$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json) Hash identifier: vI8ZdhQS4wXwPtobItY2JmK6CMdrOsf80rGVtrdD9QQ= Subject key identifier: 0F:BE:73:22:BA:99:24:19:73:BD:53:AC:81:FC:22:2D:56:DC:EF:EE Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft Manifest number: 01A8 Signing time: Thu 07 Aug 2025 03:43:20 +0000 Manifest this update: Thu 07 Aug 2025 03:43:19 +0000 Manifest next update: Thu 14 Aug 2025 03:43:19 +0000 Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: WU2DNtDQv/+If1UOSu4By5bAA522kPPRTcWRDzduas4=) 2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: H97m0xGfwTSK15tOF7js1ABWMy5iF+l3/IsWtR98xbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Validity Not Before: Aug 7 03:43:19 2025 GMT Not After : Aug 14 03:43:19 2025 GMT Subject: CN=689420d8-d0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7e:ff:9c:a0:bc:16:8b:31:0e:e2:fc:52:2d: 82:d0:3c:74:10:b1:2d:33:bc:8d:b3:44:2d:6b:66: 50:58:b0:2b:b7:e0:10:1f:80:6e:05:68:02:72:47: d7:ba:be:29:cd:3a:4b:06:aa:58:ff:65:6d:31:8d: a0:72:37:c1:34:5b:e7:9c:9a:39:7f:9c:93:89:44: a4:89:84:74:01:45:6d:ba:11:57:ba:60:79:18:9f: d7:ff:a1:02:cd:1b:7d:26:96:a8:d8:6b:68:76:76: 72:1c:9b:eb:f8:ee:b7:c1:f2:fc:85:bd:30:26:91: 5e:00:9b:a0:09:96:b1:4e:12:7e:c0:71:35:c0:fe: da:26:22:e5:f4:76:15:98:8e:fe:30:33:93:f9:ef: 54:96:6b:f6:72:0d:4a:21:b8:a8:fb:a5:8f:35:72: ae:5d:d1:67:68:83:2e:09:b4:09:8b:33:8b:55:23: 76:d5:98:4c:6f:40:ca:a4:4b:70:ea:40:6e:ee:ea: 3b:d2:d2:3a:e8:51:59:5e:20:df:b6:34:1f:d4:e0: 43:67:ac:e0:5b:ad:4e:a6:e8:16:1a:8d:e2:c8:8b: 92:b3:7f:04:60:6a:44:9f:b9:9c:1e:2c:a1:d1:95: cf:e5:96:71:e8:28:73:dd:5b:54:25:f6:8d:3c:4f: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BE:73:22:BA:99:24:19:73:BD:53:AC:81:FC:22:2D:56:DC:EF:EE X509v3 Authority Key Identifier: keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d4:4a:66:93:9b:0a:6a:3b:e5:e8:e8:1d:97:34:05:62:31: 8f:f4:eb:0f:84:49:28:ff:35:a4:dc:28:59:86:5e:03:da:53: 7e:f0:b0:67:5a:5c:07:65:08:52:3f:24:c7:a5:27:97:0e:d5: 2d:01:ce:12:ee:ea:e5:8e:98:26:12:34:22:c7:20:ae:59:7e: 34:1e:0b:f3:2d:e1:a4:91:fb:5e:6a:88:71:a5:c9:9b:d2:53: b5:e2:3b:15:ac:82:e9:ff:9d:09:62:8f:63:af:ed:67:35:60: 34:b9:22:d8:62:29:31:44:45:7d:7e:45:3e:37:9d:f3:4a:ca: e4:23:f7:16:0b:c7:d9:49:ba:fc:00:db:0b:44:4c:85:4e:4f: a5:29:2a:98:fb:7c:fa:de:f2:c2:61:c4:94:b8:80:d6:de:39: b3:fa:4f:41:83:79:fe:56:ec:0a:35:76:59:d2:55:8d:3c:c0: 25:84:ab:7c:67:d6:4a:a4:2e:c7:84:fc:78:0f:c5:6f:f9:f0: 6d:b0:17:12:74:29:f8:dd:ab:53:9d:9b:bc:45:f3:2d:78:2c: 93:81:ac:e9:25:39:30:9e:50:36:46:ec:53:9a:a6:ff:c9:f1: ce:9c:cf:53:f1:04:92:2a:81:31:82:8b:f4:60:c8:fd:06:42: 0c:c5:6e:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzOTYxMTAvBgNVBAUTKDQ5RDBGNDA2OTcyQTgwNUIxRTdBOUZDMjBGQjNBOUND Qjc2NjJBQ0UwHhcNMjUwODA3MDM0MzE5WhcNMjUwODE0MDM0MzE5WjAYMRYwFAYD VQQDEw02ODk0MjBkOC1kMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA237/nKC8FosxDuL8Ui2C0Dx0ELEtM7yNs0Qta2ZQWLArt+AQH4BuBWgCckfX ur4pzTpLBqpY/2VtMY2gcjfBNFvnnJo5f5yTiUSkiYR0AUVtuhFXumB5GJ/X/6EC zRt9Jpao2GtodnZyHJvr+O63wfL8hb0wJpFeAJugCZaxThJ+wHE1wP7aJiLl9HYV mI7+MDOT+e9Ulmv2cg1KIbio+6WPNXKuXdFnaIMuCbQJizOLVSN21ZhMb0DKpEtw 6kBu7uo70tI66FFZXiDftjQf1OBDZ6zgW61OpugWGo3iyIuSs38EYGpEn7mcHiyh 0ZXP5ZZx6Chz3VtUJfaNPE9v2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA++cyK6 mSQZc71TrIH8Ii1W3O/uMB8GA1UdIwQYMBaAFEnQ9AaXKoBbHnqfwg+zqcy3ZirO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDM5Ni85NUQwREY3QUVG OUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdGc2VlcF9DRDdPcHpMZG1L czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkRDBCcGNxZ0ZzZWVwX0NEN09wekxkbUtzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDM5Ni85NUQwREY3QUVGOUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdG c2VlcF9DRDdPcHpMZG1LczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi1Epmk5sKajvl6OgdlzQFYjGP9OsPhEko/zWk3ChZhl4D2lN+8LBn WlwHZQhSPyTHpSeXDtUtAc4S7urljpgmEjQixyCuWX40HgvzLeGkkfteaohxpcmb 0lO14jsVrILp/50JYo9jr+1nNWA0uSLYYikxREV9fkU+N53zSsrkI/cWC8fZSbr8 ANsLREyFTk+lKSqY+3z63vLCYcSUuIDW3jmz+k9Bg3n+VuwKNXZZ0lWNPMAlhKt8 Z9ZKpC7HhPx4D8Vv+fBtsBcSdCn43atTnZu8RfMteCyTgazpJTkwnlA2RuxTmqb/ yfHOnM9T8QSSKoExgov0YMj9BkIMxW7d -----END CERTIFICATE-----Generated at Sat Aug 9 02:47:03 2025 by rpki-client