-client