$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: U+xJdk/0Vahd1o8dhqL4QaxIhlIZ8zdpVmkYPld5PTM= Subject key identifier: B8:D8:04:4C:89:85:E3:5D:57:C6:77:DF:0D:2A:9C:75:F6:BE:B4:13 Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 04A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 049C Signing time: Fri 19 Sep 2025 00:21:22 +0000 Manifest this update: Fri 19 Sep 2025 00:21:22 +0000 Manifest next update: Fri 26 Sep 2025 00:21:22 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: +WRXGka1RwOzGaa+5os0TCT939cvsozEj2AmRUNc20s=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: P2DNiNhjlpF64BsKz4nEdQOFVD1WxrPx8iOejuhEZGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: Sep 19 00:21:22 2025 GMT Not After : Sep 26 00:21:22 2025 GMT Subject: CN=68cca202-3706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:dc:de:69:55:42:12:b8:b9:ec:5f:9b:63: 9f:7a:ac:28:74:62:1d:6e:93:5c:39:83:c9:26:df: 9c:a7:e4:00:a4:1d:82:55:34:79:0c:e7:30:fa:65: a3:f3:3e:e1:10:12:c5:a3:e9:8f:d1:0b:83:cb:61: 62:e2:6e:24:f5:ca:76:10:93:79:ec:4b:b2:38:c6: 8e:1c:27:d4:33:df:30:d0:7f:59:93:52:6f:f5:69: f0:d7:3c:0d:dc:00:4a:a1:a5:55:fa:a8:5e:c7:69: 98:e8:45:52:11:71:03:3a:fa:3d:72:cb:9d:40:f6: d4:3e:ea:fa:2b:f6:b6:55:ad:32:d7:16:66:e3:78: 07:5a:40:d0:4d:e3:ef:c1:d4:bc:44:78:b2:8a:ec: 7f:83:ba:28:64:6b:62:4f:61:33:9f:20:c1:21:d6: a8:4c:77:64:26:51:30:ed:b1:d7:08:1e:41:39:cd: ee:81:16:0a:ad:cc:d2:1c:10:dd:60:88:9d:70:2a: 8b:7b:8c:1a:ce:5a:74:eb:0f:d0:6e:b9:39:8e:a5: 08:36:f4:4a:8d:3e:2c:a7:85:c2:9a:6a:4a:05:c6: a7:20:52:bc:aa:92:4a:4b:37:ca:ad:5b:8b:95:b3: c6:0f:af:77:51:de:ce:ab:91:f4:0f:b4:25:f3:3b: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D8:04:4C:89:85:E3:5D:57:C6:77:DF:0D:2A:9C:75:F6:BE:B4:13 X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f0:dd:7b:54:ea:40:e9:8e:75:d9:90:32:6c:a1:8a:f2:d8: 9d:34:56:d7:73:c5:80:bd:cb:57:76:de:db:57:7d:8e:38:91: 7b:e7:de:ff:1c:ad:23:27:f9:2a:3a:88:08:3c:ef:cd:b6:21: 28:f2:26:44:76:03:1b:c4:d5:fb:c3:a3:93:c1:32:27:bb:8e: 25:70:b6:66:7a:60:66:2c:f1:56:59:e3:eb:31:de:ca:4e:0b: a1:34:43:ff:0f:3a:2c:e0:95:9d:ba:d0:ab:16:84:0b:f6:38: b6:cb:c4:9d:0f:94:36:b4:03:bc:90:64:a1:9e:db:41:da:b7: 2f:66:f1:2f:c4:44:49:ea:93:9b:b2:66:90:84:f7:9c:48:f1: 1f:4f:23:8c:1d:16:0a:6d:ee:76:24:5a:57:71:8c:5e:af:dc: e6:c1:b9:1f:6c:e4:ce:75:7f:88:96:47:4d:7a:73:7d:0e:6e: 3f:51:17:04:d3:04:a3:7a:d2:4d:22:2f:99:f9:56:a1:66:24: 1c:90:80:fb:5f:97:99:0b:52:70:c5:1f:7f:e5:a4:a3:3f:b3: 9e:33:57:74:dd:d2:c8:7c:34:4d:97:46:f2:1c:c2:61:5a:d2: ac:55:dd:a5:95:d3:55:ef:8a:95:ba:e7:61:a5:24:b6:8d:ac: 6d:40:24:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjUwOTE5MDAyMTIyWhcNMjUwOTI2MDAyMTIyWjAYMRYwFAYD VQQDEw02OGNjYTIwMi0zNzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkrc3mlVQhK4uexfm2OfeqwodGIdbpNcOYPJJt+cp+QApB2CVTR5DOcw+mWj 8z7hEBLFo+mP0QuDy2Fi4m4k9cp2EJN57EuyOMaOHCfUM98w0H9Zk1Jv9Wnw1zwN 3ABKoaVV+qhex2mY6EVSEXEDOvo9csudQPbUPur6K/a2Va0y1xZm43gHWkDQTePv wdS8RHiyiux/g7ooZGtiT2EznyDBIdaoTHdkJlEw7bHXCB5BOc3ugRYKrczSHBDd YIidcCqLe4wazlp06w/Qbrk5jqUINvRKjT4sp4XCmmpKBcanIFK8qpJKSzfKrVuL lbPGD693Ud7Oq5H0D7Ql8zttuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjYBEyJ heNdV8Z33w0qnHX2vrQTMB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc8N17VOpA6Y512ZAybKGK8tidNFbXc8WAvctXdt7bV32OOJF7597/ HK0jJ/kqOogIPO/NtiEo8iZEdgMbxNX7w6OTwTInu44lcLZmemBmLPFWWePrMd7K TguhNEP/Dzos4JWdutCrFoQL9ji2y8SdD5Q2tAO8kGShnttB2rcvZvEvxERJ6pOb smaQhPecSPEfTyOMHRYKbe52JFpXcYxer9zmwbkfbOTOdX+IlkdNenN9Dm4/URcE 0wSjetJNIi+Z+VahZiQckID7X5eZC1JwxR9/5aSjP7OeM1d03dLIfDRNl0byHMJh WtKsVd2lldNV74qVuudhpSS2jaxtQCQO -----END CERTIFICATE-----Generated at Fri Sep 19 05:31:25 2025 by rpki-client