$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json) Hash identifier: V5z6mMrYHzhcixHYmkV/7HNHdJvRiFlDXmpgFZ/xZy4= Subject key identifier: C1:87:36:C0:F2:51:15:C0:DD:EE:21:A3:0C:F0:AC:0B:E3:D4:4F:C0 Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft Manifest number: DA Signing time: Sat 23 Aug 2025 05:41:45 +0000 Manifest this update: Sat 23 Aug 2025 05:41:45 +0000 Manifest next update: Sat 30 Aug 2025 05:41:44 +0000 Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: zyzmP5OlDLRyFJWP7ZCFc/y/sOiCUvCia91Mm4AsJL8=) 2: 24142938343C11EFA0165876C4F9AE02.roa (hash: n7AIK79a5+aPFKSTz88y32yhIzyT87IgTPflOpV9KLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324 Validity Not Before: Aug 23 05:41:45 2025 GMT Not After : Aug 30 05:41:44 2025 GMT Subject: CN=68a95499-5b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:06:78:96:04:24:bd:b5:20:a2:17:2f:f8: b8:cc:7e:96:91:e2:95:55:91:5a:2f:99:18:c5:cf: 7d:b5:60:bf:d0:67:70:73:86:f0:29:94:86:95:41: 0f:cc:e5:8e:0b:30:8f:4c:31:39:8b:66:e9:70:35: ee:d3:91:da:a7:91:73:9a:e7:6c:c6:09:a7:9e:d9: 98:9a:0a:76:dd:1d:e1:42:38:85:65:e5:96:0c:43: 6a:21:3b:fd:fd:cb:7c:65:84:48:ae:f8:a9:4c:50: 59:79:2c:30:00:c1:63:41:58:cd:e2:8e:37:b3:e2: be:63:d0:aa:37:33:a5:88:60:d4:a3:b9:7b:86:a9: 9d:ff:be:07:93:11:80:23:d6:7b:a4:68:e2:f5:4a: f5:fa:c9:24:1b:a0:3e:59:d4:93:9d:e3:da:a8:a7: 26:2c:31:d3:df:fd:93:04:67:9e:0f:61:45:cf:ef: 88:5e:b5:ff:42:ae:a4:b5:d5:eb:c1:6c:e2:96:17: 86:06:3c:00:af:ea:9e:a0:29:1f:5c:65:11:f6:ff: 56:85:23:c5:1b:3b:29:b5:c4:aa:1a:e7:ce:e4:27: 02:a5:5e:57:59:47:01:19:0b:a2:8e:9e:91:60:58: 46:dd:b0:7e:c3:2f:d3:7c:21:63:d1:cc:c5:78:89: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:87:36:C0:F2:51:15:C0:DD:EE:21:A3:0C:F0:AC:0B:E3:D4:4F:C0 X509v3 Authority Key Identifier: keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:86:f6:01:66:8a:96:6c:39:18:a1:ee:05:10:a1:1d:fa:1c: 31:58:a6:b5:c0:70:7e:63:70:a4:a8:16:51:71:aa:15:a4:0c: 5c:cc:cf:09:41:d4:13:f7:40:47:b5:2d:9d:fb:ee:db:51:27: 5e:ec:8a:17:ef:87:46:49:d1:4e:0d:4a:bb:f5:86:09:0f:46: 03:5a:48:9e:09:21:ff:6f:62:67:d3:f5:bd:c5:93:bc:cb:77: dc:3c:b7:5b:d1:69:be:57:37:56:b1:9c:98:68:45:4f:06:e7: f2:f1:37:f9:8f:1a:1f:90:6c:01:00:3d:07:69:38:5f:e2:6d: 34:40:fd:6c:8e:04:b9:6e:17:6b:f6:e0:ef:8a:c3:07:86:f5: 26:74:26:78:8e:7c:13:83:61:7e:0b:b0:f6:0f:df:05:00:5c: 82:29:40:f6:20:c9:25:f4:90:d6:6c:a1:9a:84:06:d7:4d:25: 35:9b:6a:4d:d9:9a:a6:3d:58:aa:fe:09:4c:4e:9c:f8:19:35: 64:c6:5e:c3:f9:e8:d0:fc:70:84:8c:12:44:a4:84:1c:37:e3: 9d:83:99:17:1b:78:06:a1:72:1d:91:df:73:6e:af:13:06:c4: 2a:31:e5:f6:20:a9:e7:b1:be:a4:ab:a1:cf:b7:cc:74:68:d2: 74:87:57:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDUyOTZCQzgwMTQwMkM3MzkwOUY1OTFFMTkwOTVGMjI0 NjU0MTQzMjQwHhcNMjUwODIzMDU0MTQ1WhcNMjUwODMwMDU0MTQ0WjAYMRYwFAYD VQQDEw02OGE5NTQ5OS01YjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjkGeJYEJL21IKIXL/i4zH6WkeKVVZFaL5kYxc99tWC/0Gdwc4bwKZSGlUEP zOWOCzCPTDE5i2bpcDXu05Hap5FzmudsxgmnntmYmgp23R3hQjiFZeWWDENqITv9 /ct8ZYRIrvipTFBZeSwwAMFjQVjN4o43s+K+Y9CqNzOliGDUo7l7hqmd/74HkxGA I9Z7pGji9Ur1+skkG6A+WdSTnePaqKcmLDHT3/2TBGeeD2FFz++IXrX/Qq6ktdXr wWzilheGBjwAr+qeoCkfXGUR9v9WhSPFGzsptcSqGufO5CcCpV5XWUcBGQuijp6R YFhG3bB+wy/TfCFj0czFeIm7wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGHNsDy URXA3e4howzwrAvj1E/AMB8GA1UdIwQYMBaAFFKWvIAUAsc5CfWR4ZCV8iRlQUMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi83ODk3RjgxNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6a0o5Wkhoa0pYeUpHVkJR eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi83ODk3RjgxNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6 a0o5Wkhoa0pYeUpHVkJReVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/hvYBZoqWbDkYoe4FEKEd+hwxWKa1wHB+Y3CkqBZRcaoVpAxczM8J QdQT90BHtS2d++7bUSde7IoX74dGSdFODUq79YYJD0YDWkieCSH/b2Jn0/W9xZO8 y3fcPLdb0Wm+VzdWsZyYaEVPBufy8Tf5jxofkGwBAD0HaThf4m00QP1sjgS5bhdr 9uDvisMHhvUmdCZ4jnwTg2F+C7D2D98FAFyCKUD2IMkl9JDWbKGahAbXTSU1m2pN 2ZqmPViq/glMTpz4GTVkxl7D+ejQ/HCEjBJEpIQcN+Odg5kXG3gGoXIdkd9zbq8T BsQqMeX2IKnnsb6kq6HPt8x0aNJ0h1f1 -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:50 2025 by rpki-client