$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft File: sg6f5krzzoyYJyXQEqFCknJjzvA.mft (raw, json) Hash identifier: hb1AD4TY7dgh/++I0oRba0nRo14xySuNhHlCBKxr7do= Subject key identifier: 1A:E2:A5:74:2A:17:6D:CC:F7:28:C0:4F:78:49:8E:EC:E5:9C:DE:15 Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 Certificate issuer: /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft Manifest number: 0827 Signing time: Fri 22 Aug 2025 20:59:19 +0000 Manifest this update: Fri 22 Aug 2025 20:59:19 +0000 Manifest next update: Fri 29 Aug 2025 20:59:19 +0000 Files and hashes: 1: sg6f5krzzoyYJyXQEqFCknJjzvA.crl (hash: Uk0EoNJZVrOUdHCTXTiTBfUuCI5ujjSdYVNJGQUGyGo=) 2: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (hash: 7JHMwVjCROL2NO+MkxXgRxb2ZHCCwLSy/kLqZ1Og33E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Validity Not Before: Aug 22 20:59:19 2025 GMT Not After : Aug 29 20:59:19 2025 GMT Subject: CN=68a8da27-1781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:f5:55:4d:32:25:e3:09:fc:e8:e1:78:98: 32:48:5a:be:79:ef:76:56:6e:fd:05:63:ac:5a:3f: c7:c5:52:35:fa:97:9a:a4:4d:6a:bb:5a:9d:58:6b: bf:e1:e7:10:78:d3:21:76:7b:6d:a4:e6:51:f0:50: a3:8a:cb:8b:81:97:ff:63:09:a4:90:8b:86:f2:2c: a9:44:21:48:45:77:20:87:ef:62:a6:39:6f:b8:e6: 7b:a3:0e:a5:fa:b0:32:e8:06:26:70:c1:fa:e8:66: e5:ef:2a:f1:4a:7a:87:d1:45:0c:f5:81:99:27:13: 37:ba:65:ad:fe:0f:ba:0f:35:6e:ae:cc:02:4a:13: 68:cb:74:ea:6e:a4:0c:a2:9a:e6:f1:32:9b:51:e7: 5f:44:65:78:08:94:d6:e7:e3:54:ce:53:26:7b:36: 41:04:7b:10:ea:71:42:0c:07:fd:53:85:cf:48:7b: 32:78:e3:9a:d8:70:ba:2b:48:60:2e:7d:a2:1a:bd: cc:e5:b8:a4:d3:e7:b1:fe:3e:ea:29:36:e3:5f:a2: 53:d2:df:fc:11:72:8f:5c:ea:46:25:78:0b:8c:95: 59:a8:3e:25:f8:29:5b:ea:87:02:2f:10:66:dd:38: 3c:b7:e9:34:3a:28:0f:05:12:ed:8a:5a:b1:4e:cb: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E2:A5:74:2A:17:6D:CC:F7:28:C0:4F:78:49:8E:EC:E5:9C:DE:15 X509v3 Authority Key Identifier: keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0d:97:58:69:c4:99:2f:cb:4b:02:ee:5a:28:9c:8a:17:73: f0:97:d1:4a:eb:3d:39:0f:87:a8:bd:e6:23:a7:7e:ac:54:ef: 2f:c6:c4:79:e1:e9:78:c2:00:9e:31:b6:40:17:91:0b:08:61: ab:46:c8:7a:ba:a3:24:6e:b7:69:49:ad:e4:8f:37:ca:0b:12: 20:7b:71:43:06:66:80:07:2c:47:a6:67:9d:4c:b7:1d:19:e4: af:88:71:50:7f:38:58:b4:a0:b1:2a:06:ae:26:43:f2:f1:a4: 54:b4:e7:cc:ec:6d:96:90:94:60:e5:03:b8:21:a4:70:e0:6f: 02:28:5f:1e:42:ed:b1:41:43:aa:91:41:19:2c:09:dd:41:a1: ae:2f:fe:72:1c:76:89:d8:58:be:3f:06:25:57:00:1c:b7:fa: c2:a5:8d:54:bf:9c:2c:45:af:07:00:56:10:9d:f0:b0:56:fb: f7:a6:6d:f4:cd:45:df:5b:9f:b9:0d:5d:90:18:e4:69:b6:35: ed:cf:31:a4:0e:9f:2f:31:a4:3f:e9:ab:d0:28:fc:f2:0c:5c: 47:ee:a6:f3:fd:76:10:73:89:81:6f:ca:e8:67:6a:6b:9b:c7: 44:6f:a6:ae:94:2b:79:34:66:d3:97:8f:79:97:54:b1:2f:9d: ec:af:7b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc3QzMxMTAvBgNVBAUTKEIyMEU5RkU2NEFGM0NFOEM5ODI3MjVEMDEyQTE0Mjky NzI2M0NFRjAwHhcNMjUwODIyMjA1OTE5WhcNMjUwODI5MjA1OTE5WjAYMRYwFAYD VQQDEw02OGE4ZGEyNy0xNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLT1VU0yJeMJ/OjheJgySFq+ee92Vm79BWOsWj/HxVI1+peapE1qu1qdWGu/ 4ecQeNMhdnttpOZR8FCjisuLgZf/YwmkkIuG8iypRCFIRXcgh+9ipjlvuOZ7ow6l +rAy6AYmcMH66Gbl7yrxSnqH0UUM9YGZJxM3umWt/g+6DzVurswCShNoy3TqbqQM oprm8TKbUedfRGV4CJTW5+NUzlMmezZBBHsQ6nFCDAf9U4XPSHsyeOOa2HC6K0hg Ln2iGr3M5bik0+ex/j7qKTbjX6JT0t/8EXKPXOpGJXgLjJVZqD4l+Clb6ocCLxBm 3Tg8t+k0OigPBRLtilqxTss4swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBripXQq F23M9yjAT3hJjuzlnN4VMB8GA1UdIwQYMBaAFLIOn+ZK886MmCcl0BKhQpJyY87w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzdDMy81REE0OEMyMEU3 NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpveVlKeVhRRXFGQ2tuSmp6 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnNmY1a3J6em95WUp5WFFFcUZDa25Kanp2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzdDMy81REE0OEMyMEU3NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpv eVlKeVhRRXFGQ2tuSmp6dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCADZdYacSZL8tLAu5aKJyKF3Pwl9FK6z05D4eoveYjp36sVO8vxsR5 4el4wgCeMbZAF5ELCGGrRsh6uqMkbrdpSa3kjzfKCxIge3FDBmaAByxHpmedTLcd GeSviHFQfzhYtKCxKgauJkPy8aRUtOfM7G2WkJRg5QO4IaRw4G8CKF8eQu2xQUOq kUEZLAndQaGuL/5yHHaJ2Fi+PwYlVwAct/rCpY1Uv5wsRa8HAFYQnfCwVvv3pm30 zUXfW5+5DV2QGORptjXtzzGkDp8vMaQ/6avQKPzyDFxH7qbz/XYQc4mBb8roZ2pr m8dEb6aulCt5NGbTl495l1SxL53sr3tO -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:23 2025 by rpki-client