$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json) Hash identifier: AgSHRSsDdxhqdZR2SbbQ8bzsayYNtEv1QW7GSwNnfbk= Subject key identifier: 71:ED:AB:E9:94:68:09:E8:4C:09:2C:04:47:A0:7B:66:57:79:F7:80 Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft Manifest number: 76 Signing time: Fri 05 Sep 2025 07:17:47 +0000 Manifest this update: Fri 05 Sep 2025 07:17:47 +0000 Manifest next update: Fri 12 Sep 2025 07:17:47 +0000 Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: NsEX4SOkeUNUhKv3+L67u8w8vyvBxFEco8KYBologY4=) 2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: XLgRz6Ys+AWKVb/kmctJ9W9xNxym6vJibxlk+kHS4Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Validity Not Before: Sep 5 07:17:47 2025 GMT Not After : Sep 12 07:17:47 2025 GMT Subject: CN=68ba8e9b-52e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:df:53:18:52:d8:bd:0c:2b:c5:53:39:89:d3: 78:70:b6:8f:93:ba:fe:05:93:8e:5a:47:4c:91:19: 79:23:60:33:89:d5:ba:17:23:49:62:c9:e2:d9:b3: a5:30:e9:3c:16:3e:81:e8:27:a3:09:3e:e1:ce:8d: b3:f7:8a:8e:48:74:15:bc:cb:89:5c:78:3c:0d:f9: 16:9a:c2:12:33:6e:0b:eb:8e:e8:9f:bb:73:08:04: 75:cc:bf:e7:0f:01:72:00:7d:b8:99:8e:93:2f:c0: a4:a7:f4:5b:18:bf:45:ad:27:ba:72:8b:eb:1a:ce: 9f:e7:5f:58:dd:88:a8:f5:e5:84:aa:8b:03:66:76: 96:b9:49:6f:25:de:c3:40:ef:ac:e2:d7:de:e7:00: fc:1e:b6:06:d0:db:1d:0d:ca:bc:b3:19:fd:87:8f: d8:04:ed:c8:46:e9:ef:3e:5a:42:17:6d:a4:15:b0: f4:31:84:31:de:8a:55:87:af:3c:08:d4:0f:fa:e2: 5d:8f:4e:41:f6:e7:12:61:b2:ce:35:01:e1:1a:e9: f0:12:a3:57:9f:3d:28:a3:82:eb:34:da:b8:43:4e: 09:7c:5d:a1:96:58:a5:a0:d1:d7:b3:5a:6b:f9:98: 4e:e6:18:a4:f2:ba:1a:a3:09:55:02:7a:83:39:a7: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:ED:AB:E9:94:68:09:E8:4C:09:2C:04:47:A0:7B:66:57:79:F7:80 X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:1b:4f:bc:98:38:d3:7b:21:df:19:f5:c3:6d:7c:74:ff:cd: c3:7e:e7:a7:3a:df:32:19:9d:17:82:4f:ec:70:b7:e8:7a:4f: 95:a0:c9:01:60:4f:ce:99:06:f6:0e:b9:a1:5d:1f:1f:33:4c: 73:46:82:68:d8:a7:8d:14:de:5c:f9:fe:a8:86:42:fc:97:b4: 32:ce:41:bb:40:77:aa:16:72:6f:ff:81:e5:85:6f:33:a9:be: 64:23:06:75:b7:c6:d6:6d:6e:fa:8f:02:ba:85:9f:22:70:e7: c5:ab:43:f9:ba:22:bc:4c:11:8b:bf:7d:cc:49:b6:d4:82:5f: 3d:45:b7:86:19:08:88:1c:b1:45:be:71:fc:36:1a:1b:21:c4: 5f:c9:11:b7:fc:0a:84:a3:dc:60:11:23:3b:7a:fe:25:1d:32: 0c:c0:fb:ef:00:fd:7c:db:e6:b0:9b:53:22:76:1c:21:89:7b: be:16:fc:fc:26:b1:8e:81:71:a7:83:a8:7d:5d:c8:a7:35:27: db:0d:c1:29:ca:0e:5c:f9:1b:c8:d4:18:6a:f7:74:4a:dd:d9: 60:af:23:32:7e:a8:44:a7:79:1d:f3:70:ff:79:f0:1c:d5:68: 0d:47:ed:c0:8a:72:f8:82:56:3b:9c:3b:e8:24:44:f7:80:a0: 1d:83:7e:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFGNTExMC8GA1UEBRMoNDkxMzY2NzVFN0UyMzRFN0QyRjg4NDU5OThFMkM2MkRC NDg4ODJDQTAeFw0yNTA5MDUwNzE3NDdaFw0yNTA5MTIwNzE3NDdaMBgxFjAUBgNV BAMTDTY4YmE4ZTliLTUyZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDv31MYUti9DCvFUzmJ03hwto+Tuv4Fk45aR0yRGXkjYDOJ1boXI0liyeLZs6Uw 6TwWPoHoJ6MJPuHOjbP3io5IdBW8y4lceDwN+RaawhIzbgvrjuifu3MIBHXMv+cP AXIAfbiZjpMvwKSn9FsYv0WtJ7pyi+sazp/nX1jdiKj15YSqiwNmdpa5SW8l3sNA 76zi197nAPwetgbQ2x0NyryzGf2Hj9gE7chG6e8+WkIXbaQVsPQxhDHeilWHrzwI 1A/64l2PTkH25xJhss41AeEa6fASo1efPSijgus02rhDTgl8XaGWWKWg0dezWmv5 mE7mGKTyuhqjCVUCeoM5p7ORAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUce2r6ZRo CehMCSwER6B7Zld594AwHwYDVR0jBBgwFoAUSRNmdefiNOfS+IRZmOLGLbSIgsow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUY1L0E3NTREMzgwRDZF QzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1JObWRlZmlOT2ZTLUlSWm1PTEdMYlNJZ3NvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz MUY1L0E3NTREMzgwRDZFQzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9m Uy1JUlptT0xHTGJTSWdzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALQbT7yYONN7Id8Z9cNtfHT/zcN+56c63zIZnReCT+xwt+h6T5WgyQFg T86ZBvYOuaFdHx8zTHNGgmjYp40U3lz5/qiGQvyXtDLOQbtAd6oWcm//geWFbzOp vmQjBnW3xtZtbvqPArqFnyJw58WrQ/m6IrxMEYu/fcxJttSCXz1Ft4YZCIgcsUW+ cfw2GhshxF/JEbf8CoSj3GARIzt6/iUdMgzA++8A/Xzb5rCbUyJ2HCGJe74W/Pwm sY6BcaeDqH1dyKc1J9sNwSnKDlz5G8jUGGr3dErd2WCvIzJ+qESneR3zcP958BzV aA1H7cCKcviCVjucO+gkRPeAoB2Dfk0= -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:13 2025 by rpki-client