$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft File: sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json) Hash identifier: zL21Jp6eQzFFm/DYN1P1yFtPAqXDka4ELU2n0MZBzzc= Subject key identifier: F5:E2:1A:5F:93:FE:B0:AD:DA:F0:20:7B:C3:7C:56:EF:C1:EB:CB:5A Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 Certificate issuer: /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft Manifest number: 34A9 Signing time: Sun 10 Aug 2025 15:04:08 +0000 Manifest this update: Sun 10 Aug 2025 15:04:08 +0000 Manifest next update: Sun 17 Aug 2025 15:04:08 +0000 Files and hashes: 1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: 9Innvgm8YkCqRFgG5ShyGvflB8/6L1x73dtR/C+qbYQ=) 2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: t0r89bYo/YLfBIznDm5VJcksHUIZupXS77KseDePVYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Validity Not Before: Aug 10 15:04:08 2025 GMT Not After : Aug 17 15:04:08 2025 GMT Subject: CN=6898b4e8-7c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:46:d2:07:a3:95:5f:90:3e:ba:21:d3:7f: 57:27:c1:09:9a:0b:8b:3d:71:9b:f6:b9:66:fc:5c: 3f:77:e4:dd:3e:2b:e1:89:69:31:38:2c:17:d7:07: e2:0f:75:12:21:c5:29:14:2f:86:e3:8a:da:cf:fb: 04:33:c4:e8:09:88:9e:50:29:bb:dd:de:87:6b:04: a4:dc:3e:81:64:ee:53:e4:ae:12:53:6b:24:37:2d: 88:02:ba:28:06:f1:c0:7d:3b:75:d9:d1:04:fb:95: eb:34:41:01:62:82:9b:9d:09:0e:a4:3d:fe:4b:07: b2:1c:70:e7:60:6c:38:cc:0f:94:4f:27:fa:a1:02: c0:b5:72:07:d4:2f:12:a9:14:e9:47:49:a2:02:a3: 4b:6d:e9:9e:f7:90:a1:8c:1c:de:21:84:2b:cd:65: 9b:33:b2:9c:7e:e7:80:d9:4b:b7:b7:b4:12:c7:ee: 08:62:b4:71:10:13:04:28:4a:33:93:72:20:49:4d: 49:e3:51:dc:56:b4:c0:f4:b8:8a:7d:61:df:4d:b7: 60:ae:cc:f5:94:08:76:d3:48:5e:27:58:ba:a5:9b: dc:4c:3d:67:9f:40:2f:41:12:70:29:e6:c7:d0:52: f4:f4:3f:6a:71:13:f7:b9:1b:78:f5:a7:f3:8c:cd: 2f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E2:1A:5F:93:FE:B0:AD:DA:F0:20:7B:C3:7C:56:EF:C1:EB:CB:5A X509v3 Authority Key Identifier: keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:38:1e:58:ae:47:39:07:25:76:b5:b6:7b:e7:03:91:00:96: ee:4f:6e:0d:39:de:7e:84:bd:02:48:d1:1a:51:3c:ac:f4:5e: 02:0c:3c:88:1f:2d:7e:9e:c7:c3:7c:3d:5a:69:2c:4d:0d:67: 7a:eb:f7:99:e6:0b:86:06:d2:c6:22:48:a8:7f:e6:b1:e4:3d: ac:76:8b:c0:87:96:7d:2a:c7:d7:a8:67:60:5e:3a:e4:90:d1: 16:1c:82:84:9e:93:ee:22:18:c7:3b:4b:0a:4e:72:d4:18:0e: c9:dc:0d:e3:57:63:33:9b:65:35:7a:ff:27:fb:e9:79:dd:a4: 06:07:62:f4:2b:64:5e:1d:55:2e:04:64:a3:2d:f1:17:96:76: 47:c6:3b:90:76:f7:e8:f8:aa:0f:cf:02:3f:18:63:7a:ac:15: 6b:12:f3:29:f1:59:ae:a6:d5:a1:95:e5:b7:8b:a7:90:e0:18: a0:40:08:f9:c5:06:ad:d7:ca:b8:a5:e3:8d:cf:7d:c5:b1:40: 2b:6f:ff:91:14:56:78:6a:82:f8:3b:ba:3e:66:2b:39:7f:2c: 51:12:a9:21:ff:f5:d3:f2:3a:14:b3:cc:6d:50:cb:1c:ab:54: b8:89:46:ac:8e:58:ec:b6:12:d0:91:44:ad:2f:16:3e:59:2c: d1:89:33:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQTkxMTAvBgNVBAUTKEIwQjg4RUVFOTEzQjJBQThEN0I1OTUzNzE1M0VGQ0Q4 NzAwQTkxNDAwHhcNMjUwODEwMTUwNDA4WhcNMjUwODE3MTUwNDA4WjAYMRYwFAYD VQQDEw02ODk4YjRlOC03YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YFG0gejlV+QProh039XJ8EJmguLPXGb9rlm/Fw/d+TdPivhiWkxOCwX1wfi D3USIcUpFC+G44raz/sEM8ToCYieUCm73d6HawSk3D6BZO5T5K4SU2skNy2IAroo BvHAfTt12dEE+5XrNEEBYoKbnQkOpD3+SweyHHDnYGw4zA+UTyf6oQLAtXIH1C8S qRTpR0miAqNLbeme95ChjBzeIYQrzWWbM7KcfueA2Uu3t7QSx+4IYrRxEBMEKEoz k3IgSU1J41HcVrTA9LiKfWHfTbdgrsz1lAh200heJ1i6pZvcTD1nn0AvQRJwKebH 0FL09D9qcRP3uRt49afzjM0vBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXiGl+T /rCt2vAge8N8Vu/B68taMB8GA1UdIwQYMBaAFLC4ju6ROyqo17WVNxU+/NhwCpFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJBOS9ENzdGOTE0MjFE QTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0txalh0WlUzRlQ3ODJIQUtr VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMaU83cEU3S3FqWHRaVTNGVDc4MkhBS2tVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJBOS9ENzdGOTE0MjFEQTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0tx alh0WlUzRlQ3ODJIQUtrVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJOB5Yrkc5ByV2tbZ75wORAJbuT24NOd5+hL0CSNEaUTys9F4CDDyI Hy1+nsfDfD1aaSxNDWd66/eZ5guGBtLGIkiof+ax5D2sdovAh5Z9KsfXqGdgXjrk kNEWHIKEnpPuIhjHO0sKTnLUGA7J3A3jV2Mzm2U1ev8n++l53aQGB2L0K2ReHVUu BGSjLfEXlnZHxjuQdvfo+KoPzwI/GGN6rBVrEvMp8VmuptWhleW3i6eQ4BigQAj5 xQat18q4peONz33FsUArb/+RFFZ4aoL4O7o+Zis5fyxREqkh//XT8joUs8xtUMsc q1S4iUasjljsthLQkUStLxY+WSzRiTOb -----END CERTIFICATE-----Generated at Mon Aug 11 04:09:05 2025 by rpki-client