$ rpki-client -vvf rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft File: szbWhuGt3y1ceNLQ4BKNDyh-B44.mft (raw, json) Hash identifier: 5HnNvA8c0q9zzPgK/AtGH1jSKHfwW1paqHrjwUCVykc= Subject key identifier: 75:08:95:91:43:7D:21:31:2C:D5:41:D6:EC:FE:00:57:22:CB:B8:66 Authority key identifier: B3:36:D6:86:E1:AD:DF:2D:5C:78:D2:D0:E0:12:8D:0F:28:7E:07:8E Certificate issuer: /CN=A91545AC/serialNumber=B336D686E1ADDF2D5C78D2D0E0128D0F287E078E Certificate serial: 07C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft Manifest number: 07BC Signing time: Thu 18 Sep 2025 21:32:49 +0000 Manifest this update: Thu 18 Sep 2025 21:32:48 +0000 Manifest next update: Thu 25 Sep 2025 21:32:48 +0000 Files and hashes: 1: szbWhuGt3y1ceNLQ4BKNDyh-B44.crl (hash: 48E5Z7EF+qNlI3RHWl2NsqBA3bWPCmsoiDmG+FwwNiU=) 2: B546148C121911EB82F65F7AC4F9AE02.roa (hash: guFQzr4GMuotnLN4g29mwWKV8rRpZXge3ak3JTxYZDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.crl rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1988 (0x7c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91545AC, serialNumber=B336D686E1ADDF2D5C78D2D0E0128D0F287E078E Validity Not Before: Sep 18 21:32:48 2025 GMT Not After : Sep 25 21:32:48 2025 GMT Subject: CN=68cc7a80-9462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:5a:3e:a8:41:ea:ee:e1:e1:5c:4b:0e:73: cf:e3:4a:65:21:7d:39:e2:d2:99:b7:4d:da:8a:e7: ac:05:9c:e5:c2:7d:73:db:eb:b6:52:f7:56:5c:b5: 3c:fe:65:78:88:47:5a:c0:93:ef:94:1d:ed:e0:dc: 8a:43:a2:01:8b:e5:1c:ed:bc:0a:cd:0e:3e:b8:76: d9:97:56:47:78:80:d8:56:6f:2c:93:95:66:cb:58: 61:86:39:de:45:a2:e6:ec:1a:f1:b5:c8:df:2e:7a: e7:13:18:5e:12:3d:ed:02:87:b4:41:44:87:8c:4d: c8:16:5d:78:60:80:2a:dd:8f:68:e7:c6:ae:b3:f1: 30:8a:31:55:78:86:88:bb:9a:c4:8f:09:1d:ea:cc: 0d:87:e3:d5:d8:ee:ce:31:14:f9:ba:ae:34:de:ff: 6b:c7:3a:9d:bc:f3:39:38:c8:a0:42:d8:07:a2:ec: 28:61:48:15:fa:a7:7e:4e:e0:d5:e7:2a:65:70:b4: 8a:29:fe:ee:7e:f7:ce:df:3a:2d:ec:71:75:d9:13: bb:c9:37:92:a4:1f:17:0a:f5:36:e7:d4:ba:cb:43: bf:43:0e:ef:e0:4e:f5:67:3c:31:4d:e8:16:47:78: da:fc:10:76:6d:b6:ad:8d:80:d7:94:8e:c3:28:36: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:08:95:91:43:7D:21:31:2C:D5:41:D6:EC:FE:00:57:22:CB:B8:66 X509v3 Authority Key Identifier: keyid:B3:36:D6:86:E1:AD:DF:2D:5C:78:D2:D0:E0:12:8D:0F:28:7E:07:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:37:dd:98:23:f8:0b:48:b4:e7:b3:ee:35:16:be:4e:6e:8d: 