$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json) Hash identifier: QntIiGA9mcOo6991x/xvFZru8Svqh4sfJoegfjPhZxc= Subject key identifier: 13:AC:22:59:80:58:CE:D8:F9:86:3C:5C:FB:D1:C3:14:7E:08:83:34 Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft Manifest number: 0A5E Signing time: Fri 22 Aug 2025 19:48:20 +0000 Manifest this update: Fri 22 Aug 2025 19:48:19 +0000 Manifest next update: Fri 29 Aug 2025 19:48:19 +0000 Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: PITqV/MmagJcH/fn20lC3abeXFPj31Ieo/65Lv55rbM=) 2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: c9rYpxrekHk5Vx/e81a0t1Y6tqcx2DAB/IWGqPFZTW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Validity Not Before: Aug 22 19:48:19 2025 GMT Not After : Aug 29 19:48:19 2025 GMT Subject: CN=68a8c984-d476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:38:90:af:ed:7a:2d:46:3e:42:da:ff:01: 29:a1:47:d4:65:f4:9b:2e:49:78:1e:9e:d8:0e:ad: 90:22:b0:36:3b:68:a8:14:84:ea:e5:10:51:b5:83: 61:c2:bd:a3:d2:52:fb:e4:34:c8:71:45:1a:06:7f: 88:47:32:b4:79:af:87:c9:ba:d5:f7:15:9b:da:d6: 35:6a:74:9d:27:b5:42:27:73:bb:8e:e0:82:43:b4: 37:18:23:c2:1c:1f:f8:f8:85:e0:3f:67:ba:be:9e: ec:1e:c8:62:b8:48:67:1d:fe:c1:f9:4e:7a:97:36: 12:05:3d:b9:a4:62:8f:d1:e0:ed:18:11:f6:a8:98: 0c:68:f9:8f:5f:6e:88:cd:da:ff:37:42:be:8f:67: f3:53:28:b2:5f:eb:1e:08:45:db:9a:ae:88:e4:2b: 78:75:b4:49:3e:5f:f5:ee:00:13:f9:88:9a:f6:8e: e2:08:dc:53:c8:e1:54:ba:6a:01:c1:70:7a:0c:4e: 8f:4e:68:6d:48:75:a5:37:f2:82:1f:98:7a:98:93: e3:de:b3:b9:e7:6d:f8:f9:e4:7f:7b:3e:8a:ea:30: 73:1b:83:ff:c4:77:fe:10:b5:9f:d7:34:b6:4e:ac: f1:ec:d9:06:06:f1:ca:a2:eb:dc:a0:66:80:cb:67: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AC:22:59:80:58:CE:D8:F9:86:3C:5C:FB:D1:C3:14:7E:08:83:34 X509v3 Authority Key Identifier: keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d8:7d:60:29:f9:88:47:93:2b:79:3e:25:4c:55:97:be:8e: 1b:74:2e:79:bc:6d:de:4d:8d:f8:24:11:d5:56:16:30:fb:21: d7:da:4a:96:a8:67:0c:82:f4:31:2a:66:a3:36:68:97:e4:e3: 9d:97:f3:8f:de:6a:13:cb:3b:61:b0:04:f7:db:12:c6:4c:6d: 65:57:3c:28:c8:c0:28:76:c8:f7:6a:c0:5a:0f:54:7a:2e:b9: 74:2c:ed:c9:eb:0b:34:84:2f:e8:0f:47:06:17:c2:4d:38:7d: 7e:26:68:a5:15:fa:c7:af:2c:24:8f:d4:57:d5:32:ff:a8:19: f8:c3:27:64:36:72:c0:12:e1:76:de:66:3e:39:73:e9:0c:2b: 9f:47:f1:ac:88:e2:7e:86:a0:e3:99:8d:ee:40:55:33:83:d5: 99:e8:34:33:3d:ca:ae:22:ec:85:1f:94:50:e6:2c:00:32:92: 31:a6:32:71:16:90:c1:19:b7:85:3f:6f:3d:55:be:53:6a:84: ba:f3:b6:98:5f:22:28:9b:b0:48:00:a1:7a:67:f2:00:bd:65: 2e:16:0e:74:d2:2b:01:13:42:8a:d2:d4:47:22:91:21:10:e5: 96:31:58:de:43:03:73:20:c6:d9:71:84:d7:02:59:1d:d5:08: 6b:7b:32:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBERUMxMTAvBgNVBAUTKEI4RDkzNTA2QzhBNzkxRDFGOUZGQTVCNjdDMzg4MTZE REMwM0VFNkIwHhcNMjUwODIyMTk0ODE5WhcNMjUwODI5MTk0ODE5WjAYMRYwFAYD VQQDEw02OGE4Yzk4NC1kNDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFw4kK/tei1GPkLa/wEpoUfUZfSbLkl4Hp7YDq2QIrA2O2ioFITq5RBRtYNh wr2j0lL75DTIcUUaBn+IRzK0ea+HybrV9xWb2tY1anSdJ7VCJ3O7juCCQ7Q3GCPC HB/4+IXgP2e6vp7sHshiuEhnHf7B+U56lzYSBT25pGKP0eDtGBH2qJgMaPmPX26I zdr/N0K+j2fzUyiyX+seCEXbmq6I5Ct4dbRJPl/17gAT+Yia9o7iCNxTyOFUumoB wXB6DE6PTmhtSHWlN/KCH5h6mJPj3rO55234+eR/ez6K6jBzG4P/xHf+ELWf1zS2 Tqzx7NkGBvHKouvcoGaAy2d73QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOsIlmA WM7Y+YY8XPvRwxR+CIM0MB8GA1UdIwQYMBaAFLjZNQbIp5HR+f+ltnw4gW3cA+5r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMERFQy8xNzJEMEEyNDZC RUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtkSDVfNlcyZkRpQmJkd0Q3 bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOazFCc2lua2RINV82VzJmRGlCYmR3RDdtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MERFQy8xNzJEMEEyNDZCRUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtk SDVfNlcyZkRpQmJkd0Q3bXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS2H1gKfmIR5MreT4lTFWXvo4bdC55vG3eTY34JBHVVhYw+yHX2kqW qGcMgvQxKmajNmiX5OOdl/OP3moTyzthsAT32xLGTG1lVzwoyMAodsj3asBaD1R6 Lrl0LO3J6ws0hC/oD0cGF8JNOH1+JmilFfrHrywkj9RX1TL/qBn4wydkNnLAEuF2 3mY+OXPpDCufR/GsiOJ+hqDjmY3uQFUzg9WZ6DQzPcquIuyFH5RQ5iwAMpIxpjJx FpDBGbeFP289Vb5TaoS687aYXyIom7BIAKF6Z/IAvWUuFg500isBE0KK0tRHIpEh EOWWMVjeQwNzIMbZcYTXAlkd1QhrezJ5 -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:57 2025 by rpki-client