$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft File: SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json) Hash identifier: J8zsPHnMfS99otX3VtS0TwolqUil0KqPKVhkT/khB0U= Subject key identifier: 8B:B3:02:09:B0:21:13:35:15:DF:CE:86:0F:DA:D4:3F:05:DD:F9:B1 Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Certificate serial: 0265 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft Manifest number: 0260 Signing time: Fri 19 Sep 2025 02:13:05 +0000 Manifest this update: Fri 19 Sep 2025 02:13:04 +0000 Manifest next update: Fri 26 Sep 2025 02:13:04 +0000 Files and hashes: 1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: bR1hjv7scKTl4T/gvM3HtdDWroS2uHjr0O9bg2M40Q8=) 2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: NLbyCuuj3PUuIvgjWrH/YA9s60d6QDG0BkYDeVifH9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 613 (0x265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D167, serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Validity Not Before: Sep 19 02:13:04 2025 GMT Not After : Sep 26 02:13:04 2025 GMT Subject: CN=68ccbc31-9f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:55:4f:a4:ce:aa:27:98:32:68:e5:97:55: 83:c3:6a:b9:c9:51:4e:2c:3f:d6:dd:68:73:7f:9b: c8:5a:c5:82:32:33:0d:2d:6e:3e:15:34:7d:eb:7c: 00:df:b0:10:af:d5:3f:89:f8:9d:0e:89:ed:78:10: 88:d7:e9:6e:5c:0a:83:3c:71:48:1a:42:f4:60:a8: 6a:6a:d3:8e:ea:3c:3d:ca:8b:08:1c:13:4d:bd:d9: 27:48:3a:f5:63:4a:49:c5:f1:4e:94:44:b8:f4:51: 8c:af:d5:44:b2:3b:dd:a8:96:98:48:18:44:e3:bd: 38:d8:dd:b5:b9:7a:76:25:70:44:41:1b:4e:df:fb: 38:1d:f9:11:90:1f:6b:ad:87:37:45:c4:39:4d:a4: 76:69:3e:04:f3:09:a1:e1:02:8b:c3:6a:c8:a6:47: b8:c7:0c:ca:0c:34:7c:fa:a7:36:c2:14:34:21:70: ae:ef:ac:7c:ea:84:ca:d2:d8:a7:1b:32:72:7b:e8: 90:06:a1:82:a0:40:08:b8:3e:53:de:a7:f1:cd:c9: 97:f2:57:5d:9b:fd:85:85:3b:0c:24:49:36:32:69: 0e:92:aa:5d:48:b4:30:1f:ef:10:85:dc:47:8a:c0: b0:8e:01:35:b4:9e:0c:3b:17:38:6d:f6:8a:a2:3e: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B3:02:09:B0:21:13:35:15:DF:CE:86:0F:DA:D4:3F:05:DD:F9:B1 X509v3 Authority Key Identifier: keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:e1:b0:83:42:2f:db:21:61:87:44:a5:be:0e:53:dc:8b:5b: e1:72:aa:a2:f2:ba:c5:33:1a:11:a5:54:4a:f0:0d:89:43:5d: c4:73:b1:a3:12:59:7d:4b:88:a8:06:5e:a4:e9:d9:bb:c8:22: 78:94:32:d8:8e:8d:4f:84:5d:96:ff:aa:05:65:bb:09:a5:7a: 4b:0a:d4:de:27:44:1a:03:24:7c:ce:8d:5c:f1:9e:b4:9b:e6: e5:79:28:d4:55:3a:f4:78:2c:e6:fb:89:51:bd:35:4c:84:e2: 96:26:7c:cd:98:bf:4c:04:c7:a2:5d:af:91:1b:14:7f:68:2a: 09:70:32:d2:f0:8a:9a:6f:96:43:f0:d5:d0:ba:fe:1b:c9:76: 68:4b:70:25:44:a2:65:84:6a:96:ec:dd:d4:28:c2:1d:5a:8b: 14:81:20:01:72:00:c2:a5:36:63:a0:f9:44:76:6a:93:04:3c: ac:f5:b7:b5:4a:88:05:b4:e0:a1:b2:86:56:2b:d6:51:71:03: 73:85:c0:52:7b:94:da:8b:b5:1f:27:76:9f:12:67:39:4c:b8: 48:2b:c8:73:6d:6e:f9:1f:b3:3c:a2:ed:1d:54:b4:29:76:3b: 98:9c:a7:3e:31:a9:ce:11:eb:40:32:91:93:40:83:43:7a:95: 0c:76:95:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3 RDY5OTMyNDgwHhcNMjUwOTE5MDIxMzA0WhcNMjUwOTI2MDIxMzA0WjAYMRYwFAYD VQQDEw02OGNjYmMzMS05ZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdpVT6TOqieYMmjll1WDw2q5yVFOLD/W3Whzf5vIWsWCMjMNLW4+FTR963wA 37AQr9U/ifidDonteBCI1+luXAqDPHFIGkL0YKhqatOO6jw9yosIHBNNvdknSDr1 Y0pJxfFOlES49FGMr9VEsjvdqJaYSBhE47042N21uXp2JXBEQRtO3/s4HfkRkB9r rYc3RcQ5TaR2aT4E8wmh4QKLw2rIpke4xwzKDDR8+qc2whQ0IXCu76x86oTK0tin GzJye+iQBqGCoEAIuD5T3qfxzcmX8lddm/2FhTsMJEk2MmkOkqpdSLQwH+8QhdxH isCwjgE1tJ4MOxc4bfaKoj4FjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuzAgmw IRM1Fd/Ohg/a1D8F3fmxMB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj4bCDQi/bIWGHRKW+DlPci1vhcqqi8rrFMxoRpVRK8A2JQ13Ec7Gj Ell9S4ioBl6k6dm7yCJ4lDLYjo1PhF2W/6oFZbsJpXpLCtTeJ0QaAyR8zo1c8Z60 m+bleSjUVTr0eCzm+4lRvTVMhOKWJnzNmL9MBMeiXa+RGxR/aCoJcDLS8Iqab5ZD 8NXQuv4byXZoS3AlRKJlhGqW7N3UKMIdWosUgSABcgDCpTZjoPlEdmqTBDys9be1 SogFtOChsoZWK9ZRcQNzhcBSe5Tai7UfJ3afEmc5TLhIK8hzbW75H7M8ou0dVLQp djuYnKc+ManOEetAMpGTQINDepUMdpUA -----END CERTIFICATE-----Generated at Fri Sep 19 04:04:36 2025 by rpki-client