$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json) Hash identifier: lZrJJpKCdUYqsDAdGGM1hlsyl+O/uuUhZahyDb8bLYk= Subject key identifier: 35:2F:BD:F1:8E:8C:BA:83:CF:FA:93:D9:B8:8F:63:AE:12:33:DB:87 Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Certificate serial: 34C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft Manifest number: 34BF Signing time: Thu 18 Sep 2025 15:20:15 +0000 Manifest this update: Thu 18 Sep 2025 15:20:15 +0000 Manifest next update: Thu 25 Sep 2025 15:20:15 +0000 Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: +e+W8MB32zl7FfExJhyAypQBcfhciT5gAn4x7AeS8QA=) 2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: rYc9zikfT0tRDa7zasMyBZpEVFa00oL4CS7Q4S+HlQg=) 3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: 0DLMcfV/Llm+3fYXZIJn54Ysw/AzVCrvYXgQgG2YQmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13508 (0x34c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Validity Not Before: Sep 18 15:20:15 2025 GMT Not After : Sep 25 15:20:15 2025 GMT Subject: CN=68cc232f-089d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4b:32:dd:d9:90:85:b0:d0:9f:b5:7a:74:19: 23:cc:68:02:a4:a6:77:70:e0:32:85:b6:ee:c2:63: c1:da:92:ba:18:da:06:8d:4b:c8:34:7e:b6:d7:30: 74:e1:44:f2:31:56:50:0f:3f:a4:ca:d1:b4:94:31: 13:9d:a3:1f:87:6b:d0:1e:14:a3:95:01:d5:ab:99: 4c:bc:a7:d8:bb:9e:4f:6c:20:84:eb:ce:41:94:8b: 6a:74:b9:76:11:04:db:a1:d9:51:4b:ea:4e:4e:70: 8a:84:00:51:33:3e:ab:7a:70:3a:17:7d:4b:cb:22: 81:70:7a:1f:36:c8:56:94:ef:3d:7a:b9:a7:7d:1d: 87:48:32:74:58:68:78:3c:41:1e:79:83:5a:83:28: e3:7e:40:23:cb:4d:e7:31:5e:a4:d8:a8:8a:8e:6d: be:25:88:50:b3:5c:48:b3:60:d8:8c:4b:b4:95:af: 42:31:75:58:6e:aa:f1:33:41:ef:f6:de:34:1e:b2: 34:03:b3:a1:56:33:a4:17:ed:54:e1:3e:ce:50:d0: 7b:2c:ab:e2:3e:71:4d:ef:6f:99:92:75:9d:90:e2: 68:ef:39:a4:f2:d6:39:46:1a:d2:55:e9:d5:f5:e1: 10:f2:f9:0e:bc:72:77:20:e9:c1:53:a3:64:18:16: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2F:BD:F1:8E:8C:BA:83:CF:FA:93:D9:B8:8F:63:AE:12:33:DB:87 X509v3 Authority Key Identifier: keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:68:3c:0d:8f:a4:ee:6a:9a:44:7d:15:34:f7:cc:94:00:e9: 64:22:31:39:39:e1:ca:9b:c7:ec:fa:ed:90:d3:0a:c1:cc:72: 8c:56:b5:0a:56:f2:b8:3a:5f:42:48:4e:12:7a:a1:a3:40:2c: 08:90:80:5c:a0:d1:85:08:75:d3:2e:ff:6d:d9:f6:19:bc:44: 10:db:33:b1:33:f6:7d:30:b0:f8:06:43:e4:e5:3c:fc:7d:26: 1c:45:97:67:ae:77:63:10:55:97:94:d6:b1:48:ba:9f:09:23: 32:1a:e1:f9:e4:c6:9e:df:68:a6:f9:5e:24:be:e7:e0:c6:bc: e0:3a:86:1a:33:44:d5:90:1d:32:95:df:d9:b5:52:be:6a:50: 8c:d1:e2:71:f9:59:21:82:6f:4b:91:b9:63:e9:ed:ba:87:27: 2b:39:72:6d:46:fb:e2:0b:eb:de:b8:10:16:d7:52:57:b5:d4: 4a:0e:af:60:28:6e:6a:a9:87:1a:ac:18:19:a5:bb:9e:0c:98: 96:2c:2f:19:81:51:ed:32:77:e9:72:54:2e:4c:7d:a1:42:80: c7:30:aa:d9:c1:c6:11:53:48:78:6d:f7:34:ac:11:e8:52:e4: 25:07:99:5b:33:93:be:74:5f:55:b0:6d:8d:39:57:f9:11:79: 83:f9:a2:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkUxMTAvBgNVBAUTKDQ5N0IxQzRFQTZEQjE1QTgzMUZCQzE3MjJBMkY2MzQ3 NDUwQ0YzNDEwHhcNMjUwOTE4MTUyMDE1WhcNMjUwOTI1MTUyMDE1WjAYMRYwFAYD VQQDEw02OGNjMjMyZi0wODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzksy3dmQhbDQn7V6dBkjzGgCpKZ3cOAyhbbuwmPB2pK6GNoGjUvINH621zB0 4UTyMVZQDz+kytG0lDETnaMfh2vQHhSjlQHVq5lMvKfYu55PbCCE685BlItqdLl2 EQTbodlRS+pOTnCKhABRMz6renA6F31LyyKBcHofNshWlO89ermnfR2HSDJ0WGh4 PEEeeYNagyjjfkAjy03nMV6k2KiKjm2+JYhQs1xIs2DYjEu0la9CMXVYbqrxM0Hv 9t40HrI0A7OhVjOkF+1U4T7OUNB7LKviPnFN72+ZknWdkOJo7zmk8tY5RhrSVenV 9eEQ8vkOvHJ3IOnBU6NkGBatkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUvvfGO jLqDz/qT2biPY64SM9uHMB8GA1UdIwQYMBaAFEl7HE6m2xWoMfvBciovY0dFDPNB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2RS9ERDQ1NUNEQTFE QTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZhZ3gtOEZ5S2k5alIwVU04 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYc2NUcWJiRmFneC04RnlLaTlqUjBVTTgwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2RS9ERDQ1NUNEQTFEQTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZh Z3gtOEZ5S2k5alIwVU04MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQaDwNj6TuappEfRU098yUAOlkIjE5OeHKm8fs+u2Q0wrBzHKMVrUK VvK4Ol9CSE4SeqGjQCwIkIBcoNGFCHXTLv9t2fYZvEQQ2zOxM/Z9MLD4BkPk5Tz8 fSYcRZdnrndjEFWXlNaxSLqfCSMyGuH55Mae32im+V4kvufgxrzgOoYaM0TVkB0y ld/ZtVK+alCM0eJx+Vkhgm9Lkblj6e26hycrOXJtRvviC+veuBAW11JXtdRKDq9g KG5qqYcarBgZpbueDJiWLC8ZgVHtMnfpclQuTH2hQoDHMKrZwcYRU0h4bfc0rBHo UuQlB5lbM5O+dF9VsG2NOVf5EXmD+aK/ -----END CERTIFICATE-----Generated at Fri Sep 19 07:08:36 2025 by rpki-client