$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft File: U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json) Hash identifier: 2PERhlQQeesmwyD3yTExx6X6BFTWg6e8qLAFSZYPqNE= Subject key identifier: 2E:5F:D8:1A:28:BC:7C:2B:9D:F2:03:C4:28:C8:B3:C3:6E:21:83:4E Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 Certificate issuer: /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft Manifest number: 8D Signing time: Sat 09 Aug 2025 07:03:47 +0000 Manifest this update: Sat 09 Aug 2025 07:03:46 +0000 Manifest next update: Sat 16 Aug 2025 07:03:46 +0000 Files and hashes: 1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: Od3yMd6HZvXLTBHtRlla18Yc6rumzixySfBgSUMWxXc=) 2: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (hash: R1ZRqn0ylt//iP3Dpq4PDjSTmlLC/ZvrxfTWyncyjuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Validity Not Before: Aug 9 07:03:46 2025 GMT Not After : Aug 16 07:03:46 2025 GMT Subject: CN=6896f2d3-096c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:3e:d4:e7:2e:ac:41:b5:c9:8d:f1:44:75: 7b:17:33:29:b0:10:50:56:8c:c9:7d:77:38:3a:24: 67:1e:f6:e6:a7:bf:68:7d:7a:dd:41:fe:1d:6f:df: fa:35:46:78:ba:76:e0:5f:ba:c2:8f:b9:20:fb:8a: f5:79:f1:31:8d:59:53:d0:ae:24:a1:60:46:66:23: dd:51:bd:dd:53:dc:2b:c0:10:b3:da:da:5e:aa:af: 88:0d:f1:8a:81:2e:9e:39:25:88:8d:c7:d6:12:45: 75:43:5a:1e:1b:c9:08:5b:42:95:41:87:7c:24:20: c1:b5:11:f4:5d:61:d3:81:bb:ec:da:ae:2e:a1:bf: f5:23:28:52:c0:37:31:e7:34:d0:54:02:57:71:f0: 7b:e3:c8:13:8a:99:8d:3c:4b:d6:a1:86:82:15:fa: 12:25:21:e7:bf:a8:c8:44:ac:f2:76:33:50:be:07: cf:b7:37:66:b3:a1:b8:63:ef:87:cf:09:f4:7f:73: c5:8f:db:31:fc:3d:c1:36:c0:44:9c:33:36:e9:89: 42:68:27:70:cf:6c:ec:99:e4:55:db:76:d8:dd:c0: 24:be:34:9d:89:85:81:e2:54:84:43:5e:f2:8a:82: 07:d1:54:42:3a:a6:e3:6a:df:6c:b1:e6:f7:47:2c: 29:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5F:D8:1A:28:BC:7C:2B:9D:F2:03:C4:28:C8:B3:C3:6E:21:83:4E X509v3 Authority Key Identifier: keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:cc:28:70:1b:e6:5e:9d:ca:12:ae:91:f1:87:70:51:26:21: 62:86:cf:40:bc:f8:d3:fd:42:22:3e:0f:2d:ed:36:d5:f0:3a: 32:a9:70:1f:31:e1:f2:4d:71:e9:06:19:0d:a6:eb:c8:a8:66: a5:a1:4c:3e:ba:41:98:d7:5c:20:b4:c6:8f:ad:6e:7d:87:be: 84:70:13:11:91:04:fd:29:f6:fc:8e:9e:c9:2a:bb:ef:bb:60: 51:59:e2:4b:0b:46:d1:3e:b6:5f:b1:aa:db:52:15:0f:c3:ce: fa:a9:f3:58:3c:50:0e:8c:a7:58:c9:87:a0:bb:26:66:31:a4: 4c:40:e3:e1:6c:07:8b:eb:5b:fb:37:4f:f5:0e:99:da:85:00: 36:be:81:66:be:c9:f8:e9:92:61:af:6e:2d:7b:00:7a:39:da: c8:17:a3:ba:23:04:9a:77:54:ae:2b:97:9b:7f:10:aa:ac:fa: c7:69:e3:8d:79:02:cc:c9:58:5c:72:c8:33:b2:c5:38:93:95: 03:45:50:88:1c:36:db:23:6a:1d:d7:b7:c2:13:de:56:d5:74: f8:1d:b7:9d:5b:83:34:26:f4:c5:90:64:15:92:f1:88:e6:cf: 34:58:14:2a:7a:2f:0f:25:ed:9d:7e:01:0a:04:10:7a:6e:59: b7:70:ba:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDUxMTAvBgNVBAUTKDUzNDRENkJCMzdFQTBDQzM5MUQxMjQyMDdBRDk5NUZD RDc3QjlFOTUwHhcNMjUwODA5MDcwMzQ2WhcNMjUwODE2MDcwMzQ2WjAYMRYwFAYD VQQDEw02ODk2ZjJkMy0wOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHE+1OcurEG1yY3xRHV7FzMpsBBQVozJfXc4OiRnHvbmp79ofXrdQf4db9/6 NUZ4unbgX7rCj7kg+4r1efExjVlT0K4koWBGZiPdUb3dU9wrwBCz2tpeqq+IDfGK gS6eOSWIjcfWEkV1Q1oeG8kIW0KVQYd8JCDBtRH0XWHTgbvs2q4uob/1IyhSwDcx 5zTQVAJXcfB748gTipmNPEvWoYaCFfoSJSHnv6jIRKzydjNQvgfPtzdms6G4Y++H zwn0f3PFj9sx/D3BNsBEnDM26YlCaCdwz2zsmeRV23bY3cAkvjSdiYWB4lSEQ17y ioIH0VRCOqbjat9sseb3RywphQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5f2Boo vHwrnfIDxCjIs8NuIYNOMB8GA1UdIwQYMBaAFFNE1rs36gzDkdEkIHrZlfzXe56V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFENS82NjVEQjdDNkE3 QzAxMUVGOThCQTVFMkFDNEY5QUUwMi9VMFRXdXpmcURNT1IwU1FnZXRtVl9OZDdu cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UwVFd1emZxRE1PUjBTUWdldG1WX05kN25wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODFENS82NjVEQjdDNkE3QzAxMUVGOThCQTVFMkFDNEY5QUUwMi9VMFRXdXpmcURN T1IwU1FnZXRtVl9OZDducFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhzChwG+ZencoSrpHxh3BRJiFihs9AvPjT/UIiPg8t7TbV8DoyqXAf MeHyTXHpBhkNpuvIqGaloUw+ukGY11wgtMaPrW59h76EcBMRkQT9Kfb8jp7JKrvv u2BRWeJLC0bRPrZfsarbUhUPw876qfNYPFAOjKdYyYeguyZmMaRMQOPhbAeL61v7 N0/1DpnahQA2voFmvsn46ZJhr24tewB6OdrIF6O6IwSad1SuK5ebfxCqrPrHaeON eQLMyVhccsgzssU4k5UDRVCIHDbbI2od17fCE95W1XT4HbedW4M0JvTFkGQVkvGI 5s80WBQqei8PJe2dfgEKBBB6blm3cLqR -----END CERTIFICATE-----Generated at Sat Aug 9 23:23:02 2025 by rpki-client