$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft File: U1n0WpMqsOo84GFn1fzHBltN2IU.mft (raw, json) Hash identifier: IMagal1f5eUjd2GHKauItokBbCuATm2pDK2oF1GAJws= Subject key identifier: 91:F2:26:34:3F:F9:38:69:E8:AE:04:1A:12:F3:41:D8:E2:A9:3D:77 Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 Certificate issuer: /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Certificate serial: 0C84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft Manifest number: 0C78 Signing time: Sun 24 Aug 2025 18:18:21 +0000 Manifest this update: Sun 24 Aug 2025 18:18:21 +0000 Manifest next update: Sun 31 Aug 2025 18:18:21 +0000 Files and hashes: 1: U1n0WpMqsOo84GFn1fzHBltN2IU.crl (hash: WsYzBqe/MgdOetWYbKAQACNf+xAYJHCVZZrq/Qzua+0=) 2: 6751E26C415511ECA2FD715CC4F9AE02.roa (hash: NWXl0/HloQJgP5iTbQs1BacGndGc9HtR4LlBAy7UnRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911367F, serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Validity Not Before: Aug 24 18:18:21 2025 GMT Not After : Aug 31 18:18:21 2025 GMT Subject: CN=68ab576d-3b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:86:cc:84:24:b5:a7:50:05:67:6c:76:18:36: c8:40:b9:3e:b0:eb:05:36:61:a2:0f:f2:65:75:0f: 51:c6:ea:75:c9:6e:9c:fd:aa:8b:bc:18:ab:9c:e3: 08:d1:18:25:52:dc:7a:ad:f5:10:c3:9f:99:91:c7: b1:d0:b9:63:f1:25:49:20:5b:29:c3:ef:82:7f:33: 60:b8:0f:45:84:81:ca:80:ab:db:27:fb:78:d8:36: 8e:29:ad:b7:8e:0a:8f:cc:b3:3a:d8:eb:a1:2d:44: d8:b2:46:01:91:5c:88:cc:d1:a9:53:66:2e:98:9c: b8:81:55:30:70:f6:1a:c9:e8:7d:9c:eb:98:6f:46: 78:30:a2:9d:cc:15:e5:e8:c0:f6:f7:3b:79:be:ff: 25:44:bc:9f:5d:46:e6:a0:4d:88:91:b2:04:71:8e: c9:87:ca:a1:97:2c:e8:f7:a0:78:bd:f4:2f:1c:dd: 5a:10:5f:91:ca:f3:4b:05:52:b2:fe:a8:b7:fa:44: c6:de:6d:de:41:16:3e:e6:77:b9:b1:e4:49:80:28: 86:96:45:cc:0c:a5:a3:5d:22:a9:4c:79:f3:8f:c6: 27:7c:f0:0b:82:90:a3:f7:fd:4c:40:b1:c0:41:71: ba:77:d4:71:5b:8a:18:92:fd:91:87:08:55:cb:f0: f5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F2:26:34:3F:F9:38:69:E8:AE:04:1A:12:F3:41:D8:E2:A9:3D:77 X509v3 Authority Key Identifier: keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:88:ff:52:c8:2b:0a:78:1a:0c:01:55:1f:3b:64:36:d9:e7: 75:b1:db:fe:27:24:a4:c4:5b:cd:2a:38:57:fe:5d:c2:a9:94: 9a:71:91:ac:ca:d8:e2:62:67:27:b2:4b:3b:27:bc:72:0a:08: 0c:cb:63:cc:68:d3:67:58:61:b2:ba:65:f5:a7:e8:8a:97:1e: b4:eb:ff:a7:b2:e5:14:a6:23:29:c7:81:59:38:9a:23:52:f7: 77:42:76:b7:9b:83:a2:49:99:82:27:b9:22:88:95:ab:fb:e3: cc:11:30:e4:7a:19:16:e5:0a:90:60:80:0a:32:cb:60:d8:97: aa:8a:58:14:48:70:e2:5d:4f:9f:0a:8a:e6:54:c8:e2:a5:6d: 43:44:87:fd:71:ae:82:83:be:53:ff:03:28:a2:84:52:c8:ea: f0:e9:f1:5a:04:67:90:73:db:0e:4c:15:3c:8a:bb:27:54:e0: 64:6b:ee:d4:31:c1:bb:dc:b7:db:ff:bc:e9:d9:88:1e:fe:8c: fd:01:3d:b0:be:76:62:36:6e:1d:72:88:55:ad:5f:19:95:a0: 48:a4:7b:3b:e7:a2:f0:57:22:83:5c:6c:76:aa:fb:a2:bf:e7: c9:67:00:5c:d2:f6:07:9f:67:d5:39:d1:b8:d6:c1:00:cb:1a: 6c:d9:3b:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2N0YxMTAvBgNVBAUTKDUzNTlGNDVBOTMyQUIwRUEzQ0UwNjE2N0Q1RkNDNzA2 NUI0REQ4ODUwHhcNMjUwODI0MTgxODIxWhcNMjUwODMxMTgxODIxWjAYMRYwFAYD VQQDEw02OGFiNTc2ZC0zYjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7IbMhCS1p1AFZ2x2GDbIQLk+sOsFNmGiD/JldQ9Rxup1yW6c/aqLvBirnOMI 0RglUtx6rfUQw5+Zkcex0Llj8SVJIFspw++CfzNguA9FhIHKgKvbJ/t42DaOKa23 jgqPzLM62OuhLUTYskYBkVyIzNGpU2YumJy4gVUwcPYayeh9nOuYb0Z4MKKdzBXl 6MD29zt5vv8lRLyfXUbmoE2IkbIEcY7Jh8qhlyzo96B4vfQvHN1aEF+RyvNLBVKy /qi3+kTG3m3eQRY+5ne5seRJgCiGlkXMDKWjXSKpTHnzj8YnfPALgpCj9/1MQLHA QXG6d9RxW4oYkv2RhwhVy/D1jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHyJjQ/ +Thp6K4EGhLzQdjiqT13MB8GA1UdIwQYMBaAFFNZ9FqTKrDqPOBhZ9X8xwZbTdiF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY3Ri83QTk0RDEyODA0 NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNPbzg0R0ZuMWZ6SEJsdE4y SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UxbjBXcE1xc09vODRHRm4xZnpIQmx0TjJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY3Ri83QTk0RDEyODA0NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNP bzg0R0ZuMWZ6SEJsdE4ySVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7iP9SyCsKeBoMAVUfO2Q22ed1sdv+JySkxFvNKjhX/l3CqZSacZGs ytjiYmcnsks7J7xyCggMy2PMaNNnWGGyumX1p+iKlx606/+nsuUUpiMpx4FZOJoj Uvd3Qna3m4OiSZmCJ7kiiJWr++PMETDkehkW5QqQYIAKMstg2JeqilgUSHDiXU+f CormVMjipW1DRIf9ca6Cg75T/wMoooRSyOrw6fFaBGeQc9sOTBU8irsnVOBka+7U McG73Lfb/7zp2Yge/oz9AT2wvnZiNm4dcohVrV8ZlaBIpHs756LwVyKDXGx2qvui v+fJZwBc0vYHn2fVOdG41sEAyxps2Ts4 -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:17 2025 by rpki-client