$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json) Hash identifier: k94uWcrQBpTyYH5I6lC3/4UgBbxiQKmfdFgeqgQ7Zvc= Subject key identifier: A7:7D:BD:FB:E3:B2:1A:13:30:F1:4F:4F:93:5D:71:AB:F4:13:71:12 Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft Manifest number: 0242 Signing time: Sat 01 Nov 2025 02:09:03 +0000 Manifest this update: Sat 01 Nov 2025 02:09:02 +0000 Manifest next update: Sat 08 Nov 2025 02:09:02 +0000 Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: 6w4eFokbpxh7jQ2UmezNLqTMN212Ay1zJ5BdgyPPiQw=) 2: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: rrVBYVrSFiqn3nLdHTxIyiA8PTcgPoGjeKcEaq4wMoo=) 3: A4B9732E372211F088B77741C4F9AE02.roa (hash: 3TNlyeCxwMy8NOZgnGPzQndaWXiemPUyKwLX2o1mWQM=) 4: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: hLV0teY5RA06JKeLhF6EKVNH5GsjoHWUOS3I4OJihTg=) 5: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: QKPxnsl5W/cKLCZuMQFferj3l2oedmhBT9kPnPZhJg4=) 6: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: ye1UKpo8u7ojDH21WRiG292JL5bV63l2uZsql1JK7Ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 02:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Nov 1 02:09:02 2025 GMT Not After : Nov 8 02:09:02 2025 GMT Subject: CN=69056bbe-a28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:a4:ac:ed:1d:f1:4c:62:e4:ca:f6:72:3d: 41:1c:07:a1:4c:f6:07:3a:65:fd:7b:c2:55:0c:75: ea:68:34:12:61:8e:00:bd:be:22:45:61:d0:79:c4: fd:72:71:26:ac:d7:f8:9e:90:c2:b3:39:00:a5:b7: 95:98:9f:f3:d3:72:70:cf:e0:9a:9d:fa:c6:b1:4f: 7a:c0:81:f2:a7:7d:13:11:93:2f:6a:3a:6f:94:eb: f4:db:16:1f:74:3e:70:5c:c8:37:a3:2b:3d:53:f2: 7b:2f:6d:da:88:e3:44:79:bc:ad:dd:e5:0a:32:b8: d2:b7:01:80:42:4d:65:6c:ae:8a:26:b1:84:2b:8b: 6c:22:04:ac:e0:3a:a7:41:01:68:09:9f:0f:9d:fa: 49:c3:e4:d7:b4:2b:50:ac:bd:64:00:b8:83:ef:cd: c2:89:dd:5b:95:fe:75:9a:9c:7f:b3:a7:9a:64:da: 56:7a:ba:05:48:a2:af:1f:be:a4:cd:53:e4:6d:17: 0e:1e:27:db:50:f2:9b:72:96:2e:70:28:d6:22:da: fb:61:ee:40:f1:3a:9e:6c:fe:b0:a3:67:f9:82:62: b5:1d:7c:2e:3f:e1:d6:95:ad:2e:fa:53:a8:29:16: c4:01:b8:4a:42:85:cc:e8:7a:c2:c0:12:2f:ad:34: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7D:BD:FB:E3:B2:1A:13:30:F1:4F:4F:93:5D:71:AB:F4:13:71:12 X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3e:be:e9:af:1d:9e:23:20:66:09:7b:78:c6:5b:7e:cb:36: e8:7c:fb:02:11:fb:be:19:9d:92:41:0e:ca:1a:ef:38:da:06: 64:70:3a:4a:d5:3e:97:00:d3:2b:67:7a:06:43:79:49:e3:fa: 38:09:d7:e4:c2:cf:76:06:55:6d:98:d6:cc:5f:70:7d:36:fb: 5e:71:ec:11:f8:56:56:4a:14:36:0c:c7:33:52:1d:8c:df:d8: b1:ce:e6:e4:c0:69:54:8d:e0:79:62:87:50:15:0d:26:bd:09: 38:01:22:6e:f9:27:27:6e:be:54:3c:77:2e:8a:06:97:30:1a: b4:2a:cd:6b:8a:4a:78:29:b5:0f:67:92:8e:cc:82:a1:45:fb: a6:50:39:8d:48:6a:3d:24:0f:be:ef:73:c9:30:42:2e:b5:82: 03:87:4e:60:50:28:27:3e:b9:7f:d8:5d:f5:50:74:50:91:79: 17:43:86:30:6b:f7:29:24:08:9b:d3:b1:65:68:bd:41:a3:35: 77:16:8d:8e:15:93:bb:ec:c8:80:4b:59:77:9b:6b:49:44:13: e9:09:f1:a3:87:7e:76:28:53:45:7f:c1:1b:2b:3a:01:dc:ca: 63:13:1a:ad:54:f1:0e:04:ce:b9:96:7a:2c:50:96:aa:d4:70: b5:8c:3b:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjUxMTAxMDIwOTAyWhcNMjUxMTA4MDIwOTAyWjAYMRYwFAYD VQQDEw02OTA1NmJiZS1hMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttOkrO0d8Uxi5Mr2cj1BHAehTPYHOmX9e8JVDHXqaDQSYY4Avb4iRWHQecT9 cnEmrNf4npDCszkApbeVmJ/z03Jwz+CanfrGsU96wIHyp30TEZMvajpvlOv02xYf dD5wXMg3oys9U/J7L23aiONEebyt3eUKMrjStwGAQk1lbK6KJrGEK4tsIgSs4Dqn QQFoCZ8PnfpJw+TXtCtQrL1kALiD783Cid1blf51mpx/s6eaZNpWeroFSKKvH76k zVPkbRcOHifbUPKbcpYucCjWItr7Ye5A8TqebP6wo2f5gmK1HXwuP+HWla0u+lOo KRbEAbhKQoXM6HrCwBIvrTQMzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKd9vfvj shoTMPFPT5Ndcav0E3ESMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzQ4RS80RDc4OTI2QTRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3 VmtMU1NFdF9BZ1d1ZmN4MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqPr7prx2eIyBmCXt4xlt+yzbofPsCEfu+GZ2SQQ7KGu842gZkcDpK 1T6XANMrZ3oGQ3lJ4/o4Cdfkws92BlVtmNbMX3B9NvtecewR+FZWShQ2DMczUh2M 39ixzubkwGlUjeB5YodQFQ0mvQk4ASJu+Scnbr5UPHcuigaXMBq0Ks1rikp4KbUP Z5KOzIKhRfumUDmNSGo9JA++73PJMEIutYIDh05gUCgnPrl/2F31UHRQkXkXQ4Yw a/cpJAib07FlaL1BozV3Fo2OFZO77MiAS1l3m2tJRBPpCfGjh352KFNFf8EbKzoB 3MpjExqtVPEOBM65lnosUJaq1HC1jDu7 -----END CERTIFICATE-----Generated at Sat Nov 1 10:31:04 2025 by rpki-client