$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft File: bUGUPlFfU_mSYZyH8COTgRJT3mc.mft (raw, json) Hash identifier: uNhyR440eFplICf2q6oi/HO0bJwJgTmQEIEJxR3xK0o= Subject key identifier: A5:3A:BC:49:78:BB:92:2A:CD:6A:2A:55:A7:41:CD:0F:6C:6D:A2:E2 Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67 Certificate issuer: /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft Manifest number: 013D Signing time: Sat 23 Aug 2025 04:37:16 +0000 Manifest this update: Sat 23 Aug 2025 04:37:16 +0000 Manifest next update: Sat 30 Aug 2025 04:37:16 +0000 Files and hashes: 1: bUGUPlFfU_mSYZyH8COTgRJT3mc.crl (hash: css/n86rYxyX4Sq8pAPk6DUAjfH/QCr9heN4CeHOQp4=) 2: 038457CEA3A011EEBE44947FC4F9AE02.roa (hash: PgCUtYUopFfJUcc6oCyLffXra/44Q+4sS+exi8w3QBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915216F, serialNumber=6D41943E515F53F992619C87F02393811253DE67 Validity Not Before: Aug 23 04:37:16 2025 GMT Not After : Aug 30 04:37:16 2025 GMT Subject: CN=68a9457c-f763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b4:64:8e:74:07:09:19:53:9d:4e:87:9e:f1: a7:bd:d6:cb:fb:fc:34:e8:55:c3:ac:50:5c:36:77: 42:d2:c3:60:f5:41:98:68:29:9c:e1:3a:78:ef:d3: cd:19:e0:2e:ed:b2:70:f2:10:bd:d7:f4:0b:58:29: 90:45:e1:6c:4d:fd:63:0f:67:e4:a2:59:07:85:da: 25:b3:44:39:66:35:51:dc:45:f1:4e:cd:55:04:8b: fd:5b:6c:61:55:73:c5:09:7a:4b:6b:4b:bc:6c:a1: 3f:77:ed:3a:05:d2:af:a1:c1:34:e7:dd:bc:5b:ca: 5f:02:70:f0:6d:0d:71:37:47:4d:a3:a4:e6:72:47: 2f:dc:4b:b8:85:fd:9a:3e:4f:84:e3:86:f2:6b:c9: 48:f4:7a:f7:10:25:42:59:b7:01:1a:06:7d:d7:2e: cb:c5:fe:75:c4:6e:58:8b:aa:3c:77:7d:26:57:f1: 1e:1f:d3:60:ce:3f:0c:9a:72:2f:ac:a1:0f:6c:dc: e0:ee:4e:cc:e4:b4:4d:4a:8f:8e:db:72:2d:e7:16: f6:ca:f2:17:50:1b:8f:9b:c6:ae:77:2f:18:32:71: 08:66:3a:5e:51:e6:22:b0:33:2d:fd:3b:97:e8:f6: 77:26:92:d1:2d:ae:a9:3a:ee:6f:9f:82:64:24:01: 43:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3A:BC:49:78:BB:92:2A:CD:6A:2A:55:A7:41:CD:0F:6C:6D:A2:E2 X509v3 Authority Key Identifier: keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:34:6f:f8:2e:2c:b8:c3:58:b3:26:b6:ea:2f:8a:7c:88:95: 82:38:39:e5:3e:51:75:f1:25:37:87:79:41:21:cc:e9:ff:f4: 0d:3f:0d:21:c6:17:2a:8c:89:68:fc:74:71:8b:32:4a:3b:16: f1:ea:bb:7c:c4:54:0d:8f:9c:67:86:7c:da:95:0b:e9:f6:79: 06:ae:56:a8:1c:0e:80:ce:cc:f4:6d:f9:db:74:89:8a:c1:2d: a6:3a:d8:4a:00:38:70:d3:f2:f1:ca:aa:00:a6:d8:ce:58:f9: 77:eb:60:93:50:12:a2:37:ae:b3:9c:fb:70:cd:ab:a1:fc:42: 1c:9d:34:cb:e1:8f:45:f2:92:15:ce:b9:fe:6a:fb:aa:af:85: d6:d6:59:d8:47:e3:81:e5:b0:84:75:d1:b5:a6:2b:4b:ff:c1: f7:47:a1:98:fe:c6:a8:f1:e8:b7:cf:d7:d6:62:f9:09:97:4a: 02:00:70:08:8b:0d:0b:07:67:d2:d7:49:b1:2a:0f:e7:ee:ed: 37:59:46:d9:da:4e:fb:80:4f:ad:da:3c:cd:09:43:68:de:38: f4:fa:56:aa:17:e9:2e:bd:36:47:62:00:f6:c3:41:15:93:d5: ad:4a:d1:f2:23:cf:28:ac:9d:a3:e0:03:2d:36:71:40:75:96: 34:46:03:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIxNkYxMTAvBgNVBAUTKDZENDE5NDNFNTE1RjUzRjk5MjYxOUM4N0YwMjM5Mzgx MTI1M0RFNjcwHhcNMjUwODIzMDQzNzE2WhcNMjUwODMwMDQzNzE2WjAYMRYwFAYD VQQDEw02OGE5NDU3Yy1mNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLRkjnQHCRlTnU6HnvGnvdbL+/w06FXDrFBcNndC0sNg9UGYaCmc4Tp479PN GeAu7bJw8hC91/QLWCmQReFsTf1jD2fkolkHhdols0Q5ZjVR3EXxTs1VBIv9W2xh VXPFCXpLa0u8bKE/d+06BdKvocE05928W8pfAnDwbQ1xN0dNo6Tmckcv3Eu4hf2a Pk+E44bya8lI9Hr3ECVCWbcBGgZ91y7Lxf51xG5Yi6o8d30mV/EeH9Ngzj8MmnIv rKEPbNzg7k7M5LRNSo+O23It5xb2yvIXUBuPm8audy8YMnEIZjpeUeYisDMt/TuX 6PZ3JpLRLa6pOu5vn4JkJAFDPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU6vEl4 u5IqzWoqVadBzQ9sbaLiMB8GA1UdIwQYMBaAFG1BlD5RX1P5kmGch/Ajk4ESU95n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjE2Ri8xMUIyQzgwQUEz OUUxMUVFOURDNzFDNjBDNEY5QUUwMi9iVUdVUGxGZlVfbVNZWnlIOENPVGdSSlQz bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JVR1VQbEZmVV9tU1laeUg4Q09UZ1JKVDNtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjE2Ri8xMUIyQzgwQUEzOUUxMUVFOURDNzFDNjBDNEY5QUUwMi9iVUdVUGxGZlVf bVNZWnlIOENPVGdSSlQzbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPNG/4Liy4w1izJrbqL4p8iJWCODnlPlF18SU3h3lBIczp//QNPw0h xhcqjIlo/HRxizJKOxbx6rt8xFQNj5xnhnzalQvp9nkGrlaoHA6Azsz0bfnbdImK wS2mOthKADhw0/LxyqoAptjOWPl362CTUBKiN66znPtwzauh/EIcnTTL4Y9F8pIV zrn+avuqr4XW1lnYR+OB5bCEddG1pitL/8H3R6GY/sao8ei3z9fWYvkJl0oCAHAI iw0LB2fS10mxKg/n7u03WUbZ2k77gE+t2jzNCUNo3jj0+laqF+kuvTZHYgD2w0EV k9WtStHyI88orJ2j4AMtNnFAdZY0RgO3 -----END CERTIFICATE-----Generated at Sat Aug 23 22:34:59 2025 by rpki-client