$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json) Hash identifier: YAMBt31E7DFOebrPYWK+BLkThkq+pHipUNzCGxsA6V0= Subject key identifier: C1:A0:69:FF:B1:D5:AD:A6:E4:1A:F8:AA:2E:D2:D7:72:03:78:0A:52 Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Certificate serial: 0A66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft Manifest number: 0A5F Signing time: Sun 24 Aug 2025 19:40:31 +0000 Manifest this update: Sun 24 Aug 2025 19:40:31 +0000 Manifest next update: Sun 31 Aug 2025 19:40:31 +0000 Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: I3Y7ZpIJ201FX45vuY7iBcVu7fOkOr6Z2SypwbFtrD8=) 2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: c9rYpxrekHk5Vx/e81a0t1Y6tqcx2DAB/IWGqPFZTW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2662 (0xa66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Validity Not Before: Aug 24 19:40:31 2025 GMT Not After : Aug 31 19:40:31 2025 GMT Subject: CN=68ab6aaf-ce82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:82:04:7b:22:73:cd:74:86:80:02:59:29: b4:0f:89:2d:42:77:8b:c1:48:6f:9f:3e:ed:8c:e3: 1b:69:dc:a5:10:11:c3:97:28:88:72:2a:d3:27:92: 6e:a0:82:1e:31:0e:ad:be:57:3d:84:aa:d9:f3:2e: 52:83:b4:30:ab:6c:e6:65:8e:15:c6:23:0f:e0:2d: a9:8e:1f:ab:61:66:ff:bf:90:f0:7d:45:f6:9a:2e: 42:a2:75:f9:65:c0:93:5b:b3:f7:85:c5:39:ec:ee: e4:f4:ec:7e:33:89:11:a1:a7:c8:71:67:aa:b9:7f: e6:b0:6a:89:d6:95:d1:85:b5:83:e4:84:7e:c8:6e: d8:4e:da:cf:b3:0e:d6:2b:2f:51:84:b1:84:f9:75: 60:31:ce:88:a4:b7:da:5a:75:89:f8:7c:ad:9c:40: 5e:66:6d:c7:1f:e9:43:f4:6d:da:4c:14:5f:2d:f6: bb:82:c7:d0:ae:a2:d2:63:88:34:8b:a9:13:7c:40: f2:79:96:c9:0b:14:39:8c:5e:58:2c:58:84:13:4c: 56:2a:04:cd:c0:d6:0a:c9:e3:f3:d1:2e:15:e4:b8: 37:8c:7c:d2:52:fa:a0:51:17:0a:0f:fa:77:8d:5e: 28:29:22:be:0e:24:09:3f:32:bc:57:14:a5:d9:ee: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A0:69:FF:B1:D5:AD:A6:E4:1A:F8:AA:2E:D2:D7:72:03:78:0A:52 X509v3 Authority Key Identifier: keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9b:cb:89:87:23:ac:1b:d5:11:85:d2:6f:7d:0b:49:2d:7a: 1f:d6:17:fc:35:a1:47:04:4b:eb:ba:0c:f6:ba:9e:75:2a:7b: a3:f7:06:8e:3b:ba:14:30:e3:6d:c6:c0:22:ae:41:3d:c0:9b: 11:7a:09:2a:5b:87:58:23:b3:0e:6f:f9:a7:fe:8c:54:e0:f5: df:72:17:5b:42:97:dd:77:6e:08:b1:52:c0:4d:3b:60:b2:32: 99:47:a6:99:44:de:60:e0:a0:fe:91:ae:dd:62:23:c5:e8:0e: f7:01:3e:49:93:e0:1f:7a:10:79:56:45:58:62:c9:37:6a:b6: 5b:d2:5f:49:de:5e:c7:4f:db:af:d0:e9:cc:30:8d:c7:f9:69: 5a:05:31:ee:f3:42:5e:3f:73:31:5a:87:bd:53:0d:09:ac:a6: e4:5c:3c:91:40:a4:da:11:3c:31:8a:4c:ff:ad:02:79:86:52: 17:a3:21:c1:6b:68:61:af:fb:b2:4b:f0:6d:1a:59:31:5f:9b: 85:cc:a4:91:0a:0c:ee:06:cb:41:27:ee:f2:cd:2b:03:e9:09: ec:a3:e9:14:19:65:b8:dd:4d:fb:5a:2a:37:dd:13:e8:0f:6c: fe:a1:c3:65:d1:d9:65:60:4e:c1:d0:34:07:2e:54:d2:f0:8b: 9c:02:13:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBERUMxMTAvBgNVBAUTKEI4RDkzNTA2QzhBNzkxRDFGOUZGQTVCNjdDMzg4MTZE REMwM0VFNkIwHhcNMjUwODI0MTk0MDMxWhcNMjUwODMxMTk0MDMxWjAYMRYwFAYD VQQDEw02OGFiNmFhZi1jZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDiCBHsic810hoACWSm0D4ktQneLwUhvnz7tjOMbadylEBHDlyiIcirTJ5Ju oIIeMQ6tvlc9hKrZ8y5Sg7Qwq2zmZY4VxiMP4C2pjh+rYWb/v5DwfUX2mi5ConX5 ZcCTW7P3hcU57O7k9Ox+M4kRoafIcWequX/msGqJ1pXRhbWD5IR+yG7YTtrPsw7W Ky9RhLGE+XVgMc6IpLfaWnWJ+HytnEBeZm3HH+lD9G3aTBRfLfa7gsfQrqLSY4g0 i6kTfEDyeZbJCxQ5jF5YLFiEE0xWKgTNwNYKyePz0S4V5Lg3jHzSUvqgURcKD/p3 jV4oKSK+DiQJPzK8VxSl2e4SewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGgaf+x 1a2m5Br4qi7S13IDeApSMB8GA1UdIwQYMBaAFLjZNQbIp5HR+f+ltnw4gW3cA+5r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMERFQy8xNzJEMEEyNDZC RUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtkSDVfNlcyZkRpQmJkd0Q3 bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOazFCc2lua2RINV82VzJmRGlCYmR3RDdtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MERFQy8xNzJEMEEyNDZCRUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtk SDVfNlcyZkRpQmJkd0Q3bXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfm8uJhyOsG9URhdJvfQtJLXof1hf8NaFHBEvrugz2up51Knuj9waO O7oUMONtxsAirkE9wJsRegkqW4dYI7MOb/mn/oxU4PXfchdbQpfdd24IsVLATTtg sjKZR6aZRN5g4KD+ka7dYiPF6A73AT5Jk+AfehB5VkVYYsk3arZb0l9J3l7HT9uv 0OnMMI3H+WlaBTHu80JeP3MxWoe9Uw0JrKbkXDyRQKTaETwxikz/rQJ5hlIXoyHB a2hhr/uyS/BtGlkxX5uFzKSRCgzuBstBJ+7yzSsD6Qnso+kUGWW43U37Wio33RPo D2z+ocNl0dllYE7B0DQHLlTS8IucAhME -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:10 2025 by rpki-client