$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft File: u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json) Hash identifier: uhL7kSN762a3xlz2LAaZZq9W256ryKYjxAdylw2nP8M= Subject key identifier: D3:24:45:89:77:E4:74:28:00:24:7E:63:FF:E1:A2:AB:10:51:BB:09 Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D Certificate issuer: /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft Manifest number: 0204 Signing time: Sat 23 Aug 2025 02:23:55 +0000 Manifest this update: Sat 23 Aug 2025 02:23:54 +0000 Manifest next update: Sat 30 Aug 2025 02:23:54 +0000 Files and hashes: 1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: zJvGPbqKwi7m6vEjMLMULGc+AyG1kw+t3yf1XGzTV3k=) 2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: d6lR5DCUUt64f3jfT2Upe1NvnvCxTNK9tDR0OuYVOnY=) 3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: Wx96a0pCwu7Is08OfwVpC7A3eb6MBe8Us9jhb4i3wps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D Validity Not Before: Aug 23 02:23:54 2025 GMT Not After : Aug 30 02:23:54 2025 GMT Subject: CN=68a9263a-6ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:5d:b4:bc:84:29:a2:b4:59:90:48:fe:3f: 27:d1:74:8b:bb:e9:d0:97:bb:80:6f:42:dc:aa:dc: 38:0d:f1:04:5d:3d:61:2d:a2:fb:e9:cd:fd:8e:93: 72:c9:bd:af:d2:8a:46:8c:e1:0c:bf:6a:95:d1:0b: f5:f7:b4:e0:bb:bc:9d:05:a6:45:96:0d:44:03:52: 5c:09:ce:5a:bf:9d:00:a6:51:0b:bf:4b:52:2b:b8: f8:f8:81:de:f1:98:9c:14:74:74:32:05:f1:3c:2c: 35:ff:aa:a3:5b:76:ec:90:da:b2:7a:2e:84:20:9c: 89:9f:9a:58:ac:21:bc:95:a9:1e:4f:01:da:59:64: c1:fa:07:91:a1:92:94:e0:ec:49:fb:fa:4e:d5:24: 60:fc:e4:43:6e:7f:1c:a0:07:e4:8e:58:a1:2b:55: 34:da:29:4b:55:6c:31:51:df:c1:0c:4d:1a:41:1f: f8:c1:51:06:50:02:ee:e9:70:2b:2f:9e:de:ae:5a: 1e:05:90:ac:c3:4d:f7:9d:4c:1a:9e:3b:16:6c:3c: 9f:cc:26:bb:f0:1c:0d:63:ae:de:93:e9:e9:0e:5e: 23:67:86:d8:ed:7c:42:71:7e:09:d2:e6:58:69:b6: 12:b7:c3:61:76:5c:51:c6:db:42:e9:8a:28:a7:a7: 7e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:24:45:89:77:E4:74:28:00:24:7E:63:FF:E1:A2:AB:10:51:BB:09 X509v3 Authority Key Identifier: keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:54:3c:dd:e0:0f:6e:43:4e:4c:7e:36:bd:7e:10:2a:06:6f: 81:f3:5e:1d:91:3a:15:eb:f4:cb:30:70:db:3f:ad:4f:27:55: b7:bb:e1:58:a5:47:f1:01:b4:fc:1c:a1:b9:c2:2e:7a:c8:8a: b4:88:0b:ae:68:ec:a6:40:a5:34:f9:bb:64:6e:0c:40:a1:f6: 1c:bc:59:2d:68:71:13:d4:25:4a:4e:31:13:2c:73:a9:9a:4a: e3:6c:62:08:84:2b:cd:42:f5:93:6d:e2:8c:58:15:d1:32:c3: 2b:b7:05:bd:d0:60:82:88:ac:3c:ed:a9:d2:26:f7:ad:71:cf: c7:b9:03:6f:85:a0:01:cc:24:da:4a:64:23:ec:17:1e:f2:ea: 1c:0a:dd:3c:67:a0:87:2f:cd:1d:2f:a9:52:f7:c6:35:76:b0: 9f:9f:c3:d7:e8:8e:0d:ad:48:07:1b:ad:bc:17:33:75:b6:72: 6f:be:97:bc:4e:5e:d9:fd:c2:fc:a0:09:ef:9c:50:cb:e2:c8: 9b:ee:17:63:81:a4:24:d8:aa:3d:f6:95:f9:47:31:9f:e5:30: d5:57:a6:e2:08:3e:ae:79:e7:ee:e9:b7:5d:6a:82:92:fb:63: 80:20:65:53:66:51:0a:7e:73:21:cf:7d:d7:1f:df:f0:e6:09: 77:77:1d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RTMxMTAvBgNVBAUTKEJCQUJEM0YxNkUxMDBGRDlDOTVENDc0ODg0RTREQTlD QjZGQTc2OEQwHhcNMjUwODIzMDIyMzU0WhcNMjUwODMwMDIyMzU0WjAYMRYwFAYD VQQDEw02OGE5MjYzYS02ZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5ddtLyEKaK0WZBI/j8n0XSLu+nQl7uAb0Lcqtw4DfEEXT1hLaL76c39jpNy yb2v0opGjOEMv2qV0Qv197Tgu7ydBaZFlg1EA1JcCc5av50AplELv0tSK7j4+IHe 8ZicFHR0MgXxPCw1/6qjW3bskNqyei6EIJyJn5pYrCG8lakeTwHaWWTB+geRoZKU 4OxJ+/pO1SRg/ORDbn8coAfkjlihK1U02ilLVWwxUd/BDE0aQR/4wVEGUALu6XAr L57erloeBZCsw033nUwanjsWbDyfzCa78BwNY67ek+npDl4jZ4bY7XxCcX4J0uZY abYSt8NhdlxRxttC6Yoop6d+LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMkRYl3 5HQoACR+Y//hoqsQUbsJMB8GA1UdIwQYMBaAFLur0/FuEA/ZyV1HSITk2py2+naN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFMy8xMjQ3Qjg2MDY2 OTIxMUVEODJCRTcxMzNDNEY5QUUwMi91NnZUOFc0UUQ5bkpYVWRJaE9UYW5MYjZk bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2dlQ4VzRRRDluSlhVZEloT1RhbkxiNmRvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFMy8xMjQ3Qjg2MDY2OTIxMUVEODJCRTcxMzNDNEY5QUUwMi91NnZUOFc0UUQ5 bkpYVWRJaE9UYW5MYjZkbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9VDzd4A9uQ05Mfja9fhAqBm+B814dkToV6/TLMHDbP61PJ1W3u+FY pUfxAbT8HKG5wi56yIq0iAuuaOymQKU0+btkbgxAofYcvFktaHET1CVKTjETLHOp mkrjbGIIhCvNQvWTbeKMWBXRMsMrtwW90GCCiKw87anSJvetcc/HuQNvhaABzCTa SmQj7Bce8uocCt08Z6CHL80dL6lS98Y1drCfn8PX6I4NrUgHG628FzN1tnJvvpe8 Tl7Z/cL8oAnvnFDL4sib7hdjgaQk2Ko99pX5RzGf5TDVV6biCD6ueefu6bddaoKS +2OAIGVTZlEKfnMhz33XH9/w5gl3dx0H -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:33 2025 by rpki-client