$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft File: sUCvBJGbRROCWm6lfhq55UN548g.mft (raw, json) Hash identifier: AV+j7ChqhbN5U+tYiSzI+jEWK+/cKK2KnDCHDiKBqPU= Subject key identifier: F2:55:D6:93:EA:7E:EE:2E:7C:C1:3A:92:F0:D1:F7:7E:FF:67:BB:59 Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 Certificate issuer: /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Certificate serial: 0B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft Manifest number: 0B5C Signing time: Sun 24 Aug 2025 19:05:39 +0000 Manifest this update: Sun 24 Aug 2025 19:05:39 +0000 Manifest next update: Sun 31 Aug 2025 19:05:39 +0000 Files and hashes: 1: sUCvBJGbRROCWm6lfhq55UN548g.crl (hash: /AVdh4e6RPPhuK3EIAyqi/TuFFd1Hsu+0FVTopTg35k=) 2: B6EF8F5E3A9011EA957A6A34C4F9AE02.roa (hash: MMg6miblGYwiWs8actEKJcMi2SqNBUoJuKwgQQDzl38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EBFD, serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Validity Not Before: Aug 24 19:05:39 2025 GMT Not After : Aug 31 19:05:39 2025 GMT Subject: CN=68ab6283-dc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:5f:40:d8:33:a5:85:41:b2:b8:7a:07:3b: 4e:ea:65:e1:ae:b7:ac:5d:db:23:ae:ed:38:34:a9: 03:29:fe:93:c2:5a:74:2d:80:69:d9:a4:ac:8d:c2: 85:25:0a:8e:f8:35:0a:97:d3:33:b9:8b:aa:0b:68: d5:39:31:02:23:5e:5f:79:c2:38:d1:4e:9d:49:60: 77:ab:6b:bc:54:d1:b3:ee:61:ab:60:fe:7f:ef:c7: f6:22:a6:cf:32:ec:2c:3e:63:3d:2b:f9:78:2f:07: 6f:f0:9c:93:58:52:00:cf:bc:87:c6:cc:f5:d4:e3: 2d:09:8f:f2:b6:07:91:63:72:75:f2:2f:02:f2:22: 61:f1:77:dc:aa:3d:b8:c5:2e:0d:d0:3c:16:12:15: 5d:49:fe:54:26:cf:f5:33:2f:e2:e4:16:11:99:60: ca:c5:dd:4a:89:81:c4:a6:56:73:d2:f5:73:fb:48: d3:59:d4:ae:52:d5:14:cc:8e:09:79:ee:39:da:87: 1a:7a:97:b1:42:97:6d:7d:49:26:43:8d:d7:a4:2c: 41:19:e3:68:ab:4b:51:0f:17:92:45:a7:60:98:2f: 0b:d0:04:42:7f:75:f8:48:3d:02:cd:e7:c6:dc:2d: 79:17:71:09:7e:a6:60:bd:d6:24:3b:65:e0:59:d9: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:55:D6:93:EA:7E:EE:2E:7C:C1:3A:92:F0:D1:F7:7E:FF:67:BB:59 X509v3 Authority Key Identifier: keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:53:0c:ce:81:59:4c:d1:fe:8f:72:c1:1f:ae:d8:e1:79:6c: a2:b6:f5:c9:a4:46:03:4f:b9:6c:fb:5f:b1:05:4b:8f:f7:f5: d3:71:51:2f:5f:d1:46:f7:c1:15:b7:16:94:2b:04:19:3d:6e: 7e:82:b0:24:e8:2a:a0:5f:96:67:87:cf:e4:71:3c:83:f7:35: eb:02:e3:f9:06:0b:1d:dc:5c:40:05:7b:7b:c3:39:2d:6e:44: 05:0f:d0:6e:94:3b:39:99:2b:0d:13:1e:a0:e8:59:21:01:b1: 2d:ba:70:7f:80:09:ec:24:0a:9a:ca:2d:b2:1f:25:33:62:df: 63:9c:d7:6f:23:b5:2b:c1:43:e3:4b:ae:4b:6e:5a:ce:1c:f3: 24:97:52:70:a6:0d:fe:0b:ba:a9:6e:9c:d0:ad:b4:f9:41:a1: 45:c2:32:b3:4d:5e:bf:01:d0:e6:f2:18:17:03:51:ba:76:4e: 48:9a:af:ab:20:a2:0b:ec:4c:9c:97:1d:4c:1f:7a:ab:15:ae: fa:f7:46:38:fa:88:5f:cd:90:1a:13:e7:2e:c5:4a:ea:0f:62: 12:1a:98:89:6f:5e:e9:59:06:9b:11:cc:40:95:ce:06:86:2a: f7:3a:fb:9b:04:43:97:b8:f3:aa:0c:d7:3e:85:56:99:c9:c8: 07:01:bb:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VCRkQxMTAvBgNVBAUTKEIxNDBBRjA0OTE5QjQ1MTM4MjVBNkVBNTdFMUFCOUU1 NDM3OUUzQzgwHhcNMjUwODI0MTkwNTM5WhcNMjUwODMxMTkwNTM5WjAYMRYwFAYD VQQDEw02OGFiNjI4My1kYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZ9fQNgzpYVBsrh6BztO6mXhrresXdsjru04NKkDKf6Twlp0LYBp2aSsjcKF JQqO+DUKl9MzuYuqC2jVOTECI15fecI40U6dSWB3q2u8VNGz7mGrYP5/78f2IqbP MuwsPmM9K/l4Lwdv8JyTWFIAz7yHxsz11OMtCY/ytgeRY3J18i8C8iJh8Xfcqj24 xS4N0DwWEhVdSf5UJs/1My/i5BYRmWDKxd1KiYHEplZz0vVz+0jTWdSuUtUUzI4J ee452ocaepexQpdtfUkmQ43XpCxBGeNoq0tRDxeSRadgmC8L0ARCf3X4SD0CzefG 3C15F3EJfqZgvdYkO2XgWdl+nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJV1pPq fu4ufME6kvDR937/Z7tZMB8GA1UdIwQYMBaAFLFArwSRm0UTglpupX4aueVDeePI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUJGRC9GN0NFNjI5QTNB OEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJST0NXbTZsZmhxNTVVTjU0 OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQ3ZCSkdiUlJPQ1dtNmxmaHE1NVVONTQ4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUJGRC9GN0NFNjI5QTNBOEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJS T0NXbTZsZmhxNTVVTjU0OGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3UwzOgVlM0f6PcsEfrtjheWyitvXJpEYDT7ls+1+xBUuP9/XTcVEv X9FG98EVtxaUKwQZPW5+grAk6CqgX5Znh8/kcTyD9zXrAuP5Bgsd3FxABXt7wzkt bkQFD9BulDs5mSsNEx6g6FkhAbEtunB/gAnsJAqayi2yHyUzYt9jnNdvI7UrwUPj S65LblrOHPMkl1Jwpg3+C7qpbpzQrbT5QaFFwjKzTV6/AdDm8hgXA1G6dk5Imq+r IKIL7Eyclx1MH3qrFa7690Y4+ohfzZAaE+cuxUrqD2ISGpiJb17pWQabEcxAlc4G hir3OvubBEOXuPOqDNc+hVaZycgHAbt5 -----END CERTIFICATE-----Generated at Sun Aug 24 22:05:02 2025 by rpki-client