$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft File: R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json) Hash identifier: xBKh88dhCmwsN9cXrBPlujS3kvsVUmwGd1OiActzThY= Subject key identifier: 3B:58:31:AB:5B:95:E8:EE:6A:8C:F7:B8:F7:43:6D:FE:35:54:BF:75 Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 Certificate issuer: /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft Manifest number: 0122 Signing time: Fri 05 Sep 2025 05:07:43 +0000 Manifest this update: Fri 05 Sep 2025 05:07:42 +0000 Manifest next update: Fri 12 Sep 2025 05:07:42 +0000 Files and hashes: 1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: ucZ/HFFQL95mo/CTtfoHM68oBEqIUUYIqNnefsFeVr8=) 2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: GLQc94rusVtQbATmFzKX5DyXm0E80+RpBsTaqBZ5TIc=) 3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: g+h2X039YfWFdq3nneNF8fX2UZhaS8/1cDtSjJwB84Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5 Validity Not Before: Sep 5 05:07:42 2025 GMT Not After : Sep 12 05:07:42 2025 GMT Subject: CN=68ba701e-41f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:e9:9b:5d:98:bb:ea:2b:73:dd:73:69:45: 03:c0:d5:31:64:8b:8b:36:4d:c7:56:ab:7a:9c:ef: a1:e6:89:65:09:6d:f2:77:e0:32:98:18:dd:17:68: 15:52:c0:28:15:29:66:65:cd:65:43:cc:fe:38:99: 71:5c:e3:a4:4c:bc:cf:b9:38:42:43:c2:00:55:cc: 00:e6:bc:0d:eb:b2:a0:b8:6b:e4:ed:2a:1e:67:28: 2b:f4:b0:ce:9e:d8:5a:ba:2d:41:0b:98:41:b4:fc: 57:b3:6e:12:68:a0:c9:00:90:77:6a:c4:42:4f:91: 8e:ba:09:c6:4e:b5:c5:28:20:98:7e:93:1d:84:58: 58:72:03:eb:75:8d:7d:b3:9d:66:ef:e7:de:86:0a: 85:9b:9b:f6:79:71:1b:78:50:f1:6a:4c:cf:fb:3d: ff:98:3c:80:85:cc:1b:47:b1:d6:86:28:77:fe:4f: 2c:b1:2d:2b:a9:0e:36:2d:37:32:f0:f9:b0:d4:c6: 6b:78:2a:e7:05:37:58:ed:19:2a:b2:f6:64:18:84: b7:98:0e:40:f1:f1:89:4d:56:43:07:0b:97:e3:71: a7:7e:d4:d6:a8:63:e3:03:35:70:6e:5f:3e:a6:33: 0a:59:40:7b:e0:0f:e9:3b:3d:cb:e5:66:28:8a:83: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:58:31:AB:5B:95:E8:EE:6A:8C:F7:B8:F7:43:6D:FE:35:54:BF:75 X509v3 Authority Key Identifier: keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d3:ea:e4