$ rpki-client -vvf rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft File: bUron6l6cWotkmYf8s9b08zcKfw.mft (raw, json) Hash identifier: 6+lcYNNGa1Wfv//k2PbCvcMmum6eU8GdUEWpNfd2oVE= Subject key identifier: 2D:91:98:D8:5A:AB:18:5D:D9:AB:80:1D:97:D0:12:6F:76:42:32:00 Authority key identifier: 6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC Certificate issuer: /CN=A91778C2/serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC Certificate serial: 1771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft Manifest number: 1734 Signing time: Fri 22 Aug 2025 16:45:34 +0000 Manifest this update: Fri 22 Aug 2025 16:45:34 +0000 Manifest next update: Fri 29 Aug 2025 16:45:34 +0000 Files and hashes: 1: bUron6l6cWotkmYf8s9b08zcKfw.crl (hash: BJJqCatzne+G65Svr8Ns4Azzvch2QY0h+9xdkfvwRx8=) 2: 0EF775B2EFCD11EF92BCB66CC4F9AE02.roa (hash: N7nsErlzveEnISxiIX6awL6ZI+EjGdyZ1xE6eFlduvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6001 (0x1771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91778C2, serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC Validity Not Before: Aug 22 16:45:34 2025 GMT Not After : Aug 29 16:45:34 2025 GMT Subject: CN=68a89eae-2f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f6:92:98:96:4c:df:8d:e6:c4:9a:ef:40:2b: f1:94:e9:ac:9d:68:ca:8c:c0:c2:d6:c2:55:de:10: d8:02:bc:02:d5:3a:18:e0:15:34:57:58:f8:ab:a3: f6:40:f6:7c:cf:35:75:e1:af:50:96:72:64:76:1e: dc:31:63:f3:a5:ae:2a:ec:23:39:33:5b:41:70:3e: 0b:11:72:5b:c5:81:ae:5a:b7:e1:c1:75:20:02:20: 9a:6c:03:a6:be:c8:4d:b2:8f:b1:33:ec:dc:b2:63: 20:12:a6:63:c1:78:a5:9f:03:93:fb:ba:f0:07:68: f0:82:c4:60:d6:cc:30:c5:9a:b0:e2:48:d1:ac:13: a4:30:a3:1b:2c:68:d7:73:f6:b9:1e:48:51:ce:2d: 3e:60:47:32:8f:1a:b6:6c:9e:b6:9a:9d:20:1c:6b: 8a:28:e5:31:fa:18:22:9e:85:b0:6f:6e:0d:bf:2d: 7f:26:0d:08:98:1b:a8:91:28:fb:b0:4f:6c:f1:72: 98:fa:70:95:53:33:a7:91:51:8f:25:fa:72:4f:86: c9:39:d7:eb:27:5c:42:13:d9:e0:c6:be:9a:84:98: 3e:05:02:68:43:a0:73:22:45:d1:3f:10:03:9a:17: b1:1c:39:6d:75:15:aa:d9:a2:ab:7a:02:eb:71:8d: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:91:98:D8:5A:AB:18:5D:D9:AB:80:1D:97:D0:12:6F:76:42:32:00 X509v3 Authority Key Identifier: keyid:6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:f2:37:a7:b5:e0:5c:f4:26:f1:a4:9a:66:21:ee:b2:aa:00: c9:36:55:be:29:dd:84:0c:c3:e6:30:6c:ff:6d:fe:ca:34:fb: fd:cb:c9:44:8d:86:2a:e2:f1:e5:53:6d:93:e5:0d:b6:12:a4: da:7a:ef:61:6f:fe:92:38:4b:8a:8e:d1:11:c5:ad:6e:ba:56: 11:fb:5d:1f:26:95:3a:95:30:6b:81:32:ef:3f:a0:ad:4e:b5: 11:14:18:ff:35:c3:ef:3b:68:87:cd:a7:99:24:0d:84:c7:e0: 03:2a:c0:98:e5:a8:38:97:3f:be:b6:68:78:3d:c3:39:1c:4c: a5:e4:40:99:88:73:bf:92:27:31:38:b9:b8:e1:4e:3f:c4:7d: a6:3b:12:1e:c8:1c:5c:93:b3:82:93:d2:57:d6:c2:75:ca:06: 54:80:40:1e:de:41:57:3b:05:97:f0:1c:d4:d5:e4:52:9e:1e: 5f:77:13:1d:96:7b:05:f6:43:b8:b0:1e:77:6d:44:d8:3d:b7: 0e:10:76:1d:e8:e1:b3:df:02:b6:71:88:2b:a9:0a:04:33:31: c9:8c:83:04:e1:b2:0f:d8:a5:d9:4d:0c:79:d7:d0:0c:d0:ec: 46:c1:d5:44:cc:15:14:49:95:f4:26:ba:6d:91:b9:d6:97:5a: 8a:32:c2:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc4QzIxMTAvBgNVBAUTKDZENEFFODlGQTk3QTcxNkEyRDkyNjYxRkYyQ0Y1QkQz Q0NEQzI5RkMwHhcNMjUwODIyMTY0NTM0WhcNMjUwODI5MTY0NTM0WjAYMRYwFAYD VQQDEw02OGE4OWVhZS0yZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5faSmJZM343mxJrvQCvxlOmsnWjKjMDC1sJV3hDYArwC1ToY4BU0V1j4q6P2 QPZ8zzV14a9QlnJkdh7cMWPzpa4q7CM5M1tBcD4LEXJbxYGuWrfhwXUgAiCabAOm vshNso+xM+zcsmMgEqZjwXilnwOT+7rwB2jwgsRg1swwxZqw4kjRrBOkMKMbLGjX c/a5HkhRzi0+YEcyjxq2bJ62mp0gHGuKKOUx+hginoWwb24Nvy1/Jg0ImBuokSj7 sE9s8XKY+nCVUzOnkVGPJfpyT4bJOdfrJ1xCE9ngxr6ahJg+BQJoQ6BzIkXRPxAD mhexHDltdRWq2aKregLrcY2ddwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2RmNha qxhd2auAHZfQEm92QjIAMB8GA1UdIwQYMBaAFG1K6J+penFqLZJmH/LPW9PM3Cn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzhDMi9FRDJCQkM3MEY4 ODcxMUU3OTIxRjg2NjhDNEY5QUUwMi9iVXJvbjZsNmNXb3RrbVlmOHM5YjA4emNL ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JVcm9uNmw2Y1dvdGttWWY4czliMDh6Y0tmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzhDMi9FRDJCQkM3MEY4ODcxMUU3OTIxRjg2NjhDNEY5QUUwMi9iVXJvbjZsNmNX b3RrbVlmOHM5YjA4emNLZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj8jenteBc9CbxpJpmIe6yqgDJNlW+Kd2EDMPmMGz/bf7KNPv9y8lE jYYq4vHlU22T5Q22EqTaeu9hb/6SOEuKjtERxa1uulYR+10fJpU6lTBrgTLvP6Ct TrURFBj/NcPvO2iHzaeZJA2Ex+ADKsCY5ag4lz++tmh4PcM5HEyl5ECZiHO/kicx OLm44U4/xH2mOxIeyBxck7OCk9JX1sJ1ygZUgEAe3kFXOwWX8BzU1eRSnh5fdxMd lnsF9kO4sB53bUTYPbcOEHYd6OGz3wK2cYgrqQoEMzHJjIME4bIP2KXZTQx519AM 0OxGwdVEzBUUSZX0JrptkbnWl1qKMsJ9 -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:55 2025 by rpki-client