$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft File: usH6Gx5O5DACOyddInpdBDx_lqM.mft (raw, json) Hash identifier: /GEAVbHOSDn352d/BsJCISDFnlMcQwMtsC/ev+4zPcE= Subject key identifier: 91:83:40:67:46:FF:5E:9C:00:C5:9B:5A:18:A9:14:8F:A1:E1:97:18 Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3 Certificate issuer: /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft Manifest number: 20 Signing time: Tue 05 Aug 2025 08:34:46 +0000 Manifest this update: Tue 05 Aug 2025 08:34:46 +0000 Manifest next update: Tue 12 Aug 2025 08:34:46 +0000 Files and hashes: 1: usH6Gx5O5DACOyddInpdBDx_lqM.crl (hash: pk6YB5s9AI7s9mQUxTyOUoGSo6F5ks7sSfEFBqbN5IQ=) 2: 7D7ECB70480611F08B614210C4F9AE02.roa (hash: PHW92SRejl/mbnatTD1r3a2U+gvK6WAe5C24ZUPT5mA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3 Validity Not Before: Aug 5 08:34:46 2025 GMT Not After : Aug 12 08:34:46 2025 GMT Subject: CN=6891c226-f889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:92:00:ea:a5:44:12:1a:88:13:8e:b9:db: 9f:30:a7:35:c5:1a:cc:1e:fd:99:d3:dc:63:5b:09: 86:04:26:e0:c3:46:dc:89:f2:5f:af:65:93:9d:4c: 26:d0:ef:41:0e:31:69:fc:7b:69:80:0f:eb:bc:72: 46:8e:9e:a5:e4:01:49:8a:e4:fe:f6:39:fd:d3:ff: a5:46:88:c2:c3:43:da:b1:39:d5:3e:04:a7:6c:de: 8a:b3:af:fb:cc:e2:d7:fb:06:1d:87:79:7a:0e:e3: b6:b4:0f:22:c4:7e:d8:bf:b7:28:44:11:e5:3c:04: 8a:9a:20:eb:41:2b:28:c5:15:f0:ee:ab:fd:44:b5: 4a:f1:ff:24:6a:45:69:37:18:f1:7a:5d:8c:d4:f3: fe:da:4c:d8:1e:d1:75:65:aa:b2:30:7e:35:10:49: cc:73:68:2f:69:71:c5:11:f9:68:18:ae:63:2d:82: 3c:9b:d5:cf:ad:36:32:87:ab:2e:c1:e0:3f:25:e4: 77:e7:e6:a9:e2:49:6c:53:14:c5:80:ee:c1:4d:49: f5:e0:52:61:39:2c:b2:e5:e7:99:27:72:74:e8:55: 31:6a:3a:8b:58:a9:cc:39:3f:ab:55:50:fd:b0:70: 92:8f:ce:11:49:22:13:92:9b:fa:8b:00:a6:0c:10: 18:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:83:40:67:46:FF:5E:9C:00:C5:9B:5A:18:A9:14:8F:A1:E1:97:18 X509v3 Authority Key Identifier: keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a4:b7:bf:37:68:a6:5d:93:e7:75:a3:6c:34:08:b2:25:10: a8:16:53:3e:67:72:a3:05:35:b7:89:fc:c0:49:8d:58:b0:57: bc:00:2e:16:dc:bf:06:53:6e:f8:56:8e:56:17:65:4a:b8:8a: 29:ad:18:5d:df:38:8c:08:41:eb:2c:5b:1b:4a:1e:ff:30:ba: fc:d7:5f:1c:1b:90:0b:fb:49:24:34:73:47:fd:0c:5f:7d:4b: 0a:de:15:f7:7c:08:ce:8d:6f:83:5b:c4:ed:d2:cc:37:05:22: 3f:5b:d6:40:ca:a6:aa:d0:10:16:d4:8c:66:7b:b1:78:19:26: 9e:8c:13:cb:a6:52:73:9c:bd:e2:dc:71:c3:51:02:a4:71:4a: 6b:2a:09:7c:02:35:73:e6:4c:e4:03:85:17:d6:f5:54:b8:aa: f4:de:b4:29:65:b3:e5:63:ba:b2:dd:63:51:9d:47:d3:16:d6: 5c:f5:2c:cb:55:0e:f0:fe:10:92:70:2e:3b:5b:1f:53:11:7c: 73:84:43:42:05:50:b5:19:be:6e:9e:aa:e0:b6:c8:60:ba:8b: b3:f7:88:71:89:7a:6c:98:61:0b:9d:d4:ba:29:09:b4:d7:5b: 9a:3c:7f:32:ea:05:60:a1:ee:02:1b:ff:81:84:28:a8:ec:ca: 1a:22:fe:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoQkFDMUZBMUIxRTRFRTQzMDAyM0IyNzVEMjI3QTVEMDQz QzdGOTZBMzAeFw0yNTA4MDUwODM0NDZaFw0yNTA4MTIwODM0NDZaMBgxFjAUBgNV BAMTDTY4OTFjMjI2LWY4ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcV5IA6qVEEhqIE465258wpzXFGswe/ZnT3GNbCYYEJuDDRtyJ8l+vZZOdTCbQ 70EOMWn8e2mAD+u8ckaOnqXkAUmK5P72Of3T/6VGiMLDQ9qxOdU+BKds3oqzr/vM 4tf7Bh2HeXoO47a0DyLEfti/tyhEEeU8BIqaIOtBKyjFFfDuq/1EtUrx/yRqRWk3 GPF6XYzU8/7aTNge0XVlqrIwfjUQScxzaC9pccUR+WgYrmMtgjyb1c+tNjKHqy7B 4D8l5Hfn5qniSWxTFMWA7sFNSfXgUmE5LLLl55kncnToVTFqOotYqcw5P6tVUP2w cJKPzhFJIhOSm/qLAKYMEBg5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkYNAZ0b/ XpwAxZtaGKkUj6HhlxgwHwYDVR0jBBgwFoAUusH6Gx5O5DACOyddInpdBDx/lqMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzI0Q0FFNEE4NDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL3VzSDZHeDVPNURBQ095ZGRJbnBkQkR4X2xx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdXNINkd4NU81REFDT3lkZElucGRCRHhfbHFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzI0Q0FFNEE4NDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL3VzSDZHeDVPNURB Q095ZGRJbnBkQkR4X2xxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIOkt783aKZdk+d1o2w0CLIlEKgWUz5ncqMFNbeJ/MBJjViwV7wALhbc vwZTbvhWjlYXZUq4iimtGF3fOIwIQessWxtKHv8wuvzXXxwbkAv7SSQ0c0f9DF99 SwreFfd8CM6Nb4NbxO3SzDcFIj9b1kDKpqrQEBbUjGZ7sXgZJp6ME8umUnOcveLc ccNRAqRxSmsqCXwCNXPmTOQDhRfW9VS4qvTetClls+VjurLdY1GdR9MW1lz1LMtV DvD+EJJwLjtbH1MRfHOEQ0IFULUZvm6equC2yGC6i7P3iHGJemyYYQud1LopCbTX W5o8fzLqBWCh7gIb/4GEKKjsyhoi/pc= -----END CERTIFICATE-----Generated at Thu Aug 7 04:30:33 2025 by rpki-client