$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: y4hsmcbXSk/ZbMR2u5KFK5po2e3YAh+8WhO73em5Zp0= Subject key identifier: 34:91:06:81:F0:FB:EE:C2:3A:E8:5B:6E:30:6F:15:77:87:82:F7:2F Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 048E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 0487 Signing time: Sat 09 Aug 2025 00:33:08 +0000 Manifest this update: Sat 09 Aug 2025 00:33:07 +0000 Manifest next update: Sat 16 Aug 2025 00:33:07 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: x0/bQkoHMxPvaOwdhMMcy3lzEV2UltSL6lMA//TSc6U=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: P2DNiNhjlpF64BsKz4nEdQOFVD1WxrPx8iOejuhEZGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: Aug 9 00:33:07 2025 GMT Not After : Aug 16 00:33:07 2025 GMT Subject: CN=68969744-10a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:46:12:ac:5c:df:34:12:5a:29:e5:86:97: 0b:f4:ba:03:28:c5:9d:de:0f:38:46:60:02:db:f6: b4:bf:c7:86:33:99:95:51:1a:8c:bd:35:d8:28:52: 11:43:37:07:8c:79:db:87:fe:c1:fd:d2:da:41:6f: 2d:b7:92:42:dd:4c:ad:b3:20:28:8e:91:93:a4:49: 1b:30:6d:d5:be:4d:9b:9a:c8:74:c0:6d:72:0e:61: 17:e5:3d:a0:1a:81:8b:b6:c4:dc:ed:07:b5:86:c3: 31:2f:e1:9f:78:57:79:3f:53:35:21:fe:ee:ef:32: a6:fd:81:e7:97:ba:07:4c:52:76:75:5f:df:86:22: 4a:3a:7b:f0:e2:47:21:47:8b:da:6d:70:ca:a2:b5: e0:13:73:55:60:58:8d:46:7e:96:7c:be:e7:16:c4: db:90:85:55:6d:49:45:af:1a:7f:82:de:bc:56:db: 12:7b:9e:fa:4c:25:ec:f0:9b:97:fe:7b:b6:67:c1: 5e:41:61:ef:0d:b7:a5:d5:bc:a8:56:a1:e9:fa:d6: 91:93:fb:79:6e:c8:70:c5:1d:0f:21:bf:cc:5a:89: ea:8a:fc:92:39:7b:ea:1a:5d:4a:fd:24:1b:d6:d9: 5d:10:19:90:23:d0:87:0a:43:de:83:6b:85:e8:6a: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:91:06:81:F0:FB:EE:C2:3A:E8:5B:6E:30:6F:15:77:87:82:F7:2F X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:46:8b:13:dc:91:e0:42:0b:6e:8c:58:1d:6b:c6:a4:bb:6c: 97:da:8c:d5:4c:24:de:93:a8:b0:4b:84:b6:ca:fb:94:0b:03: fe:e2:bd:33:7e:b4:43:da:7f:3b:d3:9a:02:7a:b1:d1:3b:cb: 17:c4:a7:bd:4b:df:92:a5:9c:a7:ed:5e:86:3e:bb:04:9f:a8: 3f:e2:29:59:c7:18:26:3f:7c:c3:cd:64:9e:86:d8:26:7f:3e: f9:dd:9d:3e:2f:2f:f7:88:f6:7e:05:d8:67:a5:db:84:07:8e: c1:e1:b6:11:02:05:6b:2c:3c:44:92:68:90:69:3d:c3:c6:fe: 44:af:58:9e:a3:8c:8a:41:69:4a:2b:8e:46:85:a2:c7:6f:01: 59:85:53:65:01:24:80:0d:fa:9f:79:d1:3f:a1:9a:31:c1:67: 54:d6:84:c6:24:d4:ff:1f:4d:2c:62:c8:d3:d2:d7:41:17:3c: 8e:c9:9d:60:e8:6a:96:aa:d9:c9:71:44:97:ea:84:2d:0f:79: 0d:ee:1e:99:02:59:d5:d1:4b:3c:1c:6b:a8:69:84:69:b7:df: 51:68:21:c2:16:21:31:e2:a4:ef:15:6e:8d:c2:3d:d2:19:a9: ca:b8:0c:29:96:f3:de:d3:cd:51:77:86:bc:21:99:5e:98:01: 14:e7:db:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjUwODA5MDAzMzA3WhcNMjUwODE2MDAzMzA3WjAYMRYwFAYD VQQDEw02ODk2OTc0NC0xMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyZGEqxc3zQSWinlhpcL9LoDKMWd3g84RmAC2/a0v8eGM5mVURqMvTXYKFIR QzcHjHnbh/7B/dLaQW8tt5JC3UytsyAojpGTpEkbMG3Vvk2bmsh0wG1yDmEX5T2g GoGLtsTc7Qe1hsMxL+GfeFd5P1M1If7u7zKm/YHnl7oHTFJ2dV/fhiJKOnvw4kch R4vabXDKorXgE3NVYFiNRn6WfL7nFsTbkIVVbUlFrxp/gt68VtsSe576TCXs8JuX /nu2Z8FeQWHvDbel1byoVqHp+taRk/t5bshwxR0PIb/MWonqivySOXvqGl1K/SQb 1tldEBmQI9CHCkPeg2uF6GoPlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSRBoHw ++7COuhbbjBvFXeHgvcvMB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCERosT3JHgQgtujFgda8aku2yX2ozVTCTek6iwS4S2yvuUCwP+4r0z frRD2n8705oCerHRO8sXxKe9S9+SpZyn7V6GPrsEn6g/4ilZxxgmP3zDzWSehtgm fz753Z0+Ly/3iPZ+BdhnpduEB47B4bYRAgVrLDxEkmiQaT3Dxv5Er1ieo4yKQWlK K45GhaLHbwFZhVNlASSADfqfedE/oZoxwWdU1oTGJNT/H00sYsjT0tdBFzyOyZ1g 6GqWqtnJcUSX6oQtD3kN7h6ZAlnV0Us8HGuoaYRpt99RaCHCFiEx4qTvFW6Nwj3S GanKuAwplvPe081Rd4a8IZlemAEU59uM -----END CERTIFICATE-----Generated at Sun Aug 10 18:59:18 2025 by rpki-client