$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: FylTEzK7KUQBFz/LT+4RZyjm7BF2WThm5X98Dwfr+IY= Subject key identifier: 1C:CF:58:F4:FF:A4:26:D8:C9:1C:BF:19:D9:44:8C:40:8E:24:5B:9E Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 04D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 04AE Signing time: Sat 23 Aug 2025 00:16:51 +0000 Manifest this update: Sat 23 Aug 2025 00:16:50 +0000 Manifest next update: Sat 30 Aug 2025 00:16:50 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: mYPWy9MZXjSzvPtdDs7yXjYAGa9BRfw1UVIJKrAYoOo=) 2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: 4GFmq+y/6BnQNNwGjl1gbuy3YynLJ9fv1uZb3cM+3cw=) 3: 9D9B2E7A6D3211F0A68A8A58C4F9AE02.roa (hash: jhSTY2DYnMEsMBx0x/zPRVJM0gPx3FVGm0Ptw4y3rcw=) 4: 38644B3674E411F0AA217835C4F9AE02.roa (hash: Nnrg9CT47rxlcVmEIiWJF1FBLo7+Ft8DHOBOgt1QRPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1238 (0x4d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Aug 23 00:16:50 2025 GMT Not After : Aug 30 00:16:50 2025 GMT Subject: CN=68a90872-8098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:bf:00:94:97:94:b3:b3:aa:20:c8:e5:77: 1f:c0:ab:62:7b:81:58:10:46:cc:9e:1d:c5:90:df: 38:cb:fa:42:c7:d6:30:e6:e0:bf:68:ac:06:a8:a7: 1a:9b:b3:f1:d6:f4:91:8d:93:fc:20:d9:28:ec:e3: 95:6e:ee:e3:e1:93:9e:86:8b:33:8f:f5:8f:4a:8b: 1d:34:b0:02:77:59:14:fc:21:a9:06:f8:d5:cb:d0: a1:ad:b2:9a:24:14:76:24:c8:ef:36:9e:2f:68:99: a3:63:ae:86:10:e5:59:6c:75:d9:4a:6c:27:2c:67: 76:0c:18:7e:4e:1f:fb:2b:3d:64:22:16:f0:95:32: 48:88:96:d5:db:9c:c2:23:ba:79:b8:87:7c:3d:93: bf:69:0d:a0:67:95:93:07:ea:26:90:d0:ea:af:1b: 1c:61:7e:a2:bc:78:83:f5:7c:eb:99:cf:c6:ea:d5: 7a:46:96:92:68:46:13:f8:9a:ad:23:a1:d8:7f:43: a4:c5:87:3c:fe:2f:84:84:9b:52:b2:31:d8:18:4c: 8c:d3:ed:86:96:8a:8f:0e:e2:d7:8d:74:e5:0c:d1: 08:7d:6c:3b:35:d6:d0:1e:f6:c5:fb:99:28:5c:5a: 54:71:14:58:8c:9f:c2:aa:8c:b3:9f:3b:4d:21:23: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CF:58:F4:FF:A4:26:D8:C9:1C:BF:19:D9:44:8C:40:8E:24:5B:9E X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:18:7c:87:4a:9a:09:75:71:93:fe:00:03:6d:28:32:a5:36: 04:43:3c:1e:eb:b8:28:2f:83:29:88:8c:53:87:b0:89:8f:ac: 82:d5:a8:59:2b:37:81:35:f7:07:fd:ba:d1:62:b3:c1:ea:da: 27:b8:5c:a4:e6:82:ba:bd:cf:5b:3a:c8:42:44:9f:21:f9:14: 1e:91:d3:4c:85:e7:e6:91:c2:6e:3f:6e:e7:f2:46:21:b4:0c: 89:56:11:66:11:75:51:39:a3:63:76:c2:df:b0:90:77:64:7e: 82:73:c3:31:5e:97:38:6c:a8:65:2b:bd:52:8b:13:c0:d5:ab: c0:8e:07:2e:a2:00:6e:e6:5f:31:c9:78:b4:7a:c8:67:78:b1: 4f:56:99:3f:dd:24:37:a7:ee:24:00:58:1a:40:ae:6e:59:78: 2d:c3:15:6e:4b:f1:44:ef:c9:3b:3a:fa:48:aa:30:f2:21:d6: bd:8a:e5:fe:46:a2:b7:75:40:db:71:74:dd:6f:39:d4:2e:01: fc:3f:a9:e8:a6:be:8e:d7:d0:c8:85:e9:f7:e5:66:43:89:a6: 36:e9:13:75:97:3f:67:30:0b:a1:f7:c3:0b:2b:a8:31:37:e1: 0f:27:5a:97:30:d9:5b:44:61:9c:34:4b:4b:89:a9:70:a6:cb: 61:2d:80:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjUwODIzMDAxNjUwWhcNMjUwODMwMDAxNjUwWjAYMRYwFAYD VQQDEw02OGE5MDg3Mi04MDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVW/AJSXlLOzqiDI5XcfwKtie4FYEEbMnh3FkN84y/pCx9Yw5uC/aKwGqKca m7Px1vSRjZP8INko7OOVbu7j4ZOehoszj/WPSosdNLACd1kU/CGpBvjVy9ChrbKa JBR2JMjvNp4vaJmjY66GEOVZbHXZSmwnLGd2DBh+Th/7Kz1kIhbwlTJIiJbV25zC I7p5uId8PZO/aQ2gZ5WTB+omkNDqrxscYX6ivHiD9Xzrmc/G6tV6RpaSaEYT+Jqt I6HYf0OkxYc8/i+EhJtSsjHYGEyM0+2GloqPDuLXjXTlDNEIfWw7NdbQHvbF+5ko XFpUcRRYjJ/CqoyznztNISOalQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzPWPT/ pCbYyRy/GdlEjECOJFueMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGGHyHSpoJdXGT/gADbSgypTYEQzwe67goL4MpiIxTh7CJj6yC1ahZ KzeBNfcH/brRYrPB6tonuFyk5oK6vc9bOshCRJ8h+RQekdNMhefmkcJuP27n8kYh tAyJVhFmEXVROaNjdsLfsJB3ZH6Cc8MxXpc4bKhlK71SixPA1avAjgcuogBu5l8x yXi0eshneLFPVpk/3SQ3p+4kAFgaQK5uWXgtwxVuS/FE78k7OvpIqjDyIda9iuX+ RqK3dUDbcXTdbznULgH8P6nopr6O19DIhen35WZDiaY26RN1lz9nMAuh98MLK6gx N+EPJ1qXMNlbRGGcNEtLialwpsthLYBz -----END CERTIFICATE-----Generated at Sun Aug 24 11:02:59 2025 by rpki-client