$ rpki-client -vvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft File: Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json) Hash identifier: SDS56D643GUoJ2/PxwWrk8x5jzQVWpdP1zJ6Dloc5mY= Subject key identifier: AF:3D:B4:67:A9:07:7B:BE:39:DB:D5:3F:E7:9B:48:D5:29:D1:83:93 Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47 Certificate issuer: /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847 Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft Manifest number: 02F0 Signing time: Sat 23 Aug 2025 01:31:27 +0000 Manifest this update: Sat 23 Aug 2025 01:31:26 +0000 Manifest next update: Sat 30 Aug 2025 01:31:26 +0000 Files and hashes: 1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: 43fgTwG6Nl9FF6rl/Agf7DtB+xkF/0La6jpkOzLHS/M=) 2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: 90iQ52pzi3F+reOCS+hcjY5A8xSUULeYkZXVo6UNIXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847 Validity Not Before: Aug 23 01:31:26 2025 GMT Not After : Aug 30 01:31:26 2025 GMT Subject: CN=68a919ef-4cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:34:1a:40:59:a3:59:04:a1:32:24:3a:09: 9b:1b:1e:04:38:12:5d:0f:ab:bc:7f:9a:82:05:6d: 7c:5e:f2:f2:59:f6:9f:1a:1f:ee:f7:73:56:c4:35: c2:1c:a5:1a:78:c1:fc:c6:a1:38:b1:a3:48:b3:07: 20:bd:ad:2f:7b:0f:03:22:5e:7b:d2:3f:83:3e:de: 76:ae:00:f7:b2:63:64:36:67:1a:e1:a9:f7:68:4b: a2:f4:a0:57:3e:19:d4:c6:11:0b:c7:48:33:eb:f5: 24:4c:c0:cd:1b:48:4c:93:e1:19:a0:c1:fb:94:9e: b5:1b:11:c8:cb:98:10:51:a1:d1:21:8e:84:22:e4: b0:40:53:a9:ca:9c:23:3d:1d:72:66:ca:0c:3b:5c: a2:a9:a6:41:d9:cf:78:b3:83:49:06:26:8c:68:12: fb:4a:95:b0:60:df:f8:67:50:89:bc:ce:83:2a:41: 08:95:3c:2a:3b:f6:7c:c3:af:b3:9a:58:e6:54:1f: e8:c4:8d:52:7f:1c:bb:33:a3:6f:ba:3a:d2:14:02: 5c:e5:17:b8:a0:be:3a:1f:0d:e3:c2:d6:6a:5e:55: a6:a9:7b:42:48:6b:73:98:56:fc:c2:25:a9:b5:59: f2:1e:e2:0a:d2:82:7f:59:4e:27:1c:2e:99:b6:04: 4c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3D:B4:67:A9:07:7B:BE:39:DB:D5:3F:E7:9B:48:D5:29:D1:83:93 X509v3 Authority Key Identifier: keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:99:7c:23:65:4d:10:be:d9:d6:86:e6:ba:9b:bc:ef:ad:3d: 02:43:21:5a:4b:76:27:a3:3f:9e:dd:ad:d3:bd:f4:94:58:c9: 41:87:cb:79:f4:65:d2:a5:2c:e4:75:23:23:6c:5c:a7:e2:fb: a5:af:59:ab:05:ac:d3:1a:19:ab:4b:3f:b1:8f:9d:8b:76:b0: 37:67:cd:ac:44:e9:f3:0a:2c:89:5d:c7:61:83:34:1f:3f:34: cd:c9:69:64:c8:85:7b:5e:d3:67:7c:95:56:40:7b:fa:be:89: ba:58:98:09:d5:f5:3e:4d:60:20:bd:a7:d1:00:ff:87:a9:2d: 03:27:78:d8:4b:c8:4d:9c:40:fe:ea:ed:cf:33:5b:18:23:9a: 46:a3:0b:bf:b2:b0:50:a8:f6:ee:43:3f:c1:81:e2:7b:90:84: 8d:16:45:6f:60:da:ad:84:bc:28:2a:b8:db:ef:3b:f3:3c:69: ce:4a:c6:32:7c:13:0e:2a:14:5a:c4:c4:ac:34:02:00:19:87: bb:21:de:77:78:af:58:ad:8e:b9:67:d5:b2:9f:56:9d:3d:5a: 6b:58:2c:3a:ae:d8:64:17:7b:1c:94:8d:84:08:2d:d2:45:8a: 4b:19:1f:ec:99:f2:6a:e4:5d:61:f1:ba:f6:07:07:09:06:bf: 34:8c:d5:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1RjExMTAvBgNVBAUTKDUyNUVBMjZCNkE2MTdFNUFBRkMwNTQyM0NDRTU4OERF MTlFQzU4NDcwHhcNMjUwODIzMDEzMTI2WhcNMjUwODMwMDEzMTI2WjAYMRYwFAYD VQQDEw02OGE5MTllZi00Y2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfU0GkBZo1kEoTIkOgmbGx4EOBJdD6u8f5qCBW18XvLyWfafGh/u93NWxDXC HKUaeMH8xqE4saNIswcgva0vew8DIl570j+DPt52rgD3smNkNmca4an3aEui9KBX PhnUxhELx0gz6/UkTMDNG0hMk+EZoMH7lJ61GxHIy5gQUaHRIY6EIuSwQFOpypwj PR1yZsoMO1yiqaZB2c94s4NJBiaMaBL7SpWwYN/4Z1CJvM6DKkEIlTwqO/Z8w6+z mljmVB/oxI1Sfxy7M6NvujrSFAJc5Re4oL46Hw3jwtZqXlWmqXtCSGtzmFb8wiWp tVnyHuIK0oJ/WU4nHC6ZtgRM8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK89tGep B3u+OdvVP+ebSNUp0YOTMB8GA1UdIwQYMBaAFFJeomtqYX5ar8BUI8zliN4Z7FhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVGMS9DQjY2MzMwQUVF MkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJwaGZscXZ3RlFqek9XSTNobnNX RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VsNmlhMnBoZmxxdndGUWp6T1dJM2huc1dFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzVGMS9DQjY2MzMwQUVFMkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJwaGZs cXZ3RlFqek9XSTNobnNXRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClmXwjZU0QvtnWhua6m7zvrT0CQyFaS3Ynoz+e3a3TvfSUWMlBh8t5 9GXSpSzkdSMjbFyn4vulr1mrBazTGhmrSz+xj52LdrA3Z82sROnzCiyJXcdhgzQf PzTNyWlkyIV7XtNnfJVWQHv6vom6WJgJ1fU+TWAgvafRAP+HqS0DJ3jYS8hNnED+ 6u3PM1sYI5pGowu/srBQqPbuQz/BgeJ7kISNFkVvYNqthLwoKrjb7zvzPGnOSsYy fBMOKhRaxMSsNAIAGYe7Id53eK9YrY65Z9Wyn1adPVprWCw6rthkF3sclI2ECC3S RYpLGR/smfJq5F1h8br2BwcJBr80jNXK -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:47 2025 by rpki-client