$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft File: U3pyvmM5N4xMTSlwK-12dczMFGo.mft (raw, json) Hash identifier: n1MKyHspghsyMTqIwy+7b3LZQRTz+dXnWNbpwwiJD0Q= Subject key identifier: 00:F4:F2:0E:E5:8D:EA:FF:EB:F0:C3:C4:FA:73:ED:39:A1:54:BF:4A Authority key identifier: 53:7A:72:BE:63:39:37:8C:4C:4D:29:70:2B:ED:76:75:CC:CC:14:6A Certificate issuer: /CN=A916EB98/serialNumber=537A72BE6339378C4C4D29702BED7675CCCC146A Certificate serial: 0BA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft Manifest number: 0BA0 Signing time: Sat 02 Aug 2025 19:11:29 +0000 Manifest this update: Sat 02 Aug 2025 19:11:29 +0000 Manifest next update: Sat 09 Aug 2025 19:11:29 +0000 Files and hashes: 1: U3pyvmM5N4xMTSlwK-12dczMFGo.crl (hash: tqJZa9+cntq8JeS3Z3oKkBxMQFB+Rw9Ryu0rVsRnOMw=) 2: DD716A222ACC11EAAB36B444C4F9AE02.roa (hash: 9YLAXbZ28k13vNilzcTMcnMd0WVPI4XdwJeol/Aq30I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.crl rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2983 (0xba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB98, serialNumber=537A72BE6339378C4C4D29702BED7675CCCC146A Validity Not Before: Aug 2 19:11:29 2025 GMT Not After : Aug 9 19:11:29 2025 GMT Subject: CN=688e62e1-7750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0a:f4:1e:ef:09:92:31:df:6f:b4:18:27:59: 3c:7e:f9:19:07:37:5e:9f:17:26:02:09:87:d7:41: 3f:3e:c0:c0:84:2a:90:6d:09:27:98:63:d4:eb:19: 1a:ba:13:2e:44:af:91:08:69:3f:db:53:02:53:f5: 27:26:3b:10:7e:8b:e2:dd:91:3d:81:4a:5c:58:fb: 35:7e:b1:c9:c5:d4:f2:6e:98:fa:a4:67:35:c1:c4: 70:90:94:62:ce:e8:d1:2a:f4:36:79:94:8a:a8:77: 96:ce:b2:fb:76:01:96:06:35:95:07:90:c9:d4:27: 97:d7:50:fa:49:6c:3b:9f:7f:ad:33:d5:e5:b0:ec: 4f:df:63:f2:d9:68:cc:56:c9:4d:3c:58:88:b7:a0: 9c:4b:c8:c1:d9:08:b5:cc:93:5b:9d:f9:b7:d2:58: a3:bb:5e:8a:77:c4:9c:68:1c:10:e6:c7:51:06:b0: fd:0a:4a:22:a1:d0:bd:2a:ba:f5:fd:6e:fb:fa:32: c3:83:a5:1a:44:13:a5:8b:f3:ad:c5:bf:34:0f:16: cd:ec:15:5b:ce:5f:14:85:3f:52:92:08:08:b5:a9: 41:e3:61:fa:b0:39:6b:02:38:1c:44:97:e0:5a:b9: ba:fd:6f:8d:08:69:11:cf:bb:7a:79:19:6c:98:74: 31:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F4:F2:0E:E5:8D:EA:FF:EB:F0:C3:C4:FA:73:ED:39:A1:54:BF:4A X509v3 Authority Key Identifier: keyid:53:7A:72:BE:63:39:37:8C:4C:4D:29:70:2B:ED:76:75:CC:CC:14:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:2f:48:97:d3:2b:22:6c:ed:55:5a:88:dd:6a:da:cd:15:7a: 