$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: 7m5xnCBDcaRyaewLX+vAw7daubs5bk/jmkpfx/OOvq8= Subject key identifier: 88:E8:74:37:36:A6:42:17:06:02:C5:D6:EC:B5:F2:74:02:D5:7B:B3 Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 068B Signing time: Sun 10 Aug 2025 22:21:12 +0000 Manifest this update: Sun 10 Aug 2025 22:21:11 +0000 Manifest next update: Sun 17 Aug 2025 22:21:11 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: l2I2FISCTwxQdCOqbZEsnfY9YiIEaHIzKeH+hGT7CsY=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 6Kv6ZSL3MazMHrERvQ2sPcXYF/GKUnOfly5I2XW62pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Aug 10 22:21:11 2025 GMT Not After : Aug 17 22:21:11 2025 GMT Subject: CN=68991b58-a803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:58:0b:b4:e7:35:12:a1:c1:cc:a8:8d:88: 12:41:e7:ab:ba:48:49:7b:45:be:18:87:3d:47:19: e3:33:68:e1:37:27:47:f0:58:c1:69:12:ea:66:16: de:58:cc:76:a2:cf:2d:6b:70:61:ed:a0:c6:37:34: e2:61:8b:02:5f:78:10:72:78:fa:d0:51:84:42:09: 96:97:d6:51:8b:5b:a1:e2:e9:73:5d:63:06:ab:36: db:0a:78:39:47:55:49:2c:9e:63:fe:a3:b5:4c:45: 0a:79:b2:7c:cf:dd:c0:2f:cd:95:0b:2a:d6:e3:ef: 64:36:fc:5f:68:7d:ab:a9:16:9c:1a:ad:1d:3e:82: 1e:64:30:26:d5:62:b4:cb:05:d0:86:9d:e7:06:1f: f2:c6:40:21:53:53:9b:2c:cc:13:2b:e5:94:8e:b1: 03:f6:3a:84:89:a7:80:cb:87:93:d9:2a:f7:0f:0c: 42:a9:10:81:29:cc:05:55:eb:39:ab:9e:7a:4f:96: b1:3c:6c:5f:cc:79:62:c2:e0:e3:df:34:b2:50:89: 51:e8:6b:c7:61:9a:75:65:ce:af:e1:93:94:20:2d: 68:88:d1:eb:31:d6:38:d3:72:10:30:8d:6b:ad:8e: d8:20:35:ce:fe:b0:80:f8:2d:cf:cb:86:43:51:59: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E8:74:37:36:A6:42:17:06:02:C5:D6:EC:B5:F2:74:02:D5:7B:B3 X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d1:26:b9:41:01:9e:17:50:3f:03:5b:4e:71:ca:61:3a:b6: ec:e9:b8:ff:1b:6c:da:a1:f1:15:b7:a5:41:7e:12:c8:98:6a: ba:51:14:84:17:bb:eb:76:b7:b3:bf:96:32:f2:68:7b:a2:da: 53:0d:df:b8:22:9c:8e:a2:fd:c3:d7:3a:6f:12:92:8a:08:94: a6:15:84:59:2f:60:41:0e:36:59:01:dd:f0:f0:cd:1d:f5:7c: 81:6a:25:02:17:48:6b:17:73:3b:76:85:9f:c6:4e:e8:c7:73: 12:b4:71:cc:51:87:7b:30:7a:40:ef:b8:c7:40:87:fe:a4:2e: 9f:79:db:19:1c:dd:24:43:f0:bd:04:a0:db:93:b6:29:bc:57: 83:11:24:d9:20:cc:9c:22:40:49:54:6b:47:76:05:2e:53:69: b6:f7:51:7e:43:9f:9b:b4:14:ba:1e:98:16:ae:4e:25:d1:4a: 17:6f:fd:65:3d:e6:f7:bf:f9:80:c2:14:1a:b8:81:14:4e:39: 1c:59:ab:e2:c1:d2:de:78:68:f6:fb:8d:25:2c:c5:d0:9b:ad: 2e:e5:f3:73:e3:ba:78:09:fd:30:dc:4e:eb:3f:4c:af:7c:27: ff:47:2b:d3:61:11:cb:c2:06:95:09:c0:e6:f7:69:07:0a:44: df:e7:8f:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjUwODEwMjIyMTExWhcNMjUwODE3MjIyMTExWjAYMRYwFAYD VQQDEw02ODk5MWI1OC1hODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeBYC7TnNRKhwcyojYgSQeerukhJe0W+GIc9RxnjM2jhNydH8FjBaRLqZhbe WMx2os8ta3Bh7aDGNzTiYYsCX3gQcnj60FGEQgmWl9ZRi1uh4ulzXWMGqzbbCng5 R1VJLJ5j/qO1TEUKebJ8z93AL82VCyrW4+9kNvxfaH2rqRacGq0dPoIeZDAm1WK0 ywXQhp3nBh/yxkAhU1ObLMwTK+WUjrED9jqEiaeAy4eT2Sr3DwxCqRCBKcwFVes5 q556T5axPGxfzHliwuDj3zSyUIlR6GvHYZp1Zc6v4ZOUIC1oiNHrMdY403IQMI1r rY7YIDXO/rCA+C3Py4ZDUVncqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjodDc2 pkIXBgLF1uy18nQC1XuzMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN0Sa5QQGeF1A/A1tOccphOrbs6bj/G2zaofEVt6VBfhLImGq6URSE F7vrdrezv5Yy8mh7otpTDd+4IpyOov3D1zpvEpKKCJSmFYRZL2BBDjZZAd3w8M0d 9XyBaiUCF0hrF3M7doWfxk7ox3MStHHMUYd7MHpA77jHQIf+pC6fedsZHN0kQ/C9 BKDbk7YpvFeDESTZIMycIkBJVGtHdgUuU2m291F+Q5+btBS6HpgWrk4l0UoXb/1l Peb3v/mAwhQauIEUTjkcWaviwdLeeGj2+40lLMXQm60u5fNz47p4Cf0w3E7rP0yv fCf/RyvTYRHLwgaVCcDm92kHCkTf54+/ -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:27 2025 by rpki-client