$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json) Hash identifier: vPzASzm0xidDnVYQQMTP5Kxhh+TWOKImYkEJiHUBP8I= Subject key identifier: C2:97:92:F6:EE:4D:48:DA:E8:69:42:22:E5:80:E7:92:86:8B:08:DA Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft Manifest number: 05C3 Signing time: Mon 08 Sep 2025 23:17:04 +0000 Manifest this update: Mon 08 Sep 2025 23:17:04 +0000 Manifest next update: Mon 15 Sep 2025 23:17:04 +0000 Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: 2PJ1jkwZJR/4GPjrnd8xZT/ZLawR9wK3UIBqPU8hP1Y=) 2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: PVnENrYeIS4iiFtrLcFEnNW4yBRsfLOD9D/GbgEuWKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Validity Not Before: Sep 8 23:17:04 2025 GMT Not After : Sep 15 23:17:04 2025 GMT Subject: CN=68bf63f0-c4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:c4:ab:26:7f:5a:87:9e:37:06:db:8b:5b: f7:ee:0d:bb:22:e9:36:46:28:7c:8c:20:4f:1b:eb: f3:62:87:dd:50:a6:91:6a:14:8b:89:8a:33:28:e6: 4e:56:e1:6a:6e:be:b0:73:02:54:aa:fe:e3:58:6c: b5:92:fd:d2:a9:48:1f:4c:4d:79:76:fc:af:3f:39: 48:2a:d3:ad:3a:26:62:80:2d:d4:f6:5c:d4:4d:28: 50:77:32:4e:a2:0b:c1:c4:d2:fc:83:23:7d:f0:6a: f7:57:79:47:23:3d:91:0b:79:ee:9f:41:0f:81:b3: bc:fe:4a:e8:35:aa:36:39:01:3a:29:79:e4:0e:4b: b2:82:59:12:61:d2:7f:d4:d3:f6:1b:db:50:c1:8e: 87:0b:80:da:c9:e7:f4:65:3e:b6:f3:e1:48:4d:f6: 89:75:f5:40:8e:79:f9:ad:6c:dd:6e:3a:8c:fd:ce: 47:e3:31:9c:9c:72:d0:dd:10:81:aa:19:c4:5a:16: 4d:b8:82:77:ea:58:15:65:9c:3f:d9:1b:a3:b1:66: 9f:0b:99:98:54:ee:70:cc:ff:62:3a:78:bb:d6:8b: 81:38:9d:5f:93:9b:f1:a9:59:47:cb:9d:3d:34:0b: 92:52:9d:9c:51:93:6f:97:85:c8:12:a8:ae:ea:a6: e7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:97:92:F6:EE:4D:48:DA:E8:69:42:22:E5:80:E7:92:86:8B:08:DA X509v3 Authority Key Identifier: keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:49:00:6e:3e:38:94:2d:38:cb:6b:f7:ab:73:12:3d:9a:0b: 38:00:39:6a:b9:d8:08:8d:3a:25:d6:02:f7:7b:fb:45:ac:54: dc:4f:41:83:eb:ed:cf:83:8a:72:57:c5:1a:f9:cb:94:17:fc: f1:1c:2b:83:d0:e6:50:91:37:00:5e:56:94:6d:b4:74:6d:47: 98:33:a3:4c:82:2c:43:da:59:23:34:f5:88:0d:fd:60:c2:2e: bd:a6:02:7c:c8:89:1c:3d:54:6f:65:1f:72:89:23:b0:12:b5: a4:9a:27:cb:4e:e4:8b:d9:1e:ed:42:4c:64:90:69:4c:1a:85: 76:9a:07:b1:5f:f5:a6:31:21:82:89:e9:0c:ae:e2:a4:96:0c: ca:e8:fe:9e:26:4c:b3:dd:56:8a:47:86:fd:ea:3a:00:46:34: 22:9b:f6:a5:61:38:4e:6e:66:e5:66:2c:93:6c:f5:84:f7:c8: ae:24:93:59:a3:ae:fa:5f:bc:a0:a8:88:64:c4:f3:23:25:88: 41:f5:7c:f0:97:e9:04:f0:a3:23:56:9f:47:ec:8f:ef:30:8c: 29:88:c7:6c:3a:11:cb:de:56:1f:5f:a2:6a:26:55:62:e4:51: 31:f9:cf:c8:a0:d8:af:dc:21:fc:c3:d4:c8:80:86:5b:f4:3e: fe:d5:07:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw MzAzRDcxQzkwHhcNMjUwOTA4MjMxNzA0WhcNMjUwOTE1MjMxNzA0WjAYMRYwFAYD VQQDEw02OGJmNjNmMC1jNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFTEqyZ/WoeeNwbbi1v37g27Iuk2Rih8jCBPG+vzYofdUKaRahSLiYozKOZO VuFqbr6wcwJUqv7jWGy1kv3SqUgfTE15dvyvPzlIKtOtOiZigC3U9lzUTShQdzJO ogvBxNL8gyN98Gr3V3lHIz2RC3nun0EPgbO8/kroNao2OQE6KXnkDkuyglkSYdJ/ 1NP2G9tQwY6HC4Dayef0ZT628+FITfaJdfVAjnn5rWzdbjqM/c5H4zGcnHLQ3RCB qhnEWhZNuIJ36lgVZZw/2RujsWafC5mYVO5wzP9iOni71ouBOJ1fk5vxqVlHy509 NAuSUp2cUZNvl4XIEqiu6qbnQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKXkvbu TUja6GlCIuWA55KGiwjaMB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls SHVZSFFlTGhud1lEQTljY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2SQBuPjiULTjLa/ercxI9mgs4ADlqudgIjTol1gL3e/tFrFTcT0GD 6+3Pg4pyV8Ua+cuUF/zxHCuD0OZQkTcAXlaUbbR0bUeYM6NMgixD2lkjNPWIDf1g wi69pgJ8yIkcPVRvZR9yiSOwErWkmifLTuSL2R7tQkxkkGlMGoV2mgexX/WmMSGC iekMruKklgzK6P6eJkyz3VaKR4b96joARjQim/alYThObmblZiyTbPWE98iuJJNZ o676X7ygqIhkxPMjJYhB9Xzwl+kE8KMjVp9H7I/vMIwpiMdsOhHL3lYfX6JqJlVi 5FEx+c/IoNiv3CH8w9TIgIZb9D7+1QdI -----END CERTIFICATE-----Generated at Tue Sep 9 18:29:39 2025 by rpki-client