$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: ar3T8v1dR/Cc1gnJDBFdvAiJLWSUbZ6Fd5XIweQ4HTY= Subject key identifier: 2B:2A:79:A9:51:1F:BD:00:F7:7B:23:94:CD:B6:C2:18:74:7E:11:D9 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 04FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 04DF Signing time: Thu 07 Aug 2025 00:21:06 +0000 Manifest this update: Thu 07 Aug 2025 00:21:05 +0000 Manifest next update: Thu 14 Aug 2025 00:21:05 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: 8Pb5TPHnaditfMaYB5gSaL1Y0K2sl67y0h9aF25Zskc=) 2: 1BEFBED451B911F097C15C49C4F9AE02.roa (hash: ZvucB2E7NeTigUiBDA7qRL8qFkVVJvyXSrzFIulP+x8=) 3: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: 00gQlkZJ/La3W11cygPUEyOgfEz6qTJK4E6QUbIb+4w=) 4: 1CC78D4651B911F097C15C49C4F9AE02.roa (hash: CBpPhJ6pPqhVc/HJrSFukBxQwV65YTwQkZm/veGYg0U=) 5: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: StmcDPPzK2yilWPNElLi3+ESljyQBtG5nEZLldO1WuA=) 6: 1D854DF451B911F097C15C49C4F9AE02.roa (hash: xaxaySmnWqQ+K7erniFCyus+l9/HXrQPK69GxtJF7qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Aug 7 00:21:05 2025 GMT Not After : Aug 14 00:21:05 2025 GMT Subject: CN=6893f171-83e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:de:dd:8c:45:7c:1e:42:44:84:48:ee:81: 6b:02:fe:e0:e7:3c:d7:3e:79:72:54:3d:8f:95:c2: 2d:b7:84:0d:5b:52:a0:23:08:f3:f5:21:a7:89:98: 5a:da:19:e7:d1:1f:e8:6a:78:45:57:53:04:70:8e: af:e1:07:92:e7:3d:95:1a:b6:b8:68:0d:12:ab:f3: 6e:cc:29:19:36:f0:d9:10:16:62:c0:fb:96:c8:ae: 15:12:61:e6:53:e0:4e:c6:f2:f6:ae:f9:18:a9:4b: 99:5c:96:62:a7:0e:33:2d:dc:b7:90:45:bf:23:58: d3:9e:1c:e3:17:de:e5:b8:d0:e6:91:ae:18:d1:ed: 6f:f5:f0:d2:ea:02:4a:5f:f7:74:b7:50:67:0c:58: ce:09:f4:a4:9d:ab:70:2d:e0:10:8c:a4:cd:36:49: 23:f4:b8:6d:7a:61:be:17:43:7e:fa:a1:0b:32:b4: f5:aa:71:30:e3:0f:07:90:07:ec:14:69:1d:52:fa: 06:81:3d:16:43:cf:0d:a9:c3:76:44:0a:9e:c5:16: 2a:e7:64:33:1d:fb:13:d5:c5:55:68:1c:d6:03:f2: 25:15:a7:32:01:b0:7d:57:d4:63:f1:8e:95:58:c8: 9d:bb:b9:1f:29:49:1c:d5:59:50:30:5e:a1:3b:f5: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2A:79:A9:51:1F:BD:00:F7:7B:23:94:CD:B6:C2:18:74:7E:11:D9 X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d5:7a:95:4d:1f:76:45:53:1e:e0:4d:d4:57:42:dc:12:5e: 2e:8f:27:b7:b9:7d:3b:73:60:11:9e:fa:b2:32:e4:88:04:b6: 4b:1d:d5:c2:a5:73:61:ab:57:4d:bd:97:d3:5f:74:06:6e:d6: 16:ec:cd:cf:5c:ed:02:73:cd:84:95:3b:30:e2:cf:c4:a9:7d: 8c:84:7c:f2:98:5b:27:cc:fe:66:ed:8e:44:e3:cd:b9:31:5a: 45:30:bc:05:2b:98:81:bf:6a:e4:52:02:77:d6:5a:df:4a:9c: 47:be:f4:87:48:42:7c:83:0c:43:08:cb:a7:f9:e8:9e:bb:c3: 3b:17:29:07:76:41:b6:51:fd:84:a3:c9:ee:e0:b1:03:8a:d1: 28:27:2d:5a:97:3e:9d:bc:61:24:89:ed:6f:8c:ce:84:cb:c1: ab:42:2b:6f:f9:8f:f4:36:b1:32:af:2b:40:37:26:99:43:e9: 7d:17:81:a3:e2:95:72:f1:d0:20:4f:e5:12:b8:e8:ce:30:f3: b5:25:ed:a3:a1:6c:e8:72:2d:f9:65:05:ea:54:9b:43:41:b9: 2c:d5:0a:85:67:3a:8e:67:fe:b7:f5:12:41:54:31:30:84:d5: 55:d5:06:59:7d:2e:2f:25:6c:9b:9b:99:86:be:89:0d:0f:b3: 93:94:1f:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUwODA3MDAyMTA1WhcNMjUwODE0MDAyMTA1WjAYMRYwFAYD VQQDEw02ODkzZjE3MS04M2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpTe3YxFfB5CRIRI7oFrAv7g5zzXPnlyVD2PlcItt4QNW1KgIwjz9SGniZha 2hnn0R/oanhFV1MEcI6v4QeS5z2VGra4aA0Sq/NuzCkZNvDZEBZiwPuWyK4VEmHm U+BOxvL2rvkYqUuZXJZipw4zLdy3kEW/I1jTnhzjF97luNDmka4Y0e1v9fDS6gJK X/d0t1BnDFjOCfSknatwLeAQjKTNNkkj9LhtemG+F0N++qELMrT1qnEw4w8HkAfs FGkdUvoGgT0WQ88NqcN2RAqexRYq52QzHfsT1cVVaBzWA/IlFacyAbB9V9Rj8Y6V WMidu7kfKUkc1VlQMF6hO/Xq5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsqealR H70A93sjlM22whh0fhHZMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP1XqVTR92RVMe4E3UV0LcEl4ujye3uX07c2ARnvqyMuSIBLZLHdXC pXNhq1dNvZfTX3QGbtYW7M3PXO0Cc82ElTsw4s/EqX2MhHzymFsnzP5m7Y5E4825 MVpFMLwFK5iBv2rkUgJ31lrfSpxHvvSHSEJ8gwxDCMun+eieu8M7FykHdkG2Uf2E o8nu4LEDitEoJy1alz6dvGEkie1vjM6Ey8GrQitv+Y/0NrEyrytANyaZQ+l9F4Gj 4pVy8dAgT+USuOjOMPO1Je2joWzoci35ZQXqVJtDQbks1QqFZzqOZ/639RJBVDEw hNVV1QZZfS4vJWybm5mGvokND7OTlB9I -----END CERTIFICATE-----Generated at Fri Aug 8 00:37:35 2025 by rpki-client