$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft File: u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json) Hash identifier: lF0eKTMxC/tHDjOzE42cs32+8HZ7NRZMPE1jEw35vbA= Subject key identifier: D3:C7:75:03:DF:8F:EC:BD:76:48:53:D9:CE:BD:12:49:DA:BB:9E:1F Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB Certificate issuer: /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft Manifest number: 0195 Signing time: Sat 23 Aug 2025 03:38:12 +0000 Manifest this update: Sat 23 Aug 2025 03:38:12 +0000 Manifest next update: Sat 30 Aug 2025 03:38:12 +0000 Files and hashes: 1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: M9k7+CvSO6LepMk5zocc0+ygVZmAGez7ytVeHvC0SaU=) 2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: zmGvDkLZWGz3q65KV7fFcAzSPYGn5RW36x5tc4+EFL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D28, serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Validity Not Before: Aug 23 03:38:12 2025 GMT Not After : Aug 30 03:38:12 2025 GMT Subject: CN=68a937a4-6e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a1:66:7a:d5:38:10:87:3f:4e:93:17:80:2f: 0a:c6:2e:69:5e:64:29:db:5f:8c:19:07:6b:3c:1a: c8:0b:0e:f9:62:4d:5d:4c:57:a9:1a:23:ee:2d:86: 60:ad:bc:53:27:ce:d4:11:20:df:88:85:3c:ae:4a: bb:a7:3d:1f:a5:da:4a:3f:b2:8c:11:02:0f:cd:ba: 78:c6:0f:21:cf:9f:b0:74:15:47:cc:86:f4:a7:b3: 1c:51:95:a3:8f:a6:a8:56:4b:96:1c:15:d8:da:45: 53:39:39:80:0c:38:5d:8f:75:f0:19:12:32:92:fc: 41:c7:30:1b:d2:07:ac:07:cb:a6:69:c5:ec:32:fc: 75:45:df:cf:f2:f5:13:82:70:df:37:be:b5:fc:8a: 07:38:bb:32:43:a4:03:a2:03:5d:ef:09:60:cf:45: 44:a4:71:bc:af:21:3d:5d:9f:77:7f:8c:ac:1e:96: 3f:76:e9:9d:17:1e:86:24:46:bb:d2:88:d4:91:83: 14:23:0c:bb:d4:95:94:e4:a2:0c:50:c4:dc:ec:42: aa:9c:c1:8f:f5:ba:6e:b6:c6:34:9e:60:6f:6d:65: 65:75:cb:0f:8e:b4:a5:ac:cf:51:9c:60:88:f2:7a: 95:e4:fb:5e:24:85:6a:ea:c6:ec:7d:39:89:b3:f1: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C7:75:03:DF:8F:EC:BD:76:48:53:D9:CE:BD:12:49:DA:BB:9E:1F X509v3 Authority Key Identifier: keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c7:62:97:3b:38:e1:05:18:3e:95:68:47:9c:12:ef:d3:66: 54:d1:ff:25:af:3e:a2:1d:35:76:27:3c:1d:2c:c6:3b:4d:63: 2e:ad:04:08:93:5c:bc:f5:67:16:89:ec:69:8f:c4:d8:3d:d2: ab:c3:2d:d2:f1:34:96:31:87:c8:c4:b0:5c:af:0c:89:ef:da: ad:31:46:17:e7:fe:c9:08:3b:dc:f1:a4:e7:7c:67:8c:32:92: 15:af:f3:62:2e:42:e9:d9:b3:0e:98:fe:7b:68:ff:61:1a:6a: f7:60:b1:ad:36:5b:5f:b2:f4:d9:3c:59:93:1f:9d:7b:38:0f: 63:97:87:14:b1:64:4b:1b:7f:5a:83:67:59:02:d9:9e:51:f0: 49:2a:c9:13:3b:c2:52:3c:50:e7:5b:89:f2:72:78:cf:a6:3a: 3d:eb:c1:9e:63:d2:a2:73:36:ff:e1:9e:53:ee:07:10:07:d2: d8:aa:48:66:88:2d:21:da:ba:46:23:e1:34:64:a3:0c:2f:dd: c1:5a:df:83:f1:2a:3b:d7:94:df:1b:c1:d4:71:2b:5a:91:c2: 36:d0:7d:a8:d1:a7:e1:60:2a:b2:67:f6:eb:25:48:dd:f9:a2: 3d:89:9b:e9:62:ee:ba:ad:fc:43:52:d0:08:9c:b9:11:fd:17: 08:a2:18:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMjgxMTAvBgNVBAUTKEJCNTc1NTVGODJBQTIwQTUxQzFCNDhGN0IyNkMzNTY3 RjVBMUU3QkIwHhcNMjUwODIzMDMzODEyWhcNMjUwODMwMDMzODEyWjAYMRYwFAYD VQQDEw02OGE5MzdhNC02ZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aFmetU4EIc/TpMXgC8Kxi5pXmQp21+MGQdrPBrICw75Yk1dTFepGiPuLYZg rbxTJ87UESDfiIU8rkq7pz0fpdpKP7KMEQIPzbp4xg8hz5+wdBVHzIb0p7McUZWj j6aoVkuWHBXY2kVTOTmADDhdj3XwGRIykvxBxzAb0gesB8umacXsMvx1Rd/P8vUT gnDfN761/IoHOLsyQ6QDogNd7wlgz0VEpHG8ryE9XZ93f4ysHpY/dumdFx6GJEa7 0ojUkYMUIwy71JWU5KIMUMTc7EKqnMGP9bputsY0nmBvbWVldcsPjrSlrM9RnGCI 8nqV5PteJIVq6sbsfTmJs/GHHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPHdQPf j+y9dkhT2c69Eknau54fMB8GA1UdIwQYMBaAFLtXVV+CqiClHBtI97JsNWf1oee7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQyOC9BRjkzRDE2MjIy MjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlLVWNHMGozc213MVpfV2g1 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxZFZYNEtxSUtVY0cwajNzbXcxWl9XaDU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQyOC9BRjkzRDE2MjIyMjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlL VWNHMGozc213MVpfV2g1N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFx2KXOzjhBRg+lWhHnBLv02ZU0f8lrz6iHTV2JzwdLMY7TWMurQQI k1y89WcWiexpj8TYPdKrwy3S8TSWMYfIxLBcrwyJ79qtMUYX5/7JCDvc8aTnfGeM MpIVr/NiLkLp2bMOmP57aP9hGmr3YLGtNltfsvTZPFmTH517OA9jl4cUsWRLG39a g2dZAtmeUfBJKskTO8JSPFDnW4nycnjPpjo968GeY9Kiczb/4Z5T7gcQB9LYqkhm iC0h2rpGI+E0ZKMML93BWt+D8So715TfG8HUcStakcI20H2o0afhYCqyZ/brJUjd +aI9iZvpYu66rfxDUtAInLkR/RcIohgo -----END CERTIFICATE-----Generated at Sat Aug 23 20:31:53 2025 by rpki-client