$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: 9quRJ2XMyZSaU4BZ8sxp9eDA9o5bTHj08tPBV7ShguY= Subject key identifier: 34:78:39:AA:FE:2B:F1:C7:8A:8A:C1:DE:11:50:6F:F0:1D:F6:CF:BB Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 065B Signing time: Fri 22 Aug 2025 22:44:29 +0000 Manifest this update: Fri 22 Aug 2025 22:44:28 +0000 Manifest next update: Fri 29 Aug 2025 22:44:28 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: dkRFmPEl4tBR5VgwVzZR4j2UJtJXwk7AAimBxyyQX4Q=) 2: 1B4DA20CD46711ECA1A27035C4F9AE02.roa (hash: ztzKFXpjSxYM8wd4nThJ1BsK2ipsW271bSfHzk4YREM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Aug 22 22:44:28 2025 GMT Not After : Aug 29 22:44:28 2025 GMT Subject: CN=68a8f2cd-fb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:52:42:4b:be:29:b1:50:86:76:89:e3:48: e0:8d:27:88:b6:e8:b5:00:c8:f5:46:a3:c2:7c:06: 99:70:3c:de:f5:e5:69:7e:7f:5c:5f:1e:d2:69:e4: 16:4c:89:14:2a:ff:af:78:ef:b1:a1:70:e1:07:cf: 4d:8e:f5:e6:6d:be:35:f9:09:bc:51:87:00:84:e1: 96:aa:6f:c2:46:68:6f:a8:69:88:75:d3:c3:81:58: 6b:a0:4e:14:94:03:06:e5:bb:6c:bc:a4:f1:8d:54: 8f:66:af:d6:aa:f3:c8:d1:70:29:cc:5b:ab:16:32: a6:ea:2a:bd:74:2f:ea:d5:92:35:ea:66:72:9b:81: 20:65:0d:7a:71:fc:fa:c6:80:7a:ca:b3:f5:29:de: 32:d0:1c:ae:fa:c4:e4:c2:fd:24:6f:9f:c2:8d:e9: c3:9d:39:5b:2c:56:a5:f0:e8:23:ef:fe:3c:52:6e: fb:f9:9c:a8:e5:a1:7e:f0:b8:fb:6f:f0:7d:4c:6e: 87:98:2d:7b:7e:78:e9:d0:43:8f:70:a0:49:d2:3d: 66:2c:0f:82:5a:cd:a5:0d:ac:1d:0a:50:19:df:3a: e1:d3:08:9c:d8:60:f2:92:54:56:39:95:9c:90:16: 69:50:74:90:b2:03:b5:f7:a5:81:91:5c:5e:2a:68: 24:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:78:39:AA:FE:2B:F1:C7:8A:8A:C1:DE:11:50:6F:F0:1D:F6:CF:BB X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:07:05:d4:3f:f3:cb:9e:5a:e2:e2:e6:01:88:dc:c8:f7:15: ed:db:61:29:79:f4:ff:92:7a:b2:8e:0a:07:c4:39:ac:ab:9b: ba:29:9c:2e:c6:16:1b:60:9b:96:26:54:a9:ff:a1:5a:6f:7d: 62:95:14:69:68:68:02:77:29:8d:e0:d1:d2:ef:36:65:81:e1: f6:37:64:32:5e:a4:e8:40:d9:21:ca:37:3d:05:5a:26:98:f5: 67:c8:24:14:99:73:ff:44:0c:71:b5:74:20:06:1c:02:0e:e2: bf:fd:b2:7f:b2:40:42:30:c8:b9:f2:ed:88:b0:c2:3a:90:a3: e8:5b:53:d5:dd:9c:d3:97:70:39:22:7d:37:55:f3:0b:f3:85: 3d:12:96:e2:ab:c1:2c:89:0e:d9:4c:a5:ae:5d:86:87:3a:a3: 5d:af:ca:f9:b5:34:e8:54:bd:cc:90:fc:58:c9:a8:44:5a:30: dc:a4:f7:d6:5e:08:91:29:ec:05:e8:58:7d:81:bd:41:fa:f8: 85:00:d0:ff:76:54:78:bc:53:0f:f6:dd:0b:19:c4:7f:3f:fb: 23:a2:98:fc:5a:20:55:f7:e2:24:3f:f8:0c:23:9d:6d:a6:56: f8:16:e5:64:81:7f:b7:51:fe:60:55:f2:d2:a6:7e:16:2d:9a: 26:7c:ed:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjUwODIyMjI0NDI4WhcNMjUwODI5MjI0NDI4WjAYMRYwFAYD VQQDEw02OGE4ZjJjZC1mYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXlSQku+KbFQhnaJ40jgjSeItui1AMj1RqPCfAaZcDze9eVpfn9cXx7SaeQW TIkUKv+veO+xoXDhB89NjvXmbb41+Qm8UYcAhOGWqm/CRmhvqGmIddPDgVhroE4U lAMG5btsvKTxjVSPZq/WqvPI0XApzFurFjKm6iq9dC/q1ZI16mZym4EgZQ16cfz6 xoB6yrP1Kd4y0Byu+sTkwv0kb5/CjenDnTlbLFal8Ogj7/48Um77+Zyo5aF+8Lj7 b/B9TG6HmC17fnjp0EOPcKBJ0j1mLA+CWs2lDawdClAZ3zrh0wic2GDyklRWOZWc kBZpUHSQsgO196WBkVxeKmgksQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR4Oar+ K/HHiorB3hFQb/Ad9s+7MB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTBwXUP/PLnlri4uYBiNzI9xXt22EpefT/knqyjgoHxDmsq5u6KZwu xhYbYJuWJlSp/6Fab31ilRRpaGgCdymN4NHS7zZlgeH2N2QyXqToQNkhyjc9BVom mPVnyCQUmXP/RAxxtXQgBhwCDuK//bJ/skBCMMi58u2IsMI6kKPoW1PV3ZzTl3A5 In03VfML84U9Epbiq8EsiQ7ZTKWuXYaHOqNdr8r5tTToVL3MkPxYyahEWjDcpPfW XgiRKewF6Fh9gb1B+viFAND/dlR4vFMP9t0LGcR/P/sjopj8WiBV9+IkP/gMI51t plb4FuVkgX+3Uf5gVfLSpn4WLZomfO3g -----END CERTIFICATE-----Generated at Sat Aug 23 21:02:13 2025 by rpki-client