$ rpki-client -vvf rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft File: szbWhuGt3y1ceNLQ4BKNDyh-B44.mft (raw, json) Hash identifier: UTHjDUIyhmjaoEktKHCzCtkTu98Sja6g6CAk2SkoQPA= Subject key identifier: 26:49:28:AA:A7:17:3C:AE:24:8B:79:E1:60:B2:FB:46:DB:CB:C3:F9 Authority key identifier: B3:36:D6:86:E1:AD:DF:2D:5C:78:D2:D0:E0:12:8D:0F:28:7E:07:8E Certificate issuer: /CN=A91545AC/serialNumber=B336D686E1ADDF2D5C78D2D0E0128D0F287E078E Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft Manifest number: 07A9 Signing time: Tue 12 Aug 2025 21:39:01 +0000 Manifest this update: Tue 12 Aug 2025 21:39:01 +0000 Manifest next update: Tue 19 Aug 2025 21:39:01 +0000 Files and hashes: 1: szbWhuGt3y1ceNLQ4BKNDyh-B44.crl (hash: jN99NMBR0MkKeX18SjnZVaViXhKQrtX+Jfnku6TXWxI=) 2: B546148C121911EB82F65F7AC4F9AE02.roa (hash: guFQzr4GMuotnLN4g29mwWKV8rRpZXge3ak3JTxYZDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.crl rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91545AC, serialNumber=B336D686E1ADDF2D5C78D2D0E0128D0F287E078E Validity Not Before: Aug 12 21:39:01 2025 GMT Not After : Aug 19 21:39:01 2025 GMT Subject: CN=689bb475-33d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:29:b1:d1:5e:42:ac:e5:c0:bf:7f:ca:d6: 94:da:b6:ad:88:77:c9:b5:d6:a0:d7:9f:e0:b6:c2: db:3c:75:b9:58:55:18:ad:40:06:01:f5:ca:9f:97: 1b:a1:45:75:25:af:cf:61:42:14:d5:76:02:44:5f: 97:01:d0:75:9e:fe:76:f4:bf:e9:b8:75:f5:e1:90: 98:cd:b7:c8:a6:d8:c8:6c:13:3f:66:e6:4a:ee:da: 90:0b:2e:80:74:6b:b5:b1:27:b9:c7:8b:97:3c:80: 49:7b:d2:fb:94:a2:0c:b7:56:32:8b:aa:f8:65:7a: 03:64:f2:c9:91:e9:76:fb:5a:80:9a:e3:4a:d4:f2: 5d:c5:c7:b6:e0:2e:b3:15:97:65:e1:5b:78:0f:1e: b9:0a:53:c4:b8:c5:9f:93:bd:58:9f:30:77:f1:22: 2f:f5:03:0c:0f:c8:36:70:e3:a6:42:29:aa:2c:ce: 8b:16:a9:0b:d5:4d:29:36:49:71:e5:54:85:3f:1d: 12:09:09:75:f3:ee:87:20:5e:80:f7:8d:1a:76:4d: 6b:c4:9d:9a:41:9a:6e:e3:55:65:e0:c0:97:69:e3: 46:fe:4f:ba:e3:4b:2c:40:47:f5:10:df:4a:0e:9f: 17:d4:d9:29:f5:be:17:26:13:fa:7f:da:ac:e5:de: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:49:28:AA:A7:17:3C:AE:24:8B:79:E1:60:B2:FB:46:DB:CB:C3:F9 X509v3 Authority Key Identifier: keyid:B3:36:D6:86:E1:AD:DF:2D:5C:78:D2:D0:E0:12:8D:0F:28:7E:07:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6d:aa:8a:d9:5b:75:67:da:b4:96:b6:eb:60:5e:f9:c9:b1: 53:ee:24:c7:cc:fa:5c:6f:a1:e8:92:aa:e9:be:79:13:09:68: 11:a6:c5:b8:52:20:b0:6f:38:d6:91:df:95:2d:f3:1f:e8:8f: b6:13:a7:4d:86:90:3d:50:be:00:82:e6:67:d9:c1:b0:43:54: 45:41:5c:6f:16:d4:86:00:35:ab:d8:22:78:8c:aa:c7:6c:86: 1e:92:c0:62:f7:c3:53:b2:69:6e:0b:bc:ae:9a:2c:9a:59:7c: 05:01:d7:c3:db:d8:ba:3a:ec:4e:51:72:44:5d:b5:d1:e2:9d: 92:09:51:29:fe:f3:0c:92:d8:ec:5d:6c:ad:97:59:c8:59:08: 11:0f:1f:74:4d:a4:70:bf:1c:37:3c:66:c7:09:e6:3c:67:d3: 83:47:f8:50:d6:a9:d0:c0:68:e2:a8:fa:a3:ab:94:c7:7c:53: 47:f6:d4:5f:c4:fa:57:55:0c:fe:9c:1a:c5:ec:f2:61:5b:36: 07:11:d1:ca:42:b6:4d:8a:7f:02:bb:45:e7:78:87:d2:57:71: 7b:f9:3c:ee:50:46:09:e8:ca:ba:77:9e:4c:0e:4d:b9:96:41: c8:03:44:48:85:13:00:4b:cb:cb:d1:45:f7:09:fb:8c:5a:73: 91:41:df:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1QUMxMTAvBgNVBAUTKEIzMzZENjg2RTFBRERGMkQ1Qzc4RDJEMEUwMTI4RDBG Mjg3RTA3OEUwHhcNMjUwODEyMjEzOTAxWhcNMjUwODE5MjEzOTAxWjAYMRYwFAYD VQQDEw02ODliYjQ3NS0zM2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs30psdFeQqzlwL9/ytaU2ratiHfJtdag15/gtsLbPHW5WFUYrUAGAfXKn5cb oUV1Ja/PYUIU1XYCRF+XAdB1nv529L/puHX14ZCYzbfIptjIbBM/ZuZK7tqQCy6A dGu1sSe5x4uXPIBJe9L7lKIMt1Yyi6r4ZXoDZPLJkel2+1qAmuNK1PJdxce24C6z FZdl4Vt4Dx65ClPEuMWfk71YnzB38SIv9QMMD8g2cOOmQimqLM6LFqkL1U0pNklx 5VSFPx0SCQl18+6HIF6A940adk1rxJ2aQZpu41Vl4MCXaeNG/k+640ssQEf1EN9K Dp8X1Nkp9b4XJhP6f9qs5d56WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZJKKqn FzyuJIt54WCy+0bby8P5MB8GA1UdIwQYMBaAFLM21obhrd8tXHjS0OASjQ8ofgeO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDVBQy84QTU2OEE4MjEy MTgxMUVCQjE4NTJDNzlDNEY5QUUwMi9zemJXaHVHdDN5MWNlTkxRNEJLTkR5aC1C NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N6YldodUd0M3kxY2VOTFE0QktORHloLUI0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDVBQy84QTU2OEE4MjEyMTgxMUVCQjE4NTJDNzlDNEY5QUUwMi9zemJXaHVHdDN5 MWNlTkxRNEJLTkR5aC1CNDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBubaqK2Vt1Z9q0lrbrYF75ybFT7iTHzPpcb6HokqrpvnkTCWgRpsW4 UiCwbzjWkd+VLfMf6I+2E6dNhpA9UL4AguZn2cGwQ1RFQVxvFtSGADWr2CJ4jKrH bIYeksBi98NTsmluC7yumiyaWXwFAdfD29i6OuxOUXJEXbXR4p2SCVEp/vMMktjs XWytl1nIWQgRDx90TaRwvxw3PGbHCeY8Z9ODR/hQ1qnQwGjiqPqjq5THfFNH9tRf xPpXVQz+nBrF7PJhWzYHEdHKQrZNin8Cu0XneIfSV3F7+TzuUEYJ6Mq6d55MDk25 lkHIA0RIhRMAS8vL0UX3CfuMWnORQd98 -----END CERTIFICATE-----Generated at Wed Aug 13 05:37:39 2025 by rpki-client