$ rpki-client -vvf rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft File: sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft (raw, json) Hash identifier: BOEx36O8vOkUu9/8+YSXPVOEN0wU93i1LXbRGrQK+g8= Subject key identifier: 12:E5:FD:3F:58:41:9A:64:52:21:A7:3A:F4:7A:70:6B:AF:4A:1C:CF Authority key identifier: B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 Certificate issuer: /CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Certificate serial: 0353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft Manifest number: 034F Signing time: Thu 21 Aug 2025 01:10:58 +0000 Manifest this update: Thu 21 Aug 2025 01:10:57 +0000 Manifest next update: Thu 28 Aug 2025 01:10:57 +0000 Files and hashes: 1: sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl (hash: LVgua2mWf+OSSNOYwuvbODpvISVuddRHQsnjPXJ1RR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919456E, serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95 Validity Not Before: Aug 21 01:10:57 2025 GMT Not After : Aug 28 01:10:57 2025 GMT Subject: CN=68a67221-b5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ba:21:0e:88:32:45:9e:2f:c8:66:c7:43:98: 7b:0e:33:cf:cd:4d:52:48:15:31:d8:f1:54:b7:3a: 17:7b:4d:b1:69:5f:28:cf:05:1b:1f:8f:8a:e0:ed: 4f:22:d4:32:09:9c:bd:ff:55:a0:a8:f7:af:59:04: 54:67:0f:95:dc:65:ad:4d:2c:64:16:64:99:72:9e: cf:8c:bf:fd:49:2c:48:20:ae:74:a6:fa:11:7b:4f: bd:5a:9a:d9:25:64:2a:05:2f:92:b2:15:4b:e0:b1: d1:82:f5:6c:1b:94:3d:ec:ba:a2:12:91:61:f6:4b: 59:ff:4a:67:55:79:6b:2b:63:42:36:80:d4:24:b5: 3a:88:79:7b:4b:3b:ac:23:b5:e3:93:54:4a:98:86: 1e:aa:47:23:22:87:c0:ed:1e:9f:b9:dc:9a:bd:e9: 6e:59:26:35:e2:24:5a:d1:99:2b:6d:00:3e:86:18: 30:52:b3:82:31:50:60:d6:15:44:8b:32:e4:82:d1: a9:4f:45:b3:18:21:7e:ad:ce:21:11:23:41:86:7c: 99:3c:95:07:13:66:12:78:9e:c7:54:f0:5a:b7:10: 31:03:ca:ac:6a:4e:2a:2f:76:52:37:07:d4:f1:76: 40:8e:07:98:f7:ed:4c:0e:1b:76:7f:e1:f5:aa:8d: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E5:FD:3F:58:41:9A:64:52:21:A7:3A:F4:7A:70:6B:AF:4A:1C:CF X509v3 Authority Key Identifier: keyid:B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption fb:de:47:ae:36:92:5c:04:38:33:53:8b:ba:f9:8e:64:36:ea: 7b:2d:6b:10:b9:41:4a:63:46:11:43:71:20:f2:18:40:d4:f0: 53:29:39:a0:09:ce:9e:4d:17:ce:6d:94:52:0f:59:c3:1b:ff: 8f:8c:ec:b0:1e:25:7b:e9:a6:6e:30:8f:fa:9d:bb:d4:3c:ed: 83:d5:7a:d5:fc:f3:dd:ea:b6:97:80:29:40:a7:e8:2c:e7:c9: db:00:c7:7e:a4:cc:a3:ff:cc:9e:81:7b:1f:6f:61:ab:3c:3f: cf:19:35:0b:fd:50:aa:30:39:f5:bf:07:8b:09:da:8a:1a:97: d0:be:fc:da:ee:e8:d5:19:f2:ce:c2:e3:67:d5:f3:88:15:1b: 48:13:6f:be:87:3b:b3:e5:2b:c5:2d:a3:30:5d:aa:80:c0:c3: 06:0f:51:dc:47:63:e4:a4:48:2b:0d:72:24:63:8d:61:b5:cf: d1:16:4c:67:a3:f3:3c:2d:3a:8f:c5:5d:e4:62:da:e8:1c:01: ff:1f:1a:aa:1f:b3:1a:49:d4:55:e1:c0:ba:c2:38:9a:ec:56: 5c:83:97:13:c6:b7:3f:4c:ef:80:83:b4:4f:5a:be:8b:6e:84: 93:95:9e:2d:ca:d8:10:6e:13:19:13:de:48:23:ef:5c:7f:52: 60:fd:20:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1NkUxMTAvBgNVBAUTKEIwNEI3RkIyMEUyNUQ2RDc1ODdGMjZGRDc1NzI3NEI5 RDNFRTNFOTUwHhcNMjUwODIxMDExMDU3WhcNMjUwODI4MDExMDU3WjAYMRYwFAYD VQQDEw02OGE2NzIyMS1iNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LohDogyRZ4vyGbHQ5h7DjPPzU1SSBUx2PFUtzoXe02xaV8ozwUbH4+K4O1P ItQyCZy9/1WgqPevWQRUZw+V3GWtTSxkFmSZcp7PjL/9SSxIIK50pvoRe0+9WprZ JWQqBS+SshVL4LHRgvVsG5Q97LqiEpFh9ktZ/0pnVXlrK2NCNoDUJLU6iHl7Szus I7Xjk1RKmIYeqkcjIofA7R6fudyaveluWSY14iRa0ZkrbQA+hhgwUrOCMVBg1hVE izLkgtGpT0WzGCF+rc4hESNBhnyZPJUHE2YSeJ7HVPBatxAxA8qsak4qL3ZSNwfU 8XZAjgeY9+1MDht2f+H1qo3wbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLl/T9Y QZpkUiGnOvR6cGuvShzPMB8GA1UdIwQYMBaAFLBLf7IOJdbXWH8m/XVydLnT7j6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDU2RS82RkMzMjlDQ0NC NjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0ZFlmeWI5ZFhKMHVkUHVQ cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdF9zZzRsMXRkWWZ5YjlkWEowdWRQdVBwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDU2RS82RkMzMjlDQ0NCNjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0 ZFlmeWI5ZFhKMHVkUHVQcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD73keuNpJcBDgzU4u6+Y5kNup7LWsQuUFKY0YRQ3Eg8hhA1PBTKTmg Cc6eTRfObZRSD1nDG/+PjOywHiV76aZuMI/6nbvUPO2D1XrV/PPd6raXgClAp+gs 58nbAMd+pMyj/8yegXsfb2GrPD/PGTUL/VCqMDn1vweLCdqKGpfQvvza7ujVGfLO wuNn1fOIFRtIE2++hzuz5SvFLaMwXaqAwMMGD1HcR2PkpEgrDXIkY41htc/RFkxn o/M8LTqPxV3kYtroHAH/HxqqH7MaSdRV4cC6wjia7FZcg5cTxrc/TO+Ag7RPWr6L boSTlZ4tytgQbhMZE95II+9cf1Jg/SBp -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:42 2025 by rpki-client