$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json) Hash identifier: rZGym08pOadKV7OyHkXbyQyrKu/CsRWJuTNMVBo/yj4= Subject key identifier: B9:8F:9D:FD:C0:02:37:2C:6A:3D:8E:D2:BD:B8:24:8C:CF:05:57:5E Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Certificate serial: 0BDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft Manifest number: 0BD8 Signing time: Fri 22 Aug 2025 19:00:22 +0000 Manifest this update: Fri 22 Aug 2025 19:00:21 +0000 Manifest next update: Fri 29 Aug 2025 19:00:21 +0000 Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: 96Zplm+aWRvHk9PGColjEvFQg8P99J14f1f2ynO+aDo=) 2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: r5uWTU+sYs/vGgm5oMxXApeoTDyzrDhvLimJL0rhlzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Validity Not Before: Aug 22 19:00:21 2025 GMT Not After : Aug 29 19:00:21 2025 GMT Subject: CN=68a8be45-2e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b0:c2:b4:c3:38:6f:f5:cc:ed:34:fc:c4:5a: 95:54:e0:00:3f:80:e2:9a:6e:18:fd:a1:5d:fc:39: 6b:b3:74:7f:21:79:59:25:7d:65:e6:23:d7:db:54: 15:5b:4d:fe:61:43:44:b5:cb:9d:ee:90:76:7f:ae: 63:39:ba:28:9d:5d:eb:67:80:66:df:ae:4d:e9:c7: 83:1e:26:f9:95:36:81:1e:d2:fc:4d:6b:d3:0b:4c: 7b:3e:e1:14:fd:ec:70:48:2f:fa:a9:53:98:a2:1f: 0b:05:bf:ad:f8:f6:97:5f:5d:cb:c7:d6:29:d0:0e: 77:9b:24:e0:6c:11:f5:18:96:4b:d7:0d:83:2e:51: c9:1f:30:7d:91:c1:1d:bf:30:e5:d3:cf:f1:8a:64: 28:a0:bb:23:1e:03:c8:08:b3:01:63:7b:c8:1f:b6: 49:39:e4:89:10:4e:e0:af:35:52:80:3c:30:da:a8: 2e:46:b2:c4:46:63:0a:f5:6f:a8:e6:92:fb:89:43: 1d:71:27:9e:01:6c:6e:ff:01:77:e3:e7:fb:e7:cd: 52:6e:83:c7:63:9e:9d:42:18:23:71:7f:82:28:5d: 60:7d:c7:2f:5d:8b:67:65:e1:2b:0d:a0:9a:49:66: 75:cd:1b:fb:f5:ba:1e:df:86:27:b3:23:a2:3c:cf: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8F:9D:FD:C0:02:37:2C:6A:3D:8E:D2:BD:B8:24:8C:CF:05:57:5E X509v3 Authority Key Identifier: keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:75:5f:74:49:14:4b:c9:62:c7:c4:c7:d6:65:d3:e2:90:14: fd:db:01:e4:58:a2:c0:cf:2b:16:02:24:07:93:14:c9:f3:91: fc:39:22:24:0c:3c:d5:77:46:03:a5:dd:98:17:ac:d4:92:3e: c1:20:e5:6e:be:f5:e0:62:bd:8a:28:c5:48:ec:8b:a0:49:a9: bb:a3:7e:98:ac:e5:df:b5:29:26:19:35:df:fc:3e:9a:0e:19: f3:d2:09:f0:69:5a:66:47:1a:87:fe:1f:43:40:b3:9b:cd:7b: 2b:95:9c:b3:7f:b1:12:bf:5b:19:3e:32:05:82:7b:a9:2e:a0: 34:7f:95:6d:1b:3c:7d:b9:65:12:de:98:fb:0c:5d:c4:d5:ed: 53:07:8b:63:0a:d2:79:87:45:50:30:48:06:a7:96:46:32:ff: 40:d0:71:37:b4:6d:b7:ec:2d:f8:ed:c0:fd:3d:c8:95:0b:3d: 72:20:33:25:f7:f6:13:b6:d3:e6:25:35:da:c8:a1:9e:29:c1: 5a:f3:eb:cd:fe:74:34:7f:b6:e3:62:9e:c2:8c:ff:da:15:b5: 4a:d6:83:a2:c6:24:51:c1:20:8a:2e:91:39:f5:ff:23:53:9f: 30:3f:1d:a2:57:be:bd:27:aa:09:68:5d:3b:01:a4:f2:f4:e1: 50:8b:5e:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC QjA5N0MyMUIwHhcNMjUwODIyMTkwMDIxWhcNMjUwODI5MTkwMDIxWjAYMRYwFAYD VQQDEw02OGE4YmU0NS0yZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rDCtMM4b/XM7TT8xFqVVOAAP4Dimm4Y/aFd/Dlrs3R/IXlZJX1l5iPX21QV W03+YUNEtcud7pB2f65jOboonV3rZ4Bm365N6ceDHib5lTaBHtL8TWvTC0x7PuEU /exwSC/6qVOYoh8LBb+t+PaXX13Lx9Yp0A53myTgbBH1GJZL1w2DLlHJHzB9kcEd vzDl08/ximQooLsjHgPICLMBY3vIH7ZJOeSJEE7grzVSgDww2qguRrLERmMK9W+o 5pL7iUMdcSeeAWxu/wF34+f7581SboPHY56dQhgjcX+CKF1gfccvXYtnZeErDaCa SWZ1zRv79boe34YnsyOiPM9ClQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmPnf3A Ajcsaj2O0r24JIzPBVdeMB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py SGNRbi0tci1jZy03Q1h3aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1dV90SRRLyWLHxMfWZdPikBT92wHkWKLAzysWAiQHkxTJ85H8OSIk DDzVd0YDpd2YF6zUkj7BIOVuvvXgYr2KKMVI7IugSam7o36YrOXftSkmGTXf/D6a Dhnz0gnwaVpmRxqH/h9DQLObzXsrlZyzf7ESv1sZPjIFgnupLqA0f5VtGzx9uWUS 3pj7DF3E1e1TB4tjCtJ5h0VQMEgGp5ZGMv9A0HE3tG237C347cD9PciVCz1yIDMl 9/YTttPmJTXayKGeKcFa8+vN/nQ0f7bjYp7CjP/aFbVK1oOixiRRwSCKLpE59f8j U58wPx2iV769J6oJaF07AaTy9OFQi14Q -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:48 2025 by rpki-client