$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft File: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft (raw, json) Hash identifier: zGSR4rjc5uXn0C1qdlGxNnZTAcB8lTET5mnr2ONoJ1g= Subject key identifier: 2A:B0:95:5C:7C:DF:5E:9B:33:2A:19:0F:EB:73:6B:03:5F:97:B3:84 Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E Certificate issuer: /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Certificate serial: 0715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft Manifest number: 22C2 Signing time: Sun 10 Aug 2025 15:48:45 +0000 Manifest this update: Sun 10 Aug 2025 15:48:44 +0000 Manifest next update: Sun 17 Aug 2025 15:48:44 +0000 Files and hashes: 1: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl (hash: DZQEpVeFZkAAIrjICXQ1zYFBBMPiNuivkigucR4uoSI=) 2: CCC98C06516B11EBB8942876C4F9AE02.roa (hash: oQ+XeX3QPr5MKR/Pv82IWUhiWxAkN4R4paMHXTKKeg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AF0, serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Validity Not Before: Aug 10 15:48:44 2025 GMT Not After : Aug 17 15:48:44 2025 GMT Subject: CN=6898bf5c-c562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:b4:5e:6b:da:28:85:24:c3:92:ae:a8:40: dd:58:14:45:16:c6:1e:31:aa:d0:80:1e:4d:76:94: a6:fd:1f:4c:b6:53:37:62:88:d2:20:ba:59:6f:63: 53:48:99:3c:ed:55:2b:06:c5:82:4b:71:af:12:23: fe:d2:b3:ad:0e:e3:d1:bb:44:b7:b1:83:d8:aa:9e: 4e:d1:09:3e:9d:3e:0b:bf:5c:b9:13:c9:e4:4d:7f: 17:12:aa:06:6c:e5:20:aa:1a:2a:82:45:3c:6c:cd: 6b:42:a5:aa:d2:07:3b:98:9e:e0:75:89:4f:ae:4a: f2:9d:d6:26:1c:e2:58:ca:23:01:ac:a0:9a:d1:03: 45:92:dc:ef:4a:28:f9:fe:d7:82:96:69:f2:f2:a2: 09:46:a1:37:d3:b7:30:61:c0:0c:3e:d6:78:c7:2c: 74:3a:b6:43:39:5e:bc:c5:3d:ca:c2:3a:e6:94:23: 6e:4f:e7:1a:4f:e9:8c:c9:81:82:4a:b8:66:6e:ea: aa:7e:0c:30:2d:a2:5f:08:4f:4e:ce:93:59:04:89: 0c:ad:b4:d0:d9:d5:d5:dd:53:f1:b6:84:44:9a:c7: 70:d2:5c:60:cd:c5:55:6d:27:9b:52:7f:00:cb:82: 85:b3:0b:8c:da:b8:eb:5a:3f:54:4c:9e:8c:76:08: 5d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B0:95:5C:7C:DF:5E:9B:33:2A:19:0F:EB:73:6B:03:5F:97:B3:84 X509v3 Authority Key Identifier: keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:0b:0e:f1:b7:0e:6b:18:5d:1d:4c:bc:86:1f:63:1d:b6:a7: b5:73:be:c4:df:59:ef:c5:01:8f:f3:fd:10:7b:a6:54:18:5a: d5:f7:ef:81:46:19:b2:75:00:ab:c0:e6:84:3c:33:fe:eb:81: 29:41:54:22:13:cd:94:a3:6f:35:96:39:d1:c7:66:1e:b1:be: 2b:58:a5:cb:79:b2:4c:cc:53:a2:f3:8c:78:bc:04:94:38:8c: 5b:e7:10:de:25:24:fd:33:cb:69:e6:6f:8c:9c:71:fa:94:9f: 16:65:03:2c:1a:2e:37:71:bf:17:d4:82:31:a7:ae:b6:b1:5c: 37:58:ac:44:85:02:09:41:74:7c:c4:f5:a1:49:f6:2e:43:27: 6c:15:ba:d1:01:d4:f9:4c:cd:c4:d5:e9:91:07:14:f0:7d:44: 35:33:c9:76:cd:67:b1:b4:12:f8:e8:b3:1b:a1:87:6f:e0:e0: e5:33:25:78:39:09:8e:16:2b:6a:4b:21:6e:d7:e5:07:67:2c: 8e:94:af:82:10:54:77:46:ae:94:ac:ab:18:1d:c5:b1:3c:b9: 9d:ed:53:86:c6:30:dc:f7:df:1f:75:a9:c7:02:aa:0f:24:d4: 8b:64:0f:43:a9:c7:cf:57:f1:52:a0:09:81:ba:eb:22:d1:3a: 0c:2e:f0:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBRjAxMTAvBgNVBAUTKDUxMjYxOURFMEMxRDFCQjNFNTc3OTk0RUUwQzVGRjMw RDQ5MUNEMEUwHhcNMjUwODEwMTU0ODQ0WhcNMjUwODE3MTU0ODQ0WjAYMRYwFAYD VQQDEw02ODk4YmY1Yy1jNTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx260XmvaKIUkw5KuqEDdWBRFFsYeMarQgB5NdpSm/R9MtlM3YojSILpZb2NT SJk87VUrBsWCS3GvEiP+0rOtDuPRu0S3sYPYqp5O0Qk+nT4Lv1y5E8nkTX8XEqoG bOUgqhoqgkU8bM1rQqWq0gc7mJ7gdYlPrkryndYmHOJYyiMBrKCa0QNFktzvSij5 /teClmny8qIJRqE307cwYcAMPtZ4xyx0OrZDOV68xT3KwjrmlCNuT+caT+mMyYGC SrhmbuqqfgwwLaJfCE9OzpNZBIkMrbTQ2dXV3VPxtoREmsdw0lxgzcVVbSebUn8A y4KFswuM2rjrWj9UTJ6MdghdTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqwlVx8 316bMyoZD+tzawNfl7OEMB8GA1UdIwQYMBaAFFEmGd4MHRuz5XeZTuDF/zDUkc0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFGMC9GMTYyREE0RTlG OTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3UGxkNWxPNE1YX01OU1J6 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTWVozZ3dkRzdQbGQ1bE80TVhfTU5TUnpRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFGMC9GMTYyREE0RTlGOTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3 UGxkNWxPNE1YX01OU1J6UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmCw7xtw5rGF0dTLyGH2Mdtqe1c77E31nvxQGP8/0Qe6ZUGFrV9++B RhmydQCrwOaEPDP+64EpQVQiE82Uo281ljnRx2Yesb4rWKXLebJMzFOi84x4vASU OIxb5xDeJST9M8tp5m+MnHH6lJ8WZQMsGi43cb8X1IIxp662sVw3WKxEhQIJQXR8 xPWhSfYuQydsFbrRAdT5TM3E1emRBxTwfUQ1M8l2zWextBL46LMboYdv4ODlMyV4 OQmOFitqSyFu1+UHZyyOlK+CEFR3Rq6UrKsYHcWxPLmd7VOGxjDc998fdanHAqoP JNSLZA9DqcfPV/FSoAmBuusi0ToMLvBo -----END CERTIFICATE-----Generated at Mon Aug 11 04:08:04 2025 by rpki-client