$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json) Hash identifier: fc5aGYkxgqFWZOepXDNbxPVIz5bMiNOFUp4w2X/71Fw= Subject key identifier: 91:56:69:10:68:C3:93:FA:26:9B:73:45:CC:9E:F9:28:7C:69:8E:49 Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft Manifest number: 018A Signing time: Sat 23 Aug 2025 03:42:37 +0000 Manifest this update: Sat 23 Aug 2025 03:42:37 +0000 Manifest next update: Sat 30 Aug 2025 03:42:37 +0000 Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: SyQ1IBiFVxXl8rkgjhYURaYJcJY5SQoGrE7KbE3A5iQ=) 2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 54qHC7QVMBwoC0O3cMcEci4Yy+Xl8hxRZfIa8v1MHj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Validity Not Before: Aug 23 03:42:37 2025 GMT Not After : Aug 30 03:42:37 2025 GMT Subject: CN=68a938ad-57a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:e4:82:e4:3b:69:98:4b:3d:86:9f:e3:85: 36:75:b2:df:81:84:ef:9c:31:4e:fd:55:d3:20:63: 09:29:62:b1:06:56:60:8b:a3:1e:9d:33:73:27:17: 5a:69:c7:a5:ba:89:ac:4c:d0:d4:c8:1e:89:f4:ce: f0:53:aa:ff:34:f5:0b:af:b4:33:7c:8d:bb:81:25: b8:eb:ec:cb:2d:63:53:27:45:73:b6:31:b7:f4:e5: 10:69:8e:78:85:ab:a7:ee:8c:09:04:bc:ba:e3:bd: f2:80:72:d3:8c:b9:df:82:62:c0:6f:13:c5:cc:cf: cd:fa:bd:34:08:74:87:90:44:b4:87:81:bb:62:08: ed:18:3c:b1:9d:38:09:eb:e1:c1:fb:64:ea:92:2e: ca:9f:a0:38:e5:c4:62:3f:04:32:d2:45:e0:72:f6: 5d:92:05:87:e5:3e:dc:a5:a1:30:42:3f:0e:0a:3b: 86:5f:b7:e8:6c:c9:24:02:a9:39:1c:3a:26:4d:bb: 21:b6:11:3e:5b:0d:83:39:d4:90:e1:15:13:de:c8: 49:2a:a5:5f:05:b1:ef:09:bb:51:c1:97:8c:e1:4a: 2d:0e:86:f7:56:4a:e3:7f:d3:44:32:39:2f:8a:72: 89:bb:f5:9a:90:15:77:7e:5d:3f:d0:cd:9d:0b:56: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:56:69:10:68:C3:93:FA:26:9B:73:45:CC:9E:F9:28:7C:69:8E:49 X509v3 Authority Key Identifier: keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:7a:90:00:c0:b8:16:2f:b9:33:83:a4:03:da:bb:de:09:e3: 75:b2:df:f9:85:5e:a3:56:cf:20:41:f8:f3:6c:3b:4b:be:07: 52:b5:d7:38:c7:ec:6b:88:6e:8b:14:6f:13:5a:a6:e7:7f:bf: d4:8f:60:c1:c8:76:fc:3c:36:e6:b2:b3:81:2b:1b:e2:87:d7: 1f:2a:82:f4:e1:e4:69:71:d6:2d:6d:4f:e4:af:0a:6c:9d:88: 93:64:92:0a:5d:41:ef:62:12:3a:c3:cd:c0:a9:0e:da:52:e7: 91:b9:0f:30:b6:1d:a2:4c:e2:56:5e:b1:b4:89:82:21:0f:21: b0:09:ec:71:a9:b1:31:60:9e:e6:c7:b4:8b:f7:01:7e:2e:5a: 4a:23:c5:b1:40:e1:60:d6:82:bc:78:9e:af:7c:37:da:9d:e5: 69:ee:f1:14:72:af:07:b4:f0:52:ad:f1:63:73:74:14:63:20: 04:5d:89:ae:98:ca:cf:e8:ab:6d:e2:6b:cb:07:b8:90:03:88: 93:57:3f:ad:7e:61:59:e0:ac:55:8b:f6:ee:6d:48:15:6f:93: 06:31:85:ba:e0:fb:79:79:69:c0:50:a8:9f:07:4a:9e:11:17: cb:e2:b4:b3:21:b5:bb:37:03:42:3b:8b:2c:e8:4b:34:51:fe: af:f5:25:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD NEY4OTdCNzYwHhcNMjUwODIzMDM0MjM3WhcNMjUwODMwMDM0MjM3WjAYMRYwFAYD VQQDEw02OGE5MzhhZC01N2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTDkguQ7aZhLPYaf44U2dbLfgYTvnDFO/VXTIGMJKWKxBlZgi6MenTNzJxda aceluomsTNDUyB6J9M7wU6r/NPULr7QzfI27gSW46+zLLWNTJ0VztjG39OUQaY54 haun7owJBLy6473ygHLTjLnfgmLAbxPFzM/N+r00CHSHkES0h4G7YgjtGDyxnTgJ 6+HB+2Tqki7Kn6A45cRiPwQy0kXgcvZdkgWH5T7cpaEwQj8OCjuGX7fobMkkAqk5 HDomTbshthE+Ww2DOdSQ4RUT3shJKqVfBbHvCbtRwZeM4UotDob3Vkrjf9NEMjkv inKJu/WakBV3fl0/0M2dC1YOcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFWaRBo w5P6JptzRcye+Sh8aY5JMB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1 eHptLXBzMVo1NUxFLUplM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFepAAwLgWL7kzg6QD2rveCeN1st/5hV6jVs8gQfjzbDtLvgdStdc4 x+xriG6LFG8TWqbnf7/Uj2DByHb8PDbmsrOBKxvih9cfKoL04eRpcdYtbU/krwps nYiTZJIKXUHvYhI6w83AqQ7aUueRuQ8wth2iTOJWXrG0iYIhDyGwCexxqbExYJ7m x7SL9wF+LlpKI8WxQOFg1oK8eJ6vfDfaneVp7vEUcq8HtPBSrfFjc3QUYyAEXYmu mMrP6Ktt4mvLB7iQA4iTVz+tfmFZ4KxVi/bubUgVb5MGMYW64Pt5eWnAUKifB0qe ERfL4rSzIbW7NwNCO4ss6Es0Uf6v9SXt -----END CERTIFICATE-----Generated at Sun Aug 24 22:05:02 2025 by rpki-client