$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft File: SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json) Hash identifier: g9K7HIuIcLBTPVnjSE0q1OBxuLrow09oJ7/Y6kJSFBE= Subject key identifier: D8:01:E2:8B:D9:B9:44:EF:AE:51:24:D4:00:D7:AA:F6:40:60:3C:6D Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft Manifest number: 024B Signing time: Sat 09 Aug 2025 02:23:19 +0000 Manifest this update: Sat 09 Aug 2025 02:23:18 +0000 Manifest next update: Sat 16 Aug 2025 02:23:18 +0000 Files and hashes: 1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: OQyIKut7UFyGyWZ5veWSVrrC2GOWCZ9beujfPozG+qY=) 2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: NLbyCuuj3PUuIvgjWrH/YA9s60d6QDG0BkYDeVifH9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D167, serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Validity Not Before: Aug 9 02:23:18 2025 GMT Not After : Aug 16 02:23:18 2025 GMT Subject: CN=6896b117-deb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:73:85:32:44:30:32:7e:13:e9:a7:0a:7d: 3f:a8:4f:18:ff:56:c1:b1:4b:c4:3f:19:75:ce:9d: 90:04:13:e5:a9:7e:87:57:cf:ef:68:03:c4:b1:53: 81:e8:3e:ca:6d:c8:65:af:f8:4b:c9:1f:8c:36:3c: 77:83:a0:3a:37:ef:4a:fe:75:1b:c1:50:b7:7f:a1: ee:64:19:72:3b:93:0f:ed:8b:70:40:71:56:96:be: c9:1f:18:ed:10:95:dd:a7:47:96:48:97:00:7f:6e: ce:08:b4:db:67:1c:53:dd:93:3f:2b:ae:c6:fe:1d: 47:36:6b:29:af:da:3f:b4:05:10:34:10:f8:ec:94: 63:a6:af:62:d0:68:15:81:5f:64:dd:71:58:de:25: 5f:fe:2c:07:58:fa:b4:84:42:8a:91:cf:12:fe:c6: 1c:a3:e7:4a:cb:bf:ce:84:08:b2:a0:98:ab:74:da: 06:b1:2d:df:f7:3c:aa:d6:cf:69:fb:1d:56:46:19: cf:e4:cb:ea:7d:b8:5d:1d:0f:b8:48:44:2f:e4:47: 50:ee:ed:18:f5:ca:6e:f8:f4:67:c5:ab:8d:08:60: 56:f6:f2:f0:4e:2b:ce:a8:c7:1f:9c:42:36:b1:2e: fb:f0:bb:74:89:5d:76:ad:13:3b:3b:b9:f8:e8:ba: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:01:E2:8B:D9:B9:44:EF:AE:51:24:D4:00:D7:AA:F6:40:60:3C:6D X509v3 Authority Key Identifier: keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:6b:ef:32:69:68:a4:38:af:0d:b0:d6:40:f1:0d:80:c8:ee: 6d:89:f6:b0:ea:ef:95:f0:8c:3c:c0:60:4c:b7:52:cf:09:38: bf:c5:1e:8c:57:39:f5:df:c5:de:58:2f:b4:20:e9:d6:d1:1a: 4e:96:0a:2f:67:48:b1:dc:b6:01:a7:5c:95:c8:21:09:2f:d3: 74:5a:cd:54:f5:5b:63:2d:11:40:a4:09:d7:7f:4e:c0:14:c0: 08:bd:d6:e1:4e:0c:c4:11:91:45:f2:13:fa:36:a5:fb:96:7c: f3:67:f9:d6:d1:47:0d:85:87:a1:18:7b:7f:de:1c:fe:c2:8d: 15:8e:3f:77:0a:c5:a9:e7:9e:cc:8f:55:2b:e7:65:fa:ab:bf: 06:0a:d0:f2:5e:1e:b7:fc:e6:5a:ac:dd:29:00:4e:40:6f:68: e8:8b:ab:90:cd:af:36:13:13:78:41:3b:58:62:e3:17:65:f2: f9:08:e0:d5:9f:b4:35:f6:79:be:d6:d0:a6:b8:25:ae:1e:a6: 9f:b8:1f:25:77:ed:d8:c5:e0:81:21:a9:3d:8d:02:63:9c:59: c3:4a:df:49:67:99:50:d2:fd:a8:74:ac:2c:8f:10:b3:18:2a: a7:87:36:04:ab:9c:32:e1:78:99:00:1b:a2:e4:b4:d7:c2:56: 0a:13:6c:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3 RDY5OTMyNDgwHhcNMjUwODA5MDIyMzE4WhcNMjUwODE2MDIyMzE4WjAYMRYwFAYD VQQDEw02ODk2YjExNy1kZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cpzhTJEMDJ+E+mnCn0/qE8Y/1bBsUvEPxl1zp2QBBPlqX6HV8/vaAPEsVOB 6D7Kbchlr/hLyR+MNjx3g6A6N+9K/nUbwVC3f6HuZBlyO5MP7YtwQHFWlr7JHxjt EJXdp0eWSJcAf27OCLTbZxxT3ZM/K67G/h1HNmspr9o/tAUQNBD47JRjpq9i0GgV gV9k3XFY3iVf/iwHWPq0hEKKkc8S/sYco+dKy7/OhAiyoJirdNoGsS3f9zyq1s9p +x1WRhnP5MvqfbhdHQ+4SEQv5EdQ7u0Y9cpu+PRnxauNCGBW9vLwTivOqMcfnEI2 sS778Lt0iV12rRM7O7n46LorzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgB4ovZ uUTvrlEk1ADXqvZAYDxtMB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWa+8yaWikOK8NsNZA8Q2AyO5tifaw6u+V8Iw8wGBMt1LPCTi/xR6M Vzn138XeWC+0IOnW0RpOlgovZ0ix3LYBp1yVyCEJL9N0Ws1U9VtjLRFApAnXf07A FMAIvdbhTgzEEZFF8hP6NqX7lnzzZ/nW0UcNhYehGHt/3hz+wo0Vjj93CsWp557M j1Ur52X6q78GCtDyXh63/OZarN0pAE5Ab2joi6uQza82ExN4QTtYYuMXZfL5CODV n7Q19nm+1tCmuCWuHqafuB8ld+3YxeCBIak9jQJjnFnDSt9JZ5lQ0v2odKwsjxCz GCqnhzYEq5wy4XiZABui5LTXwlYKE2x3 -----END CERTIFICATE-----Generated at Sun Aug 10 16:01:36 2025 by rpki-client