84:89:73:2e:2d:7a:ed:e3:f1:9d:2b:65:ca:12:b5:9a:f7:2e: bc:83:cf:f1:03:f5:a0:d9:a8:74:74:34:af:a7:96:b3:bc:a7: a7:d5:8c:95:13:7d:f2:7d:ab:c7:f1:48:ef:bc:db:b1:9e:87: fb:9d:87:62:74:5a:6e:29:10:57:4a:47:00:9b:e0:6c:5f:7f: b9:f9:35:a4:b0:96:99:4e:e6:bb:53:89:f0:70:e4:6f:d0:40: 6f:87:0e:68:dd:4e:15:84:01:88:bc:0c:f3:cc:6d:e8:95:4b: 39:01:a8:1c:4a:43:a2:f0:a4:48:bd:d0:6f:8e:f4:ec:e0:b1: 14:93:8a:3f:d8:6f:20:df:f6:9b:c3:60:f1:06:7d:06:24:52: 5f:1b:ab:90:5a:a4:4a:84:fc:52:78:b3:5a:4b:5f:39:da:f5: 25:f2:3c:9a:cb:0b:22:6c:54:91:f7:97:b9:21:f2:e6:9e:87: ba:dc:1f:70:0f:9c:98:cf:e0:7a:a9:63:84:e9:0e:2c:c5:f7: 98:0a:e1:83:e1:52:e3:ac:56:be:bd:a2:da:89:a8:4f:c7:95: aa:c0:5a:9f:c9:7b:65:38:5f:04:f9:57:09:69:02:bc:57:ba: c3:97:ef:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1QUMxMTAvBgNVBAUTKEIzMzZENjg2RTFBRERGMkQ1Qzc4RDJEMEUwMTI4RDBG Mjg3RTA3OEUwHhcNMjUwOTE4MjEzMjQ4WhcNMjUwOTI1MjEzMjQ4WjAYMRYwFAYD VQQDEw02OGNjN2E4MC05NDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDhaPqhB6u7h4VxLDnPP40plIX054tKZt03aiuesBZzlwn1z2+u2UvdWXLU8 /mV4iEdawJPvlB3t4NyKQ6IBi+Uc7bwKzQ4+uHbZl1ZHeIDYVm8sk5Vmy1hhhjne RaLm7BrxtcjfLnrnExheEj3tAoe0QUSHjE3IFl14YIAq3Y9o58aus/EwijFVeIaI u5rEjwkd6swNh+PV2O7OMRT5uq403v9rxzqdvPM5OMigQtgHouwoYUgV+qd+TuDV 5yplcLSKKf7ufvfO3zot7HF12RO7yTeSpB8XCvU259S6y0O/Qw7v4E71ZzwxTegW R3ja/BB2bbatjYDXlI7DKDa48QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUIlZFD fSExLNVB1uz+AFciy7hmMB8GA1UdIwQYMBaAFLM21obhrd8tXHjS0OASjQ8ofgeO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDVBQy84QTU2OEE4MjEy MTgxMUVCQjE4NTJDNzlDNEY5QUUwMi9zemJXaHVHdDN5MWNlTkxRNEJLTkR5aC1C NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N6YldodUd0M3kxY2VOTFE0QktORHloLUI0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDVBQy84QTU2OEE4MjEyMTgxMUVCQjE4NTJDNzlDNEY5QUUwMi9zemJXaHVHdDN5 MWNlTkxRNEJLTkR5aC1CNDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5N92YI/gLSLTns+41Fr5Obo2EiXMuLXrt4/GdK2XKErWa9y68g8/x A/Wg2ah0dDSvp5azvKen1YyVE33yfavH8UjvvNuxnof7nYdidFpuKRBXSkcAm+Bs X3+5+TWksJaZTua7U4nwcORv0EBvhw5o3U4VhAGIvAzzzG3olUs5AagcSkOi8KRI vdBvjvTs4LEUk4o/2G8g3/abw2DxBn0GJFJfG6uQWqRKhPxSeLNaS1852vUl8jya ywsibFSR95e5IfLmnoe63B9wD5yYz+B6qWOE6Q4sxfeYCuGD4VLjrFa+vaLaiahP x5WqwFqfyXtlOF8E+VcJaQK8V7rDl+8k -----END CERTIFICATE-----Generated at Fri Sep 19 05:57:49 2025 by rpki-client