$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json) Hash identifier: JWIOi6h49DAarFUimMz8dDxNLfJ1+WqcyYJGC4c7ga0= Subject key identifier: 2A:17:CC:63:29:13:83:F1:09:25:EC:2E:F8:4F:56:34:4E:93:79:B4 Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft Manifest number: 59 Signing time: Wed 17 Sep 2025 07:56:57 +0000 Manifest this update: Wed 17 Sep 2025 07:56:57 +0000 Manifest next update: Wed 24 Sep 2025 07:56:57 +0000 Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: UkTMqSGnI4mn4f2yxhyqSwjFj9C97WLg8HrrTCA/qnc=) 2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Validity Not Before: Sep 17 07:56:57 2025 GMT Not After : Sep 24 07:56:57 2025 GMT Subject: CN=68ca69c9-8799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:5a:44:a4:be:80:63:fc:50:52:a0:2c:e9: 88:74:88:a6:42:22:a2:a9:84:83:1d:03:7c:56:d4: ce:d0:d1:b1:d3:7b:a6:9f:2e:7d:cc:8e:6c:f5:1d: 2a:fd:4c:b6:35:50:e6:7d:de:1f:3e:4b:06:25:cf: 87:df:8b:2c:cb:e0:6a:4e:74:8b:dc:2a:24:59:9b: a5:dc:8d:46:cb:2b:52:f8:2b:bc:bf:90:62:18:f3: 50:fe:70:93:0a:05:d1:a2:6b:16:96:96:89:c9:2a: aa:9c:be:51:d2:07:f0:92:76:c7:bd:5b:c9:1f:3b: 44:9f:61:f8:5d:51:93:2d:10:2b:d6:0c:0c:93:97: 75:1a:ed:f9:1a:71:11:86:18:1e:9d:c7:0c:66:71: 51:f2:7f:2e:3a:4f:29:db:ee:47:4d:67:2a:94:59: 4e:d7:18:8e:34:b1:05:74:35:59:94:67:1e:50:9f: 04:56:e9:ca:2e:7e:03:f2:75:65:e4:28:3b:c2:9f: ae:c2:c5:17:03:bf:be:98:1a:f9:26:c1:5c:c4:ff: cc:b8:a5:cb:6a:37:17:25:11:90:0e:4f:77:6b:cf: 5c:39:d5:5a:2f:d2:2f:3b:8b:03:1b:c5:62:90:68: 17:fb:9b:a4:d7:7e:1f:a0:c5:b7:07:18:fc:f5:31: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:17:CC:63:29:13:83:F1:09:25:EC:2E:F8:4F:56:34:4E:93:79:B4 X509v3 Authority Key Identifier: keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:06:51:8f:83:eb:19:d3:45:42:47:ac:c8:43:54:4f:54:32: 0e:bf:93:f2:f0:aa:31:26:b9:32:d5:7d:54:58:c8:17:a7:c8: 24:bb:28:3b:ab:84:9f:89:6c:d8:0a:7f:e9:d3:a2:8f:ef:09: e9:36:fa:d1:e7:36:57:b7:ab:b2:80:c5:63:31:44:4b:69:d8: 67:e5:f1:21:32:89:0d:b7:04:d5:5d:d3:1d:7a:8c:a7:d4:c1: 8b:9d:9b:8d:e0:97:9c:d3:93:57:ac:74:bf:ac:60:e1:17:e4: 67:9c:97:57:5d:96:b4:b3:d3:cb:31:82:31:61:60:9d:95:a2: 5a:c7:c1:c6:ad:2e:c9:7c:22:b3:80:00:6b:f3:c2:52:62:c7: ba:36:c6:ef:c1:69:97:ec:6b:ec:e5:95:ec:41:b3:7e:2c:be: 65:26:78:60:f1:2b:59:76:ba:e9:2d:0a:06:c4:f4:84:78:01: 8a:cd:6b:6a:af:2b:5c:da:7e:85:fd:09:b6:6a:9d:2b:f9:45: 13:89:9b:d6:69:5b:8f:c5:47:6f:17:50:dc:cf:30:ea:07:b3: 6b:af:9f:20:6a:f9:10:8e:7e:a3:82:75:83:69:22:df:e5:7d: 31:d2:97:ad:94:ed:9c:0d:fb:83:83:f1:7a:bd:7e:ab:5a:61: b6:ad:00:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDEwRTExMC8GA1UEBRMoNDg5QTZGQ0VEN0RDNjNCN0FCMzY2NkUzNUJENTA5RDlF QTE1NzVFMDAeFw0yNTA5MTcwNzU2NTdaFw0yNTA5MjQwNzU2NTdaMBgxFjAUBgNV BAMTDTY4Y2E2OWM5LTg3OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAdFpEpL6AY/xQUqAs6Yh0iKZCIqKphIMdA3xW1M7Q0bHTe6afLn3Mjmz1HSr9 TLY1UOZ93h8+SwYlz4ffiyzL4GpOdIvcKiRZm6XcjUbLK1L4K7y/kGIY81D+cJMK BdGiaxaWlonJKqqcvlHSB/CSdse9W8kfO0SfYfhdUZMtECvWDAyTl3Ua7fkacRGG GB6dxwxmcVHyfy46Tynb7kdNZyqUWU7XGI40sQV0NVmUZx5QnwRW6coufgPydWXk KDvCn67CxRcDv76YGvkmwVzE/8y4pctqNxclEZAOT3drz1w51Vov0i87iwMbxWKQ aBf7m6TXfh+gxbcHGPz1MbZfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKhfMYykT g/EJJewu+E9WNE6TebQwHwYDVR0jBBgwFoAUSJpvztfcY7erNmbjW9UJ2eoVdeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MTBFLzJGMDMyOThBMTA4 NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdlck5tYmpXOVVKMmVvVmRl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0pwdnp0ZmNZN2VyTm1ialc5VUoyZW9WZGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MTBFLzJGMDMyOThBMTA4NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdl ck5tYmpXOVVKMmVvVmRlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGUGUY+D6xnTRUJHrMhDVE9UMg6/k/LwqjEmuTLVfVRYyBenyCS7KDur hJ+JbNgKf+nToo/vCek2+tHnNle3q7KAxWMxREtp2Gfl8SEyiQ23BNVd0x16jKfU wYudm43gl5zTk1esdL+sYOEX5Gecl1ddlrSz08sxgjFhYJ2VolrHwcatLsl8IrOA AGvzwlJix7o2xu/BaZfsa+zllexBs34svmUmeGDxK1l2uuktCgbE9IR4AYrNa2qv K1zafoX9CbZqnSv5RROJm9ZpW4/FR28XUNzPMOoHs2uvnyBq+RCOfqOCdYNpIt/l fTHSl62U7ZwN+4OD8Xq9fqtaYbatAC8= -----END CERTIFICATE-----Generated at Fri Sep 19 07:32:40 2025 by rpki-client