$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json) Hash identifier: kYRsnC/uCoqg3QcICXNmV7Ksu7lh5ywvcS2rNhy4ods= Subject key identifier: 89:3A:CF:C6:FF:96:11:36:52:9B:3C:B6:23:B9:8C:F5:0B:1C:3E:93 Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft Manifest number: 01D6 Signing time: Tue 09 Sep 2025 02:56:02 +0000 Manifest this update: Tue 09 Sep 2025 02:56:01 +0000 Manifest next update: Tue 16 Sep 2025 02:56:01 +0000 Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: T6p+Wh+n1FwrFJ3mzhXjLd17IAPKMSnC5zwxqfMEXHI=) 2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: 8oKi9g3FW28uCT296akypss1lnTC3S8VPwt27zeBIKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Validity Not Before: Sep 9 02:56:01 2025 GMT Not After : Sep 16 02:56:01 2025 GMT Subject: CN=68bf9742-325c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:3c:2a:56:0a:cf:a6:8e:72:56:6b:cd:47: ac:57:2d:2d:be:5e:aa:6d:8a:1e:ad:1e:11:ac:51: de:95:ec:f4:79:44:b3:0a:bf:0f:7d:cf:23:86:da: 59:e8:68:32:0a:86:94:b8:4c:69:4c:17:b2:13:a2: e5:11:4a:95:9f:7a:61:bb:34:37:21:fb:55:d6:b1: 8e:77:e6:0d:46:4a:4c:91:10:5c:76:13:19:53:ac: f9:9e:09:bb:5f:76:06:6c:17:ea:ba:25:0f:ba:f1: f7:1c:0d:dc:2b:d6:ad:4d:28:46:32:a3:8d:9d:62: 0d:09:93:9d:43:40:db:c8:ef:96:6a:d2:06:ef:0d: f6:3b:ff:08:6e:e2:b5:47:2a:df:60:5a:2b:83:4f: c4:dc:e5:ea:32:da:c7:94:6b:56:d2:6d:b0:8f:e5: 28:82:7b:01:76:bb:6a:02:43:f9:7d:6a:0a:97:d0: 7a:f5:49:e0:8a:0f:ef:42:f8:88:19:12:22:95:0c: a5:20:c0:a5:ce:16:ea:19:40:44:18:97:f4:5f:88: f7:62:74:9d:97:20:fd:38:c1:bf:3a:a0:a6:dd:b6: ce:af:25:a9:94:10:da:7f:26:fb:03:5e:a6:9c:96: dc:b0:1e:23:54:8e:53:2a:87:0b:be:80:5d:a0:7b: 09:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3A:CF:C6:FF:96:11:36:52:9B:3C:B6:23:B9:8C:F5:0B:1C:3E:93 X509v3 Authority Key Identifier: keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:58:b4:f0:44:ce:f9:63:62:96:31:c0:09:5f:b5:fe:86:5f: 75:68:22:a2:b4:14:4e:54:da:c0:4a:3e:7c:75:ae:13:f6:28: 20:87:01:77:17:de:b2:f6:3d:33:dd:19:5e:16:33:b6:76:c3: 1c:f0:1d:e5:77:72:16:57:d8:0b:41:3a:95:57:cb:14:aa:00: 8a:d5:56:80:60:c2:a5:1a:78:08:1f:5e:a1:86:44:fd:bf:b5: 9d:d3:90:64:72:29:3d:d5:63:fb:e3:4b:94:12:4d:b2:9d:ee: 6e:7d:bd:33:01:b2:20:aa:d6:5f:8c:3f:78:a2:cc:bb:90:0f: df:67:02:22:bf:34:9c:8c:e2:bc:b4:8d:13:fb:58:a6:28:22: a1:d8:6b:e0:f7:ed:78:a5:ee:00:54:f3:fa:c9:bb:f8:50:0b: 21:62:7c:cc:84:56:53:0c:89:74:a6:87:a1:68:c8:ed:9a:df: c5:45:fd:cb:e4:ce:48:6a:07:76:f4:b4:b0:13:f1:9f:2b:59: c9:89:e6:47:ec:b4:45:82:89:54:38:5c:4f:be:b8:90:14:78: e9:ea:56:d3:cf:69:0a:65:3b:11:fe:a8:69:fb:27:99:cd:1d: 25:3b:63:a7:bb:4f:ff:3f:64:d1:24:0f:55:89:34:2f:94:7f: 44:52:d6:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG NUZENkYwQTQwHhcNMjUwOTA5MDI1NjAxWhcNMjUwOTE2MDI1NjAxWjAYMRYwFAYD VQQDEw02OGJmOTc0Mi0zMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFs8KlYKz6aOclZrzUesVy0tvl6qbYoerR4RrFHelez0eUSzCr8Pfc8jhtpZ 6GgyCoaUuExpTBeyE6LlEUqVn3phuzQ3IftV1rGOd+YNRkpMkRBcdhMZU6z5ngm7 X3YGbBfquiUPuvH3HA3cK9atTShGMqONnWINCZOdQ0DbyO+WatIG7w32O/8IbuK1 RyrfYForg0/E3OXqMtrHlGtW0m2wj+UognsBdrtqAkP5fWoKl9B69Ungig/vQviI GRIilQylIMClzhbqGUBEGJf0X4j3YnSdlyD9OMG/OqCm3bbOryWplBDafyb7A16m nJbcsB4jVI5TKocLvoBdoHsJ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIk6z8b/ lhE2Ups8tiO5jPULHD6TMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw MWhRazItNTdCSlAxX1c4S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJWLTwRM75Y2KWMcAJX7X+hl91aCKitBROVNrASj58da4T9igghwF3 F96y9j0z3RleFjO2dsMc8B3ld3IWV9gLQTqVV8sUqgCK1VaAYMKlGngIH16hhkT9 v7Wd05Bkcik91WP740uUEk2yne5ufb0zAbIgqtZfjD94osy7kA/fZwIivzScjOK8 tI0T+1imKCKh2Gvg9+14pe4AVPP6ybv4UAshYnzMhFZTDIl0poehaMjtmt/FRf3L 5M5Iagd29LSwE/GfK1nJieZH7LRFgolUOFxPvriQFHjp6lbTz2kKZTsR/qhp+yeZ zR0lO2Onu0//P2TRJA9ViTQvlH9EUtaV -----END CERTIFICATE-----Generated at Tue Sep 9 21:20:12 2025 by rpki-client