$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json) Hash identifier: U10Ruaey9HaYDnTWStLLUtPn6EbxMLiELgQQxMKU9M4= Subject key identifier: 0A:24:28:2C:6F:C3:8B:43:1E:C9:75:D5:45:59:49:A4:92:AF:7D:AA Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft Manifest number: 68 Signing time: Sat 09 Aug 2025 07:28:23 +0000 Manifest this update: Sat 09 Aug 2025 07:28:23 +0000 Manifest next update: Sat 16 Aug 2025 07:28:23 +0000 Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: q2YfwgJBpp1qjOlp7EE8usitiF7RQb5eqau7Mj6DrY4=) 2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: XLgRz6Ys+AWKVb/kmctJ9W9xNxym6vJibxlk+kHS4Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Validity Not Before: Aug 9 07:28:23 2025 GMT Not After : Aug 16 07:28:23 2025 GMT Subject: CN=6896f897-6ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:38:47:e1:35:17:8e:32:d8:59:5a:db:26: b9:38:9e:78:f0:f9:ab:16:f0:58:c2:3c:11:ff:b9: 1a:7a:c6:4d:60:a8:6b:37:c5:47:bf:fb:1e:30:d7: e7:0b:98:fb:6b:5e:82:50:36:6e:c0:af:43:92:9b: 5d:05:c5:64:6f:98:2c:ff:03:ea:91:f7:2b:b2:ad: 43:12:aa:65:1e:bf:ac:24:d3:f5:ea:a3:dc:4b:0e: da:e6:30:46:89:8e:8a:a6:2e:cc:87:21:17:ef:fd: 23:f9:57:f8:b0:5f:7b:dd:06:f2:7c:47:6d:42:23: c3:9d:0f:13:13:be:6a:46:2e:2c:3c:cd:82:ee:bc: 81:33:ed:d7:20:e3:b3:48:66:20:5f:38:55:44:92: a7:48:5c:a2:9d:d9:97:d0:9d:4f:53:af:e8:f3:9e: 2a:52:52:28:a6:d0:30:0b:5a:4a:e9:a4:94:67:63: fa:72:0e:67:91:ea:24:6f:78:b7:ad:d7:b6:00:07: 65:52:73:90:ad:ec:85:63:c3:3d:70:48:74:bf:fb: cc:c5:2b:10:3c:b5:68:83:cb:83:52:a9:17:00:8e: 14:77:ec:bb:d2:5c:53:a0:a9:ff:45:93:5f:83:ad: 1e:c6:81:fb:b2:c5:0e:17:8c:f1:ba:44:60:c6:ac: 93:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:24:28:2C:6F:C3:8B:43:1E:C9:75:D5:45:59:49:A4:92:AF:7D:AA X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:05:09:49:ae:2d:8c:cc:7d:08:cc:77:76:79:d5:55:de:16: 95:d5:4f:cf:6c:81:81:66:77:8e:8e:33:9a:37:ec:b2:40:5b: 54:69:77:1c:d2:df:f5:eb:32:6f:f5:fe:44:08:0f:72:55:75: 58:5f:00:e0:c2:85:4e:c4:89:7f:1e:13:6b:31:38:20:9a:8e: d6:1a:4a:eb:54:5a:6b:11:9d:03:b2:ad:87:87:03:1d:37:24: 20:e4:3b:3a:99:7d:36:37:19:a1:58:2f:da:65:17:9f:07:ed: 5c:d7:df:93:8c:ef:bd:bd:c4:cd:9e:ca:b4:de:d3:b4:ee:c7: 8a:7a:67:d2:bc:7c:c7:c6:76:3a:60:c0:3d:66:62:65:bc:5d: 0e:fa:f1:5d:0c:29:c9:70:ed:1e:7b:b4:bb:f6:4b:36:be:bd: ec:86:ba:cb:43:19:70:b1:5e:36:e0:04:5b:58:6b:a3:ae:a7: a6:da:6b:02:bc:7e:9d:1f:12:f1:23:d9:f8:5d:74:46:94:e7: 1f:ab:17:a4:ff:03:a9:04:6c:59:8b:28:28:d1:ce:ae:a2:bc: 3a:aa:99:1d:42:55:72:82:94:54:58:89:52:77:21:95:92:e8: ba:ac:6b:9d:c0:49:40:63:f9:a9:03:00:33:f0:4e:18:1d:13: e8:3d:90:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFGNTExMC8GA1UEBRMoNDkxMzY2NzVFN0UyMzRFN0QyRjg4NDU5OThFMkM2MkRC NDg4ODJDQTAeFw0yNTA4MDkwNzI4MjNaFw0yNTA4MTYwNzI4MjNaMBgxFjAUBgNV BAMTDTY4OTZmODk3LTZiYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4TjhH4TUXjjLYWVrbJrk4nnjw+asW8FjCPBH/uRp6xk1gqGs3xUe/+x4w1+cL mPtrXoJQNm7Ar0OSm10FxWRvmCz/A+qR9yuyrUMSqmUev6wk0/Xqo9xLDtrmMEaJ joqmLsyHIRfv/SP5V/iwX3vdBvJ8R21CI8OdDxMTvmpGLiw8zYLuvIEz7dcg47NI ZiBfOFVEkqdIXKKd2ZfQnU9Tr+jznipSUiim0DALWkrppJRnY/pyDmeR6iRveLet 17YAB2VSc5Ct7IVjwz1wSHS/+8zFKxA8tWiDy4NSqRcAjhR37LvSXFOgqf9Fk1+D rR7GgfuyxQ4XjPG6RGDGrJPzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCiQoLG/D i0MeyXXVRVlJpJKvfaowHwYDVR0jBBgwFoAUSRNmdefiNOfS+IRZmOLGLbSIgsow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUY1L0E3NTREMzgwRDZF QzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1JObWRlZmlOT2ZTLUlSWm1PTEdMYlNJZ3NvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz MUY1L0E3NTREMzgwRDZFQzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9m Uy1JUlptT0xHTGJTSWdzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKoFCUmuLYzMfQjMd3Z51VXeFpXVT89sgYFmd46OM5o37LJAW1RpdxzS 3/XrMm/1/kQID3JVdVhfAODChU7EiX8eE2sxOCCajtYaSutUWmsRnQOyrYeHAx03 JCDkOzqZfTY3GaFYL9plF58H7VzX35OM7729xM2eyrTe07Tux4p6Z9K8fMfGdjpg wD1mYmW8XQ768V0MKclw7R57tLv2Sza+veyGustDGXCxXjbgBFtYa6Oup6baawK8 fp0fEvEj2fhddEaU5x+rF6T/A6kEbFmLKCjRzq6ivDqqmR1CVXKClFRYiVJ3IZWS 6Lqsa53ASUBj+akDADPwThgdE+g9kOg= -----END CERTIFICATE-----Generated at Sun Aug 10 18:25:45 2025 by rpki-client