$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft File: U1n0WpMqsOo84GFn1fzHBltN2IU.mft (raw, json) Hash identifier: pIueYeElO2YCfH9PuYBEEMzPtkW2TgTi+QVyID4IvRk= Subject key identifier: E4:8B:81:83:00:D4:9D:2E:E1:75:FB:CA:12:EE:65:AC:D5:18:D8:A5 Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 Certificate issuer: /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Certificate serial: 0C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft Manifest number: 0C77 Signing time: Fri 22 Aug 2025 18:27:01 +0000 Manifest this update: Fri 22 Aug 2025 18:27:01 +0000 Manifest next update: Fri 29 Aug 2025 18:27:01 +0000 Files and hashes: 1: U1n0WpMqsOo84GFn1fzHBltN2IU.crl (hash: VkapbeghqnxCpuO2v8Lxx2a0Xf69mbwfiLLlo7RH2WU=) 2: 6751E26C415511ECA2FD715CC4F9AE02.roa (hash: NWXl0/HloQJgP5iTbQs1BacGndGc9HtR4LlBAy7UnRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3203 (0xc83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911367F, serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Validity Not Before: Aug 22 18:27:01 2025 GMT Not After : Aug 29 18:27:01 2025 GMT Subject: CN=68a8b675-a510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:1c:9d:91:4a:df:19:e8:a8:90:46:69:f1: ae:0a:f9:0a:e7:e4:78:16:45:72:59:aa:70:49:51: 47:2b:5a:d0:18:8a:78:09:58:40:f8:73:42:a3:e3: f4:11:18:b0:11:cc:33:fc:1f:13:a2:c3:df:d6:f0: a3:b5:68:8d:41:72:0c:28:e7:34:62:89:ab:3f:19: 83:30:a5:fa:0b:c2:18:e0:a6:6c:e2:0e:df:4e:64: 32:92:09:2b:e2:5b:67:a9:e9:b3:4d:a2:aa:5b:9b: 39:58:cc:91:34:c0:f1:96:3b:00:3f:25:c3:b8:78: 3b:cc:94:52:84:45:24:87:23:1e:70:b7:45:08:9a: db:ce:3a:e4:40:0b:4f:5f:fe:98:ee:5d:54:b8:3a: b3:95:bb:49:8c:d6:7a:9e:30:c9:a4:93:88:b0:00: be:d6:42:b9:1a:e1:d8:9e:3b:26:3a:2b:fa:1c:d4: 8c:10:ab:60:b7:fb:cb:a6:da:5d:4a:d9:9f:c6:13: d6:a8:96:b1:92:ef:38:bb:4d:16:61:28:5d:68:14: 00:1b:db:f0:b3:ba:32:98:42:90:7e:0a:2d:c6:71: fe:c4:e1:3a:10:57:0d:9d:71:f2:ac:e4:29:a7:45: 56:9d:92:6f:99:1d:5d:e9:2b:d1:2b:a2:5a:e7:9b: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8B:81:83:00:D4:9D:2E:E1:75:FB:CA:12:EE:65:AC:D5:18:D8:A5 X509v3 Authority Key Identifier: keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b1:56:7b:dc:e9:cc:f4:d7:23:1b:1d:b0:ea:dd:bf:13:81: a8:49:a0:35:83:b1:2a:6d:b1:e5:81:b3:bc:c1:24:64:2c:4c: 0b:97:20:11:ab:89:b0:83:be:80:ea:2d:a8:f7:03:7d:3f:59: 42:95:1f:32:01:e8:cb:b3:90:23:f5:8d:cf:51:e6:20:af:68: a9:c3:35:e8:e5:34:74:e1:2b:bc:93:1f:b8:22:35:47:c2:80: ba:36:f9:e4:5e:89:02:44:88:6f:a7:e3:3d:1a:44:03:31:c3: 8c:1d:ad:43:69:6b:f0:bc:9e:7c:d9:ec:f7:62:67:f3:0d:69: 7f:c4:a6:2e:dd:bf:97:2f:d8:85:42:fe:7a:b1:81:c2:95:b1: 67:c6:09:23:11:64:e0:36:e1:b7:0b:5b:05:de:d6:50:f0:ff: b4:ca:1b:89:4e:e5:17:67:3f:ac:97:91:4e:e1:88:ab:46:b2: 8a:eb:bd:19:94:0c:d9:9c:03:cf:99:8c:00:24:88:be:7f:85: 33:2e:6f:73:01:c0:1b:0a:e4:4d:f9:e3:a1:0b:96:d0:ba:98: f9:bb:89:01:d2:71:32:4b:d9:7b:ac:31:86:c4:ee:f7:e0:80: c8:05:ac:71:01:cc:33:d6:56:d7:25:53:ab:f3:7d:92:0f:d3: de:9d:e2:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2N0YxMTAvBgNVBAUTKDUzNTlGNDVBOTMyQUIwRUEzQ0UwNjE2N0Q1RkNDNzA2 NUI0REQ4ODUwHhcNMjUwODIyMTgyNzAxWhcNMjUwODI5MTgyNzAxWjAYMRYwFAYD VQQDEw02OGE4YjY3NS1hNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKAcnZFK3xnoqJBGafGuCvkK5+R4FkVyWapwSVFHK1rQGIp4CVhA+HNCo+P0 ERiwEcwz/B8TosPf1vCjtWiNQXIMKOc0YomrPxmDMKX6C8IY4KZs4g7fTmQykgkr 4ltnqemzTaKqW5s5WMyRNMDxljsAPyXDuHg7zJRShEUkhyMecLdFCJrbzjrkQAtP X/6Y7l1UuDqzlbtJjNZ6njDJpJOIsAC+1kK5GuHYnjsmOiv6HNSMEKtgt/vLptpd StmfxhPWqJaxku84u00WYShdaBQAG9vws7oymEKQfgotxnH+xOE6EFcNnXHyrOQp p0VWnZJvmR1d6SvRK6Ja55vHPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSLgYMA 1J0u4XX7yhLuZazVGNilMB8GA1UdIwQYMBaAFFNZ9FqTKrDqPOBhZ9X8xwZbTdiF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY3Ri83QTk0RDEyODA0 NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNPbzg0R0ZuMWZ6SEJsdE4y SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UxbjBXcE1xc09vODRHRm4xZnpIQmx0TjJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY3Ri83QTk0RDEyODA0NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNP bzg0R0ZuMWZ6SEJsdE4ySVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCysVZ73OnM9NcjGx2w6t2/E4GoSaA1g7EqbbHlgbO8wSRkLEwLlyAR q4mwg76A6i2o9wN9P1lClR8yAejLs5Aj9Y3PUeYgr2ipwzXo5TR04Su8kx+4IjVH woC6NvnkXokCRIhvp+M9GkQDMcOMHa1DaWvwvJ582ez3YmfzDWl/xKYu3b+XL9iF Qv56sYHClbFnxgkjEWTgNuG3C1sF3tZQ8P+0yhuJTuUXZz+sl5FO4YirRrKK670Z lAzZnAPPmYwAJIi+f4UzLm9zAcAbCuRN+eOhC5bQupj5u4kB0nEyS9l7rDGGxO73 4IDIBaxxAcwz1lbXJVOr832SD9PeneIG -----END CERTIFICATE-----Generated at Sat Aug 23 21:26:18 2025 by rpki-client