$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json) Hash identifier: 46063OQw5pKA0wVhy9bUIu3dhrtIST4rPPJAtBKC85I= Subject key identifier: C7:67:93:9C:B3:32:EE:0F:89:83:15:D0:28:E6:DB:AF:D4:38:F1:2E Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Certificate serial: 0666 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft Manifest number: 0663 Signing time: Fri 22 Aug 2025 22:42:15 +0000 Manifest this update: Fri 22 Aug 2025 22:42:14 +0000 Manifest next update: Fri 29 Aug 2025 22:42:14 +0000 Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: KwSQ2LOBPoJMeRBrooY5u1ggqWXWUxpkbQvI9KI1e6Q=) 2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: hzbXrtnctw9RaO4u4LO+M5su44TkMPAo6wV59Ue+QJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1638 (0x666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Validity Not Before: Aug 22 22:42:14 2025 GMT Not After : Aug 29 22:42:14 2025 GMT Subject: CN=68a8f246-d020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:18:bc:76:c0:f1:50:89:87:33:ea:4f:2f: 75:c7:9b:1f:8b:ba:05:c2:df:3c:96:c9:7f:fe:d4: 58:2c:57:1e:e9:6a:3a:8c:c1:c1:af:e3:e4:bb:3a: b9:e5:bb:40:b1:51:47:13:10:c0:cd:3d:da:3d:70: 15:49:bc:97:85:b7:3a:70:a3:18:81:57:bd:63:4b: 74:a4:d5:14:a5:02:e2:94:2d:58:7c:35:78:29:2c: ee:11:29:07:ea:1d:77:0a:6b:44:f1:9e:f9:eb:e4: 6f:8a:c4:74:a6:50:75:78:30:30:5b:d5:5e:64:a5: 3e:76:04:40:6e:1e:6b:17:34:d4:eb:af:15:fb:2f: 14:fa:10:50:8a:4a:05:d2:79:e1:75:b1:de:16:5b: 4b:33:95:f1:88:37:26:24:72:fc:cb:2e:f4:14:d0: c7:63:2c:97:a4:9d:ff:15:54:9b:82:4a:8f:d6:61: 81:31:f6:ab:ff:37:b7:4c:37:78:ed:dd:ad:bb:66: 25:cc:30:75:8c:35:77:9e:1b:9f:09:2a:bc:46:88: 7e:1d:4c:63:f8:71:46:d4:99:7c:8e:50:ec:7b:36: 64:24:f5:d0:ff:92:67:74:7b:db:c9:7f:c1:f6:7c: 9a:b7:21:45:8e:bb:44:b7:d5:5a:62:72:9e:f4:da: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:67:93:9C:B3:32:EE:0F:89:83:15:D0:28:E6:DB:AF:D4:38:F1:2E X509v3 Authority Key Identifier: keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:c4:eb:f8:a8:f7:09:94:be:a9:ab:4b:4a:d2:13:ff:4b:9e: 1b:3a:df:41:73:24:8f:06:64:99:5a:97:45:13:4a:be:f2:aa: 19:a3:ef:39:75:11:cd:fc:08:95:aa:7f:b9:95:d8:be:02:31: b6:77:3a:45:55:1e:ed:f9:f7:df:cd:b9:98:0c:02:a7:ec:08: 71:89:2c:3a:7d:04:58:33:e8:70:6d:03:46:08:d4:46:f7:92: 9a:8f:09:ea:16:66:e0:1f:55:a8:0d:90:a7:ae:ac:38:02:c8: f8:cc:78:b9:9c:5a:2b:08:49:95:81:80:71:78:b0:3b:04:68: 58:82:9f:3e:29:ac:8d:aa:2f:cc:4e:3a:9f:0b:7a:4c:3f:c4: 03:e2:2f:c7:46:43:5d:ba:5b:2f:cf:5a:49:84:b3:15:29:77: 81:9f:ed:25:74:c9:3c:f4:23:60:5e:93:1f:2a:8e:a1:2d:05: 8a:db:64:87:91:54:8d:8b:68:13:34:6d:fd:9d:6e:ea:d2:36: 55:f3:b3:48:ea:62:1f:9c:c3:f2:8e:d8:22:79:24:34:5c:e7: 07:d3:76:a3:f9:92:9a:77:0c:1d:1b:1b:4d:81:6e:28:d5:e3: 41:77:16:ac:b8:ff:53:2f:f2:35:f9:eb:f2:89:97:28:b5:01: 4d:cf:5e:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRUQxMTAvBgNVBAUTKDk1NEE3MDFCQUEwQzkzMUQwMTc2RTQ4NUI3QTI4N0Mx MzE2NTI2MEUwHhcNMjUwODIyMjI0MjE0WhcNMjUwODI5MjI0MjE0WjAYMRYwFAYD VQQDEw02OGE4ZjI0Ni1kMDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02cYvHbA8VCJhzPqTy91x5sfi7oFwt88lsl//tRYLFce6Wo6jMHBr+Pkuzq5 5btAsVFHExDAzT3aPXAVSbyXhbc6cKMYgVe9Y0t0pNUUpQLilC1YfDV4KSzuESkH 6h13CmtE8Z756+RvisR0plB1eDAwW9VeZKU+dgRAbh5rFzTU668V+y8U+hBQikoF 0nnhdbHeFltLM5XxiDcmJHL8yy70FNDHYyyXpJ3/FVSbgkqP1mGBMfar/ze3TDd4 7d2tu2YlzDB1jDV3nhufCSq8Roh+HUxj+HFG1Jl8jlDsezZkJPXQ/5JndHvbyX/B 9nyatyFFjrtEt9VaYnKe9NqjrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdnk5yz Mu4PiYMV0Cjm26/UOPEuMB8GA1UdIwQYMBaAFJVKcBuqDJMdAXbkhbeih8ExZSYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNFRC8xQUFGN0Q5NDky MjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4MEJkdVNGdDZLSHdURmxK ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xVcHdHNm9Na3gwQmR1U0Z0NktId1RGbEpnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNFRC8xQUFGN0Q5NDkyMjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4 MEJkdVNGdDZLSHdURmxKZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvxOv4qPcJlL6pq0tK0hP/S54bOt9BcySPBmSZWpdFE0q+8qoZo+85 dRHN/AiVqn+5ldi+AjG2dzpFVR7t+fffzbmYDAKn7AhxiSw6fQRYM+hwbQNGCNRG 95KajwnqFmbgH1WoDZCnrqw4Asj4zHi5nForCEmVgYBxeLA7BGhYgp8+KayNqi/M TjqfC3pMP8QD4i/HRkNdulsvz1pJhLMVKXeBn+0ldMk89CNgXpMfKo6hLQWK22SH kVSNi2gTNG39nW7q0jZV87NI6mIfnMPyjtgieSQ0XOcH03aj+ZKadwwdGxtNgW4o 1eNBdxasuP9TL/I1+evyiZcotQFNz14M -----END CERTIFICATE-----Generated at Sat Aug 23 19:07:02 2025 by rpki-client