$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft File: SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json) Hash identifier: HqFhrOWr69eRnM39Pn6gpjtLV0RR/yetKPjDRR6VQEI= Subject key identifier: 29:28:35:0E:E8:48:F3:FC:B5:AA:1D:55:B2:EB:80:B1:D7:7E:4A:02 Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 Certificate issuer: /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft Manifest number: 0152 Signing time: Wed 13 Aug 2025 04:43:44 +0000 Manifest this update: Wed 13 Aug 2025 04:43:44 +0000 Manifest next update: Wed 20 Aug 2025 04:43:44 +0000 Files and hashes: 1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: UO9M/4ztoUb6j3vFyBZ2/m1nxbyQwV6uvkQyQgASfns=) 2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: 1J6SBhKfyTeug2CS1rB/AAJ6IDeL/Dzh4xQR/iFRSiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 04:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD2E3, serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Validity Not Before: Aug 13 04:43:44 2025 GMT Not After : Aug 20 04:43:44 2025 GMT Subject: CN=689c1800-946a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:27:0e:96:33:7f:f0:aa:11:78:27:7e:0c: 58:d7:5c:d7:f7:f7:c5:aa:80:c7:f2:5c:05:03:f6: c8:16:0e:c2:f4:dd:c0:94:a9:de:a6:fd:d1:33:51: 9b:5e:d8:9a:78:92:b0:d6:e8:5c:0c:3a:30:d2:81: a9:38:e0:a4:67:ec:ae:3e:93:ce:c7:29:a4:4c:87: 30:27:88:79:3b:ce:58:37:03:58:c6:95:43:0f:c4: cd:d4:06:54:ae:01:c6:b5:46:7a:c8:4e:9f:b4:62: 4e:4b:ca:e8:16:a0:0a:82:11:c3:fe:18:b6:2d:06: e1:7f:d3:aa:b2:52:4d:01:be:d9:e7:21:f0:4d:3d: 39:b7:50:f5:3e:13:38:d2:1e:47:bb:43:ee:30:cb: d7:4c:d9:4e:04:1a:84:d9:11:ce:cd:28:ca:eb:4d: 8f:03:d0:0a:b9:5c:8a:49:99:b7:ed:99:09:02:98: fe:60:57:b3:54:0f:bc:e6:30:f7:52:88:64:8e:5d: b8:fb:31:8f:a0:4a:a1:c0:fe:30:6b:81:da:8e:77: d9:3b:5d:f8:bb:14:cf:3d:40:54:66:20:87:0f:13: 8e:ab:b8:73:a9:e5:c6:28:67:6d:2b:2b:ac:e0:5f: bc:7e:c7:79:d9:3d:e5:13:6e:0a:b7:42:96:42:4b: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:28:35:0E:E8:48:F3:FC:B5:AA:1D:55:B2:EB:80:B1:D7:7E:4A:02 X509v3 Authority Key Identifier: keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:28:83:d1:bf:8a:b6:a2:5f:28:c8:27:39:32:78:a5:b8:08: 11:61:fe:d0:8b:ad:ef:df:0f:6f:e2:18:f9:80:40:d2:9f:ab: d3:2a:b2:f7:16:78:dd:c5:81:42:29:3a:80:0c:f3:ef:ed:a2: e2:bf:a3:d3:5e:74:08:fb:a0:a1:8a:cd:94:0f:14:d4:78:f2: 74:02:2f:73:fb:fe:3a:64:31:39:5f:b4:85:7c:68:88:40:a7: ac:0e:41:6e:99:af:7e:6a:c3:77:a0:97:b6:02:c2:35:c7:28: 92:f6:00:33:34:34:fd:ae:2e:ce:0b:e2:dd:e1:8d:cc:e5:e2: 70:ee:b6:a1:91:7c:a7:5d:8f:57:74:fc:93:3e:3d:9c:8d:d2: 2a:75:97:1c:e6:19:9b:f2:06:07:ab:b6:dd:9c:61:2b:77:3a: bc:6b:06:ce:19:e6:4a:89:25:19:98:48:dd:87:21:13:f4:47: 5f:f8:17:9e:f6:68:a7:48:ca:4a:e2:64:b0:be:3c:5e:5d:fe: 14:8c:36:e1:74:f2:f6:cc:6b:64:ad:73:95:0e:31:c0:7b:d3: bd:9d:0f:7a:2b:5a:02:7c:90:67:0b:89:bd:b9:6a:37:27:61: a4:eb:80:01:91:e3:9e:fe:55:45:25:87:0d:ed:af:78:cd:e8: d6:d1:8e:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyRTMxMTAvBgNVBAUTKDQ4MTcyMEEyQzhFRTZDRUM5MjQ3Nzc2MTkzMjk5QzEw RkVCN0NBNDQwHhcNMjUwODEzMDQ0MzQ0WhcNMjUwODIwMDQ0MzQ0WjAYMRYwFAYD VQQDEw02ODljMTgwMC05NDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMEnDpYzf/CqEXgnfgxY11zX9/fFqoDH8lwFA/bIFg7C9N3AlKnepv3RM1Gb XtiaeJKw1uhcDDow0oGpOOCkZ+yuPpPOxymkTIcwJ4h5O85YNwNYxpVDD8TN1AZU rgHGtUZ6yE6ftGJOS8roFqAKghHD/hi2LQbhf9OqslJNAb7Z5yHwTT05t1D1PhM4 0h5Hu0PuMMvXTNlOBBqE2RHOzSjK602PA9AKuVyKSZm37ZkJApj+YFezVA+85jD3 Uohkjl24+zGPoEqhwP4wa4HajnfZO134uxTPPUBUZiCHDxOOq7hzqeXGKGdtKyus 4F+8fsd52T3lE24Kt0KWQkvzQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkoNQ7o SPP8taodVbLrgLHXfkoCMB8GA1UdIwQYMBaAFEgXIKLI7mzskkd3YZMpnBD+t8pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDJFMy80RjQxNzlBNDcz QzAxMUVFQjgyN0Y0NDRDNEY5QUUwMi9TQmNnb3NqdWJPeVNSM2Roa3ltY0VQNjN5 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NCY2dvc2p1Yk95U1IzZGhreW1jRVA2M3lrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDJFMy80RjQxNzlBNDczQzAxMUVFQjgyN0Y0NDRDNEY5QUUwMi9TQmNnb3NqdWJP eVNSM2Roa3ltY0VQNjN5a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDKIPRv4q2ol8oyCc5MniluAgRYf7Qi63v3w9v4hj5gEDSn6vTKrL3 FnjdxYFCKTqADPPv7aLiv6PTXnQI+6Chis2UDxTUePJ0Ai9z+/46ZDE5X7SFfGiI QKesDkFuma9+asN3oJe2AsI1xyiS9gAzNDT9ri7OC+Ld4Y3M5eJw7rahkXynXY9X dPyTPj2cjdIqdZcc5hmb8gYHq7bdnGErdzq8awbOGeZKiSUZmEjdhyET9Edf+Bee 9minSMpK4mSwvjxeXf4UjDbhdPL2zGtkrXOVDjHAe9O9nQ96K1oCfJBnC4m9uWo3 J2Gk64ABkeOe/lVFJYcN7a94zejW0Y6b -----END CERTIFICATE-----Generated at Wed Aug 13 07:39:51 2025 by rpki-client