$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: 6lsBF7kVwEe8UxO+CKEV3SL4Ibh+dEDxUHbkFqNS7Dg= Subject key identifier: 1F:D8:2A:6B:2F:33:67:0F:84:78:0C:9E:F5:A1:7E:EE:B1:31:EC:DE Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 02FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 02F6 Signing time: Sat 09 Aug 2025 01:50:27 +0000 Manifest this update: Sat 09 Aug 2025 01:50:27 +0000 Manifest next update: Sat 16 Aug 2025 01:50:27 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: pidt/dLjU/uCUQQJtj2sQ45gTpcjbCn2RCQlthjYi7c=) 2: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: FUZ5azqpAEZ0qmf1CYejZILVHYibj+rRrJRKN/AtVm0=) 3: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: UN/nfQHhGfzyZRq2W+uh9scaawp6d2w2Zs3dhUguHjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 767 (0x2ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: Aug 9 01:50:27 2025 GMT Not After : Aug 16 01:50:27 2025 GMT Subject: CN=6896a963-7bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:7d:46:fb:c3:b3:b0:f8:5b:76:70:b7:60: 34:f3:27:9f:34:94:83:61:3f:c6:fc:10:c1:84:6f: 82:4d:9b:c7:3c:d2:20:49:f4:45:69:51:ac:a6:ab: 8f:31:7f:c5:13:9a:7a:c1:f6:76:59:0f:f0:7c:fe: 35:27:4d:ff:f9:de:06:29:27:ed:78:68:d1:69:f2: a5:29:68:5b:92:1f:4a:ef:0b:e9:9f:82:6a:0e:2c: 79:ae:b8:e4:e8:2f:90:f8:1e:35:7f:64:89:bd:8f: b8:4a:5c:b5:6a:89:60:8d:74:0f:52:83:d5:31:ef: 70:fa:9b:2a:73:7e:44:55:1b:93:61:ee:89:d8:84: 12:52:72:3c:1d:59:d1:f5:f9:d9:ec:70:2d:47:31: 53:e6:50:04:a2:2d:ba:80:11:3f:b2:cd:1a:92:e5: db:82:78:55:f3:64:21:39:65:3a:4a:0a:31:95:5d: 2b:db:17:9b:c9:de:72:a8:0f:d9:4a:68:aa:c3:47: 27:87:2c:e1:6c:61:13:9f:8d:18:13:ea:d4:6a:00: 38:6f:61:3f:ba:4a:5c:0e:cd:1c:0a:63:ff:49:30: af:e4:54:a0:de:7a:b1:ab:7a:84:7b:9f:02:f1:a8: fd:9d:ba:be:e1:e1:b4:76:6c:48:97:2f:99:c9:8e: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D8:2A:6B:2F:33:67:0F:84:78:0C:9E:F5:A1:7E:EE:B1:31:EC:DE X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ac:84:83:98:a7:bc:85:46:f1:45:c0:29:fe:bb:41:5b:25: 92:8f:3f:04:71:94:5d:3c:30:20:9e:a5:99:ce:9d:10:2c:af: eb:06:8d:9b:85:ee:f3:27:8b:87:11:8d:72:fe:6c:79:62:80: 79:40:7e:18:97:85:51:99:db:87:b7:37:57:0c:a2:80:b9:ed: 37:7f:ae:c3:f7:1a:2f:2a:16:ae:99:86:33:8c:ad:cb:01:e9: b2:9e:46:67:d0:bf:a7:be:fe:a6:e8:40:76:f3:c8:ad:19:25: ec:a3:3b:67:5d:42:07:18:59:76:82:4c:55:9a:95:23:55:01: 6a:f2:a2:5b:55:bf:db:29:b9:02:6c:03:51:cf:bc:12:38:64: 32:61:ea:49:97:c8:e8:73:5b:81:4d:8c:57:d6:94:89:61:fc: a2:e6:73:06:27:ad:a2:8b:be:18:c4:2a:db:78:c2:9b:30:b2: 27:de:de:1e:13:b3:2e:de:98:7f:14:9f:40:92:12:a1:77:aa: bc:18:c1:17:7b:92:1d:e1:8c:36:b4:b6:f5:d7:55:db:72:77: 97:3f:21:d9:e5:67:c8:2f:00:2c:d2:8f:39:55:39:67:bb:47: 42:45:10:55:b0:ab:bc:96:61:f2:51:ee:36:ae:54:62:f4:8d: 8d:9e:ba:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjUwODA5MDE1MDI3WhcNMjUwODE2MDE1MDI3WjAYMRYwFAYD VQQDEw02ODk2YTk2My03YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMB9RvvDs7D4W3Zwt2A08yefNJSDYT/G/BDBhG+CTZvHPNIgSfRFaVGspquP MX/FE5p6wfZ2WQ/wfP41J03/+d4GKSfteGjRafKlKWhbkh9K7wvpn4JqDix5rrjk 6C+Q+B41f2SJvY+4Sly1aolgjXQPUoPVMe9w+psqc35EVRuTYe6J2IQSUnI8HVnR 9fnZ7HAtRzFT5lAEoi26gBE/ss0akuXbgnhV82QhOWU6SgoxlV0r2xebyd5yqA/Z Smiqw0cnhyzhbGETn40YE+rUagA4b2E/ukpcDs0cCmP/STCv5FSg3nqxq3qEe58C 8aj9nbq+4eG0dmxIly+ZyY5ADQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/YKmsv M2cPhHgMnvWhfu6xMezeMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9rISDmKe8hUbxRcAp/rtBWyWSjz8EcZRdPDAgnqWZzp0QLK/rBo2b he7zJ4uHEY1y/mx5YoB5QH4Yl4VRmduHtzdXDKKAue03f67D9xovKhaumYYzjK3L AemynkZn0L+nvv6m6EB288itGSXsoztnXUIHGFl2gkxVmpUjVQFq8qJbVb/bKbkC bANRz7wSOGQyYepJl8joc1uBTYxX1pSJYfyi5nMGJ62ii74YxCrbeMKbMLIn3t4e E7Mu3ph/FJ9AkhKhd6q8GMEXe5Id4Yw2tLb111XbcneXPyHZ5WfILwAs0o85VTln u0dCRRBVsKu8lmHyUe42rlRi9I2Nnrpw -----END CERTIFICATE-----Generated at Sun Aug 10 04:51:29 2025 by rpki-client