$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json) Hash identifier: pVRNKWGuYXk98QGdMhAmKrNzHoBezwyF2Xc6En0CXS8= Subject key identifier: 79:DE:5A:1E:99:EC:AB:D5:5F:62:DF:86:68:E1:13:D0:16:15:F0:09 Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Certificate serial: 0303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft Manifest number: 02FE Signing time: Sat 23 Aug 2025 01:28:51 +0000 Manifest this update: Sat 23 Aug 2025 01:28:51 +0000 Manifest next update: Sat 30 Aug 2025 01:28:51 +0000 Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: FlF6trRaxDeVlzHUPeSo0By8Xh9A8fmALyJYnxu01+s=) 2: 6C113EF8EB1211ECB34A394DC4F9AE02.roa (hash: V0UtMWuGfgSKuCGeFi3ruRU1wDK2vvS2zyP8f3YgcB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Validity Not Before: Aug 23 01:28:51 2025 GMT Not After : Aug 30 01:28:51 2025 GMT Subject: CN=68a91953-86e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:8c:e6:59:89:14:62:a5:0f:87:de:3f:b0: 06:07:ec:de:ae:0f:c5:88:8b:b0:f8:05:dd:6e:a1: 33:76:16:97:00:54:67:72:2a:0d:b2:a9:39:d6:49: 63:ad:04:17:13:e6:1b:41:66:69:c3:4c:69:b6:f8: e1:2b:95:46:f5:12:44:07:f4:9b:ce:ec:e8:1d:20: a4:20:b0:30:9b:29:58:24:1e:5d:12:d0:12:c3:1e: 9c:57:de:cf:fd:1b:63:4c:e8:07:40:23:d1:d1:92: 4a:29:9f:d5:90:28:be:47:f4:33:3b:bc:3d:c9:f2: c8:72:23:a3:70:fa:3b:c9:3c:12:ea:d2:e6:52:1c: 84:5d:33:ea:ef:e1:0a:60:b7:ac:c5:16:46:3d:bd: ce:f8:94:27:03:39:c9:65:03:54:b6:b4:ca:15:1b: e2:c7:ce:f1:81:d5:18:b8:0b:fc:76:e4:62:01:1e: 8e:cc:88:ff:7d:48:79:71:d2:c9:ed:92:f7:9f:f8: 3a:ed:55:72:01:0a:bb:16:66:54:b6:46:51:00:70: d9:b8:be:da:98:16:47:44:1e:90:64:ab:e3:b3:58: 94:f5:85:f4:4a:48:e0:fc:f2:2c:6a:d0:1b:26:fc: 0c:9f:3e:c8:fe:8a:8c:b4:9c:b5:ce:b1:5a:fa:b4: 99:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DE:5A:1E:99:EC:AB:D5:5F:62:DF:86:68:E1:13:D0:16:15:F0:09 X509v3 Authority Key Identifier: keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:44:97:5c:dd:ac:bf:36:50:26:89:50:8d:33:54:6e:70:5b: e8:99:cf:9b:06:9f:0d:0b:29:93:04:5e:4f:4a:fc:a6:c3:fc: 6b:61:8d:fb:7a:78:2c:b7:90:c5:d2:bb:36:aa:e1:a0:32:6e: f8:21:93:b1:5c:fb:05:77:15:d7:b1:f0:91:8c:c4:47:b5:31: 54:9c:fd:d9:dd:fb:26:63:7f:52:8b:50:15:0b:cd:5e:17:0c: aa:d8:bf:1a:6a:66:f9:2c:6c:4d:4c:05:d0:15:33:8e:2a:b5: 26:ec:35:5a:65:7e:78:bb:de:3c:58:12:ef:b2:58:68:6e:4e: ae:40:82:fc:5e:18:d9:fe:b1:35:43:7e:bc:82:da:ce:07:80: ca:4a:1b:af:5e:55:25:7e:00:54:60:bf:54:75:16:f0:6f:3b: bd:c7:d3:02:39:a8:25:c7:59:0a:da:13:01:73:c9:9d:3f:4c: 2d:55:7c:bb:28:6c:23:c3:a8:94:ec:00:c4:f2:2f:e2:7e:c2: 0c:24:65:00:db:20:bc:ee:fd:cd:ee:4d:b7:20:a1:1a:58:e9: 6c:da:39:8a:cf:d6:16:97:d9:69:af:56:b6:78:02:b7:7e:0d: f3:bf:1b:37:a1:55:87:9f:de:38:51:4c:36:9e:52:6f:47:2f: 25:2f:07:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG RENCQUNFODUwHhcNMjUwODIzMDEyODUxWhcNMjUwODMwMDEyODUxWjAYMRYwFAYD VQQDEw02OGE5MTk1My04NmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz02M5lmJFGKlD4feP7AGB+zerg/FiIuw+AXdbqEzdhaXAFRncioNsqk51klj rQQXE+YbQWZpw0xptvjhK5VG9RJEB/SbzuzoHSCkILAwmylYJB5dEtASwx6cV97P /RtjTOgHQCPR0ZJKKZ/VkCi+R/QzO7w9yfLIciOjcPo7yTwS6tLmUhyEXTPq7+EK YLesxRZGPb3O+JQnAznJZQNUtrTKFRvix87xgdUYuAv8duRiAR6OzIj/fUh5cdLJ 7ZL3n/g67VVyAQq7FmZUtkZRAHDZuL7amBZHRB6QZKvjs1iU9YX0Skjg/PIsatAb JvwMnz7I/oqMtJy1zrFa+rSZNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHneWh6Z 7KvVX2LfhmjhE9AWFfAJMB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU1My8xNjRBQkVDNEVCMEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlC X01fampsOTJGWVQ5eTZ6b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7RJdc3ay/NlAmiVCNM1RucFvomc+bBp8NCymTBF5PSvymw/xrYY37 engst5DF0rs2quGgMm74IZOxXPsFdxXXsfCRjMRHtTFUnP3Z3fsmY39Si1AVC81e Fwyq2L8aamb5LGxNTAXQFTOOKrUm7DVaZX54u948WBLvslhobk6uQIL8XhjZ/rE1 Q368gtrOB4DKShuvXlUlfgBUYL9UdRbwbzu9x9MCOaglx1kK2hMBc8mdP0wtVXy7 KGwjw6iU7ADE8i/ifsIMJGUA2yC87v3N7k23IKEaWOls2jmKz9YWl9lpr1a2eAK3 fg3zvxs3oVWHn944UUw2nlJvRy8lLweR -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:43 2025 by rpki-client