$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: pjQMimAyW2d5wGfihdMmP4Cw3lNveXgmBlOQiEkViM0= Subject key identifier: 93:97:FB:5A:EE:D5:A1:C6:7F:D2:91:81:0C:97:01:98:B7:94:D4:6E Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 036B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 0363 Signing time: Tue 09 Sep 2025 01:02:38 +0000 Manifest this update: Tue 09 Sep 2025 01:02:37 +0000 Manifest next update: Tue 16 Sep 2025 01:02:37 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: fFV01gUkeWOb0ZcuDmgsd6doD9Es3ck5+rf2gneoGlI=) 2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: 3gM1BdbMTDqrDwIX93z+/V+zTYOD4jC/sFTj/5bifAc=) 3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: 7yly3hdDUnooff1AD5UaEbPn8g4l5l4qpcVVzY6AZJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875 (0x36b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Sep 9 01:02:37 2025 GMT Not After : Sep 16 01:02:37 2025 GMT Subject: CN=68bf7cae-7e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:f7:cc:f9:2d:2b:c4:b3:62:6f:84:c7:a2: b1:5c:12:52:f0:48:39:ba:7a:e2:c0:57:55:cc:04: d3:fd:f3:a7:f0:d8:90:0d:ea:2d:7f:e8:fb:8a:4b: 8b:e7:2b:1e:bc:bd:4c:c4:3c:32:92:36:34:f2:e6: 76:f0:e5:ac:26:ab:03:13:31:04:ab:d5:57:46:c1: 31:48:d9:5a:b0:07:ba:cd:b5:03:66:27:dd:9d:68: 06:0c:0e:a8:83:3c:48:00:e7:ca:c5:dd:3e:23:37: ed:a7:fa:4c:84:63:7e:3e:dc:57:65:15:f3:01:e6: 1e:a4:06:49:1f:86:eb:4f:c3:f0:0f:3c:1f:8c:74: e4:c7:3d:e3:fa:e8:4c:7b:66:56:e2:1d:58:90:bd: aa:83:26:a3:db:70:b9:46:d4:bd:14:2f:9e:0e:61: c1:7d:f0:b0:9d:16:37:45:d8:a5:28:ce:7a:b5:9e: 01:9b:a8:48:86:74:d8:04:f0:9b:2f:93:e6:e1:e9: e4:b1:e6:94:31:9c:6b:5c:1f:e7:c2:75:fa:1d:d0: dc:6b:cd:5e:55:f2:9d:29:cd:24:51:bb:0e:37:73: 46:8a:cb:98:33:e8:8b:17:9f:f8:e6:97:c4:b2:d0: b0:ce:5c:cb:73:83:97:1f:fc:11:22:47:90:b6:6d: fd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:97:FB:5A:EE:D5:A1:C6:7F:D2:91:81:0C:97:01:98:B7:94:D4:6E X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ff:a7:19:6c:76:93:19:3f:de:8c:fe:80:de:e7:cc:80:f7: 92:9f:56:4d:86:75:d9:f8:f2:fd:74:be:c0:7e:03:07:70:ac: c8:99:bd:14:77:0d:ac:fc:b9:21:f3:2b:a8:84:a2:b8:51:79: 94:58:25:2f:f5:41:b4:e8:47:6b:69:29:47:4b:32:5e:08:3e: 2c:51:50:e0:68:6b:ea:6c:de:8b:32:43:66:99:c6:02:f7:82: 89:5d:49:5e:4f:d7:02:be:74:36:e7:37:68:25:36:62:8a:06: b3:88:92:0f:3e:12:51:88:df:5b:ed:f4:09:6c:06:ce:44:f8: 26:4f:8c:5d:f1:d6:1e:33:03:11:98:bf:d6:2e:cd:d6:1b:89: 16:67:2a:80:0a:41:26:70:b1:8f:8c:85:5f:fc:9d:7b:b7:2c: d2:c9:02:7f:2c:7c:8f:7e:73:de:9a:75:56:3e:df:03:34:70: 80:95:eb:13:b5:a4:95:5a:65:14:7f:43:81:6a:8e:d1:2b:a5: 87:b2:3d:68:02:f5:0b:c5:e7:f0:a9:89:fa:05:ed:e9:92:25: 71:2a:30:66:cf:5b:3f:46:24:47:a6:82:87:41:f2:b0:be:2e: 33:6b:a9:e3:8f:a1:a0:a3:d6:25:17:2c:0a:9b:cc:b0:b6:ca: 89:2b:97:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUwOTA5MDEwMjM3WhcNMjUwOTE2MDEwMjM3WjAYMRYwFAYD VQQDEw02OGJmN2NhZS03ZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJD3zPktK8SzYm+Ex6KxXBJS8Eg5unriwFdVzATT/fOn8NiQDeotf+j7ikuL 5ysevL1MxDwykjY08uZ28OWsJqsDEzEEq9VXRsExSNlasAe6zbUDZifdnWgGDA6o gzxIAOfKxd0+Izftp/pMhGN+PtxXZRXzAeYepAZJH4brT8PwDzwfjHTkxz3j+uhM e2ZW4h1YkL2qgyaj23C5RtS9FC+eDmHBffCwnRY3RdilKM56tZ4Bm6hIhnTYBPCb L5Pm4enkseaUMZxrXB/nwnX6HdDca81eVfKdKc0kUbsON3NGisuYM+iLF5/45pfE stCwzlzLc4OXH/wRIkeQtm39GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOX+1ru 1aHGf9KRgQyXAZi3lNRuMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU/6cZbHaTGT/ejP6A3ufMgPeSn1ZNhnXZ+PL9dL7AfgMHcKzImb0U dw2s/Lkh8yuohKK4UXmUWCUv9UG06EdraSlHSzJeCD4sUVDgaGvqbN6LMkNmmcYC 94KJXUleT9cCvnQ25zdoJTZiigaziJIPPhJRiN9b7fQJbAbORPgmT4xd8dYeMwMR mL/WLs3WG4kWZyqACkEmcLGPjIVf/J17tyzSyQJ/LHyPfnPemnVWPt8DNHCAlesT taSVWmUUf0OBao7RK6WHsj1oAvULxefwqYn6Be3pkiVxKjBmz1s/RiRHpoKHQfKw vi4za6njj6Ggo9YlFywKm8ywtsqJK5eT -----END CERTIFICATE-----Generated at Tue Sep 9 18:33:35 2025 by rpki-client