$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json) Hash identifier: Sb0ecOTlfstk8D+fnykjl4H3EmscGGcqSDcqne9UB5A= Subject key identifier: 3E:76:39:8A:A5:9B:64:D7:D6:4E:67:B8:56:34:0C:4F:2B:1E:8C:DE Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft Manifest number: 0C96 Signing time: Thu 18 Sep 2025 18:29:41 +0000 Manifest this update: Thu 18 Sep 2025 18:29:40 +0000 Manifest next update: Thu 25 Sep 2025 18:29:40 +0000 Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: Ui5pJSxy53qpcScdwUzgD8ov52PZ9Xjd+j5zYpFOJCc=) 2: BD34B926367911F083BF6873C4F9AE02.roa (hash: m+EkNRFDxHj1FPyZ5U1ENnB32M/tNvWOK6leRT4D3kc=) 3: A869B800367611F088B7726AC4F9AE02.roa (hash: LsbbSClw7moIgeVgU48ZXAlLRVTQAq+PWzm9OXhRWr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Sep 18 18:29:40 2025 GMT Not After : Sep 25 18:29:40 2025 GMT Subject: CN=68cc4f95-d211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ca:68:22:45:9d:e0:12:a8:dd:5f:42:57:2f: 01:c4:39:cc:05:48:e8:b9:dc:dd:59:b2:a2:51:46: 5a:77:a2:67:7e:b2:67:23:68:31:c2:b2:d6:92:04: d1:cb:aa:57:b4:f2:6a:b0:7d:93:86:2b:cd:50:9d: ca:cc:e1:a4:60:c6:ad:86:ac:51:a0:ef:09:10:46: 8c:28:2b:c1:e2:b1:31:64:5f:5d:7e:9b:d6:38:ce: 2a:ef:2d:95:19:fd:54:a8:8d:c7:68:37:b5:e2:75: 36:51:8d:c6:37:d6:3b:6c:31:76:89:8e:7c:0f:f4: 25:ff:25:56:84:55:99:c1:26:98:00:7e:40:e7:ac: 80:1e:fc:5e:3d:d8:9d:8a:57:23:2f:2a:bf:63:d1: 9c:4b:1e:82:1c:c4:06:d1:ab:5f:d1:ae:77:cb:95: 55:fc:19:30:4c:28:30:9a:54:c0:91:36:b0:31:fa: ef:d3:52:f9:f9:d3:2e:3c:83:aa:76:c9:ff:6d:7b: d3:62:af:35:3f:19:30:45:29:d6:21:0f:5e:df:68: 85:bc:28:75:ae:69:cc:95:4e:b8:ff:e7:03:9a:1e: 24:d4:49:b4:ef:d6:1a:f3:7c:50:18:8d:92:1e:ca: d0:79:9a:f5:05:7d:e4:ab:8b:aa:f2:17:f7:a1:c6: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:76:39:8A:A5:9B:64:D7:D6:4E:67:B8:56:34:0C:4F:2B:1E:8C:DE X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:3e:89:87:89:8f:2d:ec:d4:58:6d:91:c5:c4:df:ec:2e:1b: 4a:71:c7:f6:14:ef:de:8b:6d:86:15:e4:ce:b8:b9:9e:c6:cc: 70:2c:89:c0:db:f5:63:51:3e:d6:45:a2:eb:9f:aa:fe:1d:d6: 2f:cb:7a:9c:2d:d7:3f:ff:e2:3d:1a:57:a8:41:a6:49:ac:ea: c8:d4:8a:5b:a1:be:90:d1:ba:92:30:d5:a6:02:6b:b2:44:1f: 46:69:30:2a:7d:32:15:0a:69:a0:e4:26:d0:8c:87:51:ea:c5: 40:7c:67:37:a2:91:f2:98:0a:e3:d4:41:ed:83:94:c5:b4:bf: 16:1b:38:d6:c7:b4:4e:35:c7:7f:d0:e8:a8:d7:5f:97:db:9e: c7:d0:e8:06:ef:6d:f1:c8:8a:3c:6b:7c:e8:9c:95:48:7b:a5: 8c:17:67:7c:00:f0:c7:0c:c3:cd:df:57:43:3c:a0:3a:37:03: 72:33:b5:9e:66:64:77:fe:d4:6b:9c:54:5b:fe:a9:ea:b8:d2: 1c:39:fa:72:e2:77:11:d5:e1:be:d9:73:2b:b2:d0:f2:7d:ae: f1:84:85:36:ff:1f:85:36:9b:58:8d:f9:cd:a5:11:8b:db:2b: 4f:cd:b7:05:c5:38:32:d7:a6:d1:0c:c1:dd:33:c6:6d:32:48: 46:93:92:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjUwOTE4MTgyOTQwWhcNMjUwOTI1MTgyOTQwWjAYMRYwFAYD VQQDEw02OGNjNGY5NS1kMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08poIkWd4BKo3V9CVy8BxDnMBUjoudzdWbKiUUZad6JnfrJnI2gxwrLWkgTR y6pXtPJqsH2ThivNUJ3KzOGkYMathqxRoO8JEEaMKCvB4rExZF9dfpvWOM4q7y2V Gf1UqI3HaDe14nU2UY3GN9Y7bDF2iY58D/Ql/yVWhFWZwSaYAH5A56yAHvxePdid ilcjLyq/Y9GcSx6CHMQG0atf0a53y5VV/BkwTCgwmlTAkTawMfrv01L5+dMuPIOq dsn/bXvTYq81PxkwRSnWIQ9e32iFvCh1rmnMlU64/+cDmh4k1Em079Ya83xQGI2S HsrQeZr1BX3kq4uq8hf3ocZrEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD52OYql m2TX1k5nuFY0DE8rHozeMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M TUcwVXBrTUFjb2I0blduTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuPomHiY8t7NRYbZHFxN/sLhtKccf2FO/ei22GFeTOuLmexsxwLInA 2/VjUT7WRaLrn6r+HdYvy3qcLdc//+I9GleoQaZJrOrI1Ipbob6Q0bqSMNWmAmuy RB9GaTAqfTIVCmmg5CbQjIdR6sVAfGc3opHymArj1EHtg5TFtL8WGzjWx7RONcd/ 0Oio11+X257H0OgG723xyIo8a3zonJVIe6WMF2d8APDHDMPN31dDPKA6NwNyM7We ZmR3/tRrnFRb/qnquNIcOfpy4ncR1eG+2XMrstDyfa7xhIU2/x+FNptYjfnNpRGL 2ytPzbcFxTgy16bRDMHdM8ZtMkhGk5JB -----END CERTIFICATE-----Generated at Thu Sep 18 21:37:31 2025 by rpki-client