$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json) Hash identifier: JB6x7EogZgKv386BJeeTLI0heOGW3BXa6rmuzgs+BQ8= Subject key identifier: E0:FF:12:0C:FA:9C:97:5A:CD:D6:95:F8:C7:BE:40:6F:38:33:D9:EA Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Certificate serial: 0302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft Manifest number: 02FD Signing time: Thu 21 Aug 2025 01:23:56 +0000 Manifest this update: Thu 21 Aug 2025 01:23:55 +0000 Manifest next update: Thu 28 Aug 2025 01:23:55 +0000 Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: 0fb8khKE+d6Pd1JWuvNPuczKCAxJwvPEC7cWz9HjjqM=) 2: 6C113EF8EB1211ECB34A394DC4F9AE02.roa (hash: V0UtMWuGfgSKuCGeFi3ruRU1wDK2vvS2zyP8f3YgcB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 770 (0x302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Validity Not Before: Aug 21 01:23:55 2025 GMT Not After : Aug 28 01:23:55 2025 GMT Subject: CN=68a6752c-81dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:52:46:9f:3b:ee:ca:ec:c2:2f:2d:6e:84: 03:98:7c:4a:12:68:d5:65:26:54:b3:69:9f:d9:d9: 5b:df:65:4a:e5:e5:37:34:42:0d:33:04:68:ee:10: 39:f1:af:fc:85:c6:17:37:05:6b:2e:77:f3:7e:93: 9f:ca:c3:c6:2b:5a:c2:ef:d5:e4:99:45:b9:7c:56: 19:e1:bf:3a:34:bb:17:9b:f3:0e:54:9a:75:1f:f8: b2:05:b2:a7:01:78:53:a7:ca:22:51:53:49:f1:57: 99:68:14:c8:a6:ef:c1:56:7a:7e:9b:37:0f:fb:83: e2:50:d6:15:9b:fb:e4:f7:d3:6b:7b:ff:e3:b1:7b: 0c:7b:a8:3a:b6:c1:00:cd:a6:c4:e9:5a:5b:3c:cd: 6e:b9:dc:fe:28:52:a9:b0:0a:cc:0c:a0:26:1b:04: 0b:00:aa:23:1d:77:f3:68:2e:f7:bf:ae:32:42:96: b7:3b:e5:88:66:d2:40:e2:7a:88:96:a8:b5:de:1f: 88:9d:e9:d7:39:c6:62:b3:c3:b6:2b:37:21:a5:3c: bd:90:db:70:a0:1b:4b:00:17:42:c3:8b:9d:41:4b: c9:04:fa:0c:64:bf:87:60:f3:46:44:40:74:7b:b3: 49:db:45:96:7c:1d:e2:c4:f3:00:31:e1:8f:f0:a9: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FF:12:0C:FA:9C:97:5A:CD:D6:95:F8:C7:BE:40:6F:38:33:D9:EA X509v3 Authority Key Identifier: keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:a7:b6:8a:7a:6e:01:fc:44:de:8f:d2:8d:15:db:54:9d:c5: 62:90:1a:c5:55:ea:d4:70:d4:9f:cb:01:bc:c7:e6:08:7b:f1: 86:d8:fa:58:e3:28:8a:cb:75:dc:ba:3c:29:7f:5d:b7:7d:ad: 99:c5:a1:00:46:d3:26:2d:ef:97:8d:1e:a4:9e:8d:68:08:92: e5:e0:8c:2d:eb:b1:7d:7d:3e:b1:57:81:74:41:c6:4c:06:7a: 02:98:d7:70:82:f5:41:4b:76:14:58:ed:dc:06:7d:82:a0:62: c9:9b:33:85:08:f8:70:0b:e6:2b:64:a2:56:41:1e:a8:95:14: 58:69:4c:83:d4:cc:de:c8:ad:54:5f:78:70:99:79:39:70:64: 99:db:15:8b:e5:5e:9d:e5:a7:50:2e:d0:42:ab:66:53:c1:91: 70:e9:7f:bc:91:4c:3a:62:51:69:11:dc:49:26:62:2d:e1:59: 0e:ac:e7:fd:36:7a:eb:60:ab:9f:43:ee:45:71:68:4e:3b:6a: f1:75:37:59:b5:ef:cb:11:ad:f6:b3:38:00:d4:f2:30:f0:00: 0e:39:45:b2:ab:26:ab:0e:66:db:f4:df:3c:c6:ee:15:d9:0a: da:91:40:6b:ea:e7:9b:62:09:bd:06:fd:d0:78:42:9a:98:8f: cf:d1:a9:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG RENCQUNFODUwHhcNMjUwODIxMDEyMzU1WhcNMjUwODI4MDEyMzU1WjAYMRYwFAYD VQQDEw02OGE2NzUyYy04MWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ1SRp877srswi8tboQDmHxKEmjVZSZUs2mf2dlb32VK5eU3NEINMwRo7hA5 8a/8hcYXNwVrLnfzfpOfysPGK1rC79XkmUW5fFYZ4b86NLsXm/MOVJp1H/iyBbKn AXhTp8oiUVNJ8VeZaBTIpu/BVnp+mzcP+4PiUNYVm/vk99Nre//jsXsMe6g6tsEA zabE6VpbPM1uudz+KFKpsArMDKAmGwQLAKojHXfzaC73v64yQpa3O+WIZtJA4nqI lqi13h+InenXOcZis8O2KzchpTy9kNtwoBtLABdCw4udQUvJBPoMZL+HYPNGREB0 e7NJ20WWfB3ixPMAMeGP8KmC7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOD/Egz6 nJdazdaV+Me+QG84M9nqMB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU1My8xNjRBQkVDNEVCMEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlC X01fampsOTJGWVQ5eTZ6b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwp7aKem4B/ETej9KNFdtUncVikBrFVerUcNSfywG8x+YIe/GG2PpY 4yiKy3Xcujwpf123fa2ZxaEARtMmLe+XjR6kno1oCJLl4Iwt67F9fT6xV4F0QcZM BnoCmNdwgvVBS3YUWO3cBn2CoGLJmzOFCPhwC+YrZKJWQR6olRRYaUyD1MzeyK1U X3hwmXk5cGSZ2xWL5V6d5adQLtBCq2ZTwZFw6X+8kUw6YlFpEdxJJmIt4VkOrOf9 NnrrYKufQ+5FcWhOO2rxdTdZte/LEa32szgA1PIw8AAOOUWyqyarDmbb9N88xu4V 2QrakUBr6uebYgm9Bv3QeEKamI/P0amr -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:03 2025 by rpki-client