$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json) Hash identifier: JKQnJid8euRehpkZu5D3wi5CB1psUS+zN6q/7mFig+k= Subject key identifier: D9:E8:D2:06:F3:35:96:CD:7F:25:F7:61:BC:12:BE:21:27:52:48:40 Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1F37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft Manifest number: 1F27 Signing time: Fri 08 Aug 2025 16:07:50 +0000 Manifest this update: Fri 08 Aug 2025 16:07:49 +0000 Manifest next update: Fri 15 Aug 2025 16:07:49 +0000 Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: YP+cduQYyl9Ua5qINp/yaHa8or08er2bLgiHbKu3Smw=) 2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: BczHzIbLkzNL4updWdbsFHqnEhXAUmCVG50paNnAJDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7991 (0x1f37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Aug 8 16:07:49 2025 GMT Not After : Aug 15 16:07:49 2025 GMT Subject: CN=689620d5-f24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f6:ee:11:06:b6:f4:38:7d:e0:41:2f:e0:8f: 6c:4c:94:7e:34:aa:a8:e1:b7:29:55:e0:d3:9d:7b: 1e:20:3d:66:89:0c:f0:b7:c9:57:12:8c:c5:76:19: 16:54:89:57:d4:dc:83:75:69:a0:c0:c9:ab:07:b1: 36:ba:be:7e:1c:59:00:ec:69:7c:94:2a:c3:8a:a7: 02:df:9d:e8:51:12:39:b5:b6:f6:e2:9c:3e:06:45: 97:ee:89:6a:b0:c1:50:3a:1f:53:b7:d1:79:ab:d1: bc:49:54:90:fd:83:a8:d1:81:b8:fe:15:79:ac:93: a7:18:b7:d4:a7:b0:e9:32:ac:33:03:37:d3:6f:7e: eb:24:a8:af:59:97:b6:36:22:a2:70:bc:dd:93:28: b3:7d:88:4b:29:94:97:7e:dc:be:44:9e:68:2d:67: fe:9c:26:fe:93:4e:3c:7f:80:a7:1b:ad:3d:88:80: 39:88:aa:c7:1c:3f:1a:a8:ea:b4:08:21:96:35:d5: 08:ed:44:ab:6c:4e:4e:50:0c:4b:b1:76:ff:4b:8b: 3d:c7:de:a4:34:be:79:4b:e2:5a:cd:6a:0e:d1:ba: 1a:17:e6:8f:46:39:4f:ae:e4:8c:f6:69:3e:84:a1: 11:73:d8:5e:83:db:fe:94:47:34:ac:63:0e:dc:a7: 1a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E8:D2:06:F3:35:96:CD:7F:25:F7:61:BC:12:BE:21:27:52:48:40 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d3:a3:33:d8:20:95:46:97:aa:2e:a1:c5:ea:f7:27:f1:19: 33:d4:7c:16:da:2f:c1:7f:86:10:6b:78:ff:94:47:7b:3a:ab: 8e:26:5e:50:c4:7a:9f:01:01:08:a9:8a:20:2a:87:48:87:5b: e8:dd:8b:ff:dc:5f:d7:fe:31:7b:7c:f6:3b:e6:eb:5f:75:3c: 94:08:9c:69:dd:23:e3:c9:7d:ac:5f:bb:b0:c1:b8:7c:28:29: a4:01:0a:13:c5:5b:54:a3:5a:5a:93:5c:89:d9:5b:13:96:a4: b4:78:ee:7c:fd:ef:56:3b:c9:b5:31:33:40:72:11:41:07:b1: 69:fa:cd:a1:62:f0:fe:b9:7f:f1:27:f1:95:10:09:19:24:c1: ec:80:3a:d7:a1:26:dd:38:b9:33:b7:85:62:9c:5c:19:50:5c: 61:19:69:04:93:d0:e8:43:b7:4d:dc:e0:28:b5:73:19:4b:46: 02:da:1d:7d:1d:c4:d0:b4:09:3a:3e:81:ca:6a:f8:38:8c:a1: a5:17:e5:0b:80:5a:18:56:82:48:56:d5:c6:ea:0b:58:2c:07: 93:4e:8b:f4:73:3a:26:e4:14:8e:88:22:31:d5:82:ee:8a:d4: 99:2d:2d:74:2a:dc:4b:02:38:bc:50:70:23:28:a9:4f:6c:93: ca:65:0c:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjUwODA4MTYwNzQ5WhcNMjUwODE1MTYwNzQ5WjAYMRYwFAYD VQQDEw02ODk2MjBkNS1mMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvbuEQa29Dh94EEv4I9sTJR+NKqo4bcpVeDTnXseID1miQzwt8lXEozFdhkW VIlX1NyDdWmgwMmrB7E2ur5+HFkA7Gl8lCrDiqcC353oURI5tbb24pw+BkWX7olq sMFQOh9Tt9F5q9G8SVSQ/YOo0YG4/hV5rJOnGLfUp7DpMqwzAzfTb37rJKivWZe2 NiKicLzdkyizfYhLKZSXfty+RJ5oLWf+nCb+k048f4CnG609iIA5iKrHHD8aqOq0 CCGWNdUI7USrbE5OUAxLsXb/S4s9x96kNL55S+JazWoO0boaF+aPRjlPruSM9mk+ hKERc9heg9v+lEc0rGMO3KcalQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNno0gbz NZbNfyX3YbwSviEnUkhAMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR XzNhZGFxN3ZtZkptRUV6VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO06Mz2CCVRpeqLqHF6vcn8Rkz1HwW2i/Bf4YQa3j/lEd7OquOJl5Q xHqfAQEIqYogKodIh1vo3Yv/3F/X/jF7fPY75utfdTyUCJxp3SPjyX2sX7uwwbh8 KCmkAQoTxVtUo1pak1yJ2VsTlqS0eO58/e9WO8m1MTNAchFBB7Fp+s2hYvD+uX/x J/GVEAkZJMHsgDrXoSbdOLkzt4VinFwZUFxhGWkEk9DoQ7dN3OAotXMZS0YC2h19 HcTQtAk6PoHKavg4jKGlF+ULgFoYVoJIVtXG6gtYLAeTTov0czom5BSOiCIx1YLu itSZLS10KtxLAji8UHAjKKlPbJPKZQyp -----END CERTIFICATE-----Generated at Sat Aug 9 22:48:10 2025 by rpki-client