$ rpki-client -vvf rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft File: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft (raw, json) Hash identifier: pM4qBnCjDtFcK5R0T0BuW5bXmcGKR3LXBzz9ezc2Cio= Subject key identifier: E1:1D:1E:B7:D9:25:98:A8:D5:41:BA:0C:FA:28:A7:A1:09:F7:A5:AE Authority key identifier: FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4 Certificate issuer: /CN=A9128F1E/serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft Manifest number: 53 Signing time: Sat 23 Aug 2025 07:29:49 +0000 Manifest this update: Sat 23 Aug 2025 07:29:49 +0000 Manifest next update: Sat 30 Aug 2025 07:29:49 +0000 Files and hashes: 1: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl (hash: hTm503WIZ4jK5W0VUoUoAGvGcRPupmpRcUDSfxF23ao=) 2: FC25E548019411F0A44E3285C4F9AE02.roa (hash: OOiuBnmO2r+s7R41Nu9crqcm0POtH9RoB3Tt79fatwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128F1E, serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4 Validity Not Before: Aug 23 07:29:49 2025 GMT Not After : Aug 30 07:29:49 2025 GMT Subject: CN=68a96ded-fbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:43:19:07:ed:25:fc:c1:2a:0a:87:e5:2a: fa:2d:ad:0d:b3:08:f8:79:08:46:e0:e9:00:cf:d7: 93:a3:29:3e:2d:b1:82:00:98:34:1e:9f:57:95:52: 1e:10:50:df:e0:f8:07:4b:9f:5e:d3:44:ed:7b:f1: ec:24:6e:ed:45:cf:51:51:dd:73:89:e3:a5:e6:3e: d0:78:9c:c7:6a:4e:35:70:bc:db:bb:ab:96:67:21: 6f:22:a6:fd:94:38:93:1b:c0:96:8e:76:48:47:74: 7d:87:70:d7:fb:a8:7d:1b:6c:1c:c9:e6:d4:d8:cc: 28:69:75:3e:1b:79:0c:a6:73:ea:bf:c3:a6:0c:ca: 24:70:33:1d:ab:4f:31:70:8d:32:8c:c8:4f:87:5d: 58:cd:b5:ab:4a:b2:f9:be:93:11:d7:90:e8:2f:33: 82:d5:00:0f:cb:16:43:36:92:67:10:aa:2f:24:ea: ea:0a:bd:db:9f:2a:06:c6:c9:05:a0:68:7b:9c:7d: a8:66:f9:f1:81:dc:0c:51:2e:3f:53:30:35:b7:1c: 5d:ff:d4:26:7a:fb:3e:d7:4b:33:7f:be:0d:67:72: ea:ba:29:09:a1:60:13:c9:d6:b6:4c:95:6f:0b:5f: 5b:3f:5f:53:c2:dd:86:64:e2:bb:65:0f:1e:10:79: 3e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1D:1E:B7:D9:25:98:A8:D5:41:BA:0C:FA:28:A7:A1:09:F7:A5:AE X509v3 Authority Key Identifier: keyid:FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:1f:75:65:5c:88:aa:ba:b0:16:b8:59:7a:00:90:79:97:9e: c8:0b:c9:2d:42:ff:c6:ce:6a:90:0e:01:e2:45:c7:c4:de:4a: f1:3a:08:c6:40:b9:17:a2:b7:6b:1d:fe:8b:26:cf:ee:ad:8c: 9f:89:f2:d0:af:f3:f2:f4:bc:79:f7:4f:63:d0:8c:11:ae:7e: 81:fd:c5:61:e3:de:b8:19:c6:04:af:cf:41:f2:b9:81:3a:89: 62:dd:80:e5:1e:d0:2b:61:17:38:ea:08:47:d0:4c:66:97:51: 0c:b3:5d:52:0d:6e:07:68:16:fb:03:74:2a:76:50:2f:ae:45: d4:5a:61:8a:9f:19:87:96:51:18:f1:c9:97:c8:bc:fe:42:10: 45:44:70:cf:9e:61:76:2d:46:a7:81:20:ac:02:62:b6:c9:60: 00:30:73:e6:ba:56:a5:ce:88:6e:d6:c5:c4:a4:b4:46:fe:e6: c7:60:3e:27:ca:5b:ac:59:88:fd:bb:a3:05:9b:f3:09:fa:8e: fa:69:c2:0b:67:0e:05:0f:4c:fc:45:a8:ed:d6:e7:bb:20:47: 7e:7e:cb:9b:41:49:df:8f:b3:bd:11:18:b3:f7:60:52:cf:14: 2a:d1:65:eb:e3:ef:f8:71:e7:43:e7:b2:ea:a8:df:02:08:fe: 3b:55:7e:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OEYxRTExMC8GA1UEBRMoRkVFQjcyQjQ3RTBGQkQ5RUIyNjgzRTI1OUZBNjQzNkJB NTY1MjNENDAeFw0yNTA4MjMwNzI5NDlaFw0yNTA4MzAwNzI5NDlaMBgxFjAUBgNV BAMTDTY4YTk2ZGVkLWZiZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVc0MZB+0l/MEqCoflKvotrQ2zCPh5CEbg6QDP15OjKT4tsYIAmDQen1eVUh4Q UN/g+AdLn17TRO178ewkbu1Fz1FR3XOJ46XmPtB4nMdqTjVwvNu7q5ZnIW8ipv2U OJMbwJaOdkhHdH2HcNf7qH0bbBzJ5tTYzChpdT4beQymc+q/w6YMyiRwMx2rTzFw jTKMyE+HXVjNtatKsvm+kxHXkOgvM4LVAA/LFkM2kmcQqi8k6uoKvdufKgbGyQWg aHucfahm+fGB3AxRLj9TMDW3HF3/1CZ6+z7XSzN/vg1ncuq6KQmhYBPJ1rZMlW8L X1s/X1PC3YZk4rtlDx4QeT4fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4R0et9kl mKjVQboM+iinoQn3pa4wHwYDVR0jBBgwFoAU/utytH4PvZ6yaD4ln6ZDa6VlI9Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4RjFFLzQ0QjgxQjIwMDE5 MzExRjA4OUQ0OTI4MkM0RjlBRTAyL191dHl0SDRQdlo2eWFENGxuNlpEYTZWbEk5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3V0eXRINFB2WjZ5YUQ0bG42WkRhNlZsSTlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 RjFFLzQ0QjgxQjIwMDE5MzExRjA4OUQ0OTI4MkM0RjlBRTAyL191dHl0SDRQdlo2 eWFENGxuNlpEYTZWbEk5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMMfdWVciKq6sBa4WXoAkHmXnsgLyS1C/8bOapAOAeJFx8TeSvE6CMZA uReit2sd/osmz+6tjJ+J8tCv8/L0vHn3T2PQjBGufoH9xWHj3rgZxgSvz0HyuYE6 iWLdgOUe0CthFzjqCEfQTGaXUQyzXVINbgdoFvsDdCp2UC+uRdRaYYqfGYeWURjx yZfIvP5CEEVEcM+eYXYtRqeBIKwCYrbJYAAwc+a6VqXOiG7WxcSktEb+5sdgPifK W6xZiP27owWb8wn6jvppwgtnDgUPTPxFqO3W57sgR35+y5tBSd+Ps70RGLP3YFLP FCrRZevj7/hx50Pnsuqo3wII/jtVfvU= -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:27 2025 by rpki-client