$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft File: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json) Hash identifier: 6poCmXiyev9FjAyUYJmyNKjG8tTjpBtawfeXHB9WG5Y= Subject key identifier: 35:6F:9D:6C:68:39:2C:30:AC:2E:56:16:23:78:1E:1D:B2:F1:7C:A3 Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 Certificate issuer: /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft Manifest number: 96 Signing time: Sat 23 Aug 2025 06:43:12 +0000 Manifest this update: Sat 23 Aug 2025 06:43:12 +0000 Manifest next update: Sat 30 Aug 2025 06:43:12 +0000 Files and hashes: 1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: ++D9X9ODT60RTyZy2eTB+zAxdQ3NaFuDbrrDtd/AIhA=) 2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636 Validity Not Before: Aug 23 06:43:12 2025 GMT Not After : Aug 30 06:43:12 2025 GMT Subject: CN=68a96300-152c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:86:af:ee:42:8c:fe:90:8a:9d:7f:a0:39: 39:02:d4:91:72:23:1e:69:b7:f7:ad:e7:7f:ac:da: 7c:b8:2a:aa:88:fc:84:23:03:91:c6:3f:44:c1:d6: f0:f5:71:08:25:7e:6b:e3:e4:bf:85:8c:c1:79:b3: fc:60:4c:14:e9:e1:c0:f1:59:a9:91:9d:1e:fe:26: a6:cf:6a:2b:e4:4d:91:fc:a1:1a:21:67:85:af:4c: 03:31:f5:cc:f4:82:c4:80:7e:af:d1:e1:0a:a8:e6: 98:93:d2:bf:de:87:2d:e7:b1:30:7c:b9:dc:71:c5: 3d:1d:72:20:6c:e5:08:d1:d4:56:78:a9:12:01:47: 75:68:a8:a9:76:d6:74:04:69:c5:7d:d8:c7:b0:3d: 47:28:bc:77:43:85:05:98:c9:19:29:c3:9c:ab:a5: 53:cc:86:67:10:44:44:e3:12:88:bd:37:25:81:4f: 27:05:92:dc:11:38:fe:3c:32:bc:4e:5b:aa:ff:62: 86:1f:44:23:a2:6e:32:a6:08:cd:3a:d3:05:08:62: c1:6b:8d:c1:f3:92:98:c8:a0:9e:a1:a3:42:64:65: ce:53:30:77:97:fa:58:e3:16:c5:8e:99:54:53:e9: 82:52:58:48:ee:fe:42:7c:b0:4f:77:12:6f:0d:bf: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6F:9D:6C:68:39:2C:30:AC:2E:56:16:23:78:1E:1D:B2:F1:7C:A3 X509v3 Authority Key Identifier: keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:13:38:2d:1b:cb:80:d5:48:54:54:ff:52:8b:17:72:a2:cb: 7c:c0:7b:fc:ee:35:48:bd:af:ef:4d:b5:c7:66:9d:f6:92:98: 56:4d:26:e2:58:a6:d2:21:b4:16:05:7f:ac:0c:0b:8d:cb:89: 65:c6:89:d1:f9:a4:e0:35:1b:be:79:79:62:aa:6d:a9:63:82: f4:51:8d:f8:77:2a:35:c2:de:a3:79:32:02:b2:ee:0e:30:b7: 3e:4d:35:69:f2:37:1f:fe:ee:e0:03:62:6c:e8:0d:b5:87:eb: a2:77:9c:85:c7:86:56:29:aa:8c:d9:c6:fc:84:f3:59:5d:19: 73:d8:4a:dd:2d:f9:84:92:86:aa:ae:47:ee:8e:c0:47:84:97: 6d:b9:35:9b:bf:8d:e9:d7:e3:6f:b5:0d:b5:0c:28:22:c6:ab: 88:d8:72:ab:fb:28:a0:70:34:71:e9:4a:10:52:cc:15:00:92: 26:45:4c:d5:6a:ae:b0:ef:f6:a7:31:f0:aa:d9:79:c8:74:72: 6a:b9:bd:60:0a:13:3a:3a:21:df:1d:4a:53:a6:ff:21:93:fd: 0f:bb:24:64:96:e7:34:32:2f:0a:b6:3c:13:cc:19:83:73:8c: 17:7a:fe:50:e9:44:14:3d:dd:23:20:b5:9a:b6:72:d3:9e:d4: 97:45:f1:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyNUQxMTAvBgNVBAUTKEI4OEJENUQ1QjlCODY0NkQ4RTQzRTY0QzEyN0I4NDgx QTQxOEM2MzYwHhcNMjUwODIzMDY0MzEyWhcNMjUwODMwMDY0MzEyWjAYMRYwFAYD VQQDEw02OGE5NjMwMC0xNTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJ2Gr+5CjP6Qip1/oDk5AtSRciMeabf3red/rNp8uCqqiPyEIwORxj9Ewdbw 9XEIJX5r4+S/hYzBebP8YEwU6eHA8VmpkZ0e/iamz2or5E2R/KEaIWeFr0wDMfXM 9ILEgH6v0eEKqOaYk9K/3oct57EwfLncccU9HXIgbOUI0dRWeKkSAUd1aKipdtZ0 BGnFfdjHsD1HKLx3Q4UFmMkZKcOcq6VTzIZnEERE4xKIvTclgU8nBZLcETj+PDK8 Tluq/2KGH0Qjom4ypgjNOtMFCGLBa43B85KYyKCeoaNCZGXOUzB3l/pY4xbFjplU U+mCUlhI7v5CfLBPdxJvDb+i5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVvnWxo OSwwrC5WFiN4Hh2y8XyjMB8GA1UdIwQYMBaAFLiL1dW5uGRtjkPmTBJ7hIGkGMY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODI1RC9FNThCMjI2OEE0 NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi91SXZWMWJtNFpHMk9RLVpNRW51RWdhUVl4 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJdlYxYm00WkcyT1EtWk1FbnVFZ2FRWXhqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODI1RC9FNThCMjI2OEE0NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi91SXZWMWJtNFpH Mk9RLVpNRW51RWdhUVl4alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXEzgtG8uA1UhUVP9Sixdyost8wHv87jVIva/vTbXHZp32kphWTSbi WKbSIbQWBX+sDAuNy4llxonR+aTgNRu+eXliqm2pY4L0UY34dyo1wt6jeTICsu4O MLc+TTVp8jcf/u7gA2Js6A21h+uid5yFx4ZWKaqM2cb8hPNZXRlz2ErdLfmEkoaq rkfujsBHhJdtuTWbv43p1+NvtQ21DCgixquI2HKr+yigcDRx6UoQUswVAJImRUzV aq6w7/anMfCq2XnIdHJqub1gChM6OiHfHUpTpv8hk/0PuyRkluc0Mi8KtjwTzBmD c4wXev5Q6UQUPd0jILWatnLTntSXRfGO -----END CERTIFICATE-----Generated at Sun Aug 24 05:45:25 2025 by rpki-client