$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json) Hash identifier: Iqng4wwc2LHPx5hm3ufABtbstiKMmEb88+odf3yzN1s= Subject key identifier: B9:E4:42:36:AB:66:D1:7A:13:20:8C:83:3F:0C:49:92:B4:95:C4:AB Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Certificate serial: 0D73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft Manifest number: 0D6B Signing time: Sun 10 Aug 2025 17:58:06 +0000 Manifest this update: Sun 10 Aug 2025 17:58:05 +0000 Manifest next update: Sun 17 Aug 2025 17:58:05 +0000 Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: ZNbefme3BFWoRGNOcni3j+0GD+xJqJ0SatkooqHJTDU=) 2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: kfnndHzaWyTnp8z7+y1i5jZZ9EYcGBwsAArn1r5+vLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3443 (0xd73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Validity Not Before: Aug 10 17:58:05 2025 GMT Not After : Aug 17 17:58:05 2025 GMT Subject: CN=6898ddae-b07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:49:5b:b9:ec:2e:d8:91:d3:06:8b:9c:e0: 03:ac:e3:38:cb:01:a8:9a:2b:ba:68:89:0a:1f:a7: 57:3d:1e:4e:6e:27:d8:7f:05:ca:9e:9c:29:f5:d0: aa:fe:4f:b1:b9:f3:56:39:4b:b4:5d:ba:a6:0f:55: a0:88:8d:28:5a:a6:f6:1b:01:6a:7a:bf:9d:d7:55: f4:d6:24:27:7a:ec:3f:6e:0d:3c:a7:28:01:1e:0a: 1f:95:f0:ea:94:5e:ad:ab:35:cd:f9:45:1a:c0:45: 3b:6e:37:77:63:31:60:27:c9:ca:04:c6:7e:ee:b0: 42:7e:d7:80:77:61:5d:45:46:b4:c9:4c:aa:51:60: 2b:71:64:6d:db:56:38:99:4a:07:40:3b:f9:34:7c: 44:1d:99:b3:5c:cc:c6:0c:7b:2d:2d:89:71:a1:aa: 33:24:a3:49:24:20:6f:46:f0:e3:74:d3:1f:30:94: 48:5a:cd:4f:00:52:5c:70:27:8f:aa:56:95:87:46: f9:9d:b9:8a:57:12:07:b6:c2:ba:2f:b0:93:33:0d: d4:9d:83:58:bf:f4:3f:ec:76:47:0b:4b:0e:7e:ea: e4:f9:f2:03:ea:ca:80:1e:5f:bb:d2:5d:fc:a0:10: ae:b9:1c:56:f5:97:f4:6c:42:40:4e:6e:1b:ab:d0: cb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E4:42:36:AB:66:D1:7A:13:20:8C:83:3F:0C:49:92:B4:95:C4:AB X509v3 Authority Key Identifier: keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:e7:30:b6:ff:d2:ec:0a:62:00:d4:37:e9:11:93:a8:70:27: 3a:7a:50:83:eb:c5:79:ff:e6:5a:e0:70:28:ba:5b:bc:88:87: 4d:28:4b:04:62:08:56:5d:2c:50:33:03:cd:c3:85:90:a3:a4: 95:27:6a:4b:cb:af:50:d7:a1:e1:04:ed:5e:1c:4b:c3:23:98: 05:d4:6e:48:d3:e8:bb:0d:4b:c2:0e:af:5e:46:f1:8e:c3:c5: 4b:44:9b:89:e0:74:0e:39:b8:8a:34:88:b2:43:25:d5:51:93: 31:c2:41:9a:f3:e5:e8:fb:c4:20:6f:fe:c1:22:8d:24:b5:c4: f5:cd:0b:bf:12:02:ef:1a:a2:6a:98:2d:62:e9:38:c7:c6:06: 82:77:d4:57:89:25:f8:bc:64:eb:7d:24:63:01:ee:c9:2c:3e: e7:0f:a0:9a:fb:43:ea:e9:c1:42:5b:b8:df:c3:6d:e8:9b:49: 58:a7:9b:d4:23:50:3d:0f:84:5c:65:c4:b8:3d:59:8a:c9:79: 08:8b:70:27:0f:65:20:7a:45:c3:cd:5d:8f:92:ff:02:bc:a8: 14:67:36:9a:af:a7:b9:d9:7c:e2:ef:ba:74:50:71:3b:15:97: d8:de:ab:aa:42:02:dd:cc:4f:cf:27:95:a2:bb:a0:4e:f0:8d: 08:55:01:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFRjIxMTAvBgNVBAUTKDQ5QzlFOUUzMjI3Q0Q1NUFEMjlBMjEzQ0JBQTE3NDc4 NUExNjVDN0UwHhcNMjUwODEwMTc1ODA1WhcNMjUwODE3MTc1ODA1WjAYMRYwFAYD VQQDEw02ODk4ZGRhZS1iMDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfFJW7nsLtiR0waLnOADrOM4ywGomiu6aIkKH6dXPR5ObifYfwXKnpwp9dCq /k+xufNWOUu0XbqmD1WgiI0oWqb2GwFqer+d11X01iQneuw/bg08pygBHgoflfDq lF6tqzXN+UUawEU7bjd3YzFgJ8nKBMZ+7rBCfteAd2FdRUa0yUyqUWArcWRt21Y4 mUoHQDv5NHxEHZmzXMzGDHstLYlxoaozJKNJJCBvRvDjdNMfMJRIWs1PAFJccCeP qlaVh0b5nbmKVxIHtsK6L7CTMw3UnYNYv/Q/7HZHC0sOfurk+fID6sqAHl+70l38 oBCuuRxW9Zf0bEJATm4bq9DLfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnkQjar ZtF6EyCMgz8MSZK0lcSrMB8GA1UdIwQYMBaAFEnJ6eMifNVa0pohPLqhdHhaFlx+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEVGMi9CNjQ0MUVCNkQy QkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFWclNtaUU4dXFGMGVGb1dY SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NjbnA0eUo4MVZyU21pRTh1cUYwZUZvV1hINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEVGMi9CNjQ0MUVCNkQyQkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFW clNtaUU4dXFGMGVGb1dYSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl5zC2/9LsCmIA1DfpEZOocCc6elCD68V5/+Za4HAoulu8iIdNKEsE YghWXSxQMwPNw4WQo6SVJ2pLy69Q16HhBO1eHEvDI5gF1G5I0+i7DUvCDq9eRvGO w8VLRJuJ4HQOObiKNIiyQyXVUZMxwkGa8+Xo+8Qgb/7BIo0ktcT1zQu/EgLvGqJq mC1i6TjHxgaCd9RXiSX4vGTrfSRjAe7JLD7nD6Ca+0Pq6cFCW7jfw23om0lYp5vU I1A9D4RcZcS4PVmKyXkIi3AnD2UgekXDzV2Pkv8CvKgUZzaar6e52Xzi77p0UHE7 FZfY3quqQgLdzE/PJ5Wiu6BO8I0IVQEv -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:50 2025 by rpki-client