$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft File: SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json) Hash identifier: 342Tyhz3EmGGdTSFzRpCmc/fzsMi3FzjhfnNVWnJVjc= Subject key identifier: DF:54:B5:F3:8A:9A:61:CB:12:25:91:35:71:28:30:9E:86:7D:16:A0 Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E Certificate issuer: /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Certificate serial: 0706 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft Manifest number: 0701 Signing time: Fri 08 Aug 2025 22:16:57 +0000 Manifest this update: Fri 08 Aug 2025 22:16:57 +0000 Manifest next update: Fri 15 Aug 2025 22:16:57 +0000 Files and hashes: 1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: rjXL1BK2cQbZkQjJZTkV5anqa0hgIaTJSFmBN3XePFM=) 2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: xRXc4Qynp20VBH0uvYkKK7b4+52BnXGj7roDL8ZzWEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1798 (0x706) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Validity Not Before: Aug 8 22:16:57 2025 GMT Not After : Aug 15 22:16:57 2025 GMT Subject: CN=68967759-b662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:82:af:6c:72:a7:9e:18:8a:9d:78:74:a3:6d: 86:52:79:db:9d:3f:b2:fc:0e:48:18:09:35:f9:1c: 86:67:66:1f:42:24:00:65:0e:79:c9:2e:6f:27:44: b7:49:64:e7:0f:11:ae:31:50:63:c0:30:62:53:3c: 16:34:dc:e7:39:35:c8:cb:ac:77:6e:c1:a3:5d:66: 68:ef:9c:48:3e:f4:aa:a9:07:14:b3:bf:78:97:bb: 9a:2d:e6:e3:fb:d3:d6:b7:48:ba:2e:a6:a7:aa:1f: 76:f4:31:c5:0c:96:4a:79:7a:7a:08:6f:4f:09:e0: 1d:21:ab:35:62:44:9c:a7:21:ad:b8:35:ce:14:c9: 20:fc:79:7f:65:e2:c6:7d:07:a1:64:ff:b3:5c:dc: a5:fc:f7:62:6e:df:e0:d3:98:23:95:4e:55:32:57: 0f:95:79:2f:c9:a6:8e:ed:2b:77:69:9d:48:c0:27: c6:ae:60:4f:c2:76:34:5e:64:53:db:e5:ac:df:8c: fc:c9:ea:0f:25:83:89:58:91:52:aa:d0:e6:98:38: df:b2:19:f0:0d:0c:46:91:ce:bf:33:4e:5d:54:14: c4:da:6d:ab:77:9b:2e:16:bd:aa:f3:85:68:38:99: 05:75:46:94:81:1f:88:29:66:96:1f:8f:9c:c6:c7: c1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:54:B5:F3:8A:9A:61:CB:12:25:91:35:71:28:30:9E:86:7D:16:A0 X509v3 Authority Key Identifier: keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:af:e2:ef:1f:97:4f:3b:5d:05:c5:33:f0:f9:20:03:21:45: 34:3b:1a:35:8e:d0:33:4f:0d:83:91:c1:7b:89:5e:cb:87:d6: e4:75:8f:10:dd:a1:56:0d:22:c5:5e:92:15:61:d1:5b:d8:b3: 7f:4a:cb:3d:50:14:9f:4f:09:c5:56:54:3c:c4:5c:c5:c2:a2: af:21:df:35:f3:88:08:f8:3d:5a:c4:68:57:b9:52:78:fa:e9: cd:a5:06:87:0c:bd:69:e1:2b:3c:f4:3e:0d:47:69:43:7c:8d: cd:d4:ef:52:b1:b0:3c:dc:6e:41:96:ce:31:64:1d:4c:d2:c0: 1a:09:4a:45:f6:34:d4:e1:e9:93:62:80:d7:ce:79:0d:8f:2f: 3a:eb:79:87:79:de:c2:6b:1a:e0:8b:6b:75:47:3f:8f:1c:ae: 20:4a:b6:27:fa:d7:6c:3f:f8:49:9a:ee:4a:af:5e:36:a7:80: 30:17:95:5b:9a:27:a6:13:01:4c:ae:ff:a4:f5:eb:d8:19:10: 23:9c:aa:a0:4b:35:98:70:ab:b6:57:da:e6:94:20:c9:47:11: cf:fd:ab:e4:be:56:43:bf:4c:5f:3c:02:cb:eb:da:8d:f4:85: 6f:f8:e0:9f:19:03:7d:06:af:ce:b6:a6:be:4c:4b:f3:9d:76: e0:8e:b4:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QyMjgxMTAvBgNVBAUTKDQ4RTkwQjczQjQ5RkEzQURGNUVDOTFBNUNDRDIzREFE MzVEM0M0OEUwHhcNMjUwODA4MjIxNjU3WhcNMjUwODE1MjIxNjU3WjAYMRYwFAYD VQQDEw02ODk2Nzc1OS1iNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYKvbHKnnhiKnXh0o22GUnnbnT+y/A5IGAk1+RyGZ2YfQiQAZQ55yS5vJ0S3 SWTnDxGuMVBjwDBiUzwWNNznOTXIy6x3bsGjXWZo75xIPvSqqQcUs794l7uaLebj +9PWt0i6Lqanqh929DHFDJZKeXp6CG9PCeAdIas1YkScpyGtuDXOFMkg/Hl/ZeLG fQehZP+zXNyl/Pdibt/g05gjlU5VMlcPlXkvyaaO7St3aZ1IwCfGrmBPwnY0XmRT 2+Ws34z8yeoPJYOJWJFSqtDmmDjfshnwDQxGkc6/M05dVBTE2m2rd5suFr2q84Vo OJkFdUaUgR+IKWaWH4+cxsfBfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9UtfOK mmHLEiWRNXEoMJ6GfRagMB8GA1UdIwQYMBaAFEjpC3O0n6Ot9eyRpczSPa0108SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDIyOC82QjREMkRBODUw QUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82MzE3Skdsek5JOXJUWFR4 STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPa0xjN1NmbzYzMTdKR2x6Tkk5clRYVHhJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDIyOC82QjREMkRBODUwQUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82 MzE3Skdsek5JOXJUWFR4STQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlr+LvH5dPO10FxTPw+SADIUU0Oxo1jtAzTw2DkcF7iV7Lh9bkdY8Q 3aFWDSLFXpIVYdFb2LN/Sss9UBSfTwnFVlQ8xFzFwqKvId8184gI+D1axGhXuVJ4 +unNpQaHDL1p4Ss89D4NR2lDfI3N1O9SsbA83G5Bls4xZB1M0sAaCUpF9jTU4emT YoDXznkNjy8663mHed7Caxrgi2t1Rz+PHK4gSrYn+tdsP/hJmu5Kr142p4AwF5Vb miemEwFMrv+k9evYGRAjnKqgSzWYcKu2V9rmlCDJRxHP/avkvlZDv0xfPALL69qN 9IVv+OCfGQN9Bq/Otqa+TEvznXbgjrSJ -----END CERTIFICATE-----Generated at Sun Aug 10 05:36:58 2025 by rpki-client