$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft File: SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json) Hash identifier: qdnx595sfQkbXqnw+Bc7YY+LDfiFlMxdxbtrAFX9jko= Subject key identifier: F8:4B:4F:B2:E0:CE:0E:D4:93:D5:A1:B9:F0:F4:48:64:67:15:F9:F0 Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A Certificate issuer: /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft Manifest number: 0180 Signing time: Sat 09 Aug 2025 03:59:30 +0000 Manifest this update: Sat 09 Aug 2025 03:59:30 +0000 Manifest next update: Sat 16 Aug 2025 03:59:29 +0000 Files and hashes: 1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: mUvxJaAd26cd1d9VDmIPICDDz93p/qLbg+9OKWQ/iEg=) 2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: EJtO7SCnq7WD6CVqUE1wDTBTGe53mImtDfushaYOSys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Validity Not Before: Aug 9 03:59:30 2025 GMT Not After : Aug 16 03:59:29 2025 GMT Subject: CN=6896c7a2-f4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:ad:3b:60:2e:69:46:00:d4:1b:5c:a2:49: ae:04:41:e8:56:96:ba:af:89:e2:76:93:92:f8:82: 8e:70:53:ca:66:4d:b6:c3:2a:62:5b:8a:ca:ed:25: a4:8e:95:ae:85:fc:4f:67:22:01:f0:cb:1a:12:9a: a0:fa:35:fc:33:26:19:81:fd:28:3f:99:df:94:39: 5e:57:3c:50:1c:47:af:b4:a9:d2:97:a2:42:a6:2f: 6f:24:35:af:fa:a2:24:60:29:e1:fc:6e:9f:ce:8a: d6:46:cc:3f:89:c5:41:a8:1c:1f:8d:03:fd:3b:db: 2e:c7:db:dd:45:65:76:9a:a8:2f:c3:6d:7a:b9:8d: b0:3b:0d:25:ec:43:5c:6b:5e:47:d0:44:4f:ca:38: 4f:05:1e:1c:5f:df:42:34:1b:a0:6e:73:3a:24:6e: b7:01:a5:92:fa:6d:01:99:ac:d6:8c:3b:77:a2:55: d1:c9:84:42:fa:a7:83:6e:a8:d2:24:19:ba:ac:a2: 14:b5:9b:b1:e4:ee:0c:a6:30:c2:d9:8b:b4:db:0f: 69:c0:a9:c6:be:1c:42:5e:0f:71:d7:03:7a:ba:3f: a3:6f:fd:a3:0c:dc:f2:5d:42:6f:91:ed:57:b3:43: 51:45:5e:19:d5:6d:d6:69:07:44:e5:75:54:dc:85: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4B:4F:B2:E0:CE:0E:D4:93:D5:A1:B9:F0:F4:48:64:67:15:F9:F0 X509v3 Authority Key Identifier: keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:db:0a:28:27:22:cb:04:fe:5d:d1:5e:fa:33:4c:f1:97:c0: f2:62:4e:96:79:6f:e0:29:3b:5e:fd:da:ad:04:ae:2e:3d:98: 4d:8c:f3:35:36:00:fd:3b:53:48:0c:24:ad:27:40:36:e9:f8: 55:c3:05:74:70:65:33:b8:66:f9:44:aa:0e:f2:05:1b:25:02: c5:34:98:77:4a:6b:0c:8e:45:db:e1:ad:43:85:4d:d8:02:70: 34:3e:1c:a6:15:66:7c:d2:63:9d:c0:1d:2b:a4:3e:b3:81:e0: c5:71:75:56:f3:fd:20:4f:e5:63:ce:69:3b:cf:90:b4:f7:4c: 44:b0:24:74:38:af:0b:1a:1e:5e:05:0c:81:00:65:dd:1b:59: 6e:8d:ae:1f:6e:cf:18:0a:48:f1:52:56:23:75:f0:cf:b2:f0: 4d:04:ab:61:1d:0d:6f:d2:f8:cd:21:1d:87:71:2d:82:27:86: 81:85:d3:04:ac:4d:cb:54:b8:da:48:99:bd:bc:40:74:99:89: 0d:8d:6d:86:21:64:02:1c:9c:f2:43:63:19:5f:89:87:44:dd: e7:bd:94:46:7a:cc:43:26:e7:ea:b6:0c:6e:52:2e:60:17:79: 08:a5:84:f5:42:77:46:77:4a:e4:4e:d2:40:dd:23:a4:6e:19: b5:03:68:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I2NzUxMTAvBgNVBAUTKDRBQjVDQTEwQzJBQzIyMjgyQTk5QUU2QkY2MjRGOTM3 NTY4NDNGOEEwHhcNMjUwODA5MDM1OTMwWhcNMjUwODE2MDM1OTI5WjAYMRYwFAYD VQQDEw02ODk2YzdhMi1mNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPatO2AuaUYA1BtcokmuBEHoVpa6r4nidpOS+IKOcFPKZk22wypiW4rK7SWk jpWuhfxPZyIB8MsaEpqg+jX8MyYZgf0oP5nflDleVzxQHEevtKnSl6JCpi9vJDWv +qIkYCnh/G6fzorWRsw/icVBqBwfjQP9O9sux9vdRWV2mqgvw216uY2wOw0l7ENc a15H0ERPyjhPBR4cX99CNBugbnM6JG63AaWS+m0BmazWjDt3olXRyYRC+qeDbqjS JBm6rKIUtZux5O4MpjDC2Yu02w9pwKnGvhxCXg9x1wN6uj+jb/2jDNzyXUJvke1X s0NRRV4Z1W3WaQdE5XVU3IUJMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhLT7Lg zg7Uk9WhufD0SGRnFfnwMB8GA1UdIwQYMBaAFEq1yhDCrCIoKpmua/Yk+TdWhD+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjY3NS9EQ0FEMjdGQzJB MDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lpZ3FtYTVyOWlUNU4xYUVQ NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyWEtFTUtzSWlncW1hNXI5aVQ1TjFhRVA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjY3NS9EQ0FEMjdGQzJBMDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lp Z3FtYTVyOWlUNU4xYUVQNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF2wooJyLLBP5d0V76M0zxl8DyYk6WeW/gKTte/dqtBK4uPZhNjPM1 NgD9O1NIDCStJ0A26fhVwwV0cGUzuGb5RKoO8gUbJQLFNJh3SmsMjkXb4a1DhU3Y AnA0PhymFWZ80mOdwB0rpD6zgeDFcXVW8/0gT+Vjzmk7z5C090xEsCR0OK8LGh5e BQyBAGXdG1luja4fbs8YCkjxUlYjdfDPsvBNBKthHQ1v0vjNIR2HcS2CJ4aBhdME rE3LVLjaSJm9vEB0mYkNjW2GIWQCHJzyQ2MZX4mHRN3nvZRGesxDJufqtgxuUi5g F3kIpYT1QndGd0rkTtJA3SOkbhm1A2g4 -----END CERTIFICATE-----Generated at Sun Aug 10 04:17:22 2025 by rpki-client