$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft File: SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json) Hash identifier: MwMJNXBrD9uQl+7Hq6oPNx7HcojWrHCDvGULeLB631Y= Subject key identifier: F3:37:AC:75:05:E1:B2:12:CB:34:5C:45:CE:CE:E1:BF:68:D9:F9:C2 Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A Certificate issuer: /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft Manifest number: 0186 Signing time: Thu 21 Aug 2025 03:39:30 +0000 Manifest this update: Thu 21 Aug 2025 03:39:30 +0000 Manifest next update: Thu 28 Aug 2025 03:39:30 +0000 Files and hashes: 1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: oPgbK/PiAzDjOaJxg6ido0fZsShV1ALFH/47RNA4iDo=) 2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: EJtO7SCnq7WD6CVqUE1wDTBTGe53mImtDfushaYOSys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Validity Not Before: Aug 21 03:39:30 2025 GMT Not After : Aug 28 03:39:30 2025 GMT Subject: CN=68a694f2-c657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:15:59:b0:ba:ef:31:ff:4f:3c:bd:c3:cb: 32:c1:4e:b6:36:21:36:3c:f1:32:6a:5c:10:a2:b1: 1e:13:a3:d6:09:e7:25:34:73:b9:ee:a9:2a:29:90: 3d:b4:30:ff:77:12:ac:ea:43:bf:bf:97:20:ca:b3: 95:7b:73:b5:f8:8c:32:4b:2f:d6:32:a3:ae:b2:21: fd:30:d2:c0:80:1e:be:b5:7e:4c:95:48:26:74:d0: d9:2a:38:99:c1:67:31:0b:8d:74:41:bb:d8:ee:dd: ac:e3:69:75:0c:eb:85:94:5c:96:80:48:08:dc:33: 3a:a1:c8:73:6f:60:88:62:a1:c4:5a:2e:3d:17:8a: d9:5f:bf:fa:60:a0:90:ba:c8:7d:a6:11:d4:18:62: 25:ca:7d:b5:f7:30:0a:ba:47:10:07:f3:d4:9d:36: 46:a7:82:4d:b9:8e:81:83:49:39:1f:7d:7f:57:4c: 02:cb:2c:fd:63:61:11:83:2c:41:c3:62:2b:8d:c4: ee:ff:4e:fc:8c:2b:89:6a:20:fb:1a:7e:bc:7e:41: 72:0d:7c:a0:85:2b:7a:3a:c6:cb:21:0a:63:eb:57: a6:0b:5e:a6:41:c3:be:ff:1f:50:ab:6d:e0:6c:fe: a6:38:c8:43:b6:d7:22:5e:7d:fe:3c:a7:6b:10:6e: c3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:37:AC:75:05:E1:B2:12:CB:34:5C:45:CE:CE:E1:BF:68:D9:F9:C2 X509v3 Authority Key Identifier: keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:82:46:57:c3:80:b1:d0:52:58:8f:00:42:74:e8:d9:67:5b: 08:1b:7c:f0:07:6d:5f:0b:33:c0:f6:19:af:0f:2f:c3:ea:6b: 02:9b:56:61:48:d1:14:9c:a2:68:04:ba:29:04:7b:77:ad:c9: 5c:7a:8e:5a:3c:07:db:66:ce:68:52:ed:ed:cd:77:1e:23:74: 50:b4:c9:40:d8:0d:3d:e2:29:ba:c6:30:5b:1c:21:19:b7:6a: f4:b8:1e:4a:8e:c4:5a:8f:fb:21:9d:d3:ff:ef:50:4f:77:c5: 4e:ad:6b:9a:a6:26:fa:52:a0:16:01:0b:f7:17:58:c9:f6:38: 1c:c4:f3:e6:6c:6c:8f:49:ad:23:f4:02:05:a4:95:d8:c9:0f: 47:e5:bb:e8:1c:f4:b1:be:db:e4:31:09:60:ce:9c:11:40:76: 30:3b:5b:7f:2d:81:f0:1f:c0:d1:f0:6d:11:15:87:57:21:55: 8e:e0:b9:54:24:90:a0:07:29:a0:32:35:57:11:2d:b0:27:d6: 1a:35:a3:06:c1:6a:64:84:9a:4e:e2:b5:8d:a7:f9:f7:f5:16: 5d:9e:f8:c4:8a:aa:ca:e8:37:9c:d4:33:20:34:68:de:65:99: 5e:8b:ab:ab:76:47:21:c5:c5:7f:fb:d3:43:95:2c:b5:36:80: 34:88:79:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I2NzUxMTAvBgNVBAUTKDRBQjVDQTEwQzJBQzIyMjgyQTk5QUU2QkY2MjRGOTM3 NTY4NDNGOEEwHhcNMjUwODIxMDMzOTMwWhcNMjUwODI4MDMzOTMwWjAYMRYwFAYD VQQDEw02OGE2OTRmMi1jNjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkMVWbC67zH/Tzy9w8sywU62NiE2PPEyalwQorEeE6PWCeclNHO57qkqKZA9 tDD/dxKs6kO/v5cgyrOVe3O1+IwySy/WMqOusiH9MNLAgB6+tX5MlUgmdNDZKjiZ wWcxC410QbvY7t2s42l1DOuFlFyWgEgI3DM6ochzb2CIYqHEWi49F4rZX7/6YKCQ ush9phHUGGIlyn219zAKukcQB/PUnTZGp4JNuY6Bg0k5H31/V0wCyyz9Y2ERgyxB w2IrjcTu/078jCuJaiD7Gn68fkFyDXyghSt6OsbLIQpj61emC16mQcO+/x9Qq23g bP6mOMhDttciXn3+PKdrEG7DgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPM3rHUF 4bISyzRcRc7O4b9o2fnCMB8GA1UdIwQYMBaAFEq1yhDCrCIoKpmua/Yk+TdWhD+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjY3NS9EQ0FEMjdGQzJB MDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lpZ3FtYTVyOWlUNU4xYUVQ NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyWEtFTUtzSWlncW1hNXI5aVQ1TjFhRVA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjY3NS9EQ0FEMjdGQzJBMDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lp Z3FtYTVyOWlUNU4xYUVQNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtgkZXw4Cx0FJYjwBCdOjZZ1sIG3zwB21fCzPA9hmvDy/D6msCm1Zh SNEUnKJoBLopBHt3rclceo5aPAfbZs5oUu3tzXceI3RQtMlA2A094im6xjBbHCEZ t2r0uB5KjsRaj/shndP/71BPd8VOrWuapib6UqAWAQv3F1jJ9jgcxPPmbGyPSa0j 9AIFpJXYyQ9H5bvoHPSxvtvkMQlgzpwRQHYwO1t/LYHwH8DR8G0RFYdXIVWO4LlU JJCgBymgMjVXES2wJ9YaNaMGwWpkhJpO4rWNp/n39RZdnvjEiqrK6Dec1DMgNGje ZZlei6urdkchxcV/+9NDlSy1NoA0iHla -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:40 2025 by rpki-client