$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft File: _U5c-75RNAFgOW1ZbhsySM_IHMQ.mft (raw, json) Hash identifier: sWX/WtVAAaPyzfWplCF7NBMUMFF8x82dUiS9nkF8v/Y= Subject key identifier: AD:19:7D:58:94:6B:E7:7B:62:D7:84:C5:2A:53:89:87:BC:75:04:C8 Authority key identifier: FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 Certificate issuer: /CN=A91B5CEA/serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft Manifest number: 0210 Signing time: Sat 23 Aug 2025 02:22:47 +0000 Manifest this update: Sat 23 Aug 2025 02:22:47 +0000 Manifest next update: Sat 30 Aug 2025 02:22:47 +0000 Files and hashes: 1: _U5c-75RNAFgOW1ZbhsySM_IHMQ.crl (hash: jxOuy6lvm3GVK/DuXt/4oy2BkHJsI7jjcUeDDs7evgI=) 2: B42198DC64F211ED9AEC046FC4F9AE02.roa (hash: 9taiAk5oqRem+++FlFWs0bgv4cUdlRkoPSLMugraGUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Validity Not Before: Aug 23 02:22:47 2025 GMT Not After : Aug 30 02:22:47 2025 GMT Subject: CN=68a925f7-34bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:20:64:92:5c:84:54:bc:0a:bb:ab:01:4d: 5f:b1:7f:32:4b:0e:b6:74:1b:81:69:2f:09:31:8a: 48:fd:aa:a3:05:0d:a6:f4:d1:d3:a5:12:85:b7:cd: 02:ae:de:f8:46:30:65:fd:7a:0f:16:52:43:1c:e1: 8e:af:7a:a9:26:03:fe:b6:04:3e:dd:cf:f2:e7:ce: de:00:8c:00:c6:86:b4:43:1e:f4:73:6a:7d:3d:43: 87:dc:84:40:38:8b:e3:fb:2c:c3:74:dd:71:9b:c7: 41:4c:79:ac:3c:30:89:bd:e7:e7:40:cb:ca:bc:d9: d5:0e:62:da:7f:8a:28:0d:f4:c2:0b:49:fc:e9:04: 57:27:b4:a5:0c:49:d1:f2:fa:5b:4f:20:27:6b:31: df:09:93:af:3c:d2:3d:c3:02:bf:fd:64:7b:3a:5d: 3d:c0:e1:fb:93:ad:c5:56:39:78:d3:d2:ed:23:e9: b4:f0:c8:22:70:e9:4c:96:ed:51:38:f2:8f:e5:99: 9d:d5:1a:25:3b:79:43:e3:10:48:78:d2:cc:72:10: 7e:11:27:df:bf:c6:d7:9c:a0:09:a8:fd:3c:cc:13: 93:d7:f2:29:77:ee:9d:40:b8:03:71:59:c4:f9:cc: 6f:aa:12:a6:72:f6:fb:0a:89:84:9c:82:9a:ca:e8: ab:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:19:7D:58:94:6B:E7:7B:62:D7:84:C5:2A:53:89:87:BC:75:04:C8 X509v3 Authority Key Identifier: keyid:FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:33:23:47:71:5b:9d:59:f5:8d:29:28:69:3f:8e:0b:9c:30: 81:de:7c:fb:27:a8:f2:4e:1e:ca:c1:0f:d3:7e:71:e9:cb:d7: 02:28:c8:3c:c4:5e:3e:14:08:e4:96:e2:7d:c5:d9:ee:d1:b6: 71:1a:68:bd:df:86:a3:7b:bd:e2:96:36:65:1f:e9:46:b2:45: cc:ac:87:c8:93:06:6a:fc:be:eb:96:3d:06:82:29:a2:8a:78: 45:cd:7c:90:fb:16:1b:ce:e6:14:f4:3f:08:85:1f:fd:38:03: 06:5a:37:f8:59:38:75:42:12:b6:02:ca:24:a0:d0:7c:2f:89: de:9d:7e:16:c8:70:cd:e9:f5:96:70:de:3f:65:ec:d9:f9:4d: 04:58:db:e1:a2:37:17:9f:c2:e4:b4:47:53:8f:a9:11:c4:89: 69:44:32:67:a1:ec:0c:92:55:8a:64:31:ca:c0:2e:0c:a5:90: 57:03:48:bf:07:c4:ec:46:13:03:e0:34:f3:9e:b3:5a:02:75: 39:92:41:86:42:4a:b9:a2:10:0f:8a:33:d4:fd:dd:f0:b2:bd: 9e:13:6f:34:d2:9a:16:a4:06:35:ce:92:83:82:9c:a3:24:65: f3:13:dd:d5:4b:d6:33:27:f7:81:09:6b:5e:d7:cd:34:a3:96: 36:a1:a3:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKEZENEU1Q0ZCQkU1MTM0MDE2MDM5NkQ1OTZFMUIzMjQ4 Q0ZDODFDQzQwHhcNMjUwODIzMDIyMjQ3WhcNMjUwODMwMDIyMjQ3WjAYMRYwFAYD VQQDEw02OGE5MjVmNy0zNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIcgZJJchFS8CrurAU1fsX8ySw62dBuBaS8JMYpI/aqjBQ2m9NHTpRKFt80C rt74RjBl/XoPFlJDHOGOr3qpJgP+tgQ+3c/y587eAIwAxoa0Qx70c2p9PUOH3IRA OIvj+yzDdN1xm8dBTHmsPDCJvefnQMvKvNnVDmLaf4ooDfTCC0n86QRXJ7SlDEnR 8vpbTyAnazHfCZOvPNI9wwK//WR7Ol09wOH7k63FVjl409LtI+m08MgicOlMlu1R OPKP5Zmd1RolO3lD4xBIeNLMchB+ESffv8bXnKAJqP08zBOT1/Ipd+6dQLgDcVnE +cxvqhKmcvb7ComEnIKayuirZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0ZfViU a+d7YteExSpTiYe8dQTIMB8GA1UdIwQYMBaAFP1OXPu+UTQBYDltWW4bMkjPyBzE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8yOEE3N0I2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5BRmdPVzFaYmhzeVNNX0lI TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VNWMtNzVSTkFGZ09XMVpiaHN5U01fSUhNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8yOEE3N0I2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5B RmdPVzFaYmhzeVNNX0lITVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAMyNHcVudWfWNKShpP44LnDCB3nz7J6jyTh7KwQ/TfnHpy9cCKMg8 xF4+FAjkluJ9xdnu0bZxGmi934aje73iljZlH+lGskXMrIfIkwZq/L7rlj0Ggimi inhFzXyQ+xYbzuYU9D8IhR/9OAMGWjf4WTh1QhK2AsokoNB8L4nenX4WyHDN6fWW cN4/ZezZ+U0EWNvhojcXn8LktEdTj6kRxIlpRDJnoewMklWKZDHKwC4MpZBXA0i/ B8TsRhMD4DTznrNaAnU5kkGGQkq5ohAPijPU/d3wsr2eE2800poWpAY1zpKDgpyj JGXzE93VS9YzJ/eBCWte1800o5Y2oaPB -----END CERTIFICATE-----Generated at Sat Aug 23 15:57:07 2025 by rpki-client