$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json) Hash identifier: paM07kJqVkh7gLLX6o/6ItflhVYMZd9krqn2vwpb7aE= Subject key identifier: 46:48:44:81:BC:EB:56:84:97:4D:35:F6:22:D8:5D:EF:07:6F:52:4C Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft Manifest number: 0169 Signing time: Tue 05 Aug 2025 01:42:15 +0000 Manifest this update: Tue 05 Aug 2025 01:42:14 +0000 Manifest next update: Tue 12 Aug 2025 01:42:14 +0000 Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: Yi2HtJmob5/lFN0ae/Z00In/eXkupuyCqC1gAhfBEVU=) 2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: HmUyjBFHI1+/W084EHPJ3tp/TeXvZpxhICsUCVrwFxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Validity Not Before: Aug 5 01:42:14 2025 GMT Not After : Aug 12 01:42:14 2025 GMT Subject: CN=68916176-06c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7b:02:2c:ce:88:b2:fd:da:02:60:a5:2d:ac: fd:08:5e:1a:27:40:a9:df:a4:c9:81:33:2e:4f:e1: 35:be:ca:4d:9b:d0:47:9e:36:09:8a:2f:8b:ee:9f: 4a:67:de:b8:28:7d:56:e7:80:de:0f:e0:de:a6:2b: 0c:3c:23:fc:60:21:a9:e7:9a:8c:fe:92:1f:31:4c: 51:86:1e:84:ee:ea:93:8a:d4:00:af:c8:be:25:b8: ae:15:6f:54:45:39:ce:c8:a7:82:84:a1:47:3f:92: 7d:2e:34:33:ed:7e:db:1f:80:bd:ca:0e:8f:6d:8b: f7:07:49:16:10:b1:0a:2f:32:31:a3:90:b8:1a:04: cf:12:f3:dc:d9:83:a2:53:2d:b0:3a:b6:42:14:c2: 1d:11:9e:fd:61:7e:8b:d1:30:aa:8b:ab:ae:7f:5f: 43:9f:26:bd:eb:c6:f4:e2:e7:cd:b8:cf:12:0f:8d: a7:bd:e2:9d:b4:33:ca:5f:44:18:64:49:7e:10:18: 59:85:94:78:79:0a:ba:7f:f0:90:02:6d:77:63:86: ec:01:eb:f2:5b:57:70:56:06:36:03:4a:5e:be:ea: 83:4b:7b:76:19:d0:cc:db:68:25:ca:38:a9:27:00: cf:23:4d:ab:6a:5f:0b:a3:e1:c0:a0:3d:79:fd:52: 70:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:48:44:81:BC:EB:56:84:97:4D:35:F6:22:D8:5D:EF:07:6F:52:4C X509v3 Authority Key Identifier: keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:42:1a:03:58:b0:3d:0f:b1:09:02:6e:d6:8f:f3:ba:e3:4a: b7:86:5f:eb:cb:55:fe:3e:a7:25:10:87:a0:63:e1:36:e0:04: 8d:81:0e:36:38:08:27:67:7e:7b:36:3c:17:3a:f5:91:04:27: f7:b9:7e:20:a5:6b:61:7d:dc:39:82:16:94:7d:d1:83:ee:58: e3:03:f3:92:b5:06:e4:57:05:25:a8:2a:1c:9c:a5:a7:5b:85: e8:76:2a:9a:a0:d5:ba:28:fb:a5:d8:00:f5:55:6b:c3:6e:a9: 29:90:e2:5c:c6:1f:34:f7:23:3a:dd:cc:98:68:f1:00:dc:74: 9f:f8:d1:e3:eb:de:3b:20:03:ef:02:7d:7e:df:81:b8:b1:35: 69:69:16:06:47:ef:73:e7:f0:01:01:7f:c2:46:a0:74:3f:b3: d6:05:e0:8e:61:0f:86:3e:af:d6:c1:9b:a3:c2:ee:65:fd:f1: 97:f7:3f:34:f9:e9:da:65:ed:c3:29:7d:06:81:5a:10:fb:50: b7:37:ba:e6:35:4f:22:88:02:da:76:9e:07:79:67:9a:de:1e: ed:87:09:d9:11:de:94:87:db:6e:ac:94:39:19:8c:64:a0:f0: e1:c0:54:1d:5d:83:2b:76:c7:8d:73:8a:70:e1:ce:dc:a9:ec: 94:b5:c2:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw RjdDQzRGMDIwHhcNMjUwODA1MDE0MjE0WhcNMjUwODEyMDE0MjE0WjAYMRYwFAYD VQQDEw02ODkxNjE3Ni0wNmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmHsCLM6Isv3aAmClLaz9CF4aJ0Cp36TJgTMuT+E1vspNm9BHnjYJii+L7p9K Z964KH1W54DeD+DepisMPCP8YCGp55qM/pIfMUxRhh6E7uqTitQAr8i+JbiuFW9U RTnOyKeChKFHP5J9LjQz7X7bH4C9yg6PbYv3B0kWELEKLzIxo5C4GgTPEvPc2YOi Uy2wOrZCFMIdEZ79YX6L0TCqi6uuf19Dnya968b04ufNuM8SD42nveKdtDPKX0QY ZEl+EBhZhZR4eQq6f/CQAm13Y4bsAevyW1dwVgY2A0pevuqDS3t2GdDM22glyjip JwDPI02ral8Lo+HAoD15/VJwWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZIRIG8 61aEl0019iLYXe8Hb1JMMB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5 N3k5a2xCOERiOTRQZk1Ud0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVQhoDWLA9D7EJAm7Wj/O640q3hl/ry1X+PqclEIegY+E24ASNgQ42 OAgnZ357NjwXOvWRBCf3uX4gpWthfdw5ghaUfdGD7ljjA/OStQbkVwUlqCocnKWn W4XodiqaoNW6KPul2AD1VWvDbqkpkOJcxh809yM63cyYaPEA3HSf+NHj6947IAPv An1+34G4sTVpaRYGR+9z5/ABAX/CRqB0P7PWBeCOYQ+GPq/WwZujwu5l/fGX9z80 +enaZe3DKX0GgVoQ+1C3N7rmNU8iiALadp4HeWea3h7thwnZEd6Uh9turJQ5GYxk oPDhwFQdXYMrdseNc4pw4c7cqeyUtcJF -----END CERTIFICATE-----Generated at Thu Aug 7 02:05:37 2025 by rpki-client