$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json) Hash identifier: bC/gUKG0JSHbbp/HIKA8XjlIwGq85I9ERlXu9HVREp8= Subject key identifier: CE:32:F5:2A:08:B4:B0:A3:D3:02:81:75:E2:EF:AE:36:3D:C9:67:5F Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft Manifest number: 0115 Signing time: Sat 09 Aug 2025 05:17:20 +0000 Manifest this update: Sat 09 Aug 2025 05:17:19 +0000 Manifest next update: Sat 16 Aug 2025 05:17:19 +0000 Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: xZvZkb1dKrxJSHWMhoZ6dKav3udelF3+WgvqPoc1gCs=) 2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: YjW6NRyoT2Yd6bOqBMqlNLXFCINZXzceER+JobJKz/s=) 3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: yJ7MqVkk1tgytYWvBl1+oFmFkyxkl54djaWZOByH5xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Validity Not Before: Aug 9 05:17:19 2025 GMT Not After : Aug 16 05:17:19 2025 GMT Subject: CN=6896d9df-a203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:ed:1e:e9:86:30:9d:bd:53:81:d1:5b:77: 1e:f6:6c:aa:ad:6b:a3:bb:c9:10:34:f9:82:54:37: dd:55:d9:19:41:ef:73:fe:b7:9e:41:92:85:3e:f1: ab:eb:bb:40:59:53:19:5f:4b:37:49:e0:f3:5d:f3: 5c:d6:36:e0:c2:f0:b7:5e:56:18:74:13:03:98:72: 25:52:4c:c6:08:e7:2a:fa:d5:08:68:5d:66:98:ec: 27:76:bb:3f:08:61:3f:fb:c1:8a:3d:0f:ce:58:3d: d0:ea:df:9d:58:84:d4:85:b8:8a:01:3a:70:e0:fd: 97:05:b7:79:a9:a3:07:0c:49:69:6f:70:d2:3f:47: 6c:34:98:2d:e3:a9:77:3e:6a:6f:85:be:6e:8b:1a: 9a:e0:6e:3c:98:2c:18:70:0a:f8:ef:5d:f5:b9:3e: 44:0c:bd:37:21:22:8e:ad:1c:f5:c9:27:af:bc:33: 4a:53:94:47:81:7e:b4:aa:13:f0:a0:84:a3:0f:1c: 55:33:97:17:47:f2:cb:55:fc:d1:00:b7:85:a5:91: 41:84:ff:3f:f4:4e:dc:cd:33:80:cf:61:eb:2a:0f: ab:67:21:d4:a5:f2:fc:3b:80:6f:34:94:41:6a:91: 6d:38:08:b3:2d:9f:f6:1e:83:34:6c:5d:1c:b7:d7: 4a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:32:F5:2A:08:B4:B0:A3:D3:02:81:75:E2:EF:AE:36:3D:C9:67:5F X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:2a:d9:6a:7c:ab:c0:5a:1f:39:57:7c:08:92:5e:f6:86:bb: e6:46:57:72:55:9b:06:2b:2b:4f:15:e2:c8:f3:89:4f:69:78: 0d:5c:f2:c7:1d:c8:b3:fc:46:7e:c4:72:92:69:e9:7a:f3:c9: cf:63:9c:02:38:26:ed:bc:e0:ec:c4:dc:3f:2a:e2:7e:16:86: e8:d2:93:ff:1a:1b:d4:8b:4d:c0:c3:22:47:a7:8f:0e:d8:dd: 8c:fc:f3:e4:ca:03:5c:ab:3b:de:42:04:19:c1:7d:42:91:15: 11:f9:a5:0c:31:36:9b:76:a6:19:bc:c1:9e:06:51:18:8c:bc: 51:7d:aa:aa:d8:1e:97:8a:de:a2:cd:6e:8b:48:b1:29:3c:a0: be:81:aa:18:99:5b:27:20:41:ac:58:a1:f0:05:d2:32:c0:2e: 51:30:af:7e:fb:22:92:5e:76:2e:2f:af:cd:87:9c:d6:b3:27: 89:5c:db:e4:92:97:4a:93:f8:a8:a0:d4:02:f0:ea:92:29:66: b9:50:d6:e6:9c:ba:80:39:9f:66:1d:cd:16:d3:af:67:ed:49: 56:07:2c:b7:02:14:5d:b6:02:f2:d2:d2:8b:e1:ed:bf:50:7a: 5d:fa:24:0a:25:1e:13:33:56:1e:f2:6f:b6:af:0b:71:3e:88: 1a:eb:9e:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEJCREEyQTUyQjUwNDhGMUE4QUFCQkY1QzI0MTcyNjAx Mjc3Q0IyRjMwHhcNMjUwODA5MDUxNzE5WhcNMjUwODE2MDUxNzE5WjAYMRYwFAYD VQQDEw02ODk2ZDlkZi1hMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaTtHumGMJ29U4HRW3ce9myqrWuju8kQNPmCVDfdVdkZQe9z/reeQZKFPvGr 67tAWVMZX0s3SeDzXfNc1jbgwvC3XlYYdBMDmHIlUkzGCOcq+tUIaF1mmOwndrs/ CGE/+8GKPQ/OWD3Q6t+dWITUhbiKATpw4P2XBbd5qaMHDElpb3DSP0dsNJgt46l3 Pmpvhb5uixqa4G48mCwYcAr47131uT5EDL03ISKOrRz1ySevvDNKU5RHgX60qhPw oISjDxxVM5cXR/LLVfzRALeFpZFBhP8/9E7czTOAz2HrKg+rZyHUpfL8O4BvNJRB apFtOAizLZ/2HoM0bF0ct9dKlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4y9SoI tLCj0wKBdeLvrjY9yWdfMB8GA1UdIwQYMBaAFLvaKlK1BI8aiqu/XCQXJgEnfLLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GMjYwMTRFOENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4cUtxNzljSkJjbUFTZDhz dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GMjYwMTRFOENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4 cUtxNzljSkJjbUFTZDhzdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoKtlqfKvAWh85V3wIkl72hrvmRldyVZsGKytPFeLI84lPaXgNXPLH Hciz/EZ+xHKSael688nPY5wCOCbtvODsxNw/KuJ+Fobo0pP/GhvUi03AwyJHp48O 2N2M/PPkygNcqzveQgQZwX1CkRUR+aUMMTabdqYZvMGeBlEYjLxRfaqq2B6Xit6i zW6LSLEpPKC+gaoYmVsnIEGsWKHwBdIywC5RMK9++yKSXnYuL6/Nh5zWsyeJXNvk kpdKk/iooNQC8OqSKWa5UNbmnLqAOZ9mHc0W069n7UlWByy3AhRdtgLy0tKL4e2/ UHpd+iQKJR4TM1Ye8m+2rwtxPoga657l -----END CERTIFICATE-----Generated at Sat Aug 9 23:16:33 2025 by rpki-client