$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: mqC94ZspI1fX23MHNxSm73DLh4efGqfocXYjge3+kDM= Subject key identifier: AE:AB:CF:D7:4F:00:05:C1:21:E6:32:7D:AC:27:59:46:56:E2:58:1F Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 065A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 0653 Signing time: Wed 06 Aug 2025 22:59:22 +0000 Manifest this update: Wed 06 Aug 2025 22:59:21 +0000 Manifest next update: Wed 13 Aug 2025 22:59:21 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: BsbMQ4dnW4eAFE4NJVucu4mSci8/zOTc12EoAKOKJvU=) 2: 1B4DA20CD46711ECA1A27035C4F9AE02.roa (hash: ztzKFXpjSxYM8wd4nThJ1BsK2ipsW271bSfHzk4YREM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1626 (0x65a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Aug 6 22:59:21 2025 GMT Not After : Aug 13 22:59:21 2025 GMT Subject: CN=6893de4a-69df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e8:74:24:4d:2e:76:b2:5f:e7:84:50:d4:1a: eb:4d:fc:e5:d5:6b:f8:eb:3a:aa:26:b3:ec:d2:f1: c4:8f:d2:d0:cb:da:67:59:1d:09:26:d6:67:b3:95: b4:d4:19:3d:39:aa:ca:c2:8a:0b:2d:d4:0b:2d:f4: eb:ec:f7:91:23:2c:6b:a4:39:3b:14:63:40:b9:ec: 9a:29:5d:6c:10:a3:b5:95:88:96:84:7c:d6:04:60: 52:c3:e3:15:2a:df:91:6a:dd:c3:08:04:9d:48:ec: 7c:1d:96:9d:3e:dc:46:4b:be:10:26:30:f3:09:fd: f5:dc:99:22:ee:73:93:be:4b:98:e3:2e:02:e4:ee: ca:12:e9:d6:4a:6b:92:52:16:84:ed:30:31:30:c3: bf:6e:85:09:24:28:c9:a6:f5:4a:d8:30:d8:1a:e6: 10:91:55:50:7d:a4:3a:e5:ab:ba:c7:8d:1e:b3:5c: 67:ac:9e:de:d1:02:3a:8d:d7:4a:45:8f:84:f7:11: 06:6b:53:25:d5:9c:3d:4a:22:fb:5a:bd:94:f5:e9: 55:fe:de:f5:34:09:af:cd:3b:c0:b1:21:93:88:97: 91:8f:7a:03:c1:e7:07:bd:2b:ff:8f:e2:7e:ac:67: 7b:f9:91:fd:3b:15:8c:ee:97:da:7b:fd:66:50:ae: 59:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AB:CF:D7:4F:00:05:C1:21:E6:32:7D:AC:27:59:46:56:E2:58:1F X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:06:22:1b:54:bd:c1:ab:aa:25:77:ce:0f:9f:56:2a:94:a0: a6:5c:18:88:98:28:4b:36:89:4e:ac:05:67:17:4d:49:71:b8: 9a:e3:4e:f1:e4:09:bc:74:c0:4a:b6:31:39:6e:04:c9:8c:c6: 4f:1f:a0:be:bd:08:b7:14:1c:68:fe:db:b9:f3:43:1e:7a:d1: 37:cb:ab:09:94:58:45:8f:88:10:8a:6c:94:ee:cd:2e:a7:f3: 35:d3:f8:8c:f2:5a:85:99:0b:12:24:dd:eb:79:1a:05:b5:95: 87:6a:e8:d6:ef:8c:bc:37:f2:c3:5a:51:e9:f6:99:6c:1c:51: 20:5a:e9:09:75:0b:ad:f2:77:1f:e8:87:64:5f:aa:53:64:7b: 8f:f7:7c:75:0d:33:e8:3c:68:fb:4f:48:59:6a:ff:3a:9a:c1: f6:91:c4:a2:27:f0:cc:16:6d:c4:40:ef:54:69:51:8b:59:6d: 78:07:8e:6e:f1:0e:49:a9:de:1e:ed:17:1c:8c:b3:07:4c:b0: e6:7d:7d:51:61:5f:d3:d8:62:6e:7b:20:0d:b0:fb:3d:58:0b: 0d:4e:06:86:05:34:54:75:b6:44:e8:62:be:f4:2e:22:c3:6e: f7:10:eb:6a:1c:16:52:4a:96:53:c7:da:3d:47:56:fa:62:62: 31:b1:80:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjUwODA2MjI1OTIxWhcNMjUwODEzMjI1OTIxWjAYMRYwFAYD VQQDEw02ODkzZGU0YS02OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Oh0JE0udrJf54RQ1BrrTfzl1Wv46zqqJrPs0vHEj9LQy9pnWR0JJtZns5W0 1Bk9OarKwooLLdQLLfTr7PeRIyxrpDk7FGNAueyaKV1sEKO1lYiWhHzWBGBSw+MV Kt+Rat3DCASdSOx8HZadPtxGS74QJjDzCf313Jki7nOTvkuY4y4C5O7KEunWSmuS UhaE7TAxMMO/boUJJCjJpvVK2DDYGuYQkVVQfaQ65au6x40es1xnrJ7e0QI6jddK RY+E9xEGa1Ml1Zw9SiL7Wr2U9elV/t71NAmvzTvAsSGTiJeRj3oDwecHvSv/j+J+ rGd7+ZH9OxWM7pfae/1mUK5Z3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6rz9dP AAXBIeYyfawnWUZW4lgfMB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApBiIbVL3Bq6old84Pn1YqlKCmXBiImChLNolOrAVnF01Jcbia407x 5Am8dMBKtjE5bgTJjMZPH6C+vQi3FBxo/tu580MeetE3y6sJlFhFj4gQimyU7s0u p/M10/iM8lqFmQsSJN3reRoFtZWHaujW74y8N/LDWlHp9plsHFEgWukJdQut8ncf 6IdkX6pTZHuP93x1DTPoPGj7T0hZav86msH2kcSiJ/DMFm3EQO9UaVGLWW14B45u 8Q5Jqd4e7RccjLMHTLDmfX1RYV/T2GJueyANsPs9WAsNTgaGBTRUdbZE6GK+9C4i w273EOtqHBZSSpZTx9o9R1b6YmIxsYB1 -----END CERTIFICATE-----Generated at Fri Aug 8 00:49:25 2025 by rpki-client