$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft File: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft (raw, json) Hash identifier: enU9oyyZM8M0948pyzcmKU1M2xdxbCfVc+Op5QrR7tI= Subject key identifier: 8D:F8:7E:E1:8D:70:98:56:94:CA:FB:CE:2B:35:7B:B8:2C:54:67:E2 Authority key identifier: 50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 Certificate issuer: /CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57 Certificate serial: 0D97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft Manifest number: 154B Signing time: Sun 24 Aug 2025 17:53:24 +0000 Manifest this update: Sun 24 Aug 2025 17:53:23 +0000 Manifest next update: Sun 31 Aug 2025 17:53:23 +0000 Files and hashes: 1: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl (hash: Wum77KUQwG9lHhI0lJL9Pt+hyvVWrRB6Hxhk9v8W8Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3479 (0xd97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137242, serialNumber=50FBB403643473F991273626277A922C0706AC57 Validity Not Before: Aug 24 17:53:23 2025 GMT Not After : Aug 31 17:53:23 2025 GMT Subject: CN=68ab5194-ad93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:75:5e:7a:11:d8:84:ae:47:57:51:33:c7: 2c:c2:18:44:8c:ad:51:11:78:1d:76:66:41:7b:b5: bf:22:ae:f7:58:cc:78:14:8f:7d:61:69:ef:02:07: c5:ee:a7:a9:69:b1:8f:74:6d:d5:29:b3:da:09:72: bb:85:f5:97:3d:48:43:47:92:94:25:94:ff:88:8f: 06:c6:fe:e7:f1:72:3b:36:c7:55:73:2f:85:bb:51: 64:f3:39:7f:02:59:e9:a8:35:ba:35:21:74:99:37: 70:ab:73:df:1c:9e:c9:12:11:48:9a:15:28:6d:e1: 96:ab:93:eb:70:0b:da:54:07:bf:c6:e2:d2:c5:b8: 91:76:6b:2f:b1:cc:e2:c6:44:b6:70:b2:f6:b4:fa: 1e:d4:9c:b2:e9:15:b8:ac:fd:1c:85:f5:a0:a8:93: 90:c5:b7:11:24:a1:19:4a:d4:0d:83:d5:5a:b6:8a: e2:73:a7:d4:b8:f7:ad:1f:6d:e9:ac:04:b5:26:c7: a4:eb:8a:e6:60:4b:e1:c1:72:3f:dd:5a:ce:6b:8f: f8:c9:8e:b7:38:1a:0c:ad:e5:90:a0:88:65:4a:aa: ba:08:4b:63:04:38:33:e5:e0:6e:88:e7:f4:bb:36: eb:c7:38:df:30:c2:06:8c:92:57:35:45:e0:44:3d: d1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F8:7E:E1:8D:70:98:56:94:CA:FB:CE:2B:35:7B:B8:2C:54:67:E2 X509v3 Authority Key Identifier: keyid:50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:61:b9:b2:77:c6:27:9f:70:66:2d:f2:61:79:a9:aa:81:69: 00:f2:e7:23:c8:65:a3:ef:78:b8:3e:ed:cd:8e:d3:77:b3:e2: 7b:58:e7:90:6c:21:6e:c5:aa:ae:0a:74:c7:4a:db:60:79:d2: 3c:cc:32:9b:42:d1:e0:ab:bb:5b:32:32:00:b8:2d:67:a2:31: 64:66:18:1a:51:b8:5b:90:4e:a7:e5:f5:5b:c6:28:69:7b:f2: c3:8b:12:85:ea:51:41:10:03:2d:2d:6b:9f:ab:de:34:f5:34: 4f:ea:d5:dd:e8:65:47:6c:b5:25:f0:dc:98:f5:da:68:e3:fc: b4:32:ad:78:fc:59:84:0a:7a:5c:7b:a0:bd:3d:d2:c3:af:d2: 00:37:85:31:37:7a:a1:fa:77:dd:62:17:93:a8:a1:7b:43:c2: 98:73:c7:cb:6c:e4:18:a9:bc:57:73:d9:85:d4:03:9d:15:60: 1f:70:b9:fb:8a:83:f2:1d:13:16:ef:84:af:d2:76:46:a9:cf: e3:cb:38:27:a5:88:81:c3:c1:fd:2f:3c:b8:27:b0:c5:e9:7b: 88:f1:c9:be:3c:d2:ee:c8:be:7d:88:53:ca:73:7a:e0:b4:45: 85:c6:73:55:7d:eb:d4:55:fe:bb:87:13:23:7d:a3:bc:d8:bd: 3c:a9:a7:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyNDIxMTAvBgNVBAUTKDUwRkJCNDAzNjQzNDczRjk5MTI3MzYyNjI3N0E5MjJD MDcwNkFDNTcwHhcNMjUwODI0MTc1MzIzWhcNMjUwODMxMTc1MzIzWjAYMRYwFAYD VQQDEw02OGFiNTE5NC1hZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoV1XnoR2ISuR1dRM8cswhhEjK1REXgddmZBe7W/Iq73WMx4FI99YWnvAgfF 7qepabGPdG3VKbPaCXK7hfWXPUhDR5KUJZT/iI8Gxv7n8XI7NsdVcy+Fu1Fk8zl/ AlnpqDW6NSF0mTdwq3PfHJ7JEhFImhUobeGWq5PrcAvaVAe/xuLSxbiRdmsvsczi xkS2cLL2tPoe1Jyy6RW4rP0chfWgqJOQxbcRJKEZStQNg9Vatoric6fUuPetH23p rAS1Jsek64rmYEvhwXI/3VrOa4/4yY63OBoMreWQoIhlSqq6CEtjBDgz5eBuiOf0 uzbrxzjfMMIGjJJXNUXgRD3RIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI34fuGN cJhWlMr7zis1e7gsVGfiMB8GA1UdIwQYMBaAFFD7tANkNHP5kSc2Jid6kiwHBqxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNfbVJKelltSjNxU0xBY0dy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQdTBBMlEwY19tUkp6WW1KM3FTTEFjR3JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzI0Mi8wQjYwODc5NkNBMzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNf bVJKelltSjNxU0xBY0dyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPYbmyd8Ynn3BmLfJheamqgWkA8ucjyGWj73i4Pu3NjtN3s+J7WOeQ bCFuxaquCnTHSttgedI8zDKbQtHgq7tbMjIAuC1nojFkZhgaUbhbkE6n5fVbxihp e/LDixKF6lFBEAMtLWufq9409TRP6tXd6GVHbLUl8NyY9dpo4/y0Mq14/FmECnpc e6C9PdLDr9IAN4UxN3qh+nfdYheTqKF7Q8KYc8fLbOQYqbxXc9mF1AOdFWAfcLn7 ioPyHRMW74Sv0nZGqc/jyzgnpYiBw8H9Lzy4J7DF6XuI8cm+PNLuyL59iFPKc3rg tEWFxnNVfevUVf67hxMjfaO82L08qafn -----END CERTIFICATE-----Generated at Sun Aug 24 21:56:21 2025 by rpki-client