$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json) Hash identifier: giwfBjf9x2LcfxHB4xYerL74VMDhl4CnjuZY46p+o2A= Subject key identifier: 7A:D3:00:45:87:FB:40:9F:A8:0E:E6:66:9F:64:15:8A:C3:F9:5C:E7 Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1F3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft Manifest number: 1F2F Signing time: Sun 24 Aug 2025 15:59:41 +0000 Manifest this update: Sun 24 Aug 2025 15:59:40 +0000 Manifest next update: Sun 31 Aug 2025 15:59:40 +0000 Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: f7IbhdLwTHLphp00lCGbWhPS6o/GgugxmHdl+LDYyoQ=) 2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: BczHzIbLkzNL4updWdbsFHqnEhXAUmCVG50paNnAJDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7999 (0x1f3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Aug 24 15:59:40 2025 GMT Not After : Aug 31 15:59:40 2025 GMT Subject: CN=68ab36ec-58f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:9c:a5:1a:0c:7c:00:4f:c3:c5:1d:08:55: d8:f3:40:3e:56:ac:38:6b:bd:93:7e:bc:80:9d:d4: 59:f5:d9:56:e8:a2:7c:6c:cc:60:d9:27:ba:9e:24: 75:0f:e8:0a:fe:7a:c7:fb:6b:68:2e:71:4f:d7:dd: 91:22:a3:11:6c:cf:2f:2c:97:62:77:2a:4e:bc:24: b6:e3:df:1f:36:f1:f7:10:ab:60:05:6a:3e:d4:87: 7e:e8:14:6e:67:53:7f:11:89:9a:64:cc:33:74:ef: 65:fc:33:3b:3a:09:24:d0:7a:bd:00:4c:d8:35:9f: 51:88:31:38:df:48:74:ab:33:47:63:e4:2a:c2:04: 9b:66:72:4c:6f:0c:5c:1b:81:eb:ad:0e:ec:3f:a9: ce:f1:0d:e8:af:71:31:85:c2:d1:45:7e:12:d3:1e: 98:cf:d4:cc:43:7d:08:4a:bc:72:7e:06:2b:a6:4c: 0c:41:73:5c:0b:75:ae:38:99:b5:24:ed:10:5f:22: be:73:71:8f:c6:cf:87:de:cc:1a:aa:da:ff:01:4b: e7:68:82:5b:c5:2e:9c:00:8a:1f:42:64:5f:08:78: ff:c6:17:35:a2:e8:36:40:6d:9c:4a:82:11:c6:b6: 16:47:58:78:1c:5c:53:ea:cc:c8:e1:d4:c3:85:52: 5f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D3:00:45:87:FB:40:9F:A8:0E:E6:66:9F:64:15:8A:C3:F9:5C:E7 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:31:21:8b:bc:ed:77:e2:ed:a1:6e:43:3f:22:fc:8c:f2:70: 27:82:d6:cc:0a:df:9a:7e:52:63:b5:bf:2e:91:d5:23:52:d8: bb:17:f5:77:9f:36:86:b0:2c:36:fc:d9:56:7e:39:24:17:8f: 93:05:ba:c8:0c:3a:a8:b4:d4:e8:b8:e5:d8:94:9b:d3:75:bf: d6:fb:3f:02:e2:6a:48:b1:08:27:2f:20:20:6f:5b:4a:30:57: fd:3f:db:4c:07:0b:16:4d:a7:c8:ff:6b:dc:73:4d:fd:68:e4: 64:c7:f0:a3:e1:fd:9c:45:58:40:8c:64:ec:46:c3:cb:9e:e5: 69:b6:74:77:0e:86:f0:51:2c:54:57:e6:ef:a5:10:6a:8e:ea: 77:38:3e:6b:25:61:63:fd:a8:c2:ab:a2:10:e0:8b:02:c4:72: 66:08:72:8c:41:61:74:db:52:ab:f1:bd:db:82:4f:24:39:c8: bd:97:85:fe:38:d8:26:65:00:d4:20:f5:ab:d3:d2:22:3b:10: 39:93:cf:25:d0:77:65:84:88:85:a8:83:3b:88:5e:70:15:cd: d5:bf:19:4d:21:3a:ca:ba:26:fe:82:48:ea:ef:65:10:77:b6: d3:81:13:4d:07:2e:06:57:e2:06:b9:05:a2:fe:55:13:e1:97: 0a:82:d7:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjUwODI0MTU1OTQwWhcNMjUwODMxMTU1OTQwWjAYMRYwFAYD VQQDEw02OGFiMzZlYy01OGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyOcpRoMfABPw8UdCFXY80A+Vqw4a72TfryAndRZ9dlW6KJ8bMxg2Se6niR1 D+gK/nrH+2toLnFP192RIqMRbM8vLJdidypOvCS2498fNvH3EKtgBWo+1Id+6BRu Z1N/EYmaZMwzdO9l/DM7Ogkk0Hq9AEzYNZ9RiDE430h0qzNHY+QqwgSbZnJMbwxc G4HrrQ7sP6nO8Q3or3ExhcLRRX4S0x6Yz9TMQ30ISrxyfgYrpkwMQXNcC3WuOJm1 JO0QXyK+c3GPxs+H3swaqtr/AUvnaIJbxS6cAIofQmRfCHj/xhc1oug2QG2cSoIR xrYWR1h4HFxT6szI4dTDhVJfbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrTAEWH +0CfqA7mZp9kFYrD+VznMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR XzNhZGFxN3ZtZkptRUV6VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyMSGLvO134u2hbkM/IvyM8nAngtbMCt+aflJjtb8ukdUjUti7F/V3 nzaGsCw2/NlWfjkkF4+TBbrIDDqotNTouOXYlJvTdb/W+z8C4mpIsQgnLyAgb1tK MFf9P9tMBwsWTafI/2vcc039aORkx/Cj4f2cRVhAjGTsRsPLnuVptnR3DobwUSxU V+bvpRBqjup3OD5rJWFj/ajCq6IQ4IsCxHJmCHKMQWF021Kr8b3bgk8kOci9l4X+ ONgmZQDUIPWr09IiOxA5k88l0HdlhIiFqIM7iF5wFc3VvxlNITrKuib+gkjq72UQ d7bTgRNNBy4GV+IGuQWi/lUT4ZcKgtej -----END CERTIFICATE-----Generated at Sun Aug 24 21:40:48 2025 by rpki-client