$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json) Hash identifier: VQmlxWin6VUMx7i+yB/qrd9BktBbVIYYdDS5GX411bA= Subject key identifier: 99:3D:6D:FB:2F:FD:6A:34:12:66:C9:8A:9A:9A:0F:46:69:F7:FE:55 Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 0396 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft Manifest number: 0386 Signing time: Sat 23 Aug 2025 01:07:52 +0000 Manifest this update: Sat 23 Aug 2025 01:07:51 +0000 Manifest next update: Sat 30 Aug 2025 01:07:51 +0000 Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: wD+zlxvjTRmbR9jUMx45y7m5Yqo6kcefqfpnHPLTTJE=) 2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: TYw7pVipg0tBF5NEai8ggwulJFGrtpH064BJjOwSImo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: Aug 23 01:07:51 2025 GMT Not After : Aug 30 01:07:51 2025 GMT Subject: CN=68a91467-68e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:a4:cd:0c:70:8a:b2:2b:b6:c1:8c:33:ff: 3f:83:d1:88:5f:9f:fb:37:b9:fa:f0:f8:d8:ab:56: a4:0b:36:b0:56:66:83:b7:15:25:18:8a:fb:fd:26: d8:7f:0e:9c:61:8d:55:c8:a2:a3:2b:8a:63:f1:98: f4:50:b2:21:42:0d:2d:01:b7:79:77:ca:86:51:05: 7b:f7:20:ef:a7:12:70:76:ed:3a:f0:d0:f0:1b:92: 9f:48:a2:d3:34:d3:cc:5d:18:20:50:68:be:d2:bc: aa:e4:f6:16:fe:a9:95:3b:68:af:21:6c:2a:9c:1c: f9:f4:24:07:2a:48:30:25:b2:d2:6d:4a:04:fd:11: 2e:ca:f6:f5:0c:b2:b7:8b:94:88:b3:26:70:b4:88: 35:a3:c8:1b:3d:d5:ef:8b:07:59:fc:91:f5:9a:a6: 98:09:dc:ea:fc:6b:56:a8:e7:6d:4c:fa:85:2a:44: 87:ba:db:93:77:7f:31:43:7f:c9:69:a6:91:b5:89: 9a:25:58:5c:7a:75:63:ea:47:94:42:40:34:f0:db: ed:5b:e6:3e:84:28:06:c8:41:6e:7d:1b:90:2f:cb: bb:99:b6:9b:e0:6a:b2:c8:75:64:94:99:27:bd:9b: 9d:bb:c4:14:51:79:c4:0c:bc:e2:9d:8e:20:e4:22: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3D:6D:FB:2F:FD:6A:34:12:66:C9:8A:9A:9A:0F:46:69:F7:FE:55 X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:89:47:d9:63:88:ed:cd:af:23:d4:63:9f:2c:34:9e:7a:c5: 64:da:78:a9:ec:1d:77:8d:53:c4:6b:4b:37:2e:47:36:ae:2a: cd:4f:58:bb:cc:5f:63:69:ab:8a:ce:88:d0:55:d9:91:d1:ba: 16:38:3c:90:32:2c:45:a4:e8:1f:77:6b:80:4f:cf:a3:f0:75: 87:6e:ad:2d:3a:f7:a3:dc:a6:cd:cd:08:5b:0a:01:8e:6a:8e: 32:94:77:aa:e4:93:e2:0c:2f:07:7f:81:12:8b:4c:71:0d:af: b9:49:bf:60:09:02:87:20:d0:49:97:ca:1f:bb:5e:8b:e4:ec: f2:b0:00:cc:bd:eb:d1:68:9a:18:81:ac:60:f5:38:5d:e9:02: a6:b5:df:7b:40:15:02:e6:fd:45:a7:50:1c:4f:52:eb:01:46: 79:83:7c:a4:e2:b4:bd:c4:8a:9d:f4:9f:41:75:0a:24:ec:3a: 4a:cf:63:f0:37:44:72:e0:79:ec:fa:62:3e:2d:09:b1:cf:df: c3:68:94:62:b2:a0:6d:21:84:cc:fc:22:e1:a1:7b:67:d0:08: 65:dc:7e:f3:75:30:77:e8:b7:b7:29:d1:f4:ee:33:f6:ff:08: 67:55:04:3f:fb:80:0e:bd:be:1e:c7:9b:05:45:da:12:80:1f: 93:b2:4d:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjUwODIzMDEwNzUxWhcNMjUwODMwMDEwNzUxWjAYMRYwFAYD VQQDEw02OGE5MTQ2Ny02OGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/qkzQxwirIrtsGMM/8/g9GIX5/7N7n68PjYq1akCzawVmaDtxUlGIr7/SbY fw6cYY1VyKKjK4pj8Zj0ULIhQg0tAbd5d8qGUQV79yDvpxJwdu068NDwG5KfSKLT NNPMXRggUGi+0ryq5PYW/qmVO2ivIWwqnBz59CQHKkgwJbLSbUoE/REuyvb1DLK3 i5SIsyZwtIg1o8gbPdXviwdZ/JH1mqaYCdzq/GtWqOdtTPqFKkSHutuTd38xQ3/J aaaRtYmaJVhcenVj6keUQkA08NvtW+Y+hCgGyEFufRuQL8u7mbab4GqyyHVklJkn vZudu8QUUXnEDLzinY4g5CJ9YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJk9bfsv /Wo0EmbJipqaD0Zp9/5VMB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRBNC84QUQ0OUY3RUJBRTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5o bmExRy1MWUowMFJQdG83VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxiUfZY4jtza8j1GOfLDSeesVk2nip7B13jVPEa0s3Lkc2rirNT1i7 zF9jaauKzojQVdmR0boWODyQMixFpOgfd2uAT8+j8HWHbq0tOvej3KbNzQhbCgGO ao4ylHeq5JPiDC8Hf4ESi0xxDa+5Sb9gCQKHINBJl8ofu16L5OzysADMvevRaJoY gaxg9Thd6QKmtd97QBUC5v1Fp1AcT1LrAUZ5g3yk4rS9xIqd9J9BdQok7DpKz2Pw N0Ry4Hns+mI+LQmxz9/DaJRisqBtIYTM/CLhoXtn0Ahl3H7zdTB36Le3KdH07jP2 /whnVQQ/+4AOvb4ex5sFRdoSgB+Tsk2D -----END CERTIFICATE-----Generated at Sat Aug 23 17:24:05 2025 by rpki-client