$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft File: sXBCw3IXHA9BRv78RNHbqlIjhxs.mft (raw, json) Hash identifier: 9as+Hb3FCc75uinIB5s+aLuYYvhl4468hy26kl6750A= Subject key identifier: 88:C9:B0:22:22:BC:3E:07:62:F6:3F:60:32:2B:7E:AD:05:4C:DA:73 Authority key identifier: B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B Certificate issuer: /CN=A918FEF6/serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Certificate serial: 0754 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft Manifest number: 074F Signing time: Sun 10 Aug 2025 21:44:00 +0000 Manifest this update: Sun 10 Aug 2025 21:44:00 +0000 Manifest next update: Sun 17 Aug 2025 21:44:00 +0000 Files and hashes: 1: sXBCw3IXHA9BRv78RNHbqlIjhxs.crl (hash: gTb9rUkJ/iSst8pZnDMwJiHETR8H1lbGSwNUTj6l2jc=) 2: 3A9A3904330011EBA08B865DC4F9AE02.roa (hash: 3vNGkA3tCUjQbATswchBY3GI0Vd54z+gZRifmc/PxUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF6, serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Validity Not Before: Aug 10 21:44:00 2025 GMT Not After : Aug 17 21:44:00 2025 GMT Subject: CN=689912a0-5d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:42:b4:d5:8e:4d:15:27:82:64:2d:8e:7e: 8c:64:63:a8:7b:7f:57:be:f3:24:3a:d5:12:16:d4: ad:08:6f:fe:d9:9c:0c:49:5e:e8:b3:29:ea:20:31: b1:02:07:e7:4d:df:aa:81:32:20:2b:ec:61:4a:f2: 45:74:78:a4:8d:0b:aa:c1:50:7b:ee:b0:e1:3f:29: 70:a9:60:61:df:ad:d3:11:81:6e:f1:b2:76:93:13: 2b:e6:36:07:4c:c6:af:f8:ae:39:43:04:a8:b6:5f: 54:a6:8c:14:bb:ca:54:b5:56:8b:48:9b:46:72:48: 07:9a:98:3c:ee:3c:be:30:b5:36:f1:05:fc:25:71: cc:d3:17:e5:ed:ab:ca:36:65:a3:6d:a4:c1:c4:e9: a6:92:92:96:4c:09:0d:f8:3e:74:51:f4:ce:99:7b: e6:38:12:b7:1e:57:63:91:91:b4:dd:14:f2:d0:de: 51:73:d2:56:9c:fb:ec:ac:48:9e:22:31:1a:53:b2: eb:ca:b0:fd:70:24:bf:83:0f:10:64:31:59:ce:71: 6b:3d:b6:00:1b:b1:e6:28:34:99:44:aa:25:d3:57: c0:90:d4:bc:a5:c8:40:0c:65:23:d0:36:b2:a0:dd: 39:b0:83:d6:10:29:87:1e:e2:12:fd:9e:d5:38:df: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C9:B0:22:22:BC:3E:07:62:F6:3F:60:32:2B:7E:AD:05:4C:DA:73 X509v3 Authority Key Identifier: keyid:B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c0:9b:88:ed:1c:f5:10:5e:e6:54:33:1b:79:58:99:52:db: 6f:00:37:f3:42:ed:77:54:94:a7:20:47:0f:6d:b5:48:68:47: 73:3d:75:4f:a8:a8:39:3b:22:aa:c9:42:5a:1c:5b:bf:6a:bc: 2c:05:51:28:bf:12:0c:8a:0b:77:9e:f4:20:5c:4e:e9:45:fb: 0a:f0:89:26:9d:67:66:0f:bc:49:97:2d:d0:3d:b9:15:7b:f0: b0:7e:d5:6d:b0:40:cb:a7:08:2f:f8:b4:a5:52:4a:25:ee:4b: a8:c3:67:43:de:af:83:19:01:04:66:07:b2:aa:38:9c:12:c6: eb:5b:35:bc:ef:a0:e9:af:d6:4a:03:1d:ea:12:83:b0:c6:17: 3c:60:94:94:92:03:e9:94:51:09:ec:bc:c2:90:cd:6d:c1:bb: bc:bb:60:a4:a5:4c:97:5d:01:03:1e:89:f4:49:40:73:df:96: 75:fd:17:37:cd:f1:ef:0a:0f:b5:54:ef:07:8e:af:73:5c:6e: 5b:9b:5c:38:7c:9e:de:6c:dd:4b:3f:16:08:52:49:93:f2:41: 8d:10:42:48:d4:4f:38:d5:c2:b2:90:7f:9e:b5:9a:ac:81:28: 2d:07:5c:ef:c0:55:45:2c:69:c4:b8:d4:0d:2e:71:46:8a:82: dc:e5:00:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjYxMTAvBgNVBAUTKEIxNzA0MkMzNzIxNzFDMEY0MTQ2RkVGQzQ0RDFEQkFB NTIyMzg3MUIwHhcNMjUwODEwMjE0NDAwWhcNMjUwODE3MjE0NDAwWjAYMRYwFAYD VQQDEw02ODk5MTJhMC01ZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdJCtNWOTRUngmQtjn6MZGOoe39XvvMkOtUSFtStCG/+2ZwMSV7osynqIDGx AgfnTd+qgTIgK+xhSvJFdHikjQuqwVB77rDhPylwqWBh363TEYFu8bJ2kxMr5jYH TMav+K45QwSotl9UpowUu8pUtVaLSJtGckgHmpg87jy+MLU28QX8JXHM0xfl7avK NmWjbaTBxOmmkpKWTAkN+D50UfTOmXvmOBK3HldjkZG03RTy0N5Rc9JWnPvsrEie IjEaU7LryrD9cCS/gw8QZDFZznFrPbYAG7HmKDSZRKol01fAkNS8pchADGUj0Day oN05sIPWECmHHuIS/Z7VON+YrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjJsCIi vD4HYvY/YDIrfq0FTNpzMB8GA1UdIwQYMBaAFLFwQsNyFxwPQUb+/ETR26pSI4cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGNi8xOTg2QjlEODMy RkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhBOUJSdjc4Uk5IYnFsSWpo eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NYQkN3M0lYSEE5QlJ2NzhSTkhicWxJamh4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGNi8xOTg2QjlEODMyRkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhB OUJSdjc4Uk5IYnFsSWpoeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkwJuI7Rz1EF7mVDMbeViZUttvADfzQu13VJSnIEcPbbVIaEdzPXVP qKg5OyKqyUJaHFu/arwsBVEovxIMigt3nvQgXE7pRfsK8IkmnWdmD7xJly3QPbkV e/CwftVtsEDLpwgv+LSlUkol7kuow2dD3q+DGQEEZgeyqjicEsbrWzW876Dpr9ZK Ax3qEoOwxhc8YJSUkgPplFEJ7LzCkM1twbu8u2CkpUyXXQEDHon0SUBz35Z1/Rc3 zfHvCg+1VO8Hjq9zXG5bm1w4fJ7ebN1LPxYIUkmT8kGNEEJI1E841cKykH+etZqs gSgtB1zvwFVFLGnEuNQNLnFGioLc5QCH -----END CERTIFICATE-----Generated at Mon Aug 11 07:27:45 2025 by rpki-client