$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json) Hash identifier: 8N3NTzjSzTDcde4pNoBjMfZVQJGRiHYGcC6hsDBTXF8= Subject key identifier: 25:BB:05:38:E8:36:63:3A:FB:60:89:D6:11:FB:B3:74:63:CC:81:76 Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft Manifest number: 0174 Signing time: Sat 23 Aug 2025 01:19:29 +0000 Manifest this update: Sat 23 Aug 2025 01:19:29 +0000 Manifest next update: Sat 30 Aug 2025 01:19:29 +0000 Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: AaAr2rLCja8hKdOUBsIm8XDYhY2BcUdVJikeUKDaWxI=) 2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: leuMzpLaxFsvYZtfj5XFjNm4DVLoebp+rvO2FUHNRVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Validity Not Before: Aug 23 01:19:29 2025 GMT Not After : Aug 30 01:19:29 2025 GMT Subject: CN=68a91721-09bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:59:c9:17:c8:88:13:68:f8:60:71:e9:ec: 34:b4:75:35:a6:8d:78:d1:bd:79:6f:25:89:63:fd: a8:76:9c:83:af:9f:d5:72:02:23:16:40:8b:65:2e: d7:1d:09:de:04:1f:62:88:94:c9:23:df:91:3f:c8: 1c:55:18:95:d9:06:05:1c:37:47:39:69:3f:f9:c0: a5:00:31:c9:1c:57:61:af:b3:1b:d2:8b:3e:42:f2: 21:0c:7c:8d:68:5f:b7:a5:66:74:34:10:da:85:ba: 51:8c:b3:40:8b:d9:1a:ea:6b:40:0c:68:ed:a0:42: 9e:e7:28:6c:ef:83:49:f6:81:41:78:bf:5a:8c:79: 01:22:16:fe:2e:56:1a:67:a9:1d:e4:f9:47:39:d5: 10:09:15:6d:a4:e4:7e:fb:ad:c4:dd:66:3a:3e:23: 53:68:fa:5b:85:c0:1b:06:b2:70:55:44:59:51:59: 58:0c:f7:52:44:be:d2:68:48:db:c3:34:30:e2:5b: 4f:cc:ec:9e:8f:db:00:d6:63:e2:b1:60:55:c1:5c: ef:cf:45:fe:cd:98:36:10:60:79:48:d6:d4:4c:58: d8:4b:82:74:d2:b8:34:b4:e8:b2:af:32:c7:62:bb: 4d:cd:46:ff:6d:c2:f7:c5:82:d7:e4:80:93:7e:ed: 4b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BB:05:38:E8:36:63:3A:FB:60:89:D6:11:FB:B3:74:63:CC:81:76 X509v3 Authority Key Identifier: keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0a:ec:ce:6a:94:54:91:f6:3b:72:49:10:d7:62:af:93:ef: be:ba:77:ea:44:17:1e:cb:0c:93:66:30:1d:fe:71:8d:05:14: b8:73:f4:b6:da:c2:cf:da:91:72:33:43:03:10:c9:33:37:1e: d0:4f:d5:c1:8e:b2:9c:8e:56:46:ec:6e:71:e3:54:83:9a:f8: 4b:81:df:e8:dc:9a:c4:30:d2:35:8e:42:a9:f7:c2:ab:73:d5: da:07:a3:83:50:63:4b:cb:57:25:79:9f:33:6f:57:02:2c:2d: c3:b4:3d:88:c4:53:6a:f9:81:10:84:64:f5:75:02:c9:eb:38: 35:6b:3f:a8:aa:bc:b9:48:a7:f2:37:25:3f:1c:89:58:5e:1d: 39:70:63:d8:1b:b8:8a:03:c9:6a:3a:45:e6:73:60:21:af:6f: 8f:93:b3:8d:ff:16:a9:45:cb:b7:23:31:36:56:67:85:27:43: 77:3f:36:a0:13:01:cd:cb:b0:75:79:0b:f9:fe:be:fc:eb:c0: a5:30:35:4c:8c:2f:00:a4:3e:d5:f9:a5:04:52:0f:16:f6:01: 45:d6:90:00:b8:24:38:1f:87:6b:47:f9:4c:b2:3f:66:33:d7: 96:f9:d0:c0:e7:00:f0:cd:8e:85:e6:c8:1c:85:4d:61:12:b8: 00:de:b2:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw RjdDQzRGMDIwHhcNMjUwODIzMDExOTI5WhcNMjUwODMwMDExOTI5WjAYMRYwFAYD VQQDEw02OGE5MTcyMS0wOWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtFZyRfIiBNo+GBx6ew0tHU1po140b15byWJY/2odpyDr5/VcgIjFkCLZS7X HQneBB9iiJTJI9+RP8gcVRiV2QYFHDdHOWk/+cClADHJHFdhr7Mb0os+QvIhDHyN aF+3pWZ0NBDahbpRjLNAi9ka6mtADGjtoEKe5yhs74NJ9oFBeL9ajHkBIhb+LlYa Z6kd5PlHOdUQCRVtpOR++63E3WY6PiNTaPpbhcAbBrJwVURZUVlYDPdSRL7SaEjb wzQw4ltPzOyej9sA1mPisWBVwVzvz0X+zZg2EGB5SNbUTFjYS4J00rg0tOiyrzLH YrtNzUb/bcL3xYLX5ICTfu1LLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCW7BTjo NmM6+2CJ1hH7s3RjzIF2MB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5 N3k5a2xCOERiOTRQZk1Ud0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKCuzOapRUkfY7ckkQ12Kvk+++unfqRBceywyTZjAd/nGNBRS4c/S2 2sLP2pFyM0MDEMkzNx7QT9XBjrKcjlZG7G5x41SDmvhLgd/o3JrEMNI1jkKp98Kr c9XaB6ODUGNLy1cleZ8zb1cCLC3DtD2IxFNq+YEQhGT1dQLJ6zg1az+oqry5SKfy NyU/HIlYXh05cGPYG7iKA8lqOkXmc2Ahr2+Pk7ON/xapRcu3IzE2VmeFJ0N3Pzag EwHNy7B1eQv5/r7868ClMDVMjC8ApD7V+aUEUg8W9gFF1pAAuCQ4H4drR/lMsj9m M9eW+dDA5wDwzY6F5sgchU1hErgA3rKF -----END CERTIFICATE-----Generated at Sat Aug 23 10:27:22 2025 by rpki-client