$ rpki-client -vvf rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft File: U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft (raw, json) Hash identifier: xCm3t1HYuHL1AucakF98rZGz2u0YNGigwe4meE3DFCg= Subject key identifier: D3:B9:99:F1:13:C0:6A:19:5A:8D:5D:9E:F1:C7:29:5F:78:8D:00:E4 Authority key identifier: 53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF Certificate issuer: /CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft Manifest number: 04C5 Signing time: Sat 09 Aug 2025 00:20:46 +0000 Manifest this update: Sat 09 Aug 2025 00:20:46 +0000 Manifest next update: Sat 16 Aug 2025 00:20:46 +0000 Files and hashes: 1: U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl (hash: JbsSlqpLN7f2M1a3cTQs5D59yIMUilzLMSiQ2ZwZugs=) 2: 1C032F5A36E711EC9581EC54C4F9AE02.roa (hash: zuaM96z3jhp+fAEf2SKv65O5x2n5mX1/wYZc1QfKJIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130837, serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF Validity Not Before: Aug 9 00:20:46 2025 GMT Not After : Aug 16 00:20:46 2025 GMT Subject: CN=6896945e-ba71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:e9:b6:db:8e:1e:20:da:16:41:57:62:9c: e1:0d:99:4e:f1:f1:dd:15:b3:ab:15:c3:c1:b7:00: 91:6f:63:8b:9e:77:e9:97:b8:4c:47:f0:d2:e8:b4: b1:70:06:c3:a7:06:10:08:7b:ab:2d:7f:25:e1:c0: 91:57:3b:00:18:f0:27:f3:3b:d3:07:3f:15:66:c3: 46:3a:f0:aa:03:73:0e:af:60:79:89:ae:8e:89:11: 34:01:10:fc:fe:b7:84:e4:e6:6e:76:43:f4:f2:a0: b3:73:5f:09:ef:0f:1e:7f:2b:43:ce:99:76:51:38: 78:a0:a7:69:4e:95:62:d6:c4:30:5e:31:17:ea:a1: e8:37:77:7c:fe:ba:18:e1:43:ad:7b:23:f8:ae:07: d9:82:72:f7:92:3a:7f:ac:b6:3f:3c:6b:63:ef:07: 4f:47:d9:18:7d:8a:85:2f:a6:80:46:dd:e1:44:a9: d2:40:9c:5e:e2:22:c8:96:21:1c:8c:57:d0:90:86: e0:84:94:36:20:ee:0b:5e:b5:5c:c2:88:03:ca:87: d2:06:5e:80:8b:f4:17:f6:15:29:1c:72:98:1f:9f: 47:b0:8b:77:3d:ee:ce:1b:bf:90:71:8a:7d:6c:6f: 9b:fd:97:69:c9:59:66:48:ed:aa:4a:65:e5:3e:9d: ce:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B9:99:F1:13:C0:6A:19:5A:8D:5D:9E:F1:C7:29:5F:78:8D:00:E4 X509v3 Authority Key Identifier: keyid:53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:44:e0:dd:f7:eb:a8:ba:f9:41:26:7d:03:46:b2:79:e5:c7: b9:b8:40:b9:d3:a1:4b:ad:82:3b:ae:59:b4:72:3e:39:04:13: 81:04:6b:7a:12:b5:4a:f8:bb:f3:d6:28:bd:15:b2:c4:71:fa: 1d:65:13:45:98:ad:c8:88:84:14:cc:a9:63:e5:d7:2e:ae:ef: b9:21:c9:e6:c1:6e:10:c4:f1:66:b6:10:7a:69:b9:3b:d8:c3: d7:20:3d:72:c7:01:9a:d9:21:3d:37:39:95:ec:ff:ff:99:f5: 22:df:14:85:ca:3c:c3:e2:90:62:75:26:b4:50:ac:6a:c7:96: 86:6c:f2:f2:d4:9b:23:05:b3:b5:c7:bf:1f:54:ca:93:64:2f: 37:0f:5d:2d:65:2b:4f:55:b3:a1:cc:d1:d4:3e:1a:15:ea:19: bd:8f:27:cd:ce:66:f0:e5:81:19:f5:fb:95:d4:19:7b:db:64: 8f:bc:72:05:01:95:43:0e:90:31:d2:f8:ff:9d:8c:81:0c:24: 40:91:7f:62:e6:ec:07:b1:26:ad:c4:93:cd:14:1c:d7:65:94: cb:86:79:c8:18:cd:09:a3:dd:a5:bc:a4:d1:92:85:e7:7a:31: 79:25:e2:56:77:cf:d0:91:77:60:45:a7:c2:84:78:2a:70:bb: 84:6c:ed:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MzcxMTAvBgNVBAUTKDUzNjhCOEM4RDY5NjNFQUQ4Mzk5MDVBNDg2RjUzQzQ0 QjA0MUE1RUYwHhcNMjUwODA5MDAyMDQ2WhcNMjUwODE2MDAyMDQ2WjAYMRYwFAYD VQQDEw02ODk2OTQ1ZS1iYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstDpttuOHiDaFkFXYpzhDZlO8fHdFbOrFcPBtwCRb2OLnnfpl7hMR/DS6LSx cAbDpwYQCHurLX8l4cCRVzsAGPAn8zvTBz8VZsNGOvCqA3MOr2B5ia6OiRE0ARD8 /reE5OZudkP08qCzc18J7w8efytDzpl2UTh4oKdpTpVi1sQwXjEX6qHoN3d8/roY 4UOteyP4rgfZgnL3kjp/rLY/PGtj7wdPR9kYfYqFL6aARt3hRKnSQJxe4iLIliEc jFfQkIbghJQ2IO4LXrVcwogDyofSBl6Ai/QX9hUpHHKYH59HsIt3Pe7OG7+QcYp9 bG+b/ZdpyVlmSO2qSmXlPp3O5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNO5mfET wGoZWo1dnvHHKV94jQDkMB8GA1UdIwQYMBaAFFNouMjWlj6tg5kFpIb1PESwQaXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgzNy9FM0Y4N0NCMjM2 RTMxMUVDQkM4Q0MyNTBDNEY5QUUwMi9VMmk0eU5hV1BxMkRtUVdraHZVOFJMQkJw ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UyaTR5TmFXUHEyRG1RV2todlU4UkxCQnBlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgzNy9FM0Y4N0NCMjM2RTMxMUVDQkM4Q0MyNTBDNEY5QUUwMi9VMmk0eU5hV1Bx MkRtUVdraHZVOFJMQkJwZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvRODd9+uouvlBJn0DRrJ55ce5uEC506FLrYI7rlm0cj45BBOBBGt6 ErVK+Lvz1ii9FbLEcfodZRNFmK3IiIQUzKlj5dcuru+5IcnmwW4QxPFmthB6abk7 2MPXID1yxwGa2SE9NzmV7P//mfUi3xSFyjzD4pBidSa0UKxqx5aGbPLy1JsjBbO1 x78fVMqTZC83D10tZStPVbOhzNHUPhoV6hm9jyfNzmbw5YEZ9fuV1Bl722SPvHIF AZVDDpAx0vj/nYyBDCRAkX9i5uwHsSatxJPNFBzXZZTLhnnIGM0Jo92lvKTRkoXn ejF5JeJWd8/QkXdgRafChHgqcLuEbO2b -----END CERTIFICATE-----Generated at Sun Aug 10 18:24:43 2025 by rpki-client