$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft File: rUR6Z_B-gc0JwyLs0QrZQWvESys.mft (raw, json) Hash identifier: +QdzG/rIEVDMkx9bCbv5WfhFMd862APv11yF1mF/Jho= Subject key identifier: 05:62:47:B2:52:CF:D8:36:CB:C1:2D:1F:76:76:DB:3A:FC:14:5E:AF Authority key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B Certificate issuer: /CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft Manifest number: 0423 Signing time: Mon 11 Aug 2025 00:04:32 +0000 Manifest this update: Mon 11 Aug 2025 00:04:31 +0000 Manifest next update: Mon 18 Aug 2025 00:04:31 +0000 Files and hashes: 1: rUR6Z_B-gc0JwyLs0QrZQWvESys.crl (hash: n3VQT+gqlWC6FiT0woBGKE3h6HgCge/J/e7l3Dy+ugg=) 2: 09B2D8EC704C11ED97935E7DC4F9AE02.roa (hash: /8IJZqUqWTlleISqmqBCzCx51/D+1Ajxq0hCjjaBFnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6, serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B Validity Not Before: Aug 11 00:04:31 2025 GMT Not After : Aug 18 00:04:31 2025 GMT Subject: CN=6899338f-0c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:67:e1:92:d6:a1:e7:11:88:12:aa:6e:60: e1:a7:42:27:de:14:8d:93:37:6a:6d:66:1e:91:a3: 7e:6b:53:f9:41:e2:ec:a8:88:f9:40:4d:dc:b0:12: 35:e6:28:eb:3e:93:d7:d9:06:55:1f:9e:73:1f:06: 47:3a:0c:44:85:8f:f9:2e:9c:2d:ba:db:c4:63:07: 8d:6e:c3:e7:eb:4d:38:c8:05:af:76:8b:a6:3b:6e: d8:ed:c0:91:b5:ed:da:5d:15:5e:21:9b:35:41:26: 92:a7:5e:5a:95:1f:f1:4a:81:6e:8c:35:fa:a3:96: b1:24:b3:31:3f:ab:f4:e2:6c:15:fa:af:4e:23:e1: e1:91:34:19:b2:5f:4e:eb:4e:1b:74:84:ed:99:df: 50:1d:cf:20:f2:fc:50:28:ef:6a:31:21:60:f2:6e: 66:0a:6d:8f:43:e5:50:c6:71:6b:86:44:e4:82:32: d3:31:9c:13:66:5c:c9:9b:7c:fc:2f:e0:0d:2d:d7: 6a:74:7c:17:2e:d1:b4:9d:5c:63:6e:27:2f:8c:49: 1e:bb:d8:44:60:0f:28:3c:55:49:2a:ff:06:96:f5: 3f:87:85:3b:e7:68:ff:df:e1:70:02:1d:88:f8:e4: 1d:29:8e:56:0d:84:57:17:73:91:3f:04:a7:83:6c: 38:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:62:47:B2:52:CF:D8:36:CB:C1:2D:1F:76:76:DB:3A:FC:14:5E:AF X509v3 Authority Key Identifier: keyid:AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:1a:66:4b:5b:f2:3a:39:47:c6:ce:7c:7c:42:4d:de:2a:7a: 1d:77:e6:82:f0:0e:31:f2:4f:29:e8:5a:96:9e:4f:91:8e:d2: b8:15:3c:97:21:2a:2e:c6:aa:32:b2:8b:05:eb:8e:ce:19:3a: 1f:69:58:02:60:4f:fe:a5:20:46:38:33:92:be:41:6c:17:89: d8:e2:44:0e:32:65:a2:92:9d:37:dc:8b:a2:db:79:8c:90:99: a5:91:30:9d:f7:73:2e:3e:26:0b:29:78:de:2e:a8:09:2d:59: 57:92:78:b7:0f:ca:a5:e0:21:f9:3c:1c:f2:fe:99:02:3d:0f: 1d:36:86:44:30:14:8c:ea:c0:8f:10:73:79:aa:eb:84:8d:6e: 32:b5:6d:9f:97:47:a2:14:83:01:6f:e3:65:9c:b6:af:76:5b: 46:bd:95:d7:05:89:9d:5f:01:c4:fc:f1:cc:85:82:f9:b2:b5: c8:22:50:3e:5e:04:94:e7:27:45:e0:71:ae:1f:29:7b:87:22: 2b:cc:67:cc:10:7c:78:03:e6:28:11:bd:f1:0c:e6:45:12:4c: e0:e9:da:b8:7a:71:3a:01:04:64:78:5a:8a:19:a8:c8:ba:cb: a9:a5:f3:b8:fd:ca:5c:ec:42:04:52:7a:0e:25:23:cb:7a:8f: 15:f4:5d:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKEFENDQ3QTY3RjA3RTgxQ0QwOUMzMjJFQ0QxMEFEOTQx NkJDNDRCMkIwHhcNMjUwODExMDAwNDMxWhcNMjUwODE4MDAwNDMxWjAYMRYwFAYD VQQDEw02ODk5MzM4Zi0wYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu1n4ZLWoecRiBKqbmDhp0In3hSNkzdqbWYekaN+a1P5QeLsqIj5QE3csBI1 5ijrPpPX2QZVH55zHwZHOgxEhY/5LpwtutvEYweNbsPn6004yAWvdoumO27Y7cCR te3aXRVeIZs1QSaSp15alR/xSoFujDX6o5axJLMxP6v04mwV+q9OI+HhkTQZsl9O 604bdITtmd9QHc8g8vxQKO9qMSFg8m5mCm2PQ+VQxnFrhkTkgjLTMZwTZlzJm3z8 L+ANLddqdHwXLtG0nVxjbicvjEkeu9hEYA8oPFVJKv8GlvU/h4U752j/3+FwAh2I +OQdKY5WDYRXF3ORPwSng2w4hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAViR7JS z9g2y8EtH3Z22zr8FF6vMB8GA1UdIwQYMBaAFK1EemfwfoHNCcMi7NEK2UFrxEsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi85QzBFRjgzQTc0 RUMxMUVDOTNGODFBMzNDNEY5QUUwMi9yVVI2Wl9CLWdjMEp3eUxzMFFyWlFXdkVT eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JVUjZaX0ItZ2MwSnd5THMwUXJaUVd2RVN5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi85QzBFRjgzQTc0RUMxMUVDOTNGODFBMzNDNEY5QUUwMi9yVVI2Wl9CLWdj MEp3eUxzMFFyWlFXdkVTeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIGmZLW/I6OUfGznx8Qk3eKnodd+aC8A4x8k8p6FqWnk+RjtK4FTyX ISouxqoysosF647OGTofaVgCYE/+pSBGODOSvkFsF4nY4kQOMmWikp033Iui23mM kJmlkTCd93MuPiYLKXjeLqgJLVlXkni3D8ql4CH5PBzy/pkCPQ8dNoZEMBSM6sCP EHN5quuEjW4ytW2fl0eiFIMBb+NlnLavdltGvZXXBYmdXwHE/PHMhYL5srXIIlA+ XgSU5ydF4HGuHyl7hyIrzGfMEHx4A+YoEb3xDOZFEkzg6dq4enE6AQRkeFqKGajI usuppfO4/cpc7EIEUnoOJSPLeo8V9F3l -----END CERTIFICATE-----Generated at Mon Aug 11 06:15:50 2025 by rpki-client