$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: VJKdngzSucwOiHBCcW2TTz67UcIt8fejZ6Q85eGG7X0= Subject key identifier: 0F:55:8D:56:00:D0:A2:3A:DE:91:AE:1A:B1:51:1D:38:E3:69:B1:45 Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0E7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0E78 Signing time: Fri 22 Aug 2025 17:49:58 +0000 Manifest this update: Fri 22 Aug 2025 17:49:58 +0000 Manifest next update: Fri 29 Aug 2025 17:49:58 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: 4YdF1TMYqgx9viub1sZFZhWpgxF9Beei1Sr9lxb7w1o=) 2: 350711FA881211EE9710F928C4F9AE02.roa (hash: /AJd6poS8Ng5rehLy7t+jOBIXVOshJArXBaFYmXY69Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3709 (0xe7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Aug 22 17:49:58 2025 GMT Not After : Aug 29 17:49:58 2025 GMT Subject: CN=68a8adc6-6ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:cc:2b:a4:8b:af:72:7d:b4:94:80:23:5b: 6f:48:e2:67:ee:78:cb:5d:1c:5c:cc:bf:75:3f:16: f8:05:7e:43:bc:78:1b:ba:88:a1:75:e6:4c:79:e0: 03:fe:a6:82:e8:02:e3:c4:bd:53:e2:d2:75:62:2a: 5e:c0:c1:2f:f8:59:6a:93:ad:ba:32:89:5d:dd:cf: f3:17:cb:8d:60:c4:dc:34:1a:4e:5e:ae:d2:56:4e: be:6d:33:73:c2:56:e6:72:92:e4:0a:57:22:c1:c9: 99:ed:02:9e:a8:01:f2:22:ea:fe:f0:d5:0b:46:4c: 9f:69:6d:c9:d7:79:8c:0f:4f:63:8d:0b:8a:ea:b6: d0:e8:ba:d1:1d:6d:cc:12:05:5e:d8:97:04:85:7e: 16:6a:bb:91:33:c7:ca:c0:ac:d7:5c:b5:83:80:10: c9:e2:0c:63:eb:e8:3a:71:12:7e:79:28:99:2f:5e: 49:43:52:49:b5:ed:f6:49:4c:d8:c1:f9:60:51:aa: 0a:7d:6c:66:92:64:51:e1:08:fc:e3:8a:7d:f8:68: 75:cd:4b:f7:ae:4b:77:d0:a9:53:80:1d:81:7c:ae: 18:b2:67:f8:3a:3d:7c:1b:b4:07:d3:7f:8f:21:4f: 37:94:36:94:23:4d:17:69:f1:4a:39:c0:33:f2:3a: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:55:8D:56:00:D0:A2:3A:DE:91:AE:1A:B1:51:1D:38:E3:69:B1:45 X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:66:98:e4:19:0e:2d:b9:07:e8:ed:3e:34:e3:da:fc:dc: cc:00:c0:97:d1:ae:79:f1:1e:77:4d:29:37:bf:7c:55:9f:61: 38:fc:cb:4f:f0:ca:25:cc:5d:f8:22:dd:10:91:a4:ac:3c:20: f1:2f:b4:7d:0e:5c:cd:ef:48:cf:c9:61:52:5e:61:bc:66:19: d4:44:4e:2b:2a:71:72:c5:d5:94:fe:75:be:95:c8:74:6e:b1: eb:89:8d:be:aa:50:e5:54:d7:19:ad:71:66:83:93:21:40:58: 90:e2:e6:61:79:1a:6c:c8:7d:57:8f:e6:75:c6:72:78:15:57: b3:11:e4:7f:02:0d:52:ca:c6:ad:38:bb:9f:d8:d0:04:c2:bb: c1:69:43:92:59:b7:3a:5d:e8:a9:97:34:08:c9:36:b4:7a:45: 8b:34:3a:25:4d:54:cf:5f:11:4a:2e:66:cc:df:a1:82:89:80: d2:2d:73:fb:01:8d:0d:54:6e:f3:fc:9f:dc:c7:fe:62:63:90: 74:52:ee:31:4d:a0:89:c6:9a:7d:37:6d:31:6f:03:82:4b:d3: 7d:39:ee:6d:f1:ef:0f:32:c6:d9:be:16:98:99:de:f0:b3:7d: 43:71:da:6d:b9:0c:f8:8b:be:de:af:22:d7:62:39:d0:04:af: bb:70:da:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjUwODIyMTc0OTU4WhcNMjUwODI5MTc0OTU4WjAYMRYwFAYD VQQDEw02OGE4YWRjNi02YWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7TMK6SLr3J9tJSAI1tvSOJn7njLXRxczL91Pxb4BX5DvHgbuoihdeZMeeAD /qaC6ALjxL1T4tJ1YipewMEv+Flqk626Mold3c/zF8uNYMTcNBpOXq7SVk6+bTNz wlbmcpLkClciwcmZ7QKeqAHyIur+8NULRkyfaW3J13mMD09jjQuK6rbQ6LrRHW3M EgVe2JcEhX4WaruRM8fKwKzXXLWDgBDJ4gxj6+g6cRJ+eSiZL15JQ1JJte32SUzY wflgUaoKfWxmkmRR4Qj844p9+Gh1zUv3rkt30KlTgB2BfK4Ysmf4Oj18G7QH03+P IU83lDaUI00XafFKOcAz8jounwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9VjVYA 0KI63pGuGrFRHTjjabFFMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHSWaY5BkOLbkH6O0+NOPa/NzMAMCX0a558R53TSk3v3xVn2E4/MtP 8MolzF34It0QkaSsPCDxL7R9DlzN70jPyWFSXmG8ZhnURE4rKnFyxdWU/nW+lch0 brHriY2+qlDlVNcZrXFmg5MhQFiQ4uZheRpsyH1Xj+Z1xnJ4FVezEeR/Ag1Sysat OLuf2NAEwrvBaUOSWbc6XeiplzQIyTa0ekWLNDolTVTPXxFKLmbM36GCiYDSLXP7 AY0NVG7z/J/cx/5iY5B0Uu4xTaCJxpp9N20xbwOCS9N9Oe5t8e8PMsbZvhaYmd7w s31DcdptuQz4i77eryLXYjnQBK+7cNpl -----END CERTIFICATE-----Generated at Sat Aug 23 20:38:28 2025 by rpki-client