$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json) Hash identifier: Ao3ip1LshnTVwCMRc6VzWM5yT8LvDJNTAv4+z2yoX9A= Subject key identifier: 4E:59:97:50:DC:71:86:F6:18:7D:A4:6D:29:7E:44:69:D7:94:62:D9 Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft Manifest number: 0224 Signing time: Fri 05 Sep 2025 02:21:30 +0000 Manifest this update: Fri 05 Sep 2025 02:21:29 +0000 Manifest next update: Fri 12 Sep 2025 02:21:29 +0000 Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: zDOf7K+8i3mqHFKMItnjwlQg4mZvOdJ28qqkM/QZY0A=) 2: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: PE1GT2A7EmT71tkAdrtk5aTsSiGLh2+65uV6vdi3L2w=) 3: A4B9732E372211F088B77741C4F9AE02.roa (hash: mk1V1FHxB9suL0UPFLyM/A4VOyjRdsjF6s6gkTDXYcQ=) 4: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: 8t/E7tL8Lbh/a7Lj1jqywOIP2dcmbqemPtvNv/RJomk=) 5: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 88kWEiY/06EoXdAjoPmCFzf4ibe9Kqek376AzBNc9lE=) 6: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: 8cIYacmt17oQhUg55NPG9jDcGp/KP0H3kvB7HR2dORY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Sep 5 02:21:29 2025 GMT Not After : Sep 12 02:21:29 2025 GMT Subject: CN=68ba492a-148f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:66:69:29:64:ce:7b:89:f7:7c:f2:4f:d4: d5:e7:b5:87:72:2f:6c:91:8b:c2:18:a7:2d:74:7a: 65:b2:2d:77:86:16:2e:f2:55:67:39:a9:8b:04:58: bd:98:ca:e0:10:51:c9:38:1c:8b:8f:f3:62:e9:13: 26:40:54:c9:7d:fe:e1:16:5f:36:37:01:9e:7c:8b: 95:01:0a:42:0e:8f:ee:63:3b:b8:b9:e1:86:09:17: c6:ef:82:d5:de:ff:d1:42:ff:46:7a:b0:66:f5:cd: 17:d3:84:1f:42:e3:69:49:b1:64:e6:de:1a:07:a4: 11:03:33:db:80:20:08:20:23:ac:2a:56:a4:8a:87: 4a:b7:d9:12:ab:d8:00:1e:d0:0a:d2:d6:7c:f4:20: 18:75:a0:cc:2c:68:1e:10:41:fa:a6:9f:35:58:f2: 89:d9:1a:f4:97:47:a8:a8:ac:f3:e4:32:e8:32:8a: 15:0e:a5:98:86:0e:2c:ab:20:55:af:17:f1:20:2a: 34:22:55:4f:57:6b:28:fc:ac:78:0e:ed:40:57:4b: f7:73:17:01:0e:84:3b:af:06:be:7d:b5:31:72:ae: ea:77:4f:2d:2d:46:a0:a4:53:1f:ee:65:f2:02:76: 9c:2d:2e:40:94:38:76:eb:9e:ac:32:48:f4:3f:16: 67:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:59:97:50:DC:71:86:F6:18:7D:A4:6D:29:7E:44:69:D7:94:62:D9 X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:8d:0a:41:b0:60:eb:c3:94:33:e9:9e:6b:72:77:f0:8d:54: a9:57:9a:b9:ba:e9:cc:d7:ec:a1:7d:59:9c:8a:8b:7b:3f:95: b0:0e:a1:a6:c8:a3:53:48:1e:22:7c:d0:7b:f1:19:ac:b6:4c: c5:a8:20:a0:b4:ca:0e:7b:7c:b6:56:19:26:ac:03:c3:bf:b3: f4:fc:ff:30:9e:19:2d:da:ec:f5:d6:35:88:32:f1:81:0e:63: bb:59:63:8b:fe:5a:6e:5d:d3:bf:16:c3:b8:4b:a8:4e:12:de: 63:8a:c9:f1:a8:04:41:d4:1d:3a:40:da:15:f2:61:25:ec:a9: 11:e2:f3:3e:d6:ad:15:17:55:4f:04:40:63:eb:78:3a:2e:31: cc:88:8e:20:36:f1:01:46:fa:48:ce:43:26:e7:99:a4:bd:ae: 22:89:6f:bb:3e:33:62:cd:ea:ce:60:c6:e4:de:48:a8:6d:13: 2f:96:ba:1e:3c:8d:a6:2d:9e:2f:3e:ce:8d:94:4c:6d:db:ce: f0:91:7c:ba:3c:a4:7b:64:50:38:8b:a4:84:6a:7c:de:b1:77: 55:f7:ff:35:df:52:57:e3:b7:cc:2b:d2:23:28:a4:2c:a9:07: d1:13:1e:6a:89:7e:32:f0:31:f0:18:3c:81:89:10:56:c0:13: 38:45:06:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjUwOTA1MDIyMTI5WhcNMjUwOTEyMDIyMTI5WjAYMRYwFAYD VQQDEw02OGJhNDkyYS0xNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8NmaSlkznuJ93zyT9TV57WHci9skYvCGKctdHplsi13hhYu8lVnOamLBFi9 mMrgEFHJOByLj/Ni6RMmQFTJff7hFl82NwGefIuVAQpCDo/uYzu4ueGGCRfG74LV 3v/RQv9GerBm9c0X04QfQuNpSbFk5t4aB6QRAzPbgCAIICOsKlakiodKt9kSq9gA HtAK0tZ89CAYdaDMLGgeEEH6pp81WPKJ2Rr0l0eoqKzz5DLoMooVDqWYhg4sqyBV rxfxICo0IlVPV2so/Kx4Du1AV0v3cxcBDoQ7rwa+fbUxcq7qd08tLUagpFMf7mXy AnacLS5AlDh2656sMkj0PxZnhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5Zl1Dc cYb2GH2kbSl+RGnXlGLZMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzQ4RS80RDc4OTI2QTRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3 VmtMU1NFdF9BZ1d1ZmN4MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrjQpBsGDrw5Qz6Z5rcnfwjVSpV5q5uunM1+yhfVmciot7P5WwDqGm yKNTSB4ifNB78RmstkzFqCCgtMoOe3y2VhkmrAPDv7P0/P8wnhkt2uz11jWIMvGB DmO7WWOL/lpuXdO/FsO4S6hOEt5jisnxqARB1B06QNoV8mEl7KkR4vM+1q0VF1VP BEBj63g6LjHMiI4gNvEBRvpIzkMm55mkva4iiW+7PjNizerOYMbk3kiobRMvlroe PI2mLZ4vPs6NlExt287wkXy6PKR7ZFA4i6SEanzesXdV9/8131JX47fMK9IjKKQs qQfREx5qiX4y8DHwGDyBiRBWwBM4RQav -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:19 2025 by rpki-client