$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft File: R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json) Hash identifier: vK/0573aj55DPBRt6+HI+eYXNZ0QZqvSmH4wxVmtA0k= Subject key identifier: A8:A2:12:28:BA:3E:F6:32:10:61:5A:0E:42:BF:88:66:EA:28:FE:ED Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 Certificate issuer: /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft Manifest number: 011B Signing time: Sat 23 Aug 2025 04:58:36 +0000 Manifest this update: Sat 23 Aug 2025 04:58:35 +0000 Manifest next update: Sat 30 Aug 2025 04:58:35 +0000 Files and hashes: 1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: rybit00gjl1m4AZE7EBUmUun0tsbsPWRzyGMX/LUT5k=) 2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: GLQc94rusVtQbATmFzKX5DyXm0E80+RpBsTaqBZ5TIc=) 3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: g+h2X039YfWFdq3nneNF8fX2UZhaS8/1cDtSjJwB84Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5 Validity Not Before: Aug 23 04:58:35 2025 GMT Not After : Aug 30 04:58:35 2025 GMT Subject: CN=68a94a7b-248d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:f4:a5:d8:cd:3b:86:95:e6:88:b6:55:73: cc:c3:59:9e:20:23:3b:de:45:49:9f:c5:2f:6b:20: ba:fc:08:7c:b0:d9:1a:87:b6:d5:19:64:cc:35:9e: 26:05:c0:8b:72:56:17:8b:a1:0b:48:93:bb:ac:7a: 52:8e:da:1e:98:31:8f:e3:49:b8:7b:36:f6:b5:15: 9c:8a:65:fc:70:64:c0:cd:2f:b1:5c:0b:a2:ef:ff: eb:99:14:54:ab:4b:77:c6:2f:5a:77:a5:d3:62:fb: b1:62:4b:b7:c4:cf:19:31:dd:c6:b9:e9:eb:c3:e8: 18:14:f2:61:fb:74:76:b0:89:a5:b0:6a:1f:0d:74: c8:f3:27:86:4d:c2:14:ea:b0:35:d6:b3:08:d5:f6: d6:64:4c:14:ce:3c:42:c4:0b:c7:dd:a1:d3:cf:c4: 78:cd:6e:40:5d:0e:27:9e:32:18:2c:bd:75:cd:29: 79:9c:2c:8b:49:96:d8:a9:00:ca:3d:af:da:f1:65: 57:68:05:f5:7a:7e:f3:c8:38:14:1d:fc:69:14:12: aa:4c:a2:6b:27:4f:da:c8:1e:ea:4c:d5:d5:97:40: 3a:8e:12:66:cb:c0:e3:dc:d3:02:8c:38:dd:cb:80: d6:9d:17:08:0b:94:da:88:51:c5:11:7a:40:28:3d: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A2:12:28:BA:3E:F6:32:10:61:5A:0E:42:BF:88:66:EA:28:FE:ED X509v3 Authority Key Identifier: keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:30:ec:dc:54:1c:3b:8b:47:7f:a1:78:b5:ca:bc:a6:a1:ca: 66:99:0a:4c:5d:42:60:a6:98:98:ff:eb:0f:bd:11:34:b2:e8: 1c:7a:7e:c9:e3:08:ef:9a:05:e7:1a:97:73:de:f3:d7:c7:cc: 59:0e:39:05:4f:14:51:32:1e:b4:06:f8:df:7c:e2:af:58:2c: 82:d6:b8:d2:1d:e9:21:22:98:e6:4e:e2:6f:41:fd:fb:f9:51: ec:d8:0d:f9:4e:d6:b4:4e:dc:5c:12:05:78:81:3d:f5:75:cc: ee:33:c8:36:50:c1:2b:6a:d5:46:15:ca:5f:e3:17:7f:14:e6: 4d:77:0f:7b:32:42:e2:37:e1:5b:21:a6:e2:82:bb:0e:3d:d1: 81:b2:73:e2:b0:9f:98:7b:50:ab:21:0e:94:64:98:1b:f0:eb: e3:61:a0:17:be:84:e6:b1:a5:48:fb:20:1f:cc:17:1b:d8:69: e2:d1:ef:a2:92:a0:8e:f7:2a:c3:2f:a6:57:6a:9b:47:dc:ae: 13:54:7c:ce:62:24:6d:19:ad:91:4f:a4:75:e1:61:5f:b0:57: b3:98:64:2a:3d:0e:b4:c0:7a:3e:44:8c:ff:af:b0:ae:24:57: 30:3f:0f:4d:72:78:b0:4f:28:fd:19:41:61:44:c6:0a:0c:17: 40:fc:4f:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDQ3RjUwQzk1OEJGOUNGNTQ1QzYwMUFERUIwNEY4QTA1 RTEwMUQ5QTUwHhcNMjUwODIzMDQ1ODM1WhcNMjUwODMwMDQ1ODM1WjAYMRYwFAYD VQQDEw02OGE5NGE3Yi0yNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArG30pdjNO4aV5oi2VXPMw1meICM73kVJn8UvayC6/Ah8sNkah7bVGWTMNZ4m BcCLclYXi6ELSJO7rHpSjtoemDGP40m4ezb2tRWcimX8cGTAzS+xXAui7//rmRRU q0t3xi9ad6XTYvuxYku3xM8ZMd3Guenrw+gYFPJh+3R2sImlsGofDXTI8yeGTcIU 6rA11rMI1fbWZEwUzjxCxAvH3aHTz8R4zW5AXQ4nnjIYLL11zSl5nCyLSZbYqQDK Pa/a8WVXaAX1en7zyDgUHfxpFBKqTKJrJ0/ayB7qTNXVl0A6jhJmy8Dj3NMCjDjd y4DWnRcIC5TaiFHFEXpAKD1wnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiiEii6 PvYyEGFaDkK/iGbqKP7tMB8GA1UdIwQYMBaAFEf1DJWL+c9UXGAa3rBPigXhAdml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC84RjUyNDg4RUQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9SX1VNbFl2NXoxUmNZQnJlc0UtS0JlRUIy YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JfVU1sWXY1ejFSY1lCcmVzRS1LQmVFQjJhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC84RjUyNDg4RUQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9SX1VNbFl2NXox UmNZQnJlc0UtS0JlRUIyYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3MOzcVBw7i0d/oXi1yrymocpmmQpMXUJgppiY/+sPvRE0sugcen7J 4wjvmgXnGpdz3vPXx8xZDjkFTxRRMh60BvjffOKvWCyC1rjSHekhIpjmTuJvQf37 +VHs2A35Tta0TtxcEgV4gT31dczuM8g2UMEratVGFcpf4xd/FOZNdw97MkLiN+Fb IabigrsOPdGBsnPisJ+Ye1CrIQ6UZJgb8OvjYaAXvoTmsaVI+yAfzBcb2Gni0e+i kqCO9yrDL6ZXaptH3K4TVHzOYiRtGa2RT6R14WFfsFezmGQqPQ60wHo+RIz/r7Cu JFcwPw9NcniwTyj9GUFhRMYKDBdA/E9t -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:47 2025 by rpki-client