$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft File: U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json) Hash identifier: P1h2MQGXLx9Zqer4br2DXhQLAuw1SLHFdzRUcpaCIdE= Subject key identifier: A4:54:5D:C9:30:3B:C0:00:69:EA:F5:78:67:65:C4:0F:C9:80:CD:05 Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 Certificate issuer: /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft Manifest number: 94 Signing time: Sat 23 Aug 2025 06:44:37 +0000 Manifest this update: Sat 23 Aug 2025 06:44:37 +0000 Manifest next update: Sat 30 Aug 2025 06:44:37 +0000 Files and hashes: 1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: MkSwQ/dKGFuszRDzob7OFMif4YJgwS9MDJPhi/Mtc3c=) 2: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (hash: R1ZRqn0ylt//iP3Dpq4PDjSTmlLC/ZvrxfTWyncyjuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Validity Not Before: Aug 23 06:44:37 2025 GMT Not After : Aug 30 06:44:37 2025 GMT Subject: CN=68a96355-0080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:36:55:10:1b:25:88:28:b1:39:c1:4f:21: 86:f7:56:19:67:0f:d8:ee:f8:79:b8:cb:fd:52:54: f4:1b:03:6f:07:40:62:4a:be:a8:d8:46:7e:f5:e6: 44:70:6a:1a:7a:5e:1f:53:21:24:82:05:4b:ef:cc: 36:aa:d6:db:c8:18:79:a6:b4:89:06:d9:27:75:b9: b1:23:cd:38:74:f4:81:01:d6:08:b5:63:58:0a:c3: f4:57:4d:88:95:38:3b:08:d5:c2:d3:ab:8a:f3:eb: da:62:1e:73:ac:f0:fe:5b:08:24:88:f7:cd:b1:cc: b3:93:d8:9e:c9:92:cc:d6:b2:dc:ca:3b:43:e3:47: bb:80:c2:7d:13:06:e9:5a:11:68:21:d8:a1:3c:6f: 51:fa:f5:6a:94:e2:75:80:0d:7a:7d:b2:c0:d9:71: 76:46:8c:a0:bc:c7:1d:6b:19:99:84:7b:8d:26:2c: 94:5a:cb:11:f9:49:a5:be:f0:dd:ff:5d:8a:26:15: 1a:a4:13:d4:ff:2f:d4:76:85:eb:6d:c5:bf:09:a2: 1f:c0:b9:49:e6:2e:ef:14:07:3e:02:32:7c:5e:0d: 6e:0c:c5:88:bd:2f:da:a8:9c:ce:56:b8:98:1a:12: b9:a2:03:82:85:1c:39:3f:e4:e7:97:19:ac:63:a7: 83:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:54:5D:C9:30:3B:C0:00:69:EA:F5:78:67:65:C4:0F:C9:80:CD:05 X509v3 Authority Key Identifier: keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:9e:b4:c3:4f:0d:b8:fb:cd:7f:db:9a:b0:b4:7c:5b:b1:4f: 20:3f:2d:f6:4c:fc:7f:77:11:57:16:09:7f:00:96:5d:4c:88: 33:05:0e:2b:77:bb:f2:e6:a7:d3:ef:8e:18:b5:66:ea:27:ad: 95:38:37:12:36:a2:2b:ab:bf:87:9f:65:91:7b:72:ef:66:b9: 56:9f:d0:20:8b:15:41:2c:81:c2:1d:38:15:14:a0:cf:72:0e: 56:2b:de:98:0d:29:64:2b:2a:da:f5:20:98:92:96:73:cc:da: 32:0b:b3:af:35:10:3b:db:1f:ae:6a:a9:e5:72:7e:82:01:26: 8f:13:67:8a:72:ba:04:53:72:24:1f:3d:42:79:7d:ae:c9:d9: c6:df:b5:c3:8a:70:48:f7:9d:8c:4c:68:81:c2:2a:fa:19:c1: 3e:e3:0c:e1:2d:bb:d1:fb:79:13:e2:a5:61:2f:aa:6f:af:74: e0:61:f3:e9:5b:c8:0d:17:d6:a8:ac:28:6c:19:e2:2c:80:fb: b6:c4:ed:99:1f:9a:65:d7:a4:9b:ca:04:07:f3:13:b3:74:ce: 31:b5:11:cb:fc:de:3c:c7:0e:43:30:aa:df:78:1c:84:b3:86: 6b:96:01:61:24:98:eb:6b:09:0b:e4:da:2b:83:04:d6:0b:a8: 48:3a:d0:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDUxMTAvBgNVBAUTKDUzNDRENkJCMzdFQTBDQzM5MUQxMjQyMDdBRDk5NUZD RDc3QjlFOTUwHhcNMjUwODIzMDY0NDM3WhcNMjUwODMwMDY0NDM3WjAYMRYwFAYD VQQDEw02OGE5NjM1NS0wMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul82VRAbJYgosTnBTyGG91YZZw/Y7vh5uMv9UlT0GwNvB0BiSr6o2EZ+9eZE cGoael4fUyEkggVL78w2qtbbyBh5prSJBtkndbmxI804dPSBAdYItWNYCsP0V02I lTg7CNXC06uK8+vaYh5zrPD+WwgkiPfNscyzk9ieyZLM1rLcyjtD40e7gMJ9Ewbp WhFoIdihPG9R+vVqlOJ1gA16fbLA2XF2RoygvMcdaxmZhHuNJiyUWssR+UmlvvDd /12KJhUapBPU/y/UdoXrbcW/CaIfwLlJ5i7vFAc+AjJ8Xg1uDMWIvS/aqJzOVriY GhK5ogOChRw5P+TnlxmsY6eDQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRUXckw O8AAaer1eGdlxA/JgM0FMB8GA1UdIwQYMBaAFFNE1rs36gzDkdEkIHrZlfzXe56V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFENS82NjVEQjdDNkE3 QzAxMUVGOThCQTVFMkFDNEY5QUUwMi9VMFRXdXpmcURNT1IwU1FnZXRtVl9OZDdu cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UwVFd1emZxRE1PUjBTUWdldG1WX05kN25wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODFENS82NjVEQjdDNkE3QzAxMUVGOThCQTVFMkFDNEY5QUUwMi9VMFRXdXpmcURN T1IwU1FnZXRtVl9OZDducFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAknrTDTw24+81/25qwtHxbsU8gPy32TPx/dxFXFgl/AJZdTIgzBQ4r d7vy5qfT744YtWbqJ62VODcSNqIrq7+Hn2WRe3LvZrlWn9AgixVBLIHCHTgVFKDP cg5WK96YDSlkKyra9SCYkpZzzNoyC7OvNRA72x+uaqnlcn6CASaPE2eKcroEU3Ik Hz1CeX2uydnG37XDinBI952MTGiBwir6GcE+4wzhLbvR+3kT4qVhL6pvr3TgYfPp W8gNF9aorChsGeIsgPu2xO2ZH5pl16SbygQH8xOzdM4xtRHL/N48xw5DMKrfeByE s4ZrlgFhJJjrawkL5NorgwTWC6hIOtAO -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:21 2025 by rpki-client