$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json) Hash identifier: 1mtZC54xdg5fVUjD2s3BKR1acZpkFYYvm6+srB9fhGE= Subject key identifier: 33:2E:BE:7D:F6:A4:F9:F6:60:74:0D:1B:E4:10:8D:89:2A:94:93:C5 Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft Manifest number: 012B Signing time: Sat 23 Aug 2025 04:47:42 +0000 Manifest this update: Sat 23 Aug 2025 04:47:42 +0000 Manifest next update: Sat 30 Aug 2025 04:47:42 +0000 Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: eil9hk26Sv3swqu/fRjFh+M/X7jqtsxpCXkFA3/PZs4=) 2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: L0qfyKxG6EHzysnGwaUqdqXIinzIkFTO2ksscDrrvZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Validity Not Before: Aug 23 04:47:42 2025 GMT Not After : Aug 30 04:47:42 2025 GMT Subject: CN=68a947ee-12ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:de:85:7e:25:90:19:6d:2f:71:5b:0f:30: 19:bf:eb:28:c4:aa:64:c7:2b:c5:6d:17:5f:18:06: 8d:d3:a9:a8:ea:c1:df:41:45:35:e4:cc:52:2c:8c: 09:9b:7a:81:b1:4f:cb:62:45:be:ad:04:e4:86:b2: 9d:6c:9c:cb:13:88:a0:45:b8:c1:f2:b5:94:88:e5: 57:9d:f8:f4:3a:7d:bb:ca:8a:d9:78:68:d8:f0:f9: bf:0a:24:b5:d6:23:e0:da:f1:f4:81:c0:5c:a6:2d: 23:66:10:03:94:4a:fc:f8:9c:ab:7b:67:7c:6d:96: df:69:57:1a:00:23:c0:f8:81:18:35:dd:b3:7e:04: 50:39:54:2c:2b:ca:aa:4c:5c:98:1d:a2:b3:88:cd: 38:4e:f6:8e:be:1b:a3:03:4d:08:af:3f:98:25:ef: 09:58:a6:f3:c3:71:ff:e1:c0:d5:a6:a3:61:f1:e2: 8b:0e:2e:dd:18:fb:b4:fe:e5:36:4d:fb:47:c2:ec: e6:12:25:bd:34:6c:83:f0:63:7d:f3:e9:12:9f:e2: 11:e9:ba:9b:36:85:a9:c2:be:0e:88:3a:55:3f:b5: 04:57:b3:41:73:4e:49:87:57:f5:ff:fa:48:d4:78: 15:c5:70:fe:83:75:7f:e9:2a:b2:1f:72:1f:6e:b5: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2E:BE:7D:F6:A4:F9:F6:60:74:0D:1B:E4:10:8D:89:2A:94:93:C5 X509v3 Authority Key Identifier: keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:54:18:3d:08:e4:a4:f2:9e:eb:c3:62:19:65:c5:55:a0:3d: 5a:a6:87:5f:e2:97:e7:56:3b:99:0f:9e:8c:6a:88:bf:9b:7d: 64:46:b6:31:2f:bd:9f:43:ca:1b:21:8d:bf:b7:87:88:4f:65: 51:c0:9e:9d:f4:8f:26:2d:e0:de:20:fd:8d:4c:01:33:2f:0c: 75:93:2e:a1:40:21:41:4b:f5:b2:eb:93:d3:54:1c:15:fa:84: 5b:5f:37:4f:ac:19:02:73:ca:00:fc:86:be:32:9d:7c:37:54: a9:08:f5:55:3d:31:eb:9f:e0:ff:ee:bd:e3:fc:99:dd:20:7f: 58:8d:54:47:ed:f5:7b:0b:24:5e:b9:3f:72:ba:78:7c:58:7f: 50:b6:86:33:79:eb:de:9e:0d:00:8e:51:d7:45:6e:3e:5c:3a: ae:7e:8d:be:a6:bc:57:86:38:ca:b6:b9:0b:08:fc:df:da:5d: e9:94:80:f9:ee:de:0e:0b:89:a7:07:68:a2:10:a6:49:01:83: 6f:cc:09:b8:bb:75:2a:09:ca:8a:4c:49:d8:ca:59:3b:6b:33: f5:cc:be:5c:bd:c2:f8:38:8c:16:ef:3d:c9:8c:21:ec:92:e5: d5:b5:04:3c:80:59:f4:77:87:30:31:7a:94:bb:d6:1b:98:86: ae:a8:0e:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKEI5MjUwRkRFM0ZBQkQ1OUZBNTYwODIzMEZFQTdBMjND NEI0Qzg5NjgwHhcNMjUwODIzMDQ0NzQyWhcNMjUwODMwMDQ0NzQyWjAYMRYwFAYD VQQDEw02OGE5NDdlZS0xMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxHehX4lkBltL3FbDzAZv+soxKpkxyvFbRdfGAaN06mo6sHfQUU15MxSLIwJ m3qBsU/LYkW+rQTkhrKdbJzLE4igRbjB8rWUiOVXnfj0On27yorZeGjY8Pm/CiS1 1iPg2vH0gcBcpi0jZhADlEr8+Jyre2d8bZbfaVcaACPA+IEYNd2zfgRQOVQsK8qq TFyYHaKziM04TvaOvhujA00Irz+YJe8JWKbzw3H/4cDVpqNh8eKLDi7dGPu0/uU2 TftHwuzmEiW9NGyD8GN98+kSn+IR6bqbNoWpwr4OiDpVP7UEV7NBc05Jh1f1//pI 1HgVxXD+g3V/6SqyH3IfbrWt7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMuvn32 pPn2YHQNG+QQjYkqlJPFMB8GA1UdIwQYMBaAFLklD94/q9WfpWCCMP6nojxLTIlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS85NUE2MTE5Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFaLWxZSUl3X3FlaVBFdE1p V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS85NUE2MTE5Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFa LWxZSUl3X3FlaVBFdE1pV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlVBg9COSk8p7rw2IZZcVVoD1apodf4pfnVjuZD56Maoi/m31kRrYx L72fQ8obIY2/t4eIT2VRwJ6d9I8mLeDeIP2NTAEzLwx1ky6hQCFBS/Wy65PTVBwV +oRbXzdPrBkCc8oA/Ia+Mp18N1SpCPVVPTHrn+D/7r3j/JndIH9YjVRH7fV7CyRe uT9yunh8WH9QtoYzeeveng0AjlHXRW4+XDqufo2+prxXhjjKtrkLCPzf2l3plID5 7t4OC4mnB2iiEKZJAYNvzAm4u3UqCcqKTEnYylk7azP1zL5cvcL4OIwW7z3JjCHs kuXVtQQ8gFn0d4cwMXqUu9YbmIauqA6p -----END CERTIFICATE-----Generated at Sat Aug 23 16:24:31 2025 by rpki-client