$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json) Hash identifier: kOaFpUxb+FI8rmB1/XhOLyOQzeovGqNd/8PIrdP032Q= Subject key identifier: F6:72:E1:3D:93:6B:32:13:A6:5A:BA:C3:CF:0D:AA:D2:9D:D4:C3:54 Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 0AA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft Manifest number: 0A9F Signing time: Wed 20 Aug 2025 19:36:29 +0000 Manifest this update: Wed 20 Aug 2025 19:36:28 +0000 Manifest next update: Wed 27 Aug 2025 19:36:28 +0000 Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: FZHFYYHTvNNJoxn6TQbT1XIJLzwmRc4go3xe92npBik=) 2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 0MEjUCGRzvjz5epLH1Yc0e31fL5fFdQ31GIxJUqAOEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2725 (0xaa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: Aug 20 19:36:28 2025 GMT Not After : Aug 27 19:36:28 2025 GMT Subject: CN=68a623bc-83c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:4e:66:20:e4:b9:d5:09:0a:ea:e6:eb:3c: 5d:73:67:7d:2e:ff:ba:6f:56:ca:8e:d0:f2:2d:11: e8:36:38:06:88:da:d9:42:59:be:57:fa:9b:54:dc: 1b:d5:a6:4b:e7:e4:b2:af:86:60:06:bc:be:5c:26: 51:f4:11:c7:95:1f:8d:53:a4:16:7a:11:4c:78:6b: f3:f0:ea:85:38:83:98:bf:54:dc:1e:c3:6e:2e:8a: 2a:9c:7d:73:49:4f:f4:e3:e1:3a:52:3e:fc:72:67: aa:2f:f3:ea:a9:c9:89:a3:05:7e:eb:56:f7:fe:ec: 92:a3:14:95:6a:eb:d5:62:eb:28:a1:6b:ac:9b:ee: a4:66:5f:be:bc:c4:1e:58:84:3e:cc:d4:1e:a5:61: dd:f3:49:6e:9e:04:9f:ac:90:b7:e1:3e:42:f9:8c: 8e:fc:8c:33:16:25:72:b7:35:84:9e:71:b6:e7:8e: f3:25:2a:a4:aa:aa:23:a7:9a:c8:3e:45:79:a4:b1: c0:21:c2:b1:fe:eb:1e:09:63:6e:ea:4d:99:9e:e9: 5e:ad:28:c4:32:46:b5:14:85:f5:1c:5c:6a:9d:16: 31:32:b7:c4:22:64:15:c9:29:ed:9b:56:68:32:75: 8a:38:c7:7a:c1:ac:ee:77:10:28:2c:18:27:4b:95: 4d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:72:E1:3D:93:6B:32:13:A6:5A:BA:C3:CF:0D:AA:D2:9D:D4:C3:54 X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:16:f6:0a:d1:56:d0:3a:50:6c:c8:74:77:d4:a1:a4:83:ad: 86:54:5d:d3:d1:ff:0c:4e:5b:43:9b:ea:c4:60:34:61:83:59: e6:9f:3c:bf:86:25:be:df:79:81:77:20:34:b2:a1:d5:88:8f: ca:ed:6e:0f:44:ee:9d:55:e8:29:ef:81:a2:2a:6b:24:b1:2b: 79:10:80:d9:4a:4b:63:74:b2:2a:46:4e:03:7f:86:95:e5:9a: 7d:b0:82:12:f9:a8:6a:54:29:e2:7c:fd:8e:86:f4:a2:3a:8d: 26:82:c1:fc:0e:c8:40:aa:63:9a:07:4b:83:99:84:bc:ab:ae: 18:10:69:46:52:9d:8c:5b:a3:57:46:08:0c:ec:45:aa:45:8d: b9:83:1b:75:61:ef:29:6a:34:f8:45:50:08:71:a2:c2:a5:e7: cb:4f:3f:a2:ae:8e:8b:7e:81:38:b7:e1:1f:c9:8a:ce:ca:00: 3f:b9:4f:f2:5d:c2:aa:39:c2:f4:d8:5d:18:bb:71:8a:b1:4e: 68:f5:53:e6:bb:df:65:ec:5f:4b:13:39:81:fd:65:31:8e:5a: bb:1e:b7:ce:c9:b4:cd:88:6e:70:ea:df:53:45:0e:99:e1:0e: 73:2d:6d:3b:33:be:73:e3:58:3b:1a:02:b2:cb:84:0d:35:a1: 18:db:f6:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjUwODIwMTkzNjI4WhcNMjUwODI3MTkzNjI4WjAYMRYwFAYD VQQDEw02OGE2MjNiYy04M2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxONOZiDkudUJCurm6zxdc2d9Lv+6b1bKjtDyLRHoNjgGiNrZQlm+V/qbVNwb 1aZL5+Syr4ZgBry+XCZR9BHHlR+NU6QWehFMeGvz8OqFOIOYv1TcHsNuLooqnH1z SU/04+E6Uj78cmeqL/PqqcmJowV+61b3/uySoxSVauvVYusooWusm+6kZl++vMQe WIQ+zNQepWHd80lungSfrJC34T5C+YyO/IwzFiVytzWEnnG2547zJSqkqqojp5rI PkV5pLHAIcKx/useCWNu6k2ZnulerSjEMka1FIX1HFxqnRYxMrfEImQVySntm1Zo MnWKOMd6wazudxAoLBgnS5VNUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZy4T2T azITplq6w88NqtKd1MNUMB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3 UmtiSHZBYmlZajRXdm5rRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVFvYK0VbQOlBsyHR31KGkg62GVF3T0f8MTltDm+rEYDRhg1nmnzy/ hiW+33mBdyA0sqHViI/K7W4PRO6dVegp74GiKmsksSt5EIDZSktjdLIqRk4Df4aV 5Zp9sIIS+ahqVCnifP2OhvSiOo0mgsH8DshAqmOaB0uDmYS8q64YEGlGUp2MW6NX RggM7EWqRY25gxt1Ye8pajT4RVAIcaLCpefLTz+iro6LfoE4t+EfyYrOygA/uU/y XcKqOcL02F0Yu3GKsU5o9VPmu99l7F9LEzmB/WUxjlq7HrfOybTNiG5w6t9TRQ6Z 4Q5zLW07M75z41g7GgKyy4QNNaEY2/Zo -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:09 2025 by rpki-client