$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft File: SXppmDQJrXDCF1ZAccz1vjTFG8c.mft (raw, json) Hash identifier: 04II7SHj9RHoCmmiX0M25UgF7FwDRhpOfihSR4xt4ZQ= Subject key identifier: 53:67:0C:40:55:74:FD:EC:8A:F1:89:84:4B:62:C8:DA:94:B8:9F:6D Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft Manifest number: 0487 Signing time: Tue 05 Aug 2025 00:33:43 +0000 Manifest this update: Tue 05 Aug 2025 00:33:43 +0000 Manifest next update: Tue 12 Aug 2025 00:33:43 +0000 Files and hashes: 1: SXppmDQJrXDCF1ZAccz1vjTFG8c.crl (hash: tIU7kIe2j8RbMGQj8w3FMB4+0v4pclwUvfb04ZsMj2M=) 2: E9237B16683211EDA8B5DD35C4F9AE02.roa (hash: m/W09ZD2DgnbOhKrF8d5SNMRuuUCLsB529DhjnozbkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C751F, serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Validity Not Before: Aug 5 00:33:43 2025 GMT Not After : Aug 12 00:33:43 2025 GMT Subject: CN=68915167-aabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:3a:bd:06:3f:e8:2a:24:d4:fa:38:a7:7c: e6:15:55:b0:98:ae:4b:1a:88:2c:b1:39:82:2d:62: 1b:db:d0:d7:47:85:c6:a8:09:ab:fb:db:7b:60:e2: 6c:98:13:8e:e5:46:9a:3c:3e:ee:c9:62:9f:d8:af: 44:42:68:c6:96:14:8e:dd:81:7c:ce:af:8e:d8:63: 74:f3:6e:79:d4:7f:f8:55:ae:01:1e:79:45:ea:ef: af:c7:2f:5c:e2:de:c0:74:a0:77:e2:72:ee:b7:3a: 5e:a0:24:e8:1e:3a:3d:11:f3:b0:ea:f7:42:26:f5: 16:2b:d0:6b:15:e4:d2:1b:cd:e3:fd:2c:60:34:6e: 6d:d6:27:89:4d:f2:dd:53:b7:62:0b:87:2b:e7:cc: 20:d1:cc:ee:b9:ff:d8:82:f5:0e:dd:81:ba:48:6f: 1d:bf:21:2a:dd:4f:da:57:d3:2e:0b:75:cb:dd:3a: 49:ac:88:88:b3:fd:02:7d:07:4b:33:d2:dc:4d:77: a7:00:72:35:eb:e5:a6:d8:3f:b4:35:c9:a7:85:6c: 27:db:47:13:de:0f:4b:f8:51:ab:d7:c8:2f:98:d7: 70:10:80:e3:07:50:4b:6f:69:88:a8:c4:2d:b5:8b: d9:2b:1c:d4:49:9f:7f:0a:38:f1:cf:64:77:2b:18: 14:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:67:0C:40:55:74:FD:EC:8A:F1:89:84:4B:62:C8:DA:94:B8:9F:6D X509v3 Authority Key Identifier: keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:15:f6:f8:66:59:aa:78:cb:7f:65:fb:7c:5e:15:a5:84:05: d7:34:12:87:4b:2d:6e:99:c9:fe:9f:69:a3:bd:9e:58:f4:07: 29:df:12:80:7a:16:c3:7a:81:8c:d3:7e:9e:27:b1:50:e9:cb: 11:f7:a8:92:01:e0:d2:3c:65:80:ff:d0:70:1a:93:5f:f7:bb: 41:51:ff:24:34:bc:a3:f2:f4:e9:1b:ae:c3:db:71:5f:fd:8b: a1:f6:3b:1c:da:22:dd:09:d8:8f:a1:c5:ff:e9:5f:64:14:0d: 46:b3:bf:fd:e4:6b:4c:dd:b6:82:59:3c:39:09:40:be:c7:48: af:cf:30:2e:88:36:78:cd:20:90:57:57:41:bd:d3:32:2f:c4: 05:75:00:12:74:58:e0:86:c2:67:47:e4:d7:e1:85:f5:20:df: 55:e8:32:77:26:4e:e9:81:7d:92:44:59:07:1b:74:8b:5f:52: 1c:32:c4:6d:ea:b2:25:c7:5b:ab:f0:50:88:97:20:e3:53:35: 80:db:4e:d3:e6:2d:15:a8:a1:e0:46:ab:67:9a:41:83:42:6f: 3a:9b:7f:0e:9c:4b:76:0a:b8:96:ee:73:b4:85:55:27:0e:07: d2:3a:3b:e4:82:90:7e:25:45:0c:fd:ee:e0:d6:f2:3f:d7:c3: db:1d:d4:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc1MUYxMTAvBgNVBAUTKDQ5N0E2OTk4MzQwOUFENzBDMjE3NTY0MDcxQ0NGNUJF MzRDNTFCQzcwHhcNMjUwODA1MDAzMzQzWhcNMjUwODEyMDAzMzQzWjAYMRYwFAYD VQQDEw02ODkxNTE2Ny1hYWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1U6vQY/6Cok1Po4p3zmFVWwmK5LGogssTmCLWIb29DXR4XGqAmr+9t7YOJs mBOO5UaaPD7uyWKf2K9EQmjGlhSO3YF8zq+O2GN082551H/4Va4BHnlF6u+vxy9c 4t7AdKB34nLutzpeoCToHjo9EfOw6vdCJvUWK9BrFeTSG83j/SxgNG5t1ieJTfLd U7diC4cr58wg0czuuf/YgvUO3YG6SG8dvyEq3U/aV9MuC3XL3TpJrIiIs/0CfQdL M9LcTXenAHI16+Wm2D+0NcmnhWwn20cT3g9L+FGr18gvmNdwEIDjB1BLb2mIqMQt tYvZKxzUSZ9/Cjjxz2R3KxgUxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNnDEBV dP3sivGJhEtiyNqUuJ9tMB8GA1UdIwQYMBaAFEl6aZg0Ca1wwhdWQHHM9b40xRvH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzUxRi8xODM5ODFEMjUx ODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJYRENGMVpBY2N6MXZqVEZH OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYcHBtRFFKclhEQ0YxWkFjY3oxdmpURkc4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzUxRi8xODM5ODFEMjUxODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJY RENGMVpBY2N6MXZqVEZHOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoFfb4ZlmqeMt/Zft8XhWlhAXXNBKHSy1umcn+n2mjvZ5Y9Acp3xKA ehbDeoGM036eJ7FQ6csR96iSAeDSPGWA/9BwGpNf97tBUf8kNLyj8vTpG67D23Ff /Yuh9jsc2iLdCdiPocX/6V9kFA1Gs7/95GtM3baCWTw5CUC+x0ivzzAuiDZ4zSCQ V1dBvdMyL8QFdQASdFjghsJnR+TX4YX1IN9V6DJ3Jk7pgX2SRFkHG3SLX1IcMsRt 6rIlx1ur8FCIlyDjUzWA207T5i0VqKHgRqtnmkGDQm86m38OnEt2CriW7nO0hVUn DgfSOjvkgpB+JUUM/e7g1vI/18PbHdRU -----END CERTIFICATE-----Generated at Wed Aug 6 05:54:42 2025 by rpki-client