$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json) Hash identifier: R5E1czZv+ixW7qlmTY/OQgtGK1raqwvjPZTHY03JknI= Subject key identifier: EA:34:0C:66:6F:00:47:FC:B5:71:CF:8C:C1:50:13:B7:D6:BE:21:F2 Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft Manifest number: 66 Signing time: Sat 23 Aug 2025 07:13:51 +0000 Manifest this update: Sat 23 Aug 2025 07:13:50 +0000 Manifest next update: Sat 30 Aug 2025 07:13:50 +0000 Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: t3J5airJPP9faLqB8x8GJyphPJOudZJolcTfvwPQGPE=) 2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Validity Not Before: Aug 23 07:13:50 2025 GMT Not After : Aug 30 07:13:50 2025 GMT Subject: CN=68a96a2e-3673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e7:7f:55:0d:fe:d6:d2:a6:be:6c:43:fc:b7: 9f:0a:c2:3b:1b:d8:5b:db:bb:98:54:19:f8:43:c6: f4:35:03:23:73:42:40:01:1c:80:ec:61:15:6f:00: 3a:2c:cf:24:3e:99:bd:a5:75:2b:10:1a:a3:10:0b: 54:b3:ba:4b:3a:b9:5f:37:f2:c3:df:32:5a:19:92: 5d:7a:74:d2:73:14:6a:2c:22:13:94:2f:35:7f:c5: 8f:f6:d9:40:b0:32:27:3d:8d:4a:ce:8c:a4:99:f1: 9b:fd:3e:85:4e:55:e5:8f:73:81:40:29:7c:fc:45: 6b:3a:6c:33:0f:0e:21:1b:1c:14:73:84:d5:27:a4: da:a0:9c:4e:bc:14:e7:94:77:0e:38:d3:c8:76:f6: 7c:e8:89:1a:46:6e:7a:ee:de:12:f4:30:b2:f6:64: 6f:cb:82:18:41:13:17:8f:49:f6:7b:80:0e:55:2c: 10:02:a1:41:d1:c5:bc:9a:7b:b5:21:8a:90:04:5f: 85:b2:3f:8d:bb:b7:a6:cb:4c:60:fd:2a:09:d8:2e: dc:a2:d4:2a:37:78:a7:ed:13:86:01:96:59:b8:56: b1:ef:3a:98:e9:97:3e:1d:4f:75:24:d8:65:db:da: 4b:53:3d:99:ff:f7:51:a8:e9:47:50:78:e8:cd:b6: 69:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:34:0C:66:6F:00:47:FC:B5:71:CF:8C:C1:50:13:B7:D6:BE:21:F2 X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a2:4d:a7:b2:17:2e:f1:5d:68:41:b0:bc:08:fd:c6:64:43: 44:57:47:87:1a:29:60:ee:75:55:74:98:3d:a7:bf:3b:8f:a5: 60:6a:b5:0a:3c:b8:24:62:e3:c7:d0:a3:c9:bc:d4:68:bf:d6: 0f:bb:c6:58:ee:ab:63:17:27:cf:89:94:71:68:b1:b3:2b:17: d2:51:93:01:59:25:df:29:98:5d:1e:55:2f:35:78:ae:f0:81: eb:82:fc:eb:c3:9e:e2:bf:d6:fa:83:e5:10:56:6d:5e:63:63: d7:33:a2:2e:30:46:10:8a:21:b9:a5:af:40:6b:80:e3:bd:75: 99:58:00:bd:92:96:1b:c0:e3:f0:aa:77:97:e7:5d:14:fc:4a: 69:8e:05:8f:48:75:37:9b:cd:32:76:e1:0a:39:8a:64:6b:23: fc:53:9a:c5:96:3d:03:73:62:2a:7e:11:45:b8:04:d2:4a:93: 0b:bf:be:93:cf:5c:49:af:92:7e:02:a1:10:75:6c:e2:53:92: 3f:89:03:77:5b:c8:c4:54:85:73:82:ab:5d:94:1f:8a:a9:4e: d3:66:70:cd:be:a8:e3:b9:af:e6:b4:30:11:02:13:ef:94:0e: fe:5b:76:b8:a5:51:5b:f1:15:7b:06:c6:ea:c1:18:dc:ca:f0: f0:7a:a9:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoQkI1MDVERkYzMkVDRDQ5MkJGMUVGRjdGRTM5NEYxMjg5 MEFBNjczNDAeFw0yNTA4MjMwNzEzNTBaFw0yNTA4MzAwNzEzNTBaMBgxFjAUBgNV BAMTDTY4YTk2YTJlLTM2NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU539VDf7W0qa+bEP8t58Kwjsb2Fvbu5hUGfhDxvQ1AyNzQkABHIDsYRVvADos zyQ+mb2ldSsQGqMQC1Szuks6uV838sPfMloZkl16dNJzFGosIhOULzV/xY/22UCw Mic9jUrOjKSZ8Zv9PoVOVeWPc4FAKXz8RWs6bDMPDiEbHBRzhNUnpNqgnE68FOeU dw4408h29nzoiRpGbnru3hL0MLL2ZG/LghhBExePSfZ7gA5VLBACoUHRxbyae7Uh ipAEX4WyP427t6bLTGD9KgnYLtyi1Co3eKftE4YBllm4VrHvOpjplz4dT3Uk2GXb 2ktTPZn/91Go6UdQeOjNtmnTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6jQMZm8A R/y1cc+MwVATt9a+IfIwHwYDVR0jBBgwFoAUu1Bd/zLs1JK/Hv9/45TxKJCqZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzUxQkUwMTI0RTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTFCZF96THMxSktfSHY5XzQ1VHhLSkNxWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzUxQkUwMTI0RTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpL X0h2OV80NVR4S0pDcVp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADqiTaeyFy7xXWhBsLwI/cZkQ0RXR4caKWDudVV0mD2nvzuPpWBqtQo8 uCRi48fQo8m81Gi/1g+7xljuq2MXJ8+JlHFosbMrF9JRkwFZJd8pmF0eVS81eK7w geuC/OvDnuK/1vqD5RBWbV5jY9czoi4wRhCKIbmlr0BrgOO9dZlYAL2SlhvA4/Cq d5fnXRT8SmmOBY9IdTebzTJ24Qo5imRrI/xTmsWWPQNzYip+EUW4BNJKkwu/vpPP XEmvkn4CoRB1bOJTkj+JA3dbyMRUhXOCq12UH4qpTtNmcM2+qOO5r+a0MBECE++U Dv5bdrilUVvxFXsGxurBGNzK8PB6qQI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:44:43 2025 by rpki-client