$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json) Hash identifier: Vx2m/5a66LlQftRlnSCqCwnJ5aHV22gMT5SHqlUVdWw= Subject key identifier: 73:CF:E0:E1:94:46:EC:0F:36:2F:52:E1:EC:F7:18:8D:A9:10:94:6A Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft Manifest number: 79 Signing time: Sat 09 Aug 2025 07:15:47 +0000 Manifest this update: Sat 09 Aug 2025 07:15:47 +0000 Manifest next update: Sat 16 Aug 2025 07:15:47 +0000 Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: 9geTnXXLUNP8WKI6Kn6QRiQcpu+y91h/nDBsiHCl+D4=) 2: 4965C7C02E4411F0B187B122C4F9AE02.roa (hash: vT0qzVdoUmxJ/TJ/AidkSPg3ugEyyFgQIDSZRoXd/0g=) 3: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: 8Lz3SihiRlFf9NOxeybLJutdQF61khJ8l8jmKMF421Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Validity Not Before: Aug 9 07:15:47 2025 GMT Not After : Aug 16 07:15:47 2025 GMT Subject: CN=6896f5a3-4a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f1:61:74:6d:d7:84:1a:5a:14:7f:ee:2a:48: 89:9f:b0:15:0f:af:d8:c1:61:59:0f:7a:c4:bc:7d: 9d:6e:a9:b9:f4:f0:ce:fd:1d:dc:a3:2c:00:e5:ab: e7:9a:99:62:f1:39:2e:ba:37:f4:a2:89:ca:b2:2e: 72:e4:25:95:bf:14:75:96:a6:ea:a2:5f:62:0e:02: 06:ea:2f:38:35:4c:12:a8:f6:f1:a0:10:b9:5a:a0: 1c:c8:8b:29:6b:cb:64:3e:e0:1a:c3:3f:be:6c:8c: a5:d1:23:84:61:e0:e8:83:9f:d0:be:ba:6d:43:f9: 7b:8f:4d:72:fe:10:11:c0:60:bd:0e:dc:d9:a3:c1: 5e:28:af:4a:60:4f:41:43:bc:49:8a:f5:1c:18:89: c0:77:7e:c9:29:7a:d2:a2:0e:1a:99:bb:40:56:e9: 42:04:20:e4:62:d1:47:05:3b:95:ae:9c:84:a0:a0: 00:ce:96:8d:17:f8:fc:27:57:88:d0:2e:12:b7:bc: f6:0d:80:45:9f:09:be:20:05:03:df:0c:82:5f:5a: ca:d1:4c:f8:b4:e5:00:5b:98:ae:74:1f:68:de:f0: 17:5b:d3:eb:6c:19:d8:2e:f4:a2:43:04:2a:b2:11: 91:98:b3:4f:06:c7:72:d5:c6:11:69:80:8f:79:36: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CF:E0:E1:94:46:EC:0F:36:2F:52:E1:EC:F7:18:8D:A9:10:94:6A X509v3 Authority Key Identifier: keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:45:f4:f6:51:62:00:40:ec:3a:88:da:24:37:08:17:fd:c9: fc:b7:e6:63:b0:d4:d8:ce:4a:d5:d4:27:75:1a:db:3a:96:11: ba:fc:4c:71:6e:d2:89:22:27:56:13:b9:11:ca:af:83:67:68: 3e:62:52:60:60:42:29:51:ef:68:26:83:39:6a:36:30:b7:7d: 9e:56:4b:7b:34:00:d3:8a:a9:10:84:2d:b8:14:c9:23:b3:70: f3:40:17:5e:3a:75:09:4c:13:40:7b:d5:28:93:79:b5:ef:be: d6:ac:20:e0:c2:39:e4:68:3e:cb:0d:9e:e5:2d:64:e9:e1:2a: a8:b6:20:3e:7f:86:f9:4a:6b:9e:f3:4b:35:3f:c1:41:e0:67: 5e:91:ed:d0:32:b4:49:d6:10:f6:05:75:20:a1:c8:68:e2:58: 70:e9:1e:89:15:3e:29:41:c8:e9:e9:53:53:73:ea:d9:68:5d: 80:32:17:a2:e3:b1:d6:87:c9:c0:c3:9b:95:b6:11:56:5e:e3: 9d:96:07:16:bf:56:d6:b3:af:5b:91:d7:bd:89:80:34:2e:46: 4a:bf:90:d0:61:ce:00:63:c9:2b:5a:eb:3e:4a:f7:a4:2d:b7: 40:6f:1e:68:02:44:e4:5f:da:07:7e:c1:b4:07:54:dd:88:90: e0:b3:d8:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEYzNDExMC8GA1UEBRMoNEIzMTA4QkM1NzU4ODQzRDYzREZGNkZDNjQwOTdGMkIx NjQ0Q0I4QTAeFw0yNTA4MDkwNzE1NDdaFw0yNTA4MTYwNzE1NDdaMBgxFjAUBgNV BAMTDTY4OTZmNWEzLTRhNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa8WF0bdeEGloUf+4qSImfsBUPr9jBYVkPesS8fZ1uqbn08M79HdyjLADlq+ea mWLxOS66N/SiicqyLnLkJZW/FHWWpuqiX2IOAgbqLzg1TBKo9vGgELlaoBzIiylr y2Q+4BrDP75sjKXRI4Rh4OiDn9C+um1D+XuPTXL+EBHAYL0O3NmjwV4or0pgT0FD vEmK9RwYicB3fskpetKiDhqZu0BW6UIEIORi0UcFO5WunISgoADOlo0X+PwnV4jQ LhK3vPYNgEWfCb4gBQPfDIJfWsrRTPi05QBbmK50H2je8Bdb0+tsGdgu9KJDBCqy EZGYs08Gx3LVxhFpgI95NneRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc8/g4ZRG 7A82L1Lh7PcYjakQlGowHwYDVR0jBBgwFoAUSzEIvFdYhD1j3/b8ZAl/KxZEy4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RjM0LzREMjJFRUUwQkRF OTExRUZCRkQ1Mzg4MkM0RjlBRTAyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3pFSXZGZFloRDFqM19iOFpBbF9LeFpFeTRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RjM0LzREMjJFRUUwQkRFOTExRUZCRkQ1Mzg4MkM0RjlBRTAyL1N6RUl2RmRZaEQx ajNfYjhaQWxfS3haRXk0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC5F9PZRYgBA7DqI2iQ3CBf9yfy35mOw1NjOStXUJ3Ua2zqWEbr8THFu 0okiJ1YTuRHKr4NnaD5iUmBgQilR72gmgzlqNjC3fZ5WS3s0ANOKqRCELbgUySOz cPNAF146dQlME0B71SiTebXvvtasIODCOeRoPssNnuUtZOnhKqi2ID5/hvlKa57z SzU/wUHgZ16R7dAytEnWEPYFdSChyGjiWHDpHokVPilByOnpU1Nz6tloXYAyF6Lj sdaHycDDm5W2EVZe452WBxa/Vtazr1uR172JgDQuRkq/kNBhzgBjySta6z5K96Qt t0BvHmgCRORf2gd+wbQHVN2IkOCz2Js= -----END CERTIFICATE-----Generated at Sun Aug 10 18:55:51 2025 by rpki-client