$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft File: U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json) Hash identifier: AMOXFHRyGFurju5rlA6xKeu2nn4NIu5L1+sQPmYMR9Y= Subject key identifier: 59:D9:87:37:00:73:68:E1:99:27:0B:5E:AC:77:51:1F:6F:FB:72:2A Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 Certificate issuer: /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft Manifest number: 01B0 Signing time: Fri 05 Sep 2025 01:03:14 +0000 Manifest this update: Fri 05 Sep 2025 01:03:13 +0000 Manifest next update: Fri 12 Sep 2025 01:03:13 +0000 Files and hashes: 1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: 85kNF4xi2FXob2oFYdIyBRr3E+cIDz1/DJ5DLOiMTRY=) 2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: QkSv3Gc4gFnkTdv0FIFvYm4Nr0fb1nmO7PWxNtFWscE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D, serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Validity Not Before: Sep 5 01:03:13 2025 GMT Not After : Sep 12 01:03:13 2025 GMT Subject: CN=68ba36d1-86e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:e6:01:b6:6c:15:4b:1e:b6:fa:89:79:66: b9:40:bb:3f:bd:2b:a8:07:d9:94:09:b3:37:a7:a7: 94:7a:f2:f2:c0:d5:84:23:ed:7b:83:30:ca:5a:69: 03:19:89:6b:52:81:ba:85:2a:63:c2:79:f2:c5:75: a5:e6:f4:46:98:0d:d2:39:30:50:d8:aa:cf:e3:43: 67:41:76:32:dc:1e:99:c4:7a:0a:33:ae:67:05:e4: de:06:1b:fd:e0:47:61:a2:81:36:bf:7c:fd:56:a3: dd:93:74:9f:24:d1:67:86:52:b8:13:b8:3c:a7:70: 15:d0:12:e0:37:66:4b:3a:e9:63:99:65:b4:3b:a1: e7:ff:66:f8:ec:08:2a:17:da:18:3a:23:dd:41:7e: 0d:88:70:67:d6:38:17:0a:5b:b3:48:01:11:fd:39: 05:12:3c:6b:af:29:d8:9f:b0:a0:fb:bb:07:29:b1: 1d:94:c8:71:89:08:c2:5d:66:01:d1:8d:48:c7:4c: 35:db:09:1d:85:c0:67:bb:17:4e:35:ac:d1:88:81: 23:63:23:cc:22:bc:b3:30:ea:ce:54:48:8c:54:8c: a7:cd:55:43:2a:1a:cd:3f:81:2b:4d:92:a1:5c:24: 42:4a:e2:ab:ab:66:67:d9:9e:40:49:e7:36:33:3f: b9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D9:87:37:00:73:68:E1:99:27:0B:5E:AC:77:51:1F:6F:FB:72:2A X509v3 Authority Key Identifier: keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:cd:61:be:72:0b:47:cf:bc:19:26:a0:b0:df:c6:25:45:ef: 85:8e:8b:75:77:09:d1:8e:e8:63:2e:9e:21:ca:0c:cb:64:34: 01:c2:57:b1:37:f7:69:2e:0f:17:d3:eb:4d:6d:44:a2:b7:c3: dc:38:92:06:63:6d:60:64:1b:2a:33:d7:2a:38:cb:35:81:3a: 1b:90:ab:27:9b:4b:51:af:83:fd:16:f9:66:d3:82:d8:96:3e: 72:25:e4:b0:56:bd:78:a3:13:8b:a7:52:91:91:f3:6f:2a:a7: e7:c5:79:47:fd:0d:4c:22:00:c3:d9:6b:44:cf:94:08:04:46: fe:ea:71:d9:9b:24:ff:d9:27:a0:42:89:1a:33:b0:cc:46:7f: 6a:58:61:c3:52:d7:00:c7:77:59:99:44:f6:8b:06:c5:41:2b: f2:bf:66:25:d2:56:95:4d:67:53:fe:54:8d:b5:b9:f2:06:11: 96:89:df:05:39:93:c6:e7:2a:27:85:b5:1b:a8:60:95:0d:e9: 4f:ec:c0:aa:3c:60:a8:37:c9:8d:b1:fd:93:2a:b6:9a:90:b7: 51:7a:bf:f1:1a:5a:85:c5:c3:51:07:0a:f5:b0:26:e1:71:68: 3f:5c:f9:5f:bc:a2:dd:e9:d8:d9:0a:c5:c9:57:f5:c0:ad:71: cc:37:19:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDUzNkI5MUIxN0I2RTFCQjE2MzhDODM1OEEwRkE1RUE1 RDBFQkVGQjcwHhcNMjUwOTA1MDEwMzEzWhcNMjUwOTEyMDEwMzEzWjAYMRYwFAYD VQQDEw02OGJhMzZkMS04NmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FvmAbZsFUsetvqJeWa5QLs/vSuoB9mUCbM3p6eUevLywNWEI+17gzDKWmkD GYlrUoG6hSpjwnnyxXWl5vRGmA3SOTBQ2KrP40NnQXYy3B6ZxHoKM65nBeTeBhv9 4EdhooE2v3z9VqPdk3SfJNFnhlK4E7g8p3AV0BLgN2ZLOuljmWW0O6Hn/2b47Agq F9oYOiPdQX4NiHBn1jgXCluzSAER/TkFEjxrrynYn7Cg+7sHKbEdlMhxiQjCXWYB 0Y1Ix0w12wkdhcBnuxdONazRiIEjYyPMIryzMOrOVEiMVIynzVVDKhrNP4ErTZKh XCRCSuKrq2Zn2Z5ASec2Mz+5aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnZhzcA c2jhmScLXqx3UR9v+3IqMB8GA1UdIwQYMBaAFFNrkbF7bhuxY4yDWKD6XqXQ6++3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC8yMzIzRkQ4MDAw RDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3RmpqSU5Zb1BwZXBkRHI3 N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1UydVJzWHR1RzdGampJTllvUHBlcGREcjc3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC8yMzIzRkQ4MDAwRDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3 RmpqSU5Zb1BwZXBkRHI3N2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLzWG+cgtHz7wZJqCw38YlRe+Fjot1dwnRjuhjLp4hygzLZDQBwlex N/dpLg8X0+tNbUSit8PcOJIGY21gZBsqM9cqOMs1gTobkKsnm0tRr4P9Fvlm04LY lj5yJeSwVr14oxOLp1KRkfNvKqfnxXlH/Q1MIgDD2WtEz5QIBEb+6nHZmyT/2Seg QokaM7DMRn9qWGHDUtcAx3dZmUT2iwbFQSvyv2Yl0laVTWdT/lSNtbnyBhGWid8F OZPG5yonhbUbqGCVDelP7MCqPGCoN8mNsf2TKraakLdRer/xGlqFxcNRBwr1sCbh cWg/XPlfvKLd6djZCsXJV/XArXHMNxmQ -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:10 2025 by rpki-client