$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json) Hash identifier: kbwAYcrLSLtz7UZQBA/jYGd6v+o3O/7GixtPKff61HY= Subject key identifier: DE:A3:4C:D0:A5:CC:F8:9F:E0:5A:57:7B:01:70:45:56:28:5B:CE:C1 Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft Manifest number: 0BD1 Signing time: Fri 08 Aug 2025 19:08:05 +0000 Manifest this update: Fri 08 Aug 2025 19:08:05 +0000 Manifest next update: Fri 15 Aug 2025 19:08:05 +0000 Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: qjlfq4exixaGFXgHoBZl+FU50Rbc5syrV7+r+yBaSjo=) 2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: r5uWTU+sYs/vGgm5oMxXApeoTDyzrDhvLimJL0rhlzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Validity Not Before: Aug 8 19:08:05 2025 GMT Not After : Aug 15 19:08:05 2025 GMT Subject: CN=68964b15-4b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:99:74:a6:27:87:b7:29:fa:0a:5c:83:07:9e: 96:96:71:61:dd:dc:07:36:b6:21:ee:a0:1b:03:cd: 36:dc:38:c0:24:30:c1:3b:ba:2f:8c:9a:6a:b0:dc: 2a:da:31:a2:5f:ad:98:93:e4:59:38:0b:56:9f:bc: cd:f1:04:a1:2e:c8:3c:83:2f:b5:08:76:47:61:e2: 38:e1:e4:a1:e3:eb:c0:58:da:45:45:d2:7e:44:e9: 41:a4:4c:d6:98:ef:74:6b:18:c4:65:0d:2e:55:56: c2:a3:2f:22:35:0b:71:e3:d2:a9:f4:bf:27:9f:c3: 6c:23:7c:0f:49:d8:63:7a:55:cd:99:85:ec:f3:30: 99:f2:e5:65:f0:ac:e0:19:6b:a7:40:96:8e:96:10: c7:b2:15:f8:ef:cb:9a:ab:42:c4:5c:9f:44:28:7e: 41:7b:7c:65:75:8d:8e:da:88:9b:3c:58:69:39:0f: a7:5c:85:97:a6:f3:93:51:56:62:b6:18:46:c6:9b: 26:bd:95:32:f1:43:f3:c9:62:df:16:95:81:06:dc: 5e:ec:55:dd:1f:22:91:d3:df:0c:13:a9:a0:ff:53: 3a:13:a4:5c:21:e9:91:26:d4:b2:9c:e5:3c:bd:f3: b6:62:5f:5c:fa:ad:58:ad:e0:f4:d9:01:e4:48:20: f7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A3:4C:D0:A5:CC:F8:9F:E0:5A:57:7B:01:70:45:56:28:5B:CE:C1 X509v3 Authority Key Identifier: keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:14:c3:3a:15:7e:a1:c0:c6:eb:4f:dc:ee:ec:26:f5:97:73: 8d:ee:70:59:0c:fc:5d:cb:04:30:a6:a0:8a:38:44:1a:01:62: b7:be:02:91:8b:96:67:eb:98:2b:83:8a:cb:b3:60:e5:ac:f8: 1b:5b:35:51:48:99:1d:74:21:fb:84:d3:98:3d:56:4c:44:ee: bd:1e:8c:19:a2:4c:5f:e3:fc:e4:d3:45:22:60:54:12:a2:43: b3:07:64:3a:ff:14:1a:af:bb:4d:e7:87:50:7c:5a:a2:18:0a: 92:df:37:5b:39:84:5d:91:1f:24:41:6b:97:d2:e2:45:03:8c: e4:d5:3a:49:cd:8a:51:a7:c1:3a:4b:6e:15:c4:f1:53:02:27: f3:34:b2:8f:4d:7f:a7:d7:13:e7:bb:41:d4:c2:da:9d:8c:8c: 3d:54:b0:ca:b6:c8:75:5b:6b:b7:66:5b:ba:99:3f:58:58:87: a5:35:d6:e1:73:73:9a:7b:bd:09:9a:85:c0:be:a2:56:bd:81: 30:22:fa:9d:da:89:49:6a:36:ad:77:25:78:6c:d9:34:53:db: c5:ae:e5:ed:4c:75:dc:f3:48:6d:94:94:b2:87:43:41:e1:bc: 21:e5:cd:9b:1b:b9:cf:25:fd:43:7a:ea:23:52:91:c2:4b:81: 67:43:24:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC QjA5N0MyMUIwHhcNMjUwODA4MTkwODA1WhcNMjUwODE1MTkwODA1WjAYMRYwFAYD VQQDEw02ODk2NGIxNS00YjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Jl0pieHtyn6ClyDB56WlnFh3dwHNrYh7qAbA8023DjAJDDBO7ovjJpqsNwq 2jGiX62Yk+RZOAtWn7zN8QShLsg8gy+1CHZHYeI44eSh4+vAWNpFRdJ+ROlBpEzW mO90axjEZQ0uVVbCoy8iNQtx49Kp9L8nn8NsI3wPSdhjelXNmYXs8zCZ8uVl8Kzg GWunQJaOlhDHshX478uaq0LEXJ9EKH5Be3xldY2O2oibPFhpOQ+nXIWXpvOTUVZi thhGxpsmvZUy8UPzyWLfFpWBBtxe7FXdHyKR098ME6mg/1M6E6RcIemRJtSynOU8 vfO2Yl9c+q1YreD02QHkSCD3kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6jTNCl zPif4FpXewFwRVYoW87BMB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py SGNRbi0tci1jZy03Q1h3aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWFMM6FX6hwMbrT9zu7Cb1l3ON7nBZDPxdywQwpqCKOEQaAWK3vgKR i5Zn65grg4rLs2DlrPgbWzVRSJkddCH7hNOYPVZMRO69HowZokxf4/zk00UiYFQS okOzB2Q6/xQar7tN54dQfFqiGAqS3zdbOYRdkR8kQWuX0uJFA4zk1TpJzYpRp8E6 S24VxPFTAifzNLKPTX+n1xPnu0HUwtqdjIw9VLDKtsh1W2u3Zlu6mT9YWIelNdbh c3Oae70JmoXAvqJWvYEwIvqd2olJajatdyV4bNk0U9vFruXtTHXc80htlJSyh0NB 4bwh5c2bG7nPJf1DeuojUpHCS4FnQySs -----END CERTIFICATE-----Generated at Sun Aug 10 16:14:45 2025 by rpki-client