$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft File: sLGl1VkrzlyB63JtRkDKlVEEzpM.mft (raw, json) Hash identifier: 1qv9BjySJ8LnI5mIoO98f+eBmjLiJjJ63GxQrSeMfJw= Subject key identifier: 91:5C:68:DF:CF:43:A3:6F:66:13:77:87:A7:6C:A6:D0:F4:79:9E:5D Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93 Certificate issuer: /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93 Certificate serial: 0B3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft Manifest number: 0B2E Signing time: Wed 20 Aug 2025 19:21:42 +0000 Manifest this update: Wed 20 Aug 2025 19:21:42 +0000 Manifest next update: Wed 27 Aug 2025 19:21:42 +0000 Files and hashes: 1: sLGl1VkrzlyB63JtRkDKlVEEzpM.crl (hash: kziKhAAmMI3ZSbc6XqiXfvpzbzQMFaE63zLvGdwOMwE=) 2: E91D4C42E19011EC8E1ECA75C4F9AE02.roa (hash: ZetAVFLz5a9A9d96t5a3lmM5CeQl7iCEfmN2/6tRSWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2875 (0xb3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181259, serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93 Validity Not Before: Aug 20 19:21:42 2025 GMT Not After : Aug 27 19:21:42 2025 GMT Subject: CN=68a62046-9cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e2:d3:d8:fc:61:46:5a:d2:57:0a:09:c5:49: 64:ef:d6:e9:11:36:f6:a6:7a:32:76:fa:ae:d4:65: 83:fd:bd:7c:ab:98:6d:56:08:df:99:7f:e3:02:88: 72:6b:ef:38:6f:de:7a:21:5a:02:33:1c:17:d9:ed: 96:bf:b7:8f:ac:3e:dd:38:b7:1e:6e:aa:20:3a:f3: 00:bd:4f:20:98:8d:05:a9:cf:09:7b:20:d5:d5:7f: c8:6d:3c:97:c0:eb:cb:48:9b:24:c4:e4:14:9c:45: 24:b1:06:61:f1:c1:6b:66:58:2b:f9:0b:06:54:f3: 05:10:ef:de:cc:88:6a:24:f5:a3:31:13:b6:0a:d8: 9b:ce:34:87:bb:f5:15:2a:55:2b:bd:92:1f:e8:de: 7e:9f:4e:ae:69:e9:bd:3d:a1:05:45:ae:38:a4:c3: e9:22:fa:4d:4e:53:11:1b:e7:97:39:bc:c0:7a:6e: 3a:5e:5a:70:a4:cd:18:b1:b4:d7:86:dc:09:79:4b: 09:ee:42:13:a8:20:1a:43:02:3b:03:dc:b8:c9:cb: 7f:24:7f:50:5a:7f:c4:34:63:34:ff:f2:2b:87:e7: 58:96:ae:dc:dd:4c:2a:5a:9d:97:21:ac:81:29:6d: 8a:64:c7:63:59:78:65:e1:09:6b:bb:29:da:f8:ce: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5C:68:DF:CF:43:A3:6F:66:13:77:87:A7:6C:A6:D0:F4:79:9E:5D X509v3 Authority Key Identifier: keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:23:2f:f5:2e:39:82:69:36:5b:56:d0:32:45:12:6f:bc:80: b6:e0:dd:9a:9d:10:c4:b5:5f:04:0b:84:81:53:ee:2f:62:46: ae:8e:3b:da:1e:db:92:d3:13:1b:db:d6:1c:32:44:e0:14:79: 50:66:db:c9:b0:26:c6:16:a2:93:2b:14:e7:a2:aa:07:47:bd: dd:c4:86:c7:a6:44:18:62:c1:b3:f4:29:99:98:74:30:e7:56: c5:94:fa:0a:c5:a6:eb:a5:69:d2:b5:8c:ac:9f:23:49:f1:64: d6:c7:2e:dd:55:5f:64:2e:4c:6c:81:72:e9:47:35:f1:df:29: ee:8d:68:99:ef:ca:af:c4:39:d0:7c:2d:13:0b:b5:bd:41:4b: a3:23:e8:b7:d9:6b:e2:33:89:93:4f:da:5e:b2:98:84:d9:47: 67:8a:78:ba:d2:b6:9e:e5:3d:43:13:4a:54:66:8d:d1:ca:b7: ef:0d:f9:18:16:2e:f7:15:f2:cb:14:49:08:2e:a0:60:c7:b1: 38:ff:6d:77:da:78:dc:0e:61:99:e1:99:46:08:df:2f:7b:a3: 8a:23:1f:fc:cf:55:9f:e3:27:e2:d4:2e:d2:d2:bb:a2:d1:35: 35:52:57:fe:da:08:8c:0b:ba:b5:fa:24:99:8e:57:e2:c0:ae: 65:91:f6:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEyNTkxMTAvBgNVBAUTKEIwQjFBNUQ1NTkyQkNFNUM4MUVCNzI2RDQ2NDBDQTk1 NTEwNENFOTMwHhcNMjUwODIwMTkyMTQyWhcNMjUwODI3MTkyMTQyWjAYMRYwFAYD VQQDEw02OGE2MjA0Ni05Y2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7uLT2PxhRlrSVwoJxUlk79bpETb2pnoydvqu1GWD/b18q5htVgjfmX/jAohy a+84b956IVoCMxwX2e2Wv7ePrD7dOLcebqogOvMAvU8gmI0Fqc8JeyDV1X/IbTyX wOvLSJskxOQUnEUksQZh8cFrZlgr+QsGVPMFEO/ezIhqJPWjMRO2CtibzjSHu/UV KlUrvZIf6N5+n06uaem9PaEFRa44pMPpIvpNTlMRG+eXObzAem46XlpwpM0YsbTX htwJeUsJ7kITqCAaQwI7A9y4yct/JH9QWn/ENGM0//Irh+dYlq7c3UwqWp2XIayB KW2KZMdjWXhl4Qlruyna+M4hcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFcaN/P Q6NvZhN3h6dsptD0eZ5dMB8GA1UdIwQYMBaAFLCxpdVZK85cgetybUZAypVRBM6T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTI1OS9ENEYyNzU4MjQ1 OTYxMUVBQjBEQkU0MkFDNEY5QUUwMi9zTEdsMVZrcnpseUI2M0p0UmtES2xWRUV6 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMR2wxVmtyemx5QjYzSnRSa0RLbFZFRXpwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTI1OS9ENEYyNzU4MjQ1OTYxMUVBQjBEQkU0MkFDNEY5QUUwMi9zTEdsMVZrcnps eUI2M0p0UmtES2xWRUV6cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANIy/1LjmCaTZbVtAyRRJvvIC24N2anRDEtV8EC4SBU+4vYkaujjva HtuS0xMb29YcMkTgFHlQZtvJsCbGFqKTKxTnoqoHR73dxIbHpkQYYsGz9CmZmHQw 51bFlPoKxabrpWnStYysnyNJ8WTWxy7dVV9kLkxsgXLpRzXx3ynujWiZ78qvxDnQ fC0TC7W9QUujI+i32WviM4mTT9pespiE2Udnini60rae5T1DE0pUZo3RyrfvDfkY Fi73FfLLFEkILqBgx7E4/2132njcDmGZ4ZlGCN8ve6OKIx/8z1Wf4yfi1C7S0rui 0TU1Ulf+2giMC7q1+iSZjlfiwK5lkfbl -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:02 2025 by rpki-client