56:fe:4b:3b:b6:53:4f:90:2c:1a:ee:fa:ff:91:6b:30:1d:f8: d4:f5:13:b2:d3:88:86:1a:df:60:b2:ed:3f:43:72:09:1b:83: 73:2c:38:0a:df:88:6d:1a:65:ba:57:90:84:07:5f:6a:4d:e2: 40:f6:f7:9a:d5:d7:81:4e:85:34:b0:37:51:1c:5a:40:83:46: d0:60:67:ca:84:3b:40:2c:ad:3f:1b:fc:5d:c3:75:8d:79:30: 8d:95:2a:4f:92:20:38:a4:b6:d9:5e:90:ec:b1:1a:c7:dc:03: 43:06:79:cd:ae:ef:ee:ef:22:a3:ff:3c:28:ab:aa:a5:37:3b: f6:95:86:ba:a8:17:32:bb:e9:35:ea:34:8d:5e:61:b7:e3:3d: 66:61:b6:10:fe:0b:17:4d:c6:f0:a2:54:a0:6d:52:5f:29:d8: 31:06:dd:8c:8b:15:a3:47:26:01:ad:f8:00:c0:3c:46:e6:86: 49:61:31:0b:d7:69:5a:72:c4:81:b8:b2:38:af:d9:e6:c2:cc: 46:2b:d9:6e:8a:a8:19:84:3f:7f:d5:73:b2:2e:12:6b:c6:c5: 6a:c8:ee:64:53:bf:7f:eb:c0:db:e5:fa:92:9b:6c:f5:88:3d: 08:5d:e3:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTgxMTAvBgNVBAUTKDUzN0E3MkJFNjMzOTM3OEM0QzREMjk3MDJCRUQ3Njc1 Q0NDQzE0NkEwHhcNMjUwODAyMTkxMTI5WhcNMjUwODA5MTkxMTI5WjAYMRYwFAYD VQQDEw02ODhlNjJlMS03NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gr0Hu8JkjHfb7QYJ1k8fvkZBzdenxcmAgmH10E/PsDAhCqQbQknmGPU6xka uhMuRK+RCGk/21MCU/UnJjsQfovi3ZE9gUpcWPs1frHJxdTybpj6pGc1wcRwkJRi zujRKvQ2eZSKqHeWzrL7dgGWBjWVB5DJ1CeX11D6SWw7n3+tM9XlsOxP32Py2WjM VslNPFiIt6CcS8jB2Qi1zJNbnfm30liju16Kd8ScaBwQ5sdRBrD9CkoiodC9Krr1 /W77+jLDg6UaRBOli/Otxb80DxbN7BVbzl8UhT9SkggItalB42H6sDlrAjgcRJfg Wrm6/W+NCGkRz7t6eRlsmHQxqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD08g7l jer/6/DDxPpz7TmhVL9KMB8GA1UdIwQYMBaAFFN6cr5jOTeMTE0pcCvtdnXMzBRq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5OC9CMEZDMzVEQzJB Q0ExMUVBODc1NjI3NDBDNEY5QUUwMi9VM3B5dm1NNU40eE1UU2x3Sy0xMmRjek1G R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzcHl2bU01TjR4TVRTbHdLLTEyZGN6TUZHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5OC9CMEZDMzVEQzJBQ0ExMUVBODc1NjI3NDBDNEY5QUUwMi9VM3B5dm1NNU40 eE1UU2x3Sy0xMmRjek1GR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACL0iX0ysibO1VWojdatrNFXpW/ks7tlNPkCwa7vr/kWswHfjU9ROy 04iGGt9gsu0/Q3IJG4NzLDgK34htGmW6V5CEB19qTeJA9vea1deBToU0sDdRHFpA g0bQYGfKhDtALK0/G/xdw3WNeTCNlSpPkiA4pLbZXpDssRrH3ANDBnnNru/u7yKj /zwoq6qlNzv2lYa6qBcyu+k16jSNXmG34z1mYbYQ/gsXTcbwolSgbVJfKdgxBt2M ixWjRyYBrfgAwDxG5oZJYTEL12lacsSBuLI4r9nmwsxGK9luiqgZhD9/1XOyLhJr xsVqyO5kU79/68Db5fqSm2z1iD0IXeOM -----END CERTIFICATE-----Generated at Mon Aug 4 11:18:18 2025 by rpki-client