$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json) Hash identifier: cznQlg+4x6YXsym8Hp4nyuyxQ5h/vcjfx4KMfYpfINE= Subject key identifier: 2D:BF:B7:8F:67:9E:29:38:11:2C:D7:2B:13:64:75:E5:47:39:BE:E6 Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft Manifest number: 011C Signing time: Sat 23 Aug 2025 04:57:08 +0000 Manifest this update: Sat 23 Aug 2025 04:57:07 +0000 Manifest next update: Sat 30 Aug 2025 04:57:07 +0000 Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: WRJpauv3mW8f46w+f5ZJiC5oDHTuL+zQxewHywVfpCM=) 2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: YjW6NRyoT2Yd6bOqBMqlNLXFCINZXzceER+JobJKz/s=) 3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: yJ7MqVkk1tgytYWvBl1+oFmFkyxkl54djaWZOByH5xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Validity Not Before: Aug 23 04:57:07 2025 GMT Not After : Aug 30 04:57:07 2025 GMT Subject: CN=68a94a24-fc6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cd:fd:00:0b:19:7f:57:09:ad:d0:33:26:91: bc:67:07:76:b7:95:b2:9f:04:fd:f5:e9:9e:c8:f8: 97:ed:4d:f9:56:eb:8a:da:43:55:e8:db:46:26:7e: 42:03:4d:38:81:30:46:c0:03:c6:e3:21:86:96:01: 0e:cc:77:78:e3:46:31:5c:7a:29:3e:37:8d:4e:ab: db:b7:24:7e:de:d6:76:0e:38:38:cb:d9:1a:3a:3b: 43:e2:4b:e9:4c:92:58:81:de:5a:b3:6e:ac:1d:cb: 44:b4:51:c1:d5:34:da:31:b1:5c:15:f2:32:2b:02: 4f:07:e8:33:7e:43:29:a0:e2:0d:8a:a5:b5:3b:df: 11:0d:f5:41:21:df:13:a9:2f:26:d7:07:7f:15:8e: 5e:c4:fa:8b:ad:d1:97:b7:9e:e9:ee:7b:dd:62:5d: 0b:81:72:c8:3d:3c:a0:d2:9c:1c:a2:24:00:f7:0d: 93:c1:5a:f2:7d:ab:09:c9:ad:31:c3:b9:cc:f8:80: 77:66:d3:a1:bf:cc:4a:05:32:e2:d9:6e:1b:ae:27: f5:53:9a:a0:fb:76:87:af:b7:b2:1e:ef:08:eb:33: 4e:60:48:c3:18:40:2f:a1:9a:d8:20:44:9a:c7:0f: 1b:af:0e:7e:1f:a0:d1:f3:4d:ad:fa:5d:8b:c8:da: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BF:B7:8F:67:9E:29:38:11:2C:D7:2B:13:64:75:E5:47:39:BE:E6 X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:cc:ef:43:9b:a0:64:8e:f2:78:38:11:1d:dc:a3:ce:22:74: cb:91:1b:ed:e7:5c:4b:87:50:c1:d2:93:03:72:25:4a:10:4c: c6:8a:03:a5:ab:ac:c2:bd:61:15:3c:c3:ca:a4:96:83:66:63: 35:00:5b:b7:5e:93:9d:03:69:d6:72:27:17:5c:9f:a2:cd:1c: bd:61:e9:5f:d2:f1:b3:96:a8:b1:9b:59:9e:f9:1c:5e:15:87: 9c:f0:64:0f:4e:50:7f:e9:7c:57:4e:e4:e2:e7:d1:5c:36:84: 0f:b9:b8:f9:f3:38:c3:a7:cd:8a:99:d3:52:27:e0:61:2c:b9: c6:bc:95:3f:a8:45:71:a4:ac:28:65:b3:1d:0f:1f:49:11:26: 3d:48:64:8b:f3:8d:28:26:7c:95:87:da:34:18:7b:fe:b5:5e: 63:41:61:30:09:bb:1d:50:20:72:6d:be:6f:cc:b9:1d:36:2c: ad:90:60:95:59:93:1e:d0:cb:5b:b7:9d:42:51:8e:f0:bd:51: b8:9d:b3:b6:5c:c6:43:ab:70:30:5a:69:26:fc:44:28:30:72: 11:5f:2e:7c:a5:b7:3a:b3:f1:dd:ff:b2:38:f7:18:f7:10:0e: 55:19:4b:d1:6b:a9:4b:d5:8a:23:db:f6:8d:df:72:44:c3:6c: a4:8d:91:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEJCREEyQTUyQjUwNDhGMUE4QUFCQkY1QzI0MTcyNjAx Mjc3Q0IyRjMwHhcNMjUwODIzMDQ1NzA3WhcNMjUwODMwMDQ1NzA3WjAYMRYwFAYD VQQDEw02OGE5NGEyNC1mYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4c39AAsZf1cJrdAzJpG8Zwd2t5WynwT99emeyPiX7U35VuuK2kNV6NtGJn5C A004gTBGwAPG4yGGlgEOzHd440YxXHopPjeNTqvbtyR+3tZ2Djg4y9kaOjtD4kvp TJJYgd5as26sHctEtFHB1TTaMbFcFfIyKwJPB+gzfkMpoOINiqW1O98RDfVBId8T qS8m1wd/FY5exPqLrdGXt57p7nvdYl0LgXLIPTyg0pwcoiQA9w2TwVryfasJya0x w7nM+IB3ZtOhv8xKBTLi2W4brif1U5qg+3aHr7eyHu8I6zNOYEjDGEAvoZrYIESa xw8brw5+H6DR802t+l2LyNq3swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2/t49n nik4ESzXKxNkdeVHOb7mMB8GA1UdIwQYMBaAFLvaKlK1BI8aiqu/XCQXJgEnfLLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GMjYwMTRFOENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4cUtxNzljSkJjbUFTZDhz dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GMjYwMTRFOENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4 cUtxNzljSkJjbUFTZDhzdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByzO9Dm6BkjvJ4OBEd3KPOInTLkRvt51xLh1DB0pMDciVKEEzGigOl q6zCvWEVPMPKpJaDZmM1AFu3XpOdA2nWcicXXJ+izRy9Yelf0vGzlqixm1me+Rxe FYec8GQPTlB/6XxXTuTi59FcNoQPubj58zjDp82KmdNSJ+BhLLnGvJU/qEVxpKwo ZbMdDx9JESY9SGSL840oJnyVh9o0GHv+tV5jQWEwCbsdUCBybb5vzLkdNiytkGCV WZMe0Mtbt51CUY7wvVG4nbO2XMZDq3AwWmkm/EQoMHIRXy58pbc6s/Hd/7I49xj3 EA5VGUvRa6lL1Yoj2/aN33JEw2ykjZFm -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:09 2025 by rpki-client