$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json) Hash identifier: Lue8tq5f1eTT4P5qtNl3BdJeC2lHePIMpbzJeRow9iI= Subject key identifier: E7:BA:27:60:5C:CD:9D:30:3C:88:E2:E6:D0:7B:0D:2A:9B:32:22:6B Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft Manifest number: 016C Signing time: Sat 23 Aug 2025 04:00:42 +0000 Manifest this update: Sat 23 Aug 2025 04:00:42 +0000 Manifest next update: Sat 30 Aug 2025 04:00:42 +0000 Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: 3It2fLlazSx/EbfSPlVJw0bRDQjKiMQbg0SLQ69v/48=) 2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: vLaYuuYnarn+LGPGR9ZLrnHgOaNMvO/0VgOiG0azlng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Validity Not Before: Aug 23 04:00:42 2025 GMT Not After : Aug 30 04:00:42 2025 GMT Subject: CN=68a93cea-9eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:90:c1:20:79:ca:43:df:5a:b2:7d:b3:dd:cb: 6e:91:85:7d:9a:ef:00:6e:68:06:17:c9:3b:b3:80: 77:51:37:5a:23:51:2a:79:9f:2f:dc:83:a0:86:0f: da:8f:87:45:b6:2a:b2:dc:eb:44:bc:7a:f6:2a:34: 0e:d1:e0:70:f5:39:9a:88:83:86:55:28:4e:8c:de: 29:fa:82:19:f8:80:a0:de:e3:78:57:35:02:96:a8: a8:8e:94:96:43:5b:1f:8d:e3:da:0a:83:c9:e6:68: d8:27:05:ac:fe:fc:29:af:bf:85:63:8c:24:ed:63: eb:d0:d0:85:a9:b1:90:b5:bb:09:3a:9d:c3:e0:78: e8:57:cf:ff:e3:8b:c7:8c:18:99:5b:84:19:41:40: 54:38:6b:81:30:28:da:68:f6:2f:39:8c:d0:73:d0: 33:83:8d:3b:5f:3a:0b:f6:33:95:bd:b8:ed:f1:61: f9:a4:9f:d3:5e:b1:72:40:5e:a8:c7:58:4f:13:a4: 40:9e:6d:e1:57:bc:a8:ec:3d:f2:70:84:e8:fc:b0: 0f:2c:fa:b5:94:4e:46:8f:fb:86:d8:ce:df:66:06: 40:ad:94:1a:5f:95:d8:70:49:70:06:b0:43:a8:50: 03:c6:db:73:54:09:78:19:51:d6:b0:8b:ec:9b:57: 4b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BA:27:60:5C:CD:9D:30:3C:88:E2:E6:D0:7B:0D:2A:9B:32:22:6B X509v3 Authority Key Identifier: keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:7b:51:34:f3:a3:19:ca:d9:20:3b:c8:9e:16:cb:cd:9b:ff: c2:7a:6e:7a:aa:a6:e6:79:4f:81:de:f0:83:34:6a:b5:28:1a: 72:7b:1f:95:c3:c3:9a:83:a0:77:b6:d0:f5:fe:65:a3:8f:f5: a8:34:b1:0a:3a:60:96:b0:e2:88:1c:37:50:bc:81:33:75:13: 6d:8f:e8:94:4e:0e:a7:ad:14:00:16:7b:88:ca:f2:93:30:68: ca:86:37:5f:f7:68:47:6e:cd:59:e4:1d:06:c0:91:15:62:bc: 45:ad:eb:cb:e7:c0:66:39:cf:fd:dd:4a:b7:40:80:40:a2:9d: 4e:d6:c1:11:d9:db:2c:2b:f6:60:c6:26:31:28:e4:d8:47:de: bb:a8:b7:0c:7f:3e:a8:49:3f:b8:48:66:43:99:57:60:90:35: 86:ff:e4:c5:92:e4:3f:05:a2:8a:14:39:65:fb:6f:f6:49:b2: 24:1f:bd:5b:28:bb:0b:83:fa:8e:f3:a0:d5:fc:6e:55:4f:03: 68:06:69:85:52:0f:cc:13:b7:dd:8e:40:a9:35:23:f5:34:44: fa:80:2c:a6:99:c1:bb:50:96:58:e0:e5:0d:c2:5f:21:17:0e: b3:a1:96:22:b4:66:fa:f8:90:02:44:d7:81:0b:06:ea:55:56: db:53:31:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5 QTgwQkVBMDgwHhcNMjUwODIzMDQwMDQyWhcNMjUwODMwMDQwMDQyWjAYMRYwFAYD VQQDEw02OGE5M2NlYS05ZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pDBIHnKQ99asn2z3ctukYV9mu8AbmgGF8k7s4B3UTdaI1EqeZ8v3IOghg/a j4dFtiqy3OtEvHr2KjQO0eBw9TmaiIOGVShOjN4p+oIZ+ICg3uN4VzUClqiojpSW Q1sfjePaCoPJ5mjYJwWs/vwpr7+FY4wk7WPr0NCFqbGQtbsJOp3D4HjoV8//44vH jBiZW4QZQUBUOGuBMCjaaPYvOYzQc9Azg407XzoL9jOVvbjt8WH5pJ/TXrFyQF6o x1hPE6RAnm3hV7yo7D3ycITo/LAPLPq1lE5Gj/uG2M7fZgZArZQaX5XYcElwBrBD qFADxttzVAl4GVHWsIvsm1dLzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOe6J2Bc zZ0wPIji5tB7DSqbMiJrMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0 QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5 cXhoclF1VmtGSldhZ0w2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBie1E086MZytkgO8ieFsvNm//Cem56qqbmeU+B3vCDNGq1KBpyex+V w8Oag6B3ttD1/mWjj/WoNLEKOmCWsOKIHDdQvIEzdRNtj+iUTg6nrRQAFnuIyvKT MGjKhjdf92hHbs1Z5B0GwJEVYrxFrevL58BmOc/93Uq3QIBAop1O1sER2dssK/Zg xiYxKOTYR967qLcMfz6oST+4SGZDmVdgkDWG/+TFkuQ/BaKKFDll+2/2SbIkH71b KLsLg/qO86DV/G5VTwNoBmmFUg/ME7fdjkCpNSP1NET6gCymmcG7UJZY4OUNwl8h Fw6zoZYitGb6+JACRNeBCwbqVVbbUzHD -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:10 2025 by rpki-client