$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json) Hash identifier: PQVFLUa4OFxt6qNXOmZ0RohAFMb6mQJbsIty9hWDREo= Subject key identifier: 4C:0C:51:B9:9A:C9:5E:8C:5B:EC:D2:8A:87:2F:1A:A5:FE:1A:C3:2C Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft Manifest number: 094F Signing time: Sun 10 Aug 2025 20:12:08 +0000 Manifest this update: Sun 10 Aug 2025 20:12:07 +0000 Manifest next update: Sun 17 Aug 2025 20:12:07 +0000 Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: Y2fjFRjr+LTDJntgw6BYqTi9JEnf0FSGZr601EiTzxc=) 2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: kT9n+KoUVrMxTcDdDdchHMpGKJgB1YHqyxZ9/EDRDrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Validity Not Before: Aug 10 20:12:07 2025 GMT Not After : Aug 17 20:12:07 2025 GMT Subject: CN=6898fd18-b0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:55:57:ca:9b:58:35:e6:b4:2a:ea:0e:e0: e6:45:20:22:99:e4:af:fa:e2:18:04:e4:29:b4:82: dc:34:6d:60:78:18:ff:da:ec:c0:a4:2f:55:b0:c1: f8:4b:26:fd:6c:e0:ed:c0:db:8f:b2:48:18:07:45: fa:97:42:7d:4a:c6:ff:53:32:a2:14:e9:9e:7b:63: 6a:70:c4:e7:e0:fd:9d:4b:0b:d8:e3:7a:1a:61:34: 1d:1d:8d:75:b5:ed:02:79:fe:b9:c5:1f:f7:df:1b: ab:6a:ac:5c:63:1e:d6:99:9d:01:56:f1:21:1e:cb: 19:ba:1c:78:b5:f0:99:44:9a:fa:20:08:56:c0:8c: b3:3e:e9:cd:1f:5a:9e:ac:d9:82:45:25:2d:90:27: 6f:67:f6:f9:3f:89:ac:09:b6:e1:05:f0:a8:d9:7a: a5:42:09:f3:7d:22:40:ad:e5:d2:68:16:83:c9:ff: 09:57:79:6b:5e:40:65:2b:c5:08:ab:97:5d:11:d4: 6b:66:02:36:f9:a5:78:f1:eb:e4:09:08:c4:9b:04: ab:9a:d6:81:c7:54:0e:2f:8b:1d:18:66:4c:32:4b: 87:77:58:b8:f0:b5:f7:94:53:a8:b6:f6:bc:4a:49: c1:71:d8:23:e1:e3:08:87:dc:21:31:a7:20:5d:a9: f4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0C:51:B9:9A:C9:5E:8C:5B:EC:D2:8A:87:2F:1A:A5:FE:1A:C3:2C X509v3 Authority Key Identifier: keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:42:d1:2a:75:53:b0:f4:85:76:57:3c:c1:32:8b:0d:f2:03: 82:02:d0:23:5b:ca:9f:af:9f:da:d8:b2:f4:58:9b:5e:9b:b4: 21:57:9e:54:c4:df:76:f6:43:a2:9e:80:4d:73:c1:26:17:58: bb:9c:a5:82:fb:09:71:d7:ab:6c:89:52:ee:ae:06:f4:88:59: 94:3d:4c:b7:e2:be:cb:e3:71:b1:e4:9a:a0:45:8a:cc:34:7c: 70:22:7e:02:f6:5f:33:6e:25:38:f2:ab:fa:3c:1a:9c:ce:33: 5e:c8:dd:e2:21:06:a0:39:83:ea:e9:8a:f8:e2:af:6f:72:f5: 3b:88:de:25:af:84:ad:81:1a:58:5b:c9:d8:31:b1:27:d7:83: 03:e9:9a:53:59:a7:63:0b:2b:2d:43:da:2f:46:e4:76:ef:87: dd:f8:00:c4:7e:66:5b:32:36:46:84:7c:6d:8a:89:3e:b8:05: a7:18:fc:79:b9:0f:55:e6:3e:1a:c2:74:ec:0a:a1:9f:fd:1d: b0:b0:53:d4:40:bf:4e:ee:84:ff:e8:ba:08:45:d3:eb:62:80: a8:1a:29:0d:0f:e5:1d:e2:24:68:26:f7:e5:fb:6f:38:65:d8: bf:99:df:b4:53:ed:23:2c:78:49:ca:f9:26:6d:f6:aa:8c:68: b4:52:1c:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4 OTA1M0Q0MzYwHhcNMjUwODEwMjAxMjA3WhcNMjUwODE3MjAxMjA3WjAYMRYwFAYD VQQDEw02ODk4ZmQxOC1iMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfxVV8qbWDXmtCrqDuDmRSAimeSv+uIYBOQptILcNG1geBj/2uzApC9VsMH4 Syb9bODtwNuPskgYB0X6l0J9Ssb/UzKiFOmee2NqcMTn4P2dSwvY43oaYTQdHY11 te0Cef65xR/33xuraqxcYx7WmZ0BVvEhHssZuhx4tfCZRJr6IAhWwIyzPunNH1qe rNmCRSUtkCdvZ/b5P4msCbbhBfCo2XqlQgnzfSJAreXSaBaDyf8JV3lrXkBlK8UI q5ddEdRrZgI2+aV48evkCQjEmwSrmtaBx1QOL4sdGGZMMkuHd1i48LX3lFOotva8 SknBcdgj4eMIh9whMacgXan0twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwMUbma yV6MW+zSiocvGqX+GsMsMB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj MU1QOEM5WVFrY1NKQlQxRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChQtEqdVOw9IV2VzzBMosN8gOCAtAjW8qfr5/a2LL0WJtem7QhV55U xN929kOinoBNc8EmF1i7nKWC+wlx16tsiVLurgb0iFmUPUy34r7L43Gx5JqgRYrM NHxwIn4C9l8zbiU48qv6PBqczjNeyN3iIQagOYPq6Yr44q9vcvU7iN4lr4StgRpY W8nYMbEn14MD6ZpTWadjCystQ9ovRuR274fd+ADEfmZbMjZGhHxtiok+uAWnGPx5 uQ9V5j4awnTsCqGf/R2wsFPUQL9O7oT/6LoIRdPrYoCoGikND+Ud4iRoJvfl+284 Zdi/md+0U+0jLHhJyvkmbfaqjGi0Uhw6 -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:41 2025 by rpki-client