$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft File: S0QUrmheSI9CsbZH7qAd67DE86A.mft (raw, json) Hash identifier: L8h939QfwR4UJp4C/GL+SL+cTYRWcX9pcF90egcCgPQ= Subject key identifier: B4:00:68:FD:17:9A:BE:05:B6:F1:73:AA:37:C9:BD:F7:3C:8C:47:CA Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 Certificate issuer: /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft Manifest number: 029D Signing time: Tue 19 Aug 2025 01:59:43 +0000 Manifest this update: Tue 19 Aug 2025 01:59:43 +0000 Manifest next update: Tue 26 Aug 2025 01:59:43 +0000 Files and hashes: 1: S0QUrmheSI9CsbZH7qAd67DE86A.crl (hash: y2i6qg/wAAuSMDl93EMcX6T8AcOpnjCMPpuL79mnlUs=) 2: B3F935160E0F11ED89E89675C4F9AE02.roa (hash: FlIBDcsCI6hEzE/Hsl8Oo4AgNaxmcJbVTdpEo3OVvJM=) 3: B4A58FE60E0F11ED89E89675C4F9AE02.roa (hash: xbGvdrnN3RARHETkrmNSzdVV6UQzyx3squYg0aDBmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B1B, serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Validity Not Before: Aug 19 01:59:43 2025 GMT Not After : Aug 26 01:59:43 2025 GMT Subject: CN=68a3da8f-0ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:34:f0:c3:cf:21:83:ec:1b:6b:de:6b:d6:50: 51:38:53:b1:3e:6c:80:1b:92:2a:fd:c8:00:2e:b1: bb:d0:50:3f:e4:a6:c8:95:9e:d1:ba:94:c8:8d:c8: ea:59:bd:63:a4:19:27:88:ab:83:45:19:f4:7a:8b: 5f:f0:e5:d1:8b:31:10:7f:02:dd:b9:14:8c:35:87: a0:d4:0c:ee:22:bd:82:cd:ff:37:79:7f:eb:18:98: 0e:e2:ce:83:74:cd:19:ae:1f:b0:56:e6:70:b7:47: 29:96:5a:be:91:bc:2c:8d:96:00:05:f9:08:6f:21: de:0d:a0:89:72:c0:c1:15:fe:3b:95:a3:74:e1:82: b9:b2:33:9a:e8:cf:03:1e:07:65:e9:32:35:59:a8: 19:96:38:35:6a:bb:21:b1:3a:6b:60:34:d2:4e:21: a3:ee:57:8a:9e:14:cc:92:f2:5a:e2:0d:ae:dc:6b: 16:9f:04:3d:e8:ae:c7:7e:c9:63:a8:3f:c3:74:2c: 8e:f1:83:e3:ac:7f:aa:84:6a:2e:45:80:d9:41:1c: 4a:1d:ee:88:87:0f:fc:fa:16:c2:c4:cd:38:18:c5: 52:05:7d:1f:d6:11:bd:bb:36:e0:d1:80:72:b1:8a: 93:a8:19:d5:d7:80:45:95:7d:d7:0e:f9:4e:2a:97: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:00:68:FD:17:9A:BE:05:B6:F1:73:AA:37:C9:BD:F7:3C:8C:47:CA X509v3 Authority Key Identifier: keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cc:ed:03:37:c6:00:c2:a8:62:3f:68:5e:ff:10:ba:17:4b: 37:46:84:69:28:73:40:2e:77:c9:3e:3b:66:b4:7e:7a:52:36: a1:b2:e8:04:49:d0:12:ea:6f:5b:ab:fd:67:d8:af:97:18:bb: 2c:16:fb:75:71:3b:1c:d5:3a:e1:2c:d6:54:62:ff:43:e6:d2: 08:19:b5:79:62:d7:e4:39:a0:36:31:77:f8:fb:ec:86:c0:f3: 76:3e:96:eb:8d:92:52:e2:d5:b4:09:ea:d7:46:a6:d5:f8:15: 42:60:05:9b:8e:a0:0b:61:56:a3:ab:ff:62:31:00:74:02:84: 87:5a:32:84:1d:f3:8b:3d:8a:86:77:6c:c3:a4:c3:0e:e2:96: d8:ab:7a:8e:3b:f1:67:01:16:e4:01:35:cd:dc:e8:20:84:7b: 0e:72:de:41:9c:1c:ac:5d:34:32:e5:e2:4e:f2:b8:52:50:37: bb:ae:6a:57:98:f2:b9:24:7a:ac:e5:06:04:5c:7f:fb:12:d2: 2e:05:51:3f:57:c8:19:da:9b:f7:1b:95:0e:ea:cb:15:42:20: c2:80:37:b7:db:76:56:f3:37:5e:a0:e8:70:6e:d1:07:b1:0d: 6c:3d:3e:a1:bb:ea:8f:ef:76:65:5e:bf:f1:3d:cb:67:3e:f4: 55:6c:cd:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMUIxMTAvBgNVBAUTKDRCNDQxNEFFNjg1RTQ4OEY0MkIxQjY0N0VFQTAxREVC QjBDNEYzQTAwHhcNMjUwODE5MDE1OTQzWhcNMjUwODI2MDE1OTQzWjAYMRYwFAYD VQQDEw02OGEzZGE4Zi0wYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zTww88hg+wba95r1lBROFOxPmyAG5Iq/cgALrG70FA/5KbIlZ7RupTIjcjq Wb1jpBkniKuDRRn0eotf8OXRizEQfwLduRSMNYeg1AzuIr2Czf83eX/rGJgO4s6D dM0Zrh+wVuZwt0cpllq+kbwsjZYABfkIbyHeDaCJcsDBFf47laN04YK5sjOa6M8D Hgdl6TI1WagZljg1arshsTprYDTSTiGj7leKnhTMkvJa4g2u3GsWnwQ96K7Hfslj qD/DdCyO8YPjrH+qhGouRYDZQRxKHe6Ihw/8+hbCxM04GMVSBX0f1hG9uzbg0YBy sYqTqBnV14BFlX3XDvlOKpcqgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQAaP0X mr4FtvFzqjfJvfc8jEfKMB8GA1UdIwQYMBaAFEtEFK5oXkiPQrG2R+6gHeuwxPOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIxQi80QjM4NjREODBF MEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJOUNzYlpIN3FBZDY3REU4 NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwUVVybWhlU0k5Q3NiWkg3cUFkNjdERTg2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIxQi80QjM4NjREODBFMEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJ OUNzYlpIN3FBZDY3REU4NkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfzO0DN8YAwqhiP2he/xC6F0s3RoRpKHNALnfJPjtmtH56UjahsugE SdAS6m9bq/1n2K+XGLssFvt1cTsc1TrhLNZUYv9D5tIIGbV5YtfkOaA2MXf4++yG wPN2PpbrjZJS4tW0CerXRqbV+BVCYAWbjqALYVajq/9iMQB0AoSHWjKEHfOLPYqG d2zDpMMO4pbYq3qOO/FnARbkATXN3OgghHsOct5BnBysXTQy5eJO8rhSUDe7rmpX mPK5JHqs5QYEXH/7EtIuBVE/V8gZ2pv3G5UO6ssVQiDCgDe323ZW8zdeoOhwbtEH sQ1sPT6hu+qP73ZlXr/xPctnPvRVbM3I -----END CERTIFICATE-----Generated at Wed Aug 20 15:38:58 2025 by rpki-client