$ rpki-client -vvf 0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft File: 52840422D0B72BA9927DE0FF73535FDF163521A4.mft (raw, json) Hash identifier: eoAa7gQi0Fd1y6Fy0Zu1iBxgpTbI9tMqfx3EPDrqAgo= Subject key identifier: BC:A4:54:D5:28:EC:25:C1:12:63:A5:B6:47:B0:AF:12:17:AD:61:43 Authority key identifier: 52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 Certificate issuer: /CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Certificate serial: 68ABF31EEEF1B6F935268D770F72EEFFBA46E366 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject info access: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft Manifest number: 0645 Signing time: Mon 03 Nov 2025 22:23:55 +0000 Manifest this update: Mon 03 Nov 2025 22:18:55 +0000 Manifest next update: Tue 04 Nov 2025 22:44:55 +0000 Files and hashes: 1: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: CC8E23Yh7/HhtCNdi2KuY5mXbENB/iwBI2NRmwM7MTw=) 2: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: of2lUbNuQom6rR9aba5WRy88RY/aB/ddNJAkiL5owZ0=) 3: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: NzvxeOISCBxGqvrzZjBZu0oMo4rqIXiZ91cAneYGZFA=) 4: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: Y4yo/btWNJYOnxXH2L7ym8zj4X3k7WkR14OJ99bejXo=) 5: 52840422D0B72BA9927DE0FF73535FDF163521A4.crl (hash: K5kEda1kTwCYwYfelWBzWBskixLrPgQ6+kfgmaJN9+4=) 6: 3130332e3230312e3132382e302f32322d3234203d3e203233393539.roa (hash: euakz2tH0t+6W2UrkVW4TdO1cFAouzA/wKh47M8X1Ds=) Validation: OK Signature path: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 22:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ab:f3:1e:ee:f1:b6:f9:35:26:8d:77:0f:72:ee:ff:ba:46:e3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Validity Not Before: Nov 3 22:18:55 2025 GMT Not After : Nov 4 22:44:55 2025 GMT Subject: CN=BCA454D528EC25C11263A5B647B0AF1217AD6143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:8a:f4:0c:50:f8:86:dd:b8:f7:d5:da:ae: e8:e0:67:6d:14:53:b0:96:88:02:38:54:7e:e0:43: 54:e9:01:e6:91:9c:2d:1e:86:cc:db:0a:75:e4:06: 2e:c1:47:52:11:05:eb:c0:11:50:61:8a:b3:63:8e: 3d:95:e8:e0:b4:41:2a:05:a8:a3:50:f6:4b:5b:5b: 0f:7f:d5:3e:0e:c1:4e:be:73:4c:06:1a:fc:c8:ae: cf:55:c5:e0:04:a7:99:a8:24:0c:64:a1:6a:c5:af: 45:7a:94:5b:1d:e4:2c:fd:de:22:90:33:a0:98:1f: 52:d6:1c:ee:d2:41:3f:e6:7a:b4:ce:1f:52:73:0a: eb:23:ff:b3:ed:64:a7:1a:d7:56:1e:10:b2:2d:fb: 07:93:49:6f:b7:89:c5:a9:a8:72:6f:94:04:13:6d: 1d:72:a7:00:cb:55:29:04:f1:fa:e0:d3:d7:66:28: e9:51:24:d1:8c:10:1d:bb:8c:ae:6f:e7:14:80:60: 8d:10:f0:7a:7f:0e:a9:25:3d:3e:e1:d1:fb:0e:00: 9f:bc:b2:11:a3:93:d0:0e:35:ea:6c:c9:78:80:33: 4e:31:16:a8:89:5b:93:83:1f:81:e2:8d:ed:2e:8f: 75:6b:41:87:c6:19:11:7f:59:27:ec:0c:89:80:3f: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A4:54:D5:28:EC:25:C1:12:63:A5:B6:47:B0:AF:12:17:AD:61:43 X509v3 Authority Key Identifier: keyid:52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1d:0b:91:1c:b0:be:f5:4b:83:c4:cc:9d:54:60:e8:a3:23: ab:a6:aa:4f:91:d0:43:07:ff:f1:5d:4b:08:e9:aa:f7:90:a3: 15:0f:dd:eb:27:45:04:f3:bf:8b:ab:5a:27:5c:1d:7e:1a:38: 25:dc:e3:2c:ee:97:fc:be:22:7e:0c:11:52:11:a5:a1:fb:13: 03:60:ba:b5:5a:a8:61:a6:e3:30:4c:d1:c1:a4:64:28:55:50: 1f:10:9a:28:23:2a:c0:9f:02:91:90:c7:69:be:54:cd:87:a0: 1c:41:ef:0f:06:d5:1d:e0:01:6d:c7:a4:40:58:89:0d:85:6e: 33:96:4a:35:0d:93:75:2d:4f:62:08:ed:a0:b0:11:c0:30:32: 1f:ec:65:81:20:ae:94:53:e0:f1:28:61:3f:3b:60:10:62:2b: cc:7c:c8:ac:d9:0e:82:57:cd:5a:8d:41:51:c5:02:c9:87:3f: b9:00:79:51:06:01:85:dd:ba:24:b1:e0:9b:32:1e:7c:90:7b: f4:ef:7f:18:2e:48:8b:33:4a:50:a2:c3:75:11:ad:b0:91:34: 22:49:d8:56:9b:49:f4:3d:45:32:e3:f0:0c:14:7b:de:2f:61: af:9b:57:09:ce:66:c6:bc:91:1d:f6:16:b3:0d:b9:fe:18:6f: 0f:16:c5:65 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUaKvzHu7xtvk1Jo13D3Lu/7pG42YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1Mjg0MDQyMkQw QjcyQkE5OTI3REUwRkY3MzUzNUZERjE2MzUyMUE0MB4XDTI1MTEwMzIyMTg1NVoX DTI1MTEwNDIyNDQ1NVowMzExMC8GA1UEAxMoQkNBNDU0RDUyOEVDMjVDMTEyNjNB NUI2NDdCMEFGMTIxN0FENjE0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUmivQMUPiG3bj31dqu6OBnbRRTsJaIAjhUfuBDVOkB5pGcLR6GzNsKdeQG LsFHUhEF68ARUGGKs2OOPZXo4LRBKgWoo1D2S1tbD3/VPg7BTr5zTAYa/Miuz1XF 4ASnmagkDGShasWvRXqUWx3kLP3eIpAzoJgfUtYc7tJBP+Z6tM4fUnMK6yP/s+1k pxrXVh4Qsi37B5NJb7eJxamocm+UBBNtHXKnAMtVKQTx+uDT12Yo6VEk0YwQHbuM rm/nFIBgjRDwen8OqSU9PuHR+w4An7yyEaOT0A416mzJeIAzTjEWqIlbk4MfgeKN 7S6PdWtBh8YZEX9ZJ+wMiYA/jPsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBS8pFTV KOwlwRJjpbZHsK8SF61hQzAfBgNVHSMEGDAWgBRShAQi0LcrqZJ94P9zU1/fFjUh pDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzkvNTI4NDA0MjJEMEI3MkJBOTkyN0RFMEZGNzM1MzVGREYxNjM1 MjFBNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvVW9RRUl0QzNLNm1TZmVEX2MxTmYzeFkxSWFRLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM5LzUy ODQwNDIyRDBCNzJCQTk5MjdERTBGRjczNTM1RkRGMTYzNTIxQTQubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCrHQuRHLC+9UuDxMydVGDooyOrpqpPkdBDB//xXUsI6ar3kKMVD93rJ0UE87+L q1onXB1+Gjgl3OMs7pf8viJ+DBFSEaWh+xMDYLq1WqhhpuMwTNHBpGQoVVAfEJoo IyrAnwKRkMdpvlTNh6AcQe8PBtUd4AFtx6RAWIkNhW4zlko1DZN1LU9iCO2gsBHA MDIf7GWBIK6UU+DxKGE/O2AQYivMfMis2Q6CV81ajUFRxQLJhz+5AHlRBgGF3bok seCbMh58kHv0738YLkiLM0pQosN1Ea2wkTQiSdhWm0n0PUUy4/AMFHveL2Gvm1cJ zmbGvJEd9hazDbn+GG8PFsVl -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:37 2025 by rpki-client