$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft File: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft (raw, json) Hash identifier: Kw1lPvOaaTkVpZNdtxIWqyKbeEOlUFE8ffZljxQvFbE= Subject key identifier: 12:29:B9:E4:EA:5B:29:31:E4:07:7A:4A:02:1C:B4:0A:B3:7A:95:D5 Authority key identifier: AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A Certificate issuer: /CN=A91B5BD4/serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft Manifest number: 0202 Signing time: Sat 23 Aug 2025 02:27:12 +0000 Manifest this update: Sat 23 Aug 2025 02:27:11 +0000 Manifest next update: Sat 30 Aug 2025 02:27:11 +0000 Files and hashes: 1: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl (hash: rc8FUZYEgrxo5rrFT5n/HOnAtP2uZaw8ngnICKWNh8s=) 2: C248DFA26DBB11EDB3635D28C4F9AE02.roa (hash: gQzK7hVZPrZ6aKsXhdiMNjPzCoQYQhoW/DlG0FlsTCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5BD4, serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A Validity Not Before: Aug 23 02:27:11 2025 GMT Not After : Aug 30 02:27:11 2025 GMT Subject: CN=68a92700-eaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:a8:44:49:7f:88:69:b4:e0:43:d7:a2:5a: a2:19:bf:f6:80:b0:e2:84:3b:a6:3e:4f:b9:29:55: 3e:1f:f7:c2:d6:02:fc:50:20:81:94:df:0a:ee:89: 7e:16:18:6b:6f:51:ef:6a:2a:26:cf:7c:5d:92:d2: 79:ea:0d:46:5e:dc:55:bd:12:a1:42:16:46:20:e6: 90:be:2e:ba:9c:aa:49:84:c2:ce:4d:0a:c3:6a:76: 51:24:42:79:39:45:9a:68:7c:af:ab:d9:f3:c9:1f: e3:17:04:a5:9a:4e:5c:5e:cb:a9:ee:bc:d6:61:10: ad:11:ae:3b:da:77:94:c6:5f:79:81:a2:50:55:36: 91:db:0a:72:32:b7:fc:72:cc:75:05:8d:b2:4e:95: 95:63:0e:8b:19:d0:b5:67:97:9a:20:4d:ca:4f:0e: 25:22:09:c3:ca:83:90:48:e7:38:76:79:3d:4c:35: 9d:c6:df:8e:12:4c:e3:74:98:47:32:7b:56:10:ea: de:ad:35:e5:7a:52:de:61:35:ad:12:4f:cc:c3:fc: 58:12:5e:a6:e5:44:8b:d2:49:5a:eb:43:a5:6a:60: f0:35:91:d4:72:0e:bb:64:0a:e2:28:db:be:be:c8: 00:24:42:de:a8:78:7e:78:1d:17:e6:54:fd:a3:76: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:29:B9:E4:EA:5B:29:31:E4:07:7A:4A:02:1C:B4:0A:B3:7A:95:D5 X509v3 Authority Key Identifier: keyid:AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:0f:c9:2e:37:b0:c1:9d:d2:1f:ed:c2:98:49:a2:37:c6:8e: 3d:d2:ea:95:3a:db:ba:5a:02:03:9c:bf:46:3c:09:b3:0e:f9: 62:22:29:bd:a1:a3:f8:3a:99:09:cf:27:8d:70:13:1b:42:09: 83:b2:55:ea:39:c0:d7:6e:40:56:4d:8d:7d:31:ca:34:48:de: 40:d6:aa:04:1d:a4:83:bb:6f:cc:54:c4:b1:14:ae:89:32:59: 67:4f:38:3f:1a:3c:28:1a:53:07:f2:b7:0d:9c:e7:3d:0b:91: 3e:2c:48:a8:d6:b3:d5:d1:5b:ae:fa:c5:c9:19:82:85:40:d8: ff:2b:7d:3b:1d:ab:92:b5:39:47:78:30:05:99:25:1e:2f:bd: 97:e6:5f:7f:3d:0a:53:c7:ab:53:b4:c3:a6:90:5b:02:0f:f7: 4d:42:71:3c:77:09:a1:b7:16:1e:7f:f3:97:67:8d:86:81:db: 8a:0e:29:7d:59:e7:06:e9:96:15:31:0e:1d:a3:0e:0d:69:54: 0a:9d:f9:f6:67:5f:f9:62:b2:26:fd:63:75:5b:2d:51:de:41: 01:b8:9e:e1:6c:6e:b0:fc:84:20:b9:01:b2:aa:db:d2:eb:40: 3e:29:80:e3:5e:63:da:55:ae:50:86:63:f1:0e:c8:03:d1:21: 5b:2d:99:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVCRDQxMTAvBgNVBAUTKEFENDFGQjgyN0Y5MzEwNEI4OUZBNkZBNzg1RjIxMTUw QkU2Rjk3OUEwHhcNMjUwODIzMDIyNzExWhcNMjUwODMwMDIyNzExWjAYMRYwFAYD VQQDEw02OGE5MjcwMC1lYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxWoREl/iGm04EPXolqiGb/2gLDihDumPk+5KVU+H/fC1gL8UCCBlN8K7ol+ Fhhrb1Hvaiomz3xdktJ56g1GXtxVvRKhQhZGIOaQvi66nKpJhMLOTQrDanZRJEJ5 OUWaaHyvq9nzyR/jFwSlmk5cXsup7rzWYRCtEa472neUxl95gaJQVTaR2wpyMrf8 csx1BY2yTpWVYw6LGdC1Z5eaIE3KTw4lIgnDyoOQSOc4dnk9TDWdxt+OEkzjdJhH MntWEOrerTXlelLeYTWtEk/Mw/xYEl6m5USL0kla60OlamDwNZHUcg67ZAriKNu+ vsgAJELeqHh+eB0X5lT9o3ZGcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIpueTq Wykx5Ad6SgIctAqzepXVMB8GA1UdIwQYMBaAFK1B+4J/kxBLifpvp4XyEVC+b5ea MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUJENC8wOEFENkQyMjZE QjgxMUVEODgzM0ZBMERDNEY5QUUwMi9yVUg3Z24tVEVFdUotbS1uaGZJUlVMNXZs NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVSDdnbi1URUV1Si1tLW5oZklSVUw1dmw1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUJENC8wOEFENkQyMjZEQjgxMUVEODgzM0ZBMERDNEY5QUUwMi9yVUg3Z24tVEVF dUotbS1uaGZJUlVMNXZsNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACD8kuN7DBndIf7cKYSaI3xo490uqVOtu6WgIDnL9GPAmzDvliIim9 oaP4OpkJzyeNcBMbQgmDslXqOcDXbkBWTY19Mco0SN5A1qoEHaSDu2/MVMSxFK6J MllnTzg/GjwoGlMH8rcNnOc9C5E+LEio1rPV0Vuu+sXJGYKFQNj/K307HauStTlH eDAFmSUeL72X5l9/PQpTx6tTtMOmkFsCD/dNQnE8dwmhtxYef/OXZ42GgduKDil9 WecG6ZYVMQ4dow4NaVQKnfn2Z1/5YrIm/WN1Wy1R3kEBuJ7hbG6w/IQguQGyqtvS 60A+KYDjXmPaVa5QhmPxDsgD0SFbLZm7 -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:34 2025 by rpki-client