$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft File: _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json) Hash identifier: aLYXaKku5kQU4hrnh1SPtNBudl1zUXUus5AjkJv6GGw= Subject key identifier: 9E:26:DA:83:17:BE:E9:F0:A9:A2:45:0C:AE:D1:C9:05:A3:DB:4C:C2 Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE Certificate issuer: /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft Manifest number: 0835 Signing time: Fri 22 Aug 2025 20:54:08 +0000 Manifest this update: Fri 22 Aug 2025 20:54:08 +0000 Manifest next update: Fri 29 Aug 2025 20:54:08 +0000 Files and hashes: 1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: K7jiK8CFG9A3ZR7+QdaA65kRv5OGQDwKbqc2buU2sUw=) 2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: fmTA3xXjU3MtioARHLhk0XmrYZWzaoGTX30tUFAbkPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Validity Not Before: Aug 22 20:54:08 2025 GMT Not After : Aug 29 20:54:08 2025 GMT Subject: CN=68a8d8f0-2d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:3f:bd:a4:a4:2d:5f:c3:7a:76:6e:cd:94: 61:28:2c:29:8b:ae:68:bf:a4:6a:9d:bc:c4:b9:fb: 8b:e2:2d:dd:8c:16:91:72:31:6a:f9:c9:71:a9:65: 68:fb:9b:70:39:43:b7:23:d7:73:65:b0:73:d1:57: e0:f3:98:69:d0:11:87:4a:3e:27:56:3b:43:0f:03: 5c:aa:01:37:6f:0d:a2:04:09:e5:78:c1:ac:23:13: 2f:50:0e:8f:a4:69:91:cc:36:66:47:45:43:9d:d9: 40:a9:c3:3c:d4:bb:9b:6c:58:4d:91:71:8f:3e:4d: bb:1d:18:ed:70:95:87:6c:90:9f:31:9b:db:a9:49: 33:97:3a:fb:b9:0d:00:04:19:bc:7a:33:18:72:6d: 59:87:9e:66:4b:ee:05:bf:e9:89:3f:68:10:66:b6: 92:bc:e9:fc:32:6e:f8:f4:7e:93:bf:d4:33:38:9e: cf:50:34:ac:45:2e:e4:4e:68:12:4f:c7:a3:6e:c3: b8:f5:16:cd:1f:ca:26:5f:76:52:87:f6:bf:48:65: 9e:ca:d8:ca:e8:ae:5f:2e:b9:86:a1:14:25:7b:84: a9:fb:b0:be:e7:3e:76:19:c9:71:10:7f:d8:a6:fd: 83:13:e0:a4:bd:15:26:51:78:80:ef:bb:75:3d:fd: 31:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:26:DA:83:17:BE:E9:F0:A9:A2:45:0C:AE:D1:C9:05:A3:DB:4C:C2 X509v3 Authority Key Identifier: keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:eb:02:9b:1a:09:d0:58:10:b5:6a:06:02:54:f4:1b:59:1f: be:13:0f:a1:6f:ba:67:96:6d:0f:49:e2:b3:d0:16:60:94:e1: 81:a9:e6:13:db:cc:34:a0:1a:cf:48:7d:91:b0:a0:33:8c:bd: a1:a4:97:1e:17:bf:b9:d6:3d:e1:83:a5:cd:b2:e0:9d:0d:09: e7:8e:ed:6f:15:cd:44:fe:03:e3:82:3b:36:ac:27:19:20:a9: 3d:35:d7:1d:61:10:ea:e6:01:9b:17:06:0d:b5:d3:2a:c2:5c: 27:58:bd:31:21:7c:45:b0:dd:63:17:f8:24:d5:b2:21:d9:de: 74:b6:2d:aa:46:a5:a5:88:a5:c4:eb:00:ba:4d:82:78:4e:24: 93:8d:ca:c0:0a:f5:50:dc:7b:4d:43:a9:5d:1b:16:ee:59:77: 28:43:b9:bf:2f:95:cc:2d:b0:e9:32:a7:f6:69:bb:4c:ea:43: 1d:0a:18:d9:1d:25:ee:d8:cc:46:29:98:51:1d:67:de:3c:67: 06:6b:52:e6:25:66:97:91:1b:87:37:33:74:e6:ff:8b:d0:83: 68:dc:c8:e2:6c:e8:00:24:c5:06:8c:e2:41:3e:9d:40:3a:0f: b1:d0:b6:8f:a7:25:a5:dd:ba:00:4c:43:1a:6a:d4:31:e7:d7: 72:42:9b:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI0NjIxMTAvBgNVBAUTKEZENEQ4QzYzOUFEQzE1ODQ3QzdCNDkxMTE1OURFNzFC RDgxMzkzQUUwHhcNMjUwODIyMjA1NDA4WhcNMjUwODI5MjA1NDA4WjAYMRYwFAYD VQQDEw02OGE4ZDhmMC0yZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0k/vaSkLV/DenZuzZRhKCwpi65ov6RqnbzEufuL4i3djBaRcjFq+clxqWVo +5twOUO3I9dzZbBz0Vfg85hp0BGHSj4nVjtDDwNcqgE3bw2iBAnleMGsIxMvUA6P pGmRzDZmR0VDndlAqcM81LubbFhNkXGPPk27HRjtcJWHbJCfMZvbqUkzlzr7uQ0A BBm8ejMYcm1Zh55mS+4Fv+mJP2gQZraSvOn8Mm749H6Tv9QzOJ7PUDSsRS7kTmgS T8ejbsO49RbNH8omX3ZSh/a/SGWeytjK6K5fLrmGoRQle4Sp+7C+5z52GclxEH/Y pv2DE+CkvRUmUXiA77t1Pf0xFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4m2oMX vunwqaJFDK7RyQWj20zCMB8GA1UdIwQYMBaAFP1NjGOa3BWEfHtJERWd5xvYE5Ou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjQ2Mi8zMkM3NTdFNkRD NDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZUjhlMGtSRlozbkc5Z1Rr NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VMk1ZNXJjRllSOGUwa1JGWjNuRzlnVGs2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjQ2Mi8zMkM3NTdFNkRDNDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZ UjhlMGtSRlozbkc5Z1RrNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW6wKbGgnQWBC1agYCVPQbWR++Ew+hb7pnlm0PSeKz0BZglOGBqeYT 28w0oBrPSH2RsKAzjL2hpJceF7+51j3hg6XNsuCdDQnnju1vFc1E/gPjgjs2rCcZ IKk9NdcdYRDq5gGbFwYNtdMqwlwnWL0xIXxFsN1jF/gk1bIh2d50ti2qRqWliKXE 6wC6TYJ4TiSTjcrACvVQ3HtNQ6ldGxbuWXcoQ7m/L5XMLbDpMqf2abtM6kMdChjZ HSXu2MxGKZhRHWfePGcGa1LmJWaXkRuHNzN05v+L0INo3MjibOgAJMUGjOJBPp1A Og+x0LaPpyWl3boATEMaatQx59dyQpuW -----END CERTIFICATE-----Generated at Sat Aug 23 09:05:19 2025 by rpki-client