$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft File: SC1I47aWHxIIwGcVJOCOkDOV9lk.mft (raw, json) Hash identifier: t+QowH9d5fQkZouuf+uGBZAmNrEtMi71zgCDyy67LS0= Subject key identifier: 6F:8A:06:C0:EE:B4:5E:C6:19:42:9A:61:20:EA:8A:0F:F0:29:6C:E1 Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59 Certificate issuer: /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft Manifest number: 0133 Signing time: Tue 05 Aug 2025 04:56:58 +0000 Manifest this update: Tue 05 Aug 2025 04:56:58 +0000 Manifest next update: Tue 12 Aug 2025 04:56:58 +0000 Files and hashes: 1: SC1I47aWHxIIwGcVJOCOkDOV9lk.crl (hash: hq7xTI28FHcJ9HiiPgZ2kcurWEzDnHtdqKtXsgB6f1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCE2, serialNumber=482D48E3B6961F1208C0671524E08E903395F659 Validity Not Before: Aug 5 04:56:58 2025 GMT Not After : Aug 12 04:56:58 2025 GMT Subject: CN=68918f1a-49a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:9e:85:55:98:f7:76:82:2d:cd:b1:d0:3a: 72:54:a3:8e:75:ba:89:4e:ae:d0:14:59:d8:f2:70: be:82:75:3b:0e:f1:16:8f:84:b0:a5:f3:ef:9b:a9: 56:c1:6f:2d:da:11:b5:b1:ef:d1:9b:c7:50:6c:9a: 2e:38:09:1f:72:ed:68:19:8b:31:a9:e8:15:5a:54: d8:8b:7b:5e:85:1e:52:c8:50:f8:bb:9c:a8:51:cc: 57:fd:e3:87:62:11:30:28:58:9c:6d:fa:dc:b8:3b: 07:65:8d:5d:2e:4f:07:d1:97:0f:70:f5:96:df:84: 4a:25:4d:16:c0:14:74:4b:94:98:ac:45:69:f0:6e: 66:f8:92:55:df:b7:ac:a2:2d:7a:02:a2:0d:61:04: fd:c6:93:b9:98:de:fb:f7:d3:a4:23:0d:5d:43:2d: 19:94:c1:1c:20:83:af:11:eb:02:cb:32:3f:ed:91: 33:87:f2:62:8d:bc:58:6a:b3:a1:74:48:f0:1a:d6: d9:02:e4:17:ea:b1:6c:7d:90:5e:80:bc:32:d7:1c: 0b:28:1b:ec:5d:0e:0e:1a:5b:4d:3f:fb:23:94:c3: 28:74:7e:a0:c3:66:bd:f8:22:af:b4:fa:1a:62:51: 6c:a0:6c:77:49:e7:ae:38:01:53:30:69:16:7d:51: 0b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8A:06:C0:EE:B4:5E:C6:19:42:9A:61:20:EA:8A:0F:F0:29:6C:E1 X509v3 Authority Key Identifier: keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:da:ea:ae:47:95:af:28:d0:46:f6:d6:bb:27:f7:71:60:5b: e4:06:a1:61:78:b3:3e:58:ee:0b:26:e6:44:1e:b1:64:76:97: 69:4a:29:d9:1f:33:5c:8d:0f:c3:d9:18:82:e5:16:2d:40:18: aa:93:6f:a5:b2:2e:e9:d8:cb:e7:16:70:83:2d:ab:24:62:89: 5e:1e:07:54:d4:80:d7:b2:d3:64:90:0d:8e:3c:64:fa:70:be: 4d:ae:45:0f:6e:8b:70:d7:3e:71:f2:75:51:be:5f:63:89:89: 30:ab:32:3e:a7:b8:c3:e9:4a:be:c7:b8:8d:8f:fb:a2:dd:77: 9a:00:70:6d:da:a0:6f:74:00:31:c0:8a:f3:2f:a2:86:a3:75: 5e:99:06:e0:24:cc:10:fe:e5:2e:68:3e:7c:46:65:f5:34:cf: 73:e6:57:b7:37:28:66:df:c0:81:05:8b:01:f5:0a:42:45:c8: 6e:9d:d7:34:09:d0:40:d5:e3:c3:cf:43:9e:c1:da:4e:de:80: 19:52:b3:d4:2f:e3:53:4a:c3:ae:4e:b9:d5:c5:2a:0f:46:64: d3:39:7b:ae:53:be:8b:e6:01:c9:4e:8a:71:67:81:9f:ff:a7: 50:84:da:00:05:db:77:d4:90:a0:e0:ee:c5:15:a0:40:eb:6a: a5:91:89:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDRTIxMTAvBgNVBAUTKDQ4MkQ0OEUzQjY5NjFGMTIwOEMwNjcxNTI0RTA4RTkw MzM5NUY2NTkwHhcNMjUwODA1MDQ1NjU4WhcNMjUwODEyMDQ1NjU4WjAYMRYwFAYD VQQDEw02ODkxOGYxYS00OWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqt2ehVWY93aCLc2x0DpyVKOOdbqJTq7QFFnY8nC+gnU7DvEWj4SwpfPvm6lW wW8t2hG1se/Rm8dQbJouOAkfcu1oGYsxqegVWlTYi3tehR5SyFD4u5yoUcxX/eOH YhEwKFicbfrcuDsHZY1dLk8H0ZcPcPWW34RKJU0WwBR0S5SYrEVp8G5m+JJV37es oi16AqINYQT9xpO5mN7799OkIw1dQy0ZlMEcIIOvEesCyzI/7ZEzh/JijbxYarOh dEjwGtbZAuQX6rFsfZBegLwy1xwLKBvsXQ4OGltNP/sjlMModH6gw2a9+CKvtPoa YlFsoGx3SeeuOAFTMGkWfVELNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+KBsDu tF7GGUKaYSDqig/wKWzhMB8GA1UdIwQYMBaAFEgtSOO2lh8SCMBnFSTgjpAzlfZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNFMi8yNEY3RTI3RTk3 QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4SUl3R2NWSk9DT2tET1Y5 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMUk0N2FXSHhJSXdHY1ZKT0NPa0RPVjlsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkNFMi8yNEY3RTI3RTk3QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4 SUl3R2NWSk9DT2tET1Y5bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm2uquR5WvKNBG9ta7J/dxYFvkBqFheLM+WO4LJuZEHrFkdpdpSinZ HzNcjQ/D2RiC5RYtQBiqk2+lsi7p2MvnFnCDLaskYoleHgdU1IDXstNkkA2OPGT6 cL5NrkUPbotw1z5x8nVRvl9jiYkwqzI+p7jD6Uq+x7iNj/ui3XeaAHBt2qBvdAAx wIrzL6KGo3VemQbgJMwQ/uUuaD58RmX1NM9z5le3Nyhm38CBBYsB9QpCRchundc0 CdBA1ePDz0OewdpO3oAZUrPUL+NTSsOuTrnVxSoPRmTTOXuuU76L5gHJTopxZ4Gf /6dQhNoABdt31JCg4O7FFaBA62qlkYmP -----END CERTIFICATE-----Generated at Wed Aug 6 05:13:44 2025 by rpki-client