$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json) Hash identifier: ozlGN4rAX5aAdOhJKdLMCByhMTpMfB2i0M60ub3ooic= Subject key identifier: 00:4E:0A:F4:FD:60:7F:88:88:EE:72:FB:29:EF:84:65:66:F1:0F:15 Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Certificate serial: 34AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft Manifest number: 34AA Signing time: Fri 08 Aug 2025 15:20:27 +0000 Manifest this update: Fri 08 Aug 2025 15:20:27 +0000 Manifest next update: Fri 15 Aug 2025 15:20:27 +0000 Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: 29n7FJhsl+a3dJohyOi4HolOIRSn340Q2Xgqvdn8GDQ=) 2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: rYc9zikfT0tRDa7zasMyBZpEVFa00oL4CS7Q4S+HlQg=) 3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: 0DLMcfV/Llm+3fYXZIJn54Ysw/AzVCrvYXgQgG2YQmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Validity Not Before: Aug 8 15:20:27 2025 GMT Not After : Aug 15 15:20:27 2025 GMT Subject: CN=689615bb-c280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:84:31:35:38:f1:db:82:5a:21:d9:f3:9b: 58:42:0e:8b:93:b4:6f:02:78:b1:4d:a2:be:b4:da: a5:6d:10:f7:bb:4e:eb:4a:3b:68:11:00:8f:39:4a: 2e:74:ef:42:26:98:b0:54:f2:74:6f:20:42:58:eb: 44:5d:f9:e5:ce:fc:27:6b:1c:b3:56:f0:84:87:02: ca:80:92:ea:5e:56:e7:49:17:0d:4d:15:c3:84:bf: 76:ec:b8:ca:ca:22:d5:98:29:3e:d9:ca:05:6e:8a: 7f:ce:e2:f9:11:2b:ca:58:65:dc:02:bd:cd:d0:4c: 71:c4:d8:ae:68:92:ee:93:c5:83:72:06:1f:3b:93: 72:8b:83:da:4f:30:a0:92:51:e8:dc:19:11:47:8a: 9e:64:a9:18:c3:59:2e:e3:c4:f7:0d:1b:ad:61:f7: 44:82:1a:5f:53:85:7e:e8:ed:ba:21:08:41:2a:4d: 44:f6:5d:fb:c1:5f:40:53:67:dd:c6:13:a3:9b:e4: 64:17:dd:85:d5:7e:5c:13:97:a9:f4:07:02:f4:2b: 14:9d:4f:20:5d:26:17:17:7e:11:03:ec:d4:fd:8e: 4b:9b:d9:9c:e5:d2:62:47:71:5d:59:1b:f0:25:94: 1d:16:e2:02:76:06:fc:b4:ad:49:f0:31:cc:01:19: f3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4E:0A:F4:FD:60:7F:88:88:EE:72:FB:29:EF:84:65:66:F1:0F:15 X509v3 Authority Key Identifier: keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:a1:e4:2c:13:af:49:3e:93:e0:11:4c:97:f9:c1:fe:a0:b4: dd:43:e3:ff:75:58:f4:65:6b:8b:92:e2:cb:50:f7:d4:38:de: df:e3:c6:cd:08:21:c3:49:09:20:a6:47:84:e1:86:89:8a:77: cf:4e:09:df:25:b1:39:c2:73:1d:7c:a7:c0:ee:0f:46:1e:ea: ea:a8:61:8c:00:28:25:a8:04:3d:ab:22:a8:ef:5d:60:13:af: 3e:62:09:12:0d:37:84:93:dd:e3:bb:2b:38:5a:95:8f:40:0b: 9d:9d:71:e5:a1:0c:d8:de:e9:1f:86:c0:0e:df:b5:84:87:5b: c6:b4:f9:76:6c:81:15:8c:26:99:80:49:fa:e7:d8:8f:f2:68: 01:37:12:93:50:64:92:27:f9:e9:41:4d:59:d3:27:2e:3b:c5: a5:f0:5c:09:dd:5a:02:b1:2e:b1:ea:e6:96:35:da:a3:84:c5: f7:46:0d:bd:5e:db:f3:f7:de:c5:62:84:e1:86:96:67:99:4d: ec:dd:77:a8:1a:6c:14:07:d8:2d:aa:4d:e4:b4:fd:7d:f4:9a: f8:b8:8f:37:e5:c3:cf:c2:c4:7b:1b:7b:ed:7c:42:1d:b0:e5: c9:3f:a8:85:5f:98:5a:21:55:d7:7b:cd:be:92:2f:7b:c0:7e: b8:f1:02:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkUxMTAvBgNVBAUTKDQ5N0IxQzRFQTZEQjE1QTgzMUZCQzE3MjJBMkY2MzQ3 NDUwQ0YzNDEwHhcNMjUwODA4MTUyMDI3WhcNMjUwODE1MTUyMDI3WjAYMRYwFAYD VQQDEw02ODk2MTViYi1jMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArM6EMTU48duCWiHZ85tYQg6Lk7RvAnixTaK+tNqlbRD3u07rSjtoEQCPOUou dO9CJpiwVPJ0byBCWOtEXfnlzvwnaxyzVvCEhwLKgJLqXlbnSRcNTRXDhL927LjK yiLVmCk+2coFbop/zuL5ESvKWGXcAr3N0ExxxNiuaJLuk8WDcgYfO5Nyi4PaTzCg klHo3BkRR4qeZKkYw1ku48T3DRutYfdEghpfU4V+6O26IQhBKk1E9l37wV9AU2fd xhOjm+RkF92F1X5cE5ep9AcC9CsUnU8gXSYXF34RA+zU/Y5Lm9mc5dJiR3FdWRvw JZQdFuICdgb8tK1J8DHMARnzVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABOCvT9 YH+IiO5y+ynvhGVm8Q8VMB8GA1UdIwQYMBaAFEl7HE6m2xWoMfvBciovY0dFDPNB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2RS9ERDQ1NUNEQTFE QTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZhZ3gtOEZ5S2k5alIwVU04 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYc2NUcWJiRmFneC04RnlLaTlqUjBVTTgwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2RS9ERDQ1NUNEQTFEQTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZh Z3gtOEZ5S2k5alIwVU04MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgoeQsE69JPpPgEUyX+cH+oLTdQ+P/dVj0ZWuLkuLLUPfUON7f48bN CCHDSQkgpkeE4YaJinfPTgnfJbE5wnMdfKfA7g9GHurqqGGMACglqAQ9qyKo711g E68+YgkSDTeEk93juys4WpWPQAudnXHloQzY3ukfhsAO37WEh1vGtPl2bIEVjCaZ gEn659iP8mgBNxKTUGSSJ/npQU1Z0ycuO8Wl8FwJ3VoCsS6x6uaWNdqjhMX3Rg29 Xtvz997FYoThhpZnmU3s3XeoGmwUB9gtqk3ktP199Jr4uI835cPPwsR7G3vtfEId sOXJP6iFX5haIVXXe82+ki97wH648QIf -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:47 2025 by rpki-client