$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft File: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft (raw, json) Hash identifier: vl8ttgFWJGtbWtWBnqUwCCjBl2+XhHZ8RRj/LjgLAoY= Subject key identifier: 4D:DC:75:B6:4A:D0:B3:46:5A:1B:F4:6B:B5:A0:81:C3:84:85:BA:C3 Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 06E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft Manifest number: 06CD Signing time: Fri 22 Aug 2025 22:19:45 +0000 Manifest this update: Fri 22 Aug 2025 22:19:44 +0000 Manifest next update: Fri 29 Aug 2025 22:19:44 +0000 Files and hashes: 1: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl (hash: I08Wgp4LgbPTVkfdTQgH/HO5/eyKFnBl7+zOPRO1DOY=) 2: DE7B831C37DA11EDBEF9D050C4F9AE02.roa (hash: Y3wS66fd5YHhzaA4qhuEKsiBBLTblPlxdtXJBZSBnBU=) 3: 6EC9CC12746911F0B5BCC83EC4F9AE02.roa (hash: obljP3RXfrVGEpE3yYP91fJo6xaTDVgNzc+FKAwytnw=) 4: E959541EB28511ED8893C51CC4F9AE02.roa (hash: tDIvvxPbUPRWOTPf8MK/oVddDXGtUARS3nkFkQGylVE=) 5: DFBF8CDC6AF911F08AB48F35C4F9AE02.roa (hash: LvOncBacp+KNSMfj7m7RG6y+20TTs0UeSnhzak3/ObY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1768 (0x6e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Aug 22 22:19:44 2025 GMT Not After : Aug 29 22:19:44 2025 GMT Subject: CN=68a8ed00-3e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b1:7c:87:21:a7:9c:1f:c1:83:a3:8f:09:b2: 88:69:b7:01:a1:a4:69:a6:4a:34:a1:06:9e:28:f8: 96:2b:8f:ff:a1:d6:a7:38:83:33:b7:6e:f6:46:d1: 29:d0:ee:1a:1f:fd:e9:fd:f4:6e:73:42:61:6a:45: 29:79:14:06:c3:b2:65:36:b4:f2:7f:38:b4:c9:9a: 7a:ec:27:4a:46:fd:73:61:52:98:fe:d8:a0:a3:14: ae:9f:14:ad:f6:b9:cc:b5:ec:bc:ca:f6:8b:92:7c: 8b:75:65:d4:9e:10:e6:c8:ec:2e:ec:2f:6f:34:0a: b9:41:03:20:07:55:4e:02:9a:8f:21:0b:65:2a:96: 2e:26:71:12:c6:22:b8:1f:05:6e:d6:93:87:92:37: d4:eb:e7:f2:1f:88:aa:37:4b:a7:07:d9:73:33:08: ce:38:63:41:45:70:53:39:01:f0:86:e3:e5:15:db: db:ff:9a:cd:b3:51:ea:a1:dd:fb:9d:e5:e2:32:f9: 3b:fd:98:6c:75:fd:17:ad:98:6a:8e:1f:99:6a:01: 60:d5:10:b0:fc:b9:39:a9:c3:6a:d8:95:a9:1e:66: ae:0f:a3:c5:a9:e4:52:da:b4:1a:7b:f7:ca:03:10: 52:b8:42:9b:a7:bb:8f:8f:14:58:68:82:b8:22:86: 62:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DC:75:B6:4A:D0:B3:46:5A:1B:F4:6B:B5:A0:81:C3:84:85:BA:C3 X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:42:26:8a:8a:f6:ae:13:0a:b0:fe:6e:35:27:b1:81:ae:f0: f2:64:c1:38:46:9e:13:cf:8b:fd:3b:ad:52:d4:fb:ab:7e:75: 20:fc:ca:a1:0c:d0:9f:c3:04:5a:3b:1a:77:d5:29:64:37:85: 04:19:f7:15:d4:aa:36:53:f6:73:ad:cf:2e:70:be:72:5d:d0: 2e:8a:a0:77:a5:33:84:d0:7f:15:ad:10:19:ed:7f:34:2a:dd: a8:a9:56:e2:e6:0b:a8:db:d8:88:03:a6:e4:4d:85:a4:f6:62: a4:a3:04:8c:ec:0f:36:54:de:19:12:5d:1a:c1:d5:3e:74:89: 65:9f:5d:ce:4e:4f:fe:47:4d:a7:c4:5c:53:3a:db:7e:95:9f: 14:42:90:31:1a:9b:14:10:6d:7b:1b:07:53:e9:39:8f:d7:df: e9:38:b7:96:9b:3e:95:7a:45:1d:b4:55:e7:df:7d:54:75:27: e0:ae:e2:c9:81:1e:54:b5:6f:63:29:e1:36:88:ea:84:8a:a1: d4:3c:bb:ad:ca:ae:b8:3f:ff:74:a9:dc:3b:a1:14:3c:aa:69: e6:fc:93:54:21:a5:29:d7:59:a7:74:66:6b:a0:d7:ae:0a:a5: ed:98:93:f8:4c:9f:04:f9:04:d1:4d:79:69:79:8d:86:82:2a: 88:4d:09:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjUwODIyMjIxOTQ0WhcNMjUwODI5MjIxOTQ0WjAYMRYwFAYD VQQDEw02OGE4ZWQwMC0zZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbF8hyGnnB/Bg6OPCbKIabcBoaRppko0oQaeKPiWK4//odanOIMzt272RtEp 0O4aH/3p/fRuc0JhakUpeRQGw7JlNrTyfzi0yZp67CdKRv1zYVKY/tigoxSunxSt 9rnMtey8yvaLknyLdWXUnhDmyOwu7C9vNAq5QQMgB1VOApqPIQtlKpYuJnESxiK4 HwVu1pOHkjfU6+fyH4iqN0unB9lzMwjOOGNBRXBTOQHwhuPlFdvb/5rNs1Hqod37 neXiMvk7/Zhsdf0XrZhqjh+ZagFg1RCw/Lk5qcNq2JWpHmauD6PFqeRS2rQae/fK AxBSuEKbp7uPjxRYaIK4IoZi1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3cdbZK 0LNGWhv0a7WggcOEhbrDMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REIzNy81NzY0NzM3QTc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpq V0J4Y1FfVDhmTUxQYU5hU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2QiaKivauEwqw/m41J7GBrvDyZME4Rp4Tz4v9O61S1PurfnUg/Mqh DNCfwwRaOxp31SlkN4UEGfcV1Ko2U/Zzrc8ucL5yXdAuiqB3pTOE0H8VrRAZ7X80 Kt2oqVbi5guo29iIA6bkTYWk9mKkowSM7A82VN4ZEl0awdU+dIlln13OTk/+R02n xFxTOtt+lZ8UQpAxGpsUEG17GwdT6TmP19/pOLeWmz6VekUdtFXn331UdSfgruLJ gR5UtW9jKeE2iOqEiqHUPLutyq64P/90qdw7oRQ8qmnm/JNUIaUp11mndGZroNeu CqXtmJP4TJ8E+QTRTXlpeY2GgiqITQlJ -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:11 2025 by rpki-client