$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json) Hash identifier: yMlHJxUODMjtK4Jjrc0mF9wDd03yH3+PNB/NopuQ4Y0= Subject key identifier: 9A:C8:94:FF:E8:95:6C:AA:B0:3C:66:E4:6E:4C:B8:F7:63:B2:02:62 Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft Manifest number: 0664 Signing time: Thu 04 Sep 2025 22:48:07 +0000 Manifest this update: Thu 04 Sep 2025 22:48:07 +0000 Manifest next update: Thu 11 Sep 2025 22:48:07 +0000 Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: FiWpR1muu4lQcvJ2A8UQ8cRRBWYTflZP00LcnIz0c+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Validity Not Before: Sep 4 22:48:07 2025 GMT Not After : Sep 11 22:48:07 2025 GMT Subject: CN=68ba1727-4037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:98:5a:c6:29:15:7e:0f:ef:ce:20:76:45:7e: 60:93:2a:59:ca:21:c3:d3:51:44:60:41:67:45:b7: 74:97:d2:30:76:3a:d2:21:d6:5a:7a:5b:bb:f9:15: 9c:fa:c2:e6:ad:75:99:92:f6:d4:ca:fc:92:f5:9e: 1a:b3:4a:58:ed:a3:44:57:ff:17:95:c1:3a:f4:0d: 00:49:79:5b:8d:52:5a:9f:71:8f:f7:b6:33:a2:dc: dc:f0:b3:85:c5:8d:32:b3:16:bc:49:27:dd:8f:b9: c4:0d:b9:40:a4:3b:5a:25:ce:53:4f:04:ab:ed:d7: ba:d5:ba:f6:92:57:e0:ec:e3:44:87:6b:7d:9e:9e: 65:60:e9:13:ad:a9:06:52:32:8d:85:e9:0d:bb:04: 51:56:48:3c:98:04:8c:0c:7f:69:67:ff:c6:ae:c4: f8:7d:21:9d:c6:74:41:04:2a:cf:48:3c:95:aa:15: 7c:11:22:94:67:d9:73:8e:52:c3:0a:54:8b:ab:e2: 12:bb:3f:58:eb:57:9d:b6:a8:5b:ec:95:68:c3:3e: 2b:3a:82:d4:0e:6a:15:e2:95:5f:7b:20:8e:21:9d: 3b:5e:61:04:b2:74:6c:6e:ea:c9:18:04:28:2c:6b: b8:85:8e:d8:20:dd:5f:8b:e0:0e:1d:25:1a:f8:e4: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C8:94:FF:E8:95:6C:AA:B0:3C:66:E4:6E:4C:B8:F7:63:B2:02:62 X509v3 Authority Key Identifier: keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:85:b7:4b:f7:2d:66:05:f8:1e:01:a3:d4:77:a7:68:04:a8: 0d:84:ae:fb:e0:14:c1:b6:cc:35:81:0e:58:04:e5:90:be:a8: cc:83:c0:b3:9b:8d:91:ce:1d:a3:ea:63:2f:f1:6f:ce:6b:20: ee:32:18:21:dd:6c:b2:7e:ff:5c:6d:f7:ff:0d:9e:36:26:41: 85:a0:c3:4b:4a:42:c2:d2:a4:38:0d:09:0a:61:ac:dd:97:78: d1:c7:ee:f3:b1:4c:b6:29:d8:a4:9a:bb:c6:1f:45:bd:b2:4f: 5a:24:f8:d6:39:19:f9:fb:9b:49:44:27:80:76:15:25:2c:ae: f3:b9:fe:a7:35:8e:77:d1:ed:1f:bb:15:07:31:14:fd:f0:ab: 75:14:5c:34:57:4c:63:74:cb:8f:71:b4:3b:eb:31:3a:02:d7: f0:1a:45:b4:f9:ef:00:4f:3d:0e:96:b6:bb:97:a3:ef:22:e1: 73:59:67:ba:9d:49:af:5b:0e:98:c9:18:0e:1c:6b:f7:ca:bc: a7:69:71:e1:e2:bf:6f:31:83:3f:36:41:20:52:d2:e4:ac:30: ac:9e:6f:ad:56:ad:01:fe:5a:b7:df:7a:0b:4c:6e:69:69:81: 17:81:00:26:36:6a:40:96:fb:a3:bd:0d:dc:52:48:13:6a:d3: d4:38:f9:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG NTlDMjdFOUUwHhcNMjUwOTA0MjI0ODA3WhcNMjUwOTExMjI0ODA3WjAYMRYwFAYD VQQDEw02OGJhMTcyNy00MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0phaxikVfg/vziB2RX5gkypZyiHD01FEYEFnRbd0l9IwdjrSIdZaelu7+RWc +sLmrXWZkvbUyvyS9Z4as0pY7aNEV/8XlcE69A0ASXlbjVJan3GP97Yzotzc8LOF xY0ysxa8SSfdj7nEDblApDtaJc5TTwSr7de61br2klfg7ONEh2t9np5lYOkTrakG UjKNhekNuwRRVkg8mASMDH9pZ//GrsT4fSGdxnRBBCrPSDyVqhV8ESKUZ9lzjlLD ClSLq+ISuz9Y61edtqhb7JVowz4rOoLUDmoV4pVfeyCOIZ07XmEEsnRsburJGAQo LGu4hY7YIN1fi+AOHSUa+OQtBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrIlP/o lWyqsDxm5G5MuPdjsgJiMB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRhbdL9y1mBfgeAaPUd6doBKgNhK774BTBtsw1gQ5YBOWQvqjMg8Cz m42Rzh2j6mMv8W/OayDuMhgh3Wyyfv9cbff/DZ42JkGFoMNLSkLC0qQ4DQkKYazd l3jRx+7zsUy2KdikmrvGH0W9sk9aJPjWORn5+5tJRCeAdhUlLK7zuf6nNY530e0f uxUHMRT98Kt1FFw0V0xjdMuPcbQ76zE6AtfwGkW0+e8ATz0Olra7l6PvIuFzWWe6 nUmvWw6YyRgOHGv3yrynaXHh4r9vMYM/NkEgUtLkrDCsnm+tVq0B/lq333oLTG5p aYEXgQAmNmpAlvujvQ3cUkgTatPUOPkH -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:30 2025 by rpki-client