$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json) Hash identifier: R8GZbtJZdNFBNpHIhcehHfH8oH9hVgfJnKvoNvbsnvY= Subject key identifier: 86:6B:D9:84:62:46:51:67:2C:5F:21:88:DF:BF:4A:84:C1:F8:C9:21 Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 0AA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft Manifest number: 0A9B Signing time: Tue 12 Aug 2025 19:47:13 +0000 Manifest this update: Tue 12 Aug 2025 19:47:13 +0000 Manifest next update: Tue 19 Aug 2025 19:47:13 +0000 Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: z4O0r7NOvELOdD9Y70sQnEEQoAYHV12Lnjje7P2gLd0=) 2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 0MEjUCGRzvjz5epLH1Yc0e31fL5fFdQ31GIxJUqAOEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2721 (0xaa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: Aug 12 19:47:13 2025 GMT Not After : Aug 19 19:47:13 2025 GMT Subject: CN=689b9a41-4c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e6:32:f8:49:89:9a:30:d3:0f:d7:15:a1:86: 93:93:c8:b4:39:1f:fc:86:c6:62:dc:f1:b9:ca:94: e7:1e:43:24:70:74:e2:46:16:95:10:1f:3e:cf:0c: 84:e4:d7:95:8f:61:7f:27:06:5d:ba:fd:61:49:da: c3:8a:36:3a:4c:97:06:fb:8c:79:06:f3:2b:a8:4c: 30:32:ec:be:dd:0e:41:4f:37:28:09:a0:f4:7d:0c: 43:f9:04:63:98:ce:c8:68:0e:ef:d8:5d:95:dc:36: 9d:cb:fd:28:e7:8e:32:8d:e1:3c:b4:7b:5b:19:fb: b7:ef:f1:92:72:38:72:ee:5d:86:e4:8e:b3:fe:4c: 82:80:21:67:16:1d:ed:fd:43:b5:65:af:44:26:68: 7e:8f:f5:12:71:72:34:e0:ba:7a:92:f1:ac:47:a3: 0e:8d:aa:49:ad:7c:9c:04:8e:e3:29:57:75:c7:a1: 31:77:18:92:c9:89:4f:bf:1f:12:40:72:9e:1d:57: 93:be:e6:06:4b:2b:ae:ec:4a:29:e5:d0:d6:f8:4e: 87:a8:3f:8b:01:2c:67:b4:af:b7:39:19:ec:ca:74: ab:79:91:65:7e:d4:3f:f1:d7:72:df:a7:42:f1:ae: 6d:09:b6:a9:03:11:79:a3:bb:78:4d:26:90:c0:93: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6B:D9:84:62:46:51:67:2C:5F:21:88:DF:BF:4A:84:C1:F8:C9:21 X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:a2:46:5b:62:9f:5e:99:57:a5:23:f1:da:9a:22:9d:f3:10: 43:7d:c9:70:a5:86:f6:dd:d1:3a:e7:44:c8:76:43:3a:d1:88: a9:3c:a2:82:be:ba:0e:7c:d1:f9:b6:60:63:39:45:6d:21:c7: a3:f1:72:ec:cb:24:1d:d1:95:3c:7b:47:8d:ad:eb:37:cd:d1: 6b:13:54:a1:b1:65:d7:3f:7a:3e:a4:27:22:f6:8c:27:ad:9c: c6:1e:4c:f4:d1:e8:9f:51:79:5b:1a:39:69:e6:fa:34:06:e4: e3:0a:bd:77:b6:51:c1:c1:f7:a7:b6:df:37:24:ff:da:12:4b: 39:b4:78:30:f8:aa:f1:5b:a2:b6:c8:f3:32:27:83:9d:62:ca: 13:47:06:69:91:bf:17:09:78:39:04:77:b4:7a:38:35:a0:15: f4:f6:c4:10:ef:f9:48:d9:ff:df:38:2d:26:98:f3:a8:57:04: 0e:67:7b:8b:be:33:13:fb:38:8d:fc:a8:0c:2a:f5:6a:de:7e: 79:62:ff:d9:ee:cd:4d:a0:08:d3:41:86:b1:d7:90:98:7f:6c: 13:90:2f:c1:d4:ae:d1:95:83:87:f5:94:99:ce:45:5c:5b:49: a7:09:97:24:23:b1:5d:2a:79:ba:87:fd:96:63:49:09:c1:6c: d3:80:d0:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjUwODEyMTk0NzEzWhcNMjUwODE5MTk0NzEzWjAYMRYwFAYD VQQDEw02ODliOWE0MS00Yzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+eYy+EmJmjDTD9cVoYaTk8i0OR/8hsZi3PG5ypTnHkMkcHTiRhaVEB8+zwyE 5NeVj2F/JwZduv1hSdrDijY6TJcG+4x5BvMrqEwwMuy+3Q5BTzcoCaD0fQxD+QRj mM7IaA7v2F2V3Dady/0o544yjeE8tHtbGfu37/GScjhy7l2G5I6z/kyCgCFnFh3t /UO1Za9EJmh+j/UScXI04Lp6kvGsR6MOjapJrXycBI7jKVd1x6ExdxiSyYlPvx8S QHKeHVeTvuYGSyuu7Eop5dDW+E6HqD+LASxntK+3ORnsynSreZFlftQ/8ddy36dC 8a5tCbapAxF5o7t4TSaQwJPUQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZr2YRi RlFnLF8hiN+/SoTB+MkhMB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3 UmtiSHZBYmlZajRXdm5rRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgokZbYp9emVelI/HamiKd8xBDfclwpYb23dE650TIdkM60YipPKKC vroOfNH5tmBjOUVtIcej8XLsyyQd0ZU8e0eNres3zdFrE1ShsWXXP3o+pCci9own rZzGHkz00eifUXlbGjlp5vo0BuTjCr13tlHBwfentt83JP/aEks5tHgw+KrxW6K2 yPMyJ4OdYsoTRwZpkb8XCXg5BHe0ejg1oBX09sQQ7/lI2f/fOC0mmPOoVwQOZ3uL vjMT+ziN/KgMKvVq3n55Yv/Z7s1NoAjTQYax15CYf2wTkC/B1K7RlYOH9ZSZzkVc W0mnCZckI7FdKnm6h/2WY0kJwWzTgNB/ -----END CERTIFICATE-----Generated at Wed Aug 13 02:59:36 2025 by rpki-client