$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json) Hash identifier: Zl67MfKov4+mLxkRPfRhszDskiU7CM2TSQKx2CGYa/s= Subject key identifier: A0:32:61:05:02:95:AA:9C:50:32:56:DC:DD:BF:53:F6:39:58:95:E4 Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft Manifest number: A3 Signing time: Mon 11 Aug 2025 06:28:01 +0000 Manifest this update: Mon 11 Aug 2025 06:28:00 +0000 Manifest next update: Mon 18 Aug 2025 06:28:00 +0000 Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: 5xdppJNm62cL17tdY03tpBQY88gXIwJWn2v2e3//aEU=) 2: 35525B92845611EFB053C341C4F9AE02.roa (hash: VrKew/904a7WGaHwfTfVmRygoJsUgD+2JGEhLd8TxAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Validity Not Before: Aug 11 06:28:00 2025 GMT Not After : Aug 18 06:28:00 2025 GMT Subject: CN=68998d71-2506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b5:e2:41:22:7c:12:e1:14:31:af:5e:0e:e1: 58:4a:d2:f7:51:8c:bd:4f:58:ba:25:b9:90:e0:a1: ee:d4:cb:1b:bf:6a:a1:e7:8f:2c:22:71:b9:9e:a2: 24:d7:66:68:08:0d:e1:57:8f:8f:92:9b:e8:01:6c: e1:18:0c:f6:17:a6:86:af:2c:ad:c8:10:4c:74:a2: ab:bc:2c:82:b1:fa:b3:ca:8a:ba:b8:56:b8:72:7f: a1:47:e4:6c:9f:b5:0d:71:65:46:fd:16:1c:d8:3d: 4a:ce:66:5a:cf:ed:56:9e:7f:75:a6:05:79:ec:d2: 99:7c:33:e0:5e:9c:90:87:59:f3:1d:9a:f1:47:24: d3:b7:b4:54:3b:dc:6b:19:96:e6:f8:bf:26:af:9e: 3b:7a:a5:7e:01:56:d5:ad:98:69:c8:bf:56:4a:d8: 00:40:4a:a0:11:7b:93:7e:dc:31:35:7b:d5:c2:5e: ac:53:fe:77:ce:5b:56:f7:a4:ad:3f:8b:10:6d:e5: 68:ce:63:8d:a2:f4:b1:7d:cd:02:36:52:ca:92:b8: 24:cf:f4:2f:5b:1b:96:a0:52:d4:b5:b3:2d:ff:d5: 75:34:f3:93:1a:eb:1a:5d:6b:db:03:08:42:28:09: d3:3d:86:d5:d9:b3:5c:bc:53:83:a4:6d:78:41:88: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:32:61:05:02:95:AA:9C:50:32:56:DC:DD:BF:53:F6:39:58:95:E4 X509v3 Authority Key Identifier: keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a8:1a:39:43:de:1e:18:0f:3e:32:fa:91:04:04:34:64:93: 46:f1:c6:4f:f0:63:9c:32:18:9a:7b:6f:e2:3a:25:36:aa:2e: bf:6b:63:f9:2a:e4:bc:01:dd:19:ef:ca:34:2b:de:44:81:22: 9b:3d:f0:15:d3:d7:9c:be:e7:5a:17:da:57:b9:f2:eb:67:99: e5:b9:00:3c:78:47:64:4f:98:b9:31:27:d1:29:71:80:53:65: 8c:78:43:f0:90:3d:76:82:00:9f:ee:b6:46:f8:d8:b2:71:53: 8d:2c:4b:26:44:0f:20:19:5a:5a:1a:50:74:76:f5:4c:bf:c3: 7f:e7:67:53:1f:b2:8f:37:7a:c9:b8:1b:05:a1:12:e7:5e:1d: e9:92:b3:f7:23:ff:08:bb:07:80:4d:fb:91:f0:cb:88:2f:95: c6:fd:de:38:fb:9b:4a:25:6d:f6:bd:4b:39:f5:1f:ed:95:b3: 33:40:46:f3:76:dc:be:c2:1b:34:e3:f7:d5:fe:e6:93:3d:f7: 53:b5:5e:27:c1:3e:56:89:8f:b3:52:c7:eb:05:0b:62:b6:ef: 44:75:e3:39:1c:be:29:d5:75:b5:f6:a3:79:d1:14:1b:17:89: 39:a0:78:e1:27:69:2b:60:b7:a7:2f:f9:e5:dd:7c:89:00:a8: 25:eb:f9:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM0RkYxMTAvBgNVBAUTKDQ5NDc1QjU5NzVGMTk3OTg5NUEzQzZFNDQxODNFNEJD QTJFODM0NkYwHhcNMjUwODExMDYyODAwWhcNMjUwODE4MDYyODAwWjAYMRYwFAYD VQQDEw02ODk5OGQ3MS0yNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rXiQSJ8EuEUMa9eDuFYStL3UYy9T1i6JbmQ4KHu1Msbv2qh548sInG5nqIk 12ZoCA3hV4+PkpvoAWzhGAz2F6aGryytyBBMdKKrvCyCsfqzyoq6uFa4cn+hR+Rs n7UNcWVG/RYc2D1KzmZaz+1Wnn91pgV57NKZfDPgXpyQh1nzHZrxRyTTt7RUO9xr GZbm+L8mr547eqV+AVbVrZhpyL9WStgAQEqgEXuTftwxNXvVwl6sU/53zltW96St P4sQbeVozmONovSxfc0CNlLKkrgkz/QvWxuWoFLUtbMt/9V1NPOTGusaXWvbAwhC KAnTPYbV2bNcvFODpG14QYj5sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAyYQUC laqcUDJW3N2/U/Y5WJXkMB8GA1UdIwQYMBaAFElHW1l18ZeYlaPG5EGD5Lyi6DRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzRGRi85QzU2QkU0Mjg0 NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1aVZvOGJrUVlQa3ZLTG9O RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVZGJXWFh4bDVpVm84YmtRWVBrdktMb05HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzRGRi85QzU2QkU0Mjg0NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1 aVZvOGJrUVlQa3ZLTG9ORzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtqBo5Q94eGA8+MvqRBAQ0ZJNG8cZP8GOcMhiae2/iOiU2qi6/a2P5 KuS8Ad0Z78o0K95EgSKbPfAV09ecvudaF9pXufLrZ5nluQA8eEdkT5i5MSfRKXGA U2WMeEPwkD12ggCf7rZG+NiycVONLEsmRA8gGVpaGlB0dvVMv8N/52dTH7KPN3rJ uBsFoRLnXh3pkrP3I/8IuweATfuR8MuIL5XG/d44+5tKJW32vUs59R/tlbMzQEbz dty+whs04/fV/uaTPfdTtV4nwT5WiY+zUsfrBQtitu9EdeM5HL4p1XW19qN50RQb F4k5oHjhJ2krYLenL/nl3XyJAKgl6/ly -----END CERTIFICATE-----Generated at Wed Aug 13 02:50:34 2025 by rpki-client