$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft File: 6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft (raw, json) Hash identifier: MshFUI1eaLptRAAnsOEbpM3M9xgY7EbR0GXo9bXqReY= Subject key identifier: C2:78:2C:8A:74:F6:43:D5:AC:AF:B9:54:E1:5E:7A:C7:4B:93:70:1D Authority key identifier: EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A Certificate issuer: /CN=A914541C/serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft Manifest number: 0109 Signing time: Sat 23 Aug 2025 05:08:45 +0000 Manifest this update: Sat 23 Aug 2025 05:08:44 +0000 Manifest next update: Sat 30 Aug 2025 05:08:44 +0000 Files and hashes: 1: 6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl (hash: DJoOtOkVXZ5RLK4LM355Y6mvjtQI3q6DTI44eFdOT6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914541C, serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A Validity Not Before: Aug 23 05:08:44 2025 GMT Not After : Aug 30 05:08:44 2025 GMT Subject: CN=68a94cdd-7312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:15:ee:95:a7:dd:8f:58:c1:e1:ce:32:44: 4d:5c:56:7e:f8:83:97:7b:8c:8b:b8:5f:0f:77:e8: 25:16:4e:38:0f:de:1d:32:d0:8c:a3:3c:06:d7:95: a5:a7:f6:92:02:59:7f:94:ff:f8:b2:ff:c2:8a:37: 5d:ae:2f:c2:3d:5d:f5:3d:e5:ca:68:2b:37:6f:87: d5:d6:2a:01:cd:04:fd:fc:b9:13:86:af:58:89:37: ef:f4:41:1c:d3:af:7a:e6:71:45:5c:e3:fb:01:b9: 44:c1:71:66:5c:56:3c:e3:be:6c:d6:8c:0b:df:5a: c0:4e:80:cc:e3:fc:c2:62:cc:0e:98:34:fe:2a:2b: 50:25:6a:2e:06:b8:30:40:2c:bd:40:14:14:64:cb: 79:df:61:df:a9:a9:e1:fb:34:0e:4c:4a:f0:4d:fb: d3:f6:3b:23:44:43:ed:07:6e:2b:93:19:cc:68:90: 59:42:57:b9:5c:85:22:29:6c:76:c7:30:3b:37:af: 62:10:43:b0:e9:e1:a8:d5:47:fb:a0:69:0f:42:14: b5:b4:ed:1c:96:fd:a6:1e:ac:ec:58:bc:c3:10:0e: df:83:ac:79:2d:4c:0a:3d:32:58:df:e5:8a:94:cc: b8:48:a0:67:55:e1:5f:28:a4:fc:6f:a8:87:17:06: fe:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:78:2C:8A:74:F6:43:D5:AC:AF:B9:54:E1:5E:7A:C7:4B:93:70:1D X509v3 Authority Key Identifier: keyid:EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a8:6a:f2:a5:07:5b:bb:1c:21:fa:dd:7b:00:f1:8b:9c:2c: d4:2d:60:be:aa:dc:c0:c4:1b:ff:d5:86:9a:2a:7d:52:a8:98: 09:dc:dd:b7:61:c1:e0:a0:2d:3c:35:1b:0e:b9:c5:7a:c2:e7: c3:4a:7f:5c:29:e8:28:11:95:c2:0c:aa:bd:0e:37:77:2e:8b: ee:c3:5b:7f:f5:51:0a:e5:e1:a1:81:81:a2:32:59:89:7f:5f: 5c:81:ed:3e:91:a1:cd:cf:40:f2:69:d3:e3:ce:4b:41:a2:6d: 48:fc:ed:09:d5:b4:45:09:67:48:db:5e:62:a2:0c:7d:a3:3e: ee:97:30:0b:cd:28:f5:8c:6d:4b:7c:77:ec:2d:51:c8:14:2c: 83:0a:ac:84:4b:72:ce:f0:21:6b:2e:09:44:6d:d1:61:ce:0c: 1b:90:35:62:2c:98:7c:ba:87:39:1b:f3:fe:f7:a1:a6:3a:8c: c5:8c:9b:41:61:20:8d:8f:5f:d6:e9:8b:61:2e:26:a5:e9:23: 6a:6b:48:f9:2f:01:c8:c9:70:45:eb:88:78:c0:d0:81:b4:78: c4:3b:fd:f9:c8:9d:af:23:cd:d0:7f:d1:c1:c8:93:66:0a:15: 95:b0:52:c7:7b:90:3a:68:71:02:b1:f3:33:50:40:9f:b9:75: 3a:d5:55:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0MUMxMTAvBgNVBAUTKEVBRTk1NEY5NEQxQjQ3QkZGQjMzMTM0QjIzQUE2QTkx MDNFOEZCOUEwHhcNMjUwODIzMDUwODQ0WhcNMjUwODMwMDUwODQ0WjAYMRYwFAYD VQQDEw02OGE5NGNkZC03MzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zIV7pWn3Y9YweHOMkRNXFZ++IOXe4yLuF8Pd+glFk44D94dMtCMozwG15Wl p/aSAll/lP/4sv/Cijddri/CPV31PeXKaCs3b4fV1ioBzQT9/LkThq9YiTfv9EEc 06965nFFXOP7AblEwXFmXFY8475s1owL31rAToDM4/zCYswOmDT+KitQJWouBrgw QCy9QBQUZMt532Hfqanh+zQOTErwTfvT9jsjREPtB24rkxnMaJBZQle5XIUiKWx2 xzA7N69iEEOw6eGo1Uf7oGkPQhS1tO0clv2mHqzsWLzDEA7fg6x5LUwKPTJY3+WK lMy4SKBnVeFfKKT8b6iHFwb+kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJ4LIp0 9kPVrK+5VOFeesdLk3AdMB8GA1UdIwQYMBaAFOrpVPlNG0e/+zMTSyOqapED6Pua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQxQy81RDQzOThEOEU3 MkYxMUVFQjcyQzZFNjhDNEY5QUUwMi82dWxVLVUwYlI3XzdNeE5MSTZwcWtRUG8t NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ1bFUtVTBiUjdfN014TkxJNnBxa1FQby01by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTQxQy81RDQzOThEOEU3MkYxMUVFQjcyQzZFNjhDNEY5QUUwMi82dWxVLVUwYlI3 XzdNeE5MSTZwcWtRUG8tNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2qGrypQdbuxwh+t17APGLnCzULWC+qtzAxBv/1YaaKn1SqJgJ3N23 YcHgoC08NRsOucV6wufDSn9cKegoEZXCDKq9Djd3Lovuw1t/9VEK5eGhgYGiMlmJ f19cge0+kaHNz0DyadPjzktBom1I/O0J1bRFCWdI215iogx9oz7ulzALzSj1jG1L fHfsLVHIFCyDCqyES3LO8CFrLglEbdFhzgwbkDViLJh8uoc5G/P+96GmOozFjJtB YSCNj1/W6YthLial6SNqa0j5LwHIyXBF64h4wNCBtHjEO/35yJ2vI83Qf9HByJNm ChWVsFLHe5A6aHECsfMzUECfuXU61VXw -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:47 2025 by rpki-client