$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json) Hash identifier: GtxKlwqNa92phTp+WqW4DAU6gIgTJf8xkqzdZF8v+Tg= Subject key identifier: 8A:6D:E3:3E:16:04:91:87:C7:1E:98:9F:4F:96:00:2E:95:09:4B:78 Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft Manifest number: 0101 Signing time: Tue 09 Sep 2025 05:13:50 +0000 Manifest this update: Tue 09 Sep 2025 05:13:49 +0000 Manifest next update: Tue 16 Sep 2025 05:13:49 +0000 Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: kfOLtQzNw8qWcLU9/Zt/2QSdRdyNNm5n5NTyXoXlLrE=) 2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: eodiFGpIfsgXUXxslrRHT6wLB6egOaD+ezHH/eHicB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: Sep 9 05:13:49 2025 GMT Not After : Sep 16 05:13:49 2025 GMT Subject: CN=68bfb78e-3706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:c0:11:89:a4:7d:77:4c:9d:50:a6:50:1a: f9:da:d5:23:31:a3:96:a3:05:60:e8:ef:88:22:45: a3:6e:f0:49:e7:51:c8:0c:82:4d:28:8c:95:59:c2: 50:0b:96:6f:5b:86:a5:1e:49:c5:54:37:d0:e8:20: 7c:36:b6:56:08:bb:28:2b:19:70:a8:23:0a:29:de: 83:51:6d:1f:f5:2c:cc:06:29:86:be:12:a1:77:7b: eb:c1:4c:82:88:5e:cc:e6:7f:38:54:57:3f:ee:d2: 15:fb:55:09:b2:fa:01:2c:cd:42:9e:94:b5:1f:b1: a5:e6:76:b7:95:61:4b:8c:5f:12:d9:fe:4d:cd:35: c9:43:45:64:18:e7:6a:bd:4d:f8:83:23:3f:c1:07: 69:21:9c:ca:93:c3:76:e2:35:60:e6:68:5c:50:45: c7:35:48:d7:dd:1a:8a:f6:30:ef:ef:ca:b7:f3:3f: d6:02:b9:ba:43:98:10:53:ce:ec:97:92:85:b6:8b: 39:2c:1d:29:02:c3:a0:1b:b9:7f:9b:0b:d1:40:82: 0b:be:20:35:0c:96:61:6b:92:7b:b0:06:9b:ca:bc: c3:f0:c0:d7:b4:c5:c7:3b:a1:62:c0:41:76:32:92: 80:8f:54:b8:08:33:95:b4:03:30:5b:cb:4b:7d:44: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6D:E3:3E:16:04:91:87:C7:1E:98:9F:4F:96:00:2E:95:09:4B:78 X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1f:c3:dd:fe:6f:3e:a3:77:4d:6d:bf:89:4a:5b:f8:fd:7f: 81:84:d1:92:c1:2c:ed:2d:4d:ab:3b:19:5b:5b:cf:a1:67:8a: 23:61:b2:f3:cd:78:ae:3c:7a:33:da:af:10:66:33:2a:7f:d6: f5:91:0b:96:8d:59:b5:7c:c6:e3:a5:e4:1c:40:f0:a6:84:72: 6a:cb:5a:c8:da:0c:64:57:23:70:77:16:c3:4d:ab:47:e4:dc: 31:90:be:99:2f:62:90:1a:09:09:c3:70:5a:24:3d:2f:43:6b: 32:c8:e8:34:0a:98:1c:b6:5d:7f:e0:44:ba:dc:c8:a9:96:af: 99:7a:7c:f0:a1:59:c1:e7:75:35:54:3f:8c:2b:61:fa:2b:bf: a8:fb:79:8d:53:c4:b6:d2:bb:1a:47:b9:34:79:a5:f2:a7:64: 1d:aa:e7:1f:43:4e:b7:d2:f7:73:d3:ea:60:be:42:1f:74:9c: 4f:c2:80:75:5b:7d:db:5e:fd:b1:47:1f:1f:a1:21:fa:5a:50: bf:81:0e:22:0c:b0:4f:6b:a3:7b:c1:af:86:27:21:3e:79:54: 79:f2:11:b9:95:c3:bf:b8:60:78:ab:b1:bc:6b:60:d6:8d:c1: df:85:45:34:a0:b2:69:2f:42:7a:ad:74:53:d8:f2:d4:0e:32: 50:d7:f0:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1 Mjg4NjM4MTEwHhcNMjUwOTA5MDUxMzQ5WhcNMjUwOTE2MDUxMzQ5WjAYMRYwFAYD VQQDEw02OGJmYjc4ZS0zNzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0HAEYmkfXdMnVCmUBr52tUjMaOWowVg6O+IIkWjbvBJ51HIDIJNKIyVWcJQ C5ZvW4alHknFVDfQ6CB8NrZWCLsoKxlwqCMKKd6DUW0f9SzMBimGvhKhd3vrwUyC iF7M5n84VFc/7tIV+1UJsvoBLM1CnpS1H7Gl5na3lWFLjF8S2f5NzTXJQ0VkGOdq vU34gyM/wQdpIZzKk8N24jVg5mhcUEXHNUjX3RqK9jDv78q38z/WArm6Q5gQU87s l5KFtos5LB0pAsOgG7l/mwvRQIILviA1DJZha5J7sAabyrzD8MDXtMXHO6FiwEF2 MpKAj1S4CDOVtAMwW8tLfURB1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpt4z4W BJGHxx6Yn0+WAC6VCUt4MB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUyQi9GODM2QkRFQzBDRUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURf WnJmeDVNa1AtWWRTaUdPQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2H8Pd/m8+o3dNbb+JSlv4/X+BhNGSwSztLU2rOxlbW8+hZ4ojYbLz zXiuPHoz2q8QZjMqf9b1kQuWjVm1fMbjpeQcQPCmhHJqy1rI2gxkVyNwdxbDTatH 5NwxkL6ZL2KQGgkJw3BaJD0vQ2syyOg0Cpgctl1/4ES63Miplq+ZenzwoVnB53U1 VD+MK2H6K7+o+3mNU8S20rsaR7k0eaXyp2QdqucfQ0630vdz0+pgvkIfdJxPwoB1 W33bXv2xRx8foSH6WlC/gQ4iDLBPa6N7wa+GJyE+eVR58hG5lcO/uGB4q7G8a2DW jcHfhUU0oLJpL0J6rXRT2PLUDjJQ1/CR -----END CERTIFICATE-----Generated at Tue Sep 9 18:26:33 2025 by rpki-client