$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: w5sN9J2/HZxjdo+NA7bouQVKO73Nxafxi/gAaaKT4iA= Subject key identifier: 72:68:75:84:A5:64:8C:AA:5C:AE:87:3F:CB:D6:AA:48:38:EC:43:43 Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 045D Signing time: Sat 23 Aug 2025 00:26:26 +0000 Manifest this update: Sat 23 Aug 2025 00:26:25 +0000 Manifest next update: Sat 30 Aug 2025 00:26:25 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: KagKvbLLj66Oj4RjHvCkpD/KfnJXSZlEuMsPMFRp47o=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: Aug 23 00:26:25 2025 GMT Not After : Aug 30 00:26:25 2025 GMT Subject: CN=68a90ab1-ee09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ce:af:71:86:08:20:e6:1b:79:6d:e6:01:ad: 0c:9b:f2:c5:2b:20:88:44:6b:68:38:1c:a6:e3:d4: ee:11:27:93:c1:ea:d4:fb:07:f5:8d:a0:85:4a:75: 6d:d7:9f:63:8a:4b:44:35:71:42:63:bb:f3:4f:49: 87:45:8a:89:57:5f:62:24:b7:6a:08:18:be:28:30: db:97:bb:d9:65:04:4d:88:62:c0:bf:15:94:51:23: 0c:f4:bc:74:a0:79:95:53:6e:19:68:56:d1:fb:de: 3f:38:52:91:e2:4c:8e:b6:41:0a:ec:7a:fb:ae:78: d3:0e:5b:06:4a:5a:77:2c:80:7f:8c:8f:37:9c:b4: 8d:2f:58:cd:03:fe:57:ed:f9:bf:ef:8e:0a:17:11: e0:8a:f4:37:dd:32:db:05:9d:a7:ce:c9:39:49:9b: 2b:85:d0:75:db:75:59:a1:3d:99:fe:09:5b:3f:91: 67:81:08:60:84:b9:63:ec:01:fe:3b:6e:d9:c3:e6: 51:3b:f3:9d:b2:56:3c:d7:b8:97:a6:42:82:38:5d: b8:d9:3f:82:5f:c9:e0:b2:66:bf:5e:d2:8c:d3:44: 44:ff:a2:1c:49:f8:38:d0:c2:a9:a6:b5:87:f5:13: 1d:9b:2a:2f:10:2f:60:0b:46:d0:5f:ad:64:0c:93: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:68:75:84:A5:64:8C:AA:5C:AE:87:3F:CB:D6:AA:48:38:EC:43:43 X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:6b:50:08:e3:69:af:01:2f:e0:15:9e:f2:19:20:62:d5:dc: fa:db:44:0d:7d:3d:7b:bb:9c:2b:75:6b:20:b7:97:02:a3:e8: 92:eb:93:b3:c3:0b:28:1b:d2:1e:57:4d:c3:7c:86:f8:25:e6: 06:1c:45:2e:5b:ca:df:80:42:c3:1a:f7:76:ac:00:4d:53:22: 25:99:6c:e2:c0:9c:a4:f3:e5:c5:3f:62:a9:82:7e:68:43:f2: 27:b8:b8:24:c7:65:ad:7f:02:bb:99:a2:06:02:7b:eb:ed:7e: 9c:41:65:99:5a:0d:ec:c0:77:fa:a3:71:6e:cb:a0:4f:c2:ed: 94:c9:4e:be:a1:f1:d7:2c:64:51:58:c5:4e:bf:a4:7a:e0:5e: 5f:74:04:17:42:8c:e7:93:5d:29:23:89:a1:6c:9a:ef:d7:91: 8b:38:6f:d6:47:ed:aa:63:9a:cd:f7:63:80:3c:57:01:0d:54: af:d3:93:71:9a:6b:59:72:f2:b4:c9:f8:6a:14:69:74:69:74: e2:64:06:a5:48:91:d4:99:3f:83:c0:e1:a6:98:3c:79:4d:22: dd:47:2d:75:46:74:3d:f0:61:7d:6d:9c:6d:5f:46:ce:19:3f: ae:f9:d1:90:ce:fb:61:3f:d9:c4:35:e7:80:f8:ed:f3:e0:17: ce:a3:32:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjUwODIzMDAyNjI1WhcNMjUwODMwMDAyNjI1WjAYMRYwFAYD VQQDEw02OGE5MGFiMS1lZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4M6vcYYIIOYbeW3mAa0Mm/LFKyCIRGtoOBym49TuESeTwerU+wf1jaCFSnVt 159jiktENXFCY7vzT0mHRYqJV19iJLdqCBi+KDDbl7vZZQRNiGLAvxWUUSMM9Lx0 oHmVU24ZaFbR+94/OFKR4kyOtkEK7Hr7rnjTDlsGSlp3LIB/jI83nLSNL1jNA/5X 7fm/744KFxHgivQ33TLbBZ2nzsk5SZsrhdB123VZoT2Z/glbP5FngQhghLlj7AH+ O27Zw+ZRO/OdslY817iXpkKCOF242T+CX8ngsma/XtKM00RE/6IcSfg40MKpprWH 9RMdmyovEC9gC0bQX61kDJNANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJodYSl ZIyqXK6HP8vWqkg47ENDMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGa1AI42mvAS/gFZ7yGSBi1dz620QNfT17u5wrdWsgt5cCo+iS65Oz wwsoG9IeV03DfIb4JeYGHEUuW8rfgELDGvd2rABNUyIlmWziwJyk8+XFP2Kpgn5o Q/InuLgkx2WtfwK7maIGAnvr7X6cQWWZWg3swHf6o3Fuy6BPwu2UyU6+ofHXLGRR WMVOv6R64F5fdAQXQoznk10pI4mhbJrv15GLOG/WR+2qY5rN92OAPFcBDVSv05Nx mmtZcvK0yfhqFGl0aXTiZAalSJHUmT+DwOGmmDx5TSLdRy11RnQ98GF9bZxtX0bO GT+u+dGQzvthP9nENeeA+O3z4BfOozLb -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:24 2025 by rpki-client