$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json) Hash identifier: I6CZywCKeH5jygtK5CguJ8ZCKOKVJzEbd+vq6DppsG8= Subject key identifier: 71:4A:AC:D8:63:08:53:64:8B:34:0E:67:A8:80:A2:48:B0:A5:E3:10 Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Certificate serial: 10C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft Manifest number: 10AE Signing time: Sun 24 Aug 2025 17:17:52 +0000 Manifest this update: Sun 24 Aug 2025 17:17:51 +0000 Manifest next update: Sun 31 Aug 2025 17:17:51 +0000 Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: k6C1Y+m0fOO0W/I/NvOGMovHpNnGxbBKyf+zZzIsftY=) 2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: Ur8W3C7QgJQkw3BnGAD55weFMOItsdqD/26WShAlLaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4295 (0x10c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE096, serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Validity Not Before: Aug 24 17:17:51 2025 GMT Not After : Aug 31 17:17:51 2025 GMT Subject: CN=68ab493f-144d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:9a:96:9a:a6:4e:2c:9b:70:c6:c0:02:07: 89:17:5d:23:1c:67:62:dd:34:d4:97:78:43:b2:f9: 4a:7a:eb:8b:8d:b9:07:b6:ab:2f:ae:14:9c:53:73: 90:71:29:1d:c3:e6:8b:4b:6e:24:f4:d1:af:ad:6d: a2:be:62:42:80:dd:fb:b3:c5:0b:76:8e:21:96:50: 0e:ef:d5:ee:b0:40:fd:72:13:26:98:ca:55:f5:e9: 8c:93:37:0d:cc:3a:82:75:94:ba:be:d7:63:4d:14: 5b:eb:b6:50:cc:b9:85:d9:54:a1:59:c0:ee:21:ec: 55:4c:02:44:ac:eb:d6:0f:f8:c1:76:97:f7:62:11: 26:d9:2e:ab:43:71:ce:c9:a8:fb:b3:60:0f:30:f2: a0:cd:32:e0:3b:fa:c7:b0:7a:76:5d:04:ae:8c:1f: 1e:d4:21:e7:34:fc:76:a8:36:34:dd:1b:62:1d:ad: 0c:c0:03:23:c1:28:40:ae:12:24:e0:f7:2e:e2:ed: 9d:5a:f6:75:e5:54:8b:fc:fd:96:7b:8e:80:46:d5: 8d:23:c2:e3:91:a0:73:40:16:6f:89:b3:d4:61:c8: 55:da:28:35:f8:03:d6:7e:a0:9b:be:bc:de:f3:75: 96:e0:5f:70:73:53:24:0a:80:a0:8d:d1:ac:22:76: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4A:AC:D8:63:08:53:64:8B:34:0E:67:A8:80:A2:48:B0:A5:E3:10 X509v3 Authority Key Identifier: keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4d:a1:3b:3d:7a:38:d8:8c:b1:ed:9a:05:dd:26:6d:68:77: e9:27:f9:30:d2:17:8e:d0:a0:28:43:50:13:e0:fd:06:03:9f: c3:b0:44:5b:fc:af:fd:23:dd:d8:a0:0d:a9:ec:01:d2:dc:1e: cc:85:73:3a:f3:21:90:78:29:ec:2f:6d:f6:2a:9f:30:aa:2a: e9:15:8b:2c:89:c4:8e:11:d0:53:9a:12:43:db:46:de:8c:54: 1f:81:5f:bc:3c:f1:03:b8:c7:25:52:78:2e:44:7b:65:1d:f9: e2:a4:05:88:2e:93:4c:07:a5:c1:33:27:26:41:a6:2b:7a:ca: b2:cc:6b:81:e7:52:d4:1a:be:6b:19:97:51:75:99:57:eb:c4: a2:dc:5d:0e:f3:92:03:b8:66:f9:04:4a:23:98:a4:1c:fe:57: 1f:bc:09:eb:97:fe:92:9c:e1:eb:20:64:96:69:92:e0:60:7d: 27:ac:25:61:25:21:a7:b9:a2:94:01:3a:55:4f:9d:1c:90:c2: 50:ae:0f:4f:7d:a5:a3:36:c2:1c:f6:c1:9c:b5:2c:58:7b:c6: 74:e8:a7:24:6f:22:fd:2b:16:7e:41:d9:2c:e0:30:d7:6f:bf: c0:b7:7e:63:18:02:5b:c5:0b:72:5f:4d:23:92:da:39:29:68: dc:22:5f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwOTYxMTAvBgNVBAUTKDRBQkRBMjRBRDdCRDlFOEQ5Q0VGQjM1OTM4RDBBODc4 ODA0QzYyRTQwHhcNMjUwODI0MTcxNzUxWhcNMjUwODMxMTcxNzUxWjAYMRYwFAYD VQQDEw02OGFiNDkzZi0xNDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJCalpqmTiybcMbAAgeJF10jHGdi3TTUl3hDsvlKeuuLjbkHtqsvrhScU3OQ cSkdw+aLS24k9NGvrW2ivmJCgN37s8ULdo4hllAO79XusED9chMmmMpV9emMkzcN zDqCdZS6vtdjTRRb67ZQzLmF2VShWcDuIexVTAJErOvWD/jBdpf3YhEm2S6rQ3HO yaj7s2APMPKgzTLgO/rHsHp2XQSujB8e1CHnNPx2qDY03RtiHa0MwAMjwShArhIk 4Pcu4u2dWvZ15VSL/P2We46ARtWNI8LjkaBzQBZvibPUYchV2ig1+APWfqCbvrze 83WW4F9wc1MkCoCgjdGsInYnPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFKrNhj CFNkizQOZ6iAokiwpeMQMB8GA1UdIwQYMBaAFEq9okrXvZ6NnO+zWTjQqHiATGLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA5Ni8yRkJCNDQwRTMz NDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5vMmM3N05aT05Db2VJQk1Z dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyMmlTdGU5bm8yYzc3TlpPTkNvZUlCTVl1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA5Ni8yRkJCNDQwRTMzNDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5v MmM3N05aT05Db2VJQk1ZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHTaE7PXo42Iyx7ZoF3SZtaHfpJ/kw0heO0KAoQ1AT4P0GA5/DsERb /K/9I93YoA2p7AHS3B7MhXM68yGQeCnsL232Kp8wqirpFYssicSOEdBTmhJD20be jFQfgV+8PPEDuMclUnguRHtlHfnipAWILpNMB6XBMycmQaYresqyzGuB51LUGr5r GZdRdZlX68Si3F0O85IDuGb5BEojmKQc/lcfvAnrl/6SnOHrIGSWaZLgYH0nrCVh JSGnuaKUATpVT50ckMJQrg9PfaWjNsIc9sGctSxYe8Z06KckbyL9KxZ+Qdks4DDX b7/At35jGAJbxQtyX00jkto5KWjcIl/0 -----END CERTIFICATE-----Generated at Sun Aug 24 21:48:20 2025 by rpki-client