$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json) Hash identifier: iibJsIQyp0kBtOfeH3VR5U3W9v6lrOmeAZmhutwNsiI= Subject key identifier: 34:93:E9:6E:AC:77:FA:6D:4C:0D:6B:EE:40:D0:07:ED:2A:1A:C1:DA Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43 Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43 Certificate serial: 0C13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft Manifest number: 0C01 Signing time: Sun 10 Aug 2025 18:47:55 +0000 Manifest this update: Sun 10 Aug 2025 18:47:55 +0000 Manifest next update: Sun 17 Aug 2025 18:47:55 +0000 Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: iBg1uHOQiZ/E6fPD1VEZ10eSzhKBBl77GZb1iqZeE74=) 2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: /U7W3kIJcREb7MGP1Cl2Wpd73rbaNoFSjTUo68eX8m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3091 (0xc13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43 Validity Not Before: Aug 10 18:47:55 2025 GMT Not After : Aug 17 18:47:55 2025 GMT Subject: CN=6898e95b-b7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:42:c4:af:d9:69:5c:e2:fe:16:3d:f8:4b: ad:d5:b7:87:98:b6:b3:a7:cb:fa:b5:7e:b4:fa:cf: c5:21:12:3d:a6:cb:b2:76:72:6b:c1:a8:3c:32:33: 98:3c:eb:c9:9c:5b:dc:07:35:34:06:a4:45:cb:0b: 92:83:b2:ce:9d:7a:00:61:a3:d5:8f:6a:fe:91:3e: 4b:42:2d:72:93:2d:77:34:c8:ff:c5:d9:65:75:8b: 38:48:f9:ed:cb:f8:f6:e2:97:40:45:76:e1:23:36: 0c:c8:12:dc:2e:1f:71:66:c5:cf:2e:95:db:5a:8b: fa:45:d2:fa:a4:0e:9b:b3:88:1c:1a:e1:6b:6c:62: a8:d3:43:88:7b:dc:ae:d7:b7:12:d2:9f:21:45:a5: 80:d6:c8:47:d7:39:ff:8f:e2:e8:db:27:38:33:55: ea:32:90:69:b7:14:d2:87:65:01:cb:51:ac:b8:d1: d4:9c:b1:0d:d6:5b:22:a2:b7:75:bc:5d:bd:b9:b9: 4e:3a:1b:0f:97:18:be:95:ac:94:8d:01:dc:db:9d: e5:8e:97:b3:3f:12:2d:4e:76:5e:97:fc:b4:84:f5: f6:cb:d3:54:5f:07:93:c2:67:30:df:8b:90:14:18: 6c:66:68:ce:5d:ee:6c:35:35:76:ff:ae:b1:67:b6: e4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:93:E9:6E:AC:77:FA:6D:4C:0D:6B:EE:40:D0:07:ED:2A:1A:C1:DA X509v3 Authority Key Identifier: keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:90:22:e1:d2:25:fd:56:2e:14:f8:ae:ae:e4:90:54:22:ba: 2f:87:da:e8:62:84:2a:9c:9a:57:77:f8:82:39:03:35:62:c2: c3:12:96:d3:ad:42:92:1a:ca:c2:1e:9e:59:cb:64:20:cc:9e: 9e:bc:ca:bb:95:8c:70:2d:3a:de:5e:5c:bc:0c:a3:db:bd:0c: d9:7d:2e:87:5d:e3:4f:a0:b7:c1:42:28:79:01:a9:a4:23:dc: 0c:4e:d9:07:b3:b7:e9:6b:d8:d2:e4:df:f3:7a:23:2d:41:4f: 6f:9f:45:fd:c1:02:3a:dd:4e:1a:61:a2:26:73:12:18:b5:12: 8c:0b:c8:97:ad:d7:7c:e1:bf:72:22:10:7e:83:df:3c:6d:b3: 99:4b:66:30:a0:2c:77:35:b2:69:1d:34:a7:c6:90:28:23:3d: 9e:1d:20:06:3b:f4:c0:85:65:82:82:57:02:47:c2:64:a7:0d: cc:d9:5e:54:61:55:29:83:d4:e8:07:49:45:c2:65:49:c1:fb: 32:c6:45:c3:d4:10:79:8b:8e:5b:e1:db:d0:cd:80:42:b1:54: ab:a9:50:59:86:cf:7b:f4:95:61:54:d0:ba:78:f7:9e:2e:7f: c9:dc:a5:c3:ab:58:12:d5:a5:4b:93:1e:6b:e2:67:8f:cf:fa: f5:1c:02:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMUUxMTAvBgNVBAUTKDUwREUxQzYwNzMzRUEyQjhCNzZFODQwMzYwOTE4RTFG MjVDNDZFNDMwHhcNMjUwODEwMTg0NzU1WhcNMjUwODE3MTg0NzU1WjAYMRYwFAYD VQQDEw02ODk4ZTk1Yi1iN2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1NCxK/ZaVzi/hY9+Eut1beHmLazp8v6tX60+s/FIRI9psuydnJrwag8MjOY POvJnFvcBzU0BqRFywuSg7LOnXoAYaPVj2r+kT5LQi1yky13NMj/xdlldYs4SPnt y/j24pdARXbhIzYMyBLcLh9xZsXPLpXbWov6RdL6pA6bs4gcGuFrbGKo00OIe9yu 17cS0p8hRaWA1shH1zn/j+Lo2yc4M1XqMpBptxTSh2UBy1GsuNHUnLEN1lsiord1 vF29ublOOhsPlxi+layUjQHc253ljpezPxItTnZel/y0hPX2y9NUXweTwmcw34uQ FBhsZmjOXe5sNTV2/66xZ7bkHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDST6W6s d/ptTA1r7kDQB+0qGsHaMB8GA1UdIwQYMBaAFFDeHGBzPqK4t26EA2CRjh8lxG5D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAxRS83ODVEN0VEMjFD MDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9yaTNib1FEWUpHT0h5WEVi a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VONGNZSE0tb3JpM2JvUURZSkdPSHlYRWJrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAxRS83ODVEN0VEMjFDMDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9y aTNib1FEWUpHT0h5WEVia00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHkCLh0iX9Vi4U+K6u5JBUIrovh9roYoQqnJpXd/iCOQM1YsLDEpbT rUKSGsrCHp5Zy2QgzJ6evMq7lYxwLTreXly8DKPbvQzZfS6HXeNPoLfBQih5Aamk I9wMTtkHs7fpa9jS5N/zeiMtQU9vn0X9wQI63U4aYaImcxIYtRKMC8iXrdd84b9y IhB+g988bbOZS2YwoCx3NbJpHTSnxpAoIz2eHSAGO/TAhWWCglcCR8Jkpw3M2V5U YVUpg9ToB0lFwmVJwfsyxkXD1BB5i45b4dvQzYBCsVSrqVBZhs979JVhVNC6ePee Ln/J3KXDq1gS1aVLkx5r4mePz/r1HAII -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:15 2025 by rpki-client