$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: 2jP0p12VvsJrSOQfp4QoX8YGEsh7gJsxkVumyk633g0= Subject key identifier: 90:E9:13:35:E5:67:9C:B2:8D:2B:2E:A0:CD:95:C2:2D:A4:DE:3C:45 Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: 01C2 Signing time: Tue 05 Aug 2025 03:25:31 +0000 Manifest this update: Tue 05 Aug 2025 03:25:30 +0000 Manifest next update: Tue 12 Aug 2025 03:25:30 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: 1o9hhVCaGlYlGj6dxKPDEKsC8V7SoCyed/jmroYCFJQ=) 2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: QVA6cnHl8Ur5a0kDBgQcj4pP7Ka7QThHbgUyDhuNztQ=) 3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: El263VSWEusvqzTfH9aiwLLR8nJJvv9GT054yDKZA+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: Aug 5 03:25:30 2025 GMT Not After : Aug 12 03:25:30 2025 GMT Subject: CN=689179ab-b386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:aa:d4:19:42:3c:d2:c8:48:31:3e:74:cb: 06:a9:a2:ae:f3:59:fd:9a:99:f6:d0:a0:c5:1e:49: 49:fc:82:42:57:33:b8:00:3a:97:d1:80:e9:99:e6: 44:2d:79:af:f4:a7:e4:19:58:a0:b2:63:69:b0:cc: 27:49:3f:0f:c1:0b:1c:92:0a:27:fd:dc:de:2e:58: 64:49:8a:84:81:12:78:22:e3:3b:26:6e:9f:2f:28: 9a:e6:9b:91:21:d9:c6:7c:4d:e2:84:59:e5:1b:d9: 95:11:a3:1a:52:00:2a:9c:bf:dd:27:cd:5b:7d:ad: 3b:83:21:eb:25:a1:14:2a:76:90:b4:25:b4:71:6c: 1b:7b:f9:88:98:65:58:cd:69:a6:fb:28:eb:5d:5a: 60:33:9c:4f:5a:2a:05:65:41:b0:64:92:d4:a5:96: df:e8:92:3a:01:5f:e5:9c:d6:45:e1:57:b6:3b:13: 10:fb:34:a5:16:77:54:30:27:c6:26:a2:d6:2b:e9: d1:11:af:7c:44:6c:0f:08:57:31:ab:b7:60:ea:4c: 59:6e:64:bf:31:fa:4a:bf:10:a1:4b:96:ec:98:29: b7:4d:5b:27:8a:c3:8e:60:b4:de:d4:89:c7:ca:0d: 40:ae:de:ab:83:dc:21:20:b0:8e:e1:0c:98:bf:9e: 92:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E9:13:35:E5:67:9C:B2:8D:2B:2E:A0:CD:95:C2:2D:A4:DE:3C:45 X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:88:43:69:49:c8:48:58:8b:d2:01:ad:6a:bd:c6:31:97:d7: 12:41:93:38:ca:10:cd:58:8c:e6:f4:ad:0d:bd:b6:33:d7:45: 69:a4:17:e4:45:0f:f5:f7:07:be:cc:46:c2:8a:c6:ec:7d:20: b9:a1:4e:6d:a7:3c:92:c1:26:ed:16:44:65:c9:10:ed:34:0b: 82:c2:ac:f1:5e:d9:3c:cd:03:bf:29:3f:9c:e2:8b:ba:7f:4c: 5d:a7:c1:5e:23:1f:14:06:8a:19:4f:3b:2a:8e:2e:db:63:64: b2:10:63:ff:8b:bc:c5:ee:03:bf:b3:90:44:e9:25:80:55:7c: 3d:0b:9a:4b:c1:86:60:80:8c:fb:08:5c:56:6c:36:7b:a5:6a: 15:08:bd:82:df:8d:5c:07:98:60:7d:58:ad:9c:6f:cf:99:0c: 05:57:06:4b:ea:f2:bb:62:e3:37:96:ca:3d:dc:35:5c:62:0f: 89:30:1a:08:91:d5:7c:84:2a:30:71:93:d5:66:5a:52:9f:04: 17:eb:83:0a:26:56:f5:aa:fb:b4:f3:dc:c0:b6:d8:43:bc:89: 6a:6f:c6:75:9b:c5:08:ed:03:29:ec:52:93:e0:ab:20:72:36: 88:b9:21:2c:89:8c:05:cb:3d:80:5a:85:0e:fb:49:70:8a:23: bb:55:c0:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjUwODA1MDMyNTMwWhcNMjUwODEyMDMyNTMwWjAYMRYwFAYD VQQDEw02ODkxNzlhYi1iMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEGq1BlCPNLISDE+dMsGqaKu81n9mpn20KDFHklJ/IJCVzO4ADqX0YDpmeZE LXmv9KfkGVigsmNpsMwnST8PwQsckgon/dzeLlhkSYqEgRJ4IuM7Jm6fLyia5puR IdnGfE3ihFnlG9mVEaMaUgAqnL/dJ81bfa07gyHrJaEUKnaQtCW0cWwbe/mImGVY zWmm+yjrXVpgM5xPWioFZUGwZJLUpZbf6JI6AV/lnNZF4Ve2OxMQ+zSlFndUMCfG JqLWK+nREa98RGwPCFcxq7dg6kxZbmS/MfpKvxChS5bsmCm3TVsnisOOYLTe1InH yg1Art6rg9whILCO4QyYv56SEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDpEzXl Z5yyjSsuoM2Vwi2k3jxFMB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDiENpSchIWIvSAa1qvcYxl9cSQZM4yhDNWIzm9K0NvbYz10VppBfk RQ/19we+zEbCisbsfSC5oU5tpzySwSbtFkRlyRDtNAuCwqzxXtk8zQO/KT+c4ou6 f0xdp8FeIx8UBooZTzsqji7bY2SyEGP/i7zF7gO/s5BE6SWAVXw9C5pLwYZggIz7 CFxWbDZ7pWoVCL2C341cB5hgfVitnG/PmQwFVwZL6vK7YuM3lso93DVcYg+JMBoI kdV8hCowcZPVZlpSnwQX64MKJlb1qvu089zAtthDvIlqb8Z1m8UI7QMp7FKT4Ksg cjaIuSEsiYwFyz2AWoUO+0lwiiO7VcAt -----END CERTIFICATE-----Generated at Wed Aug 6 00:44:26 2025 by rpki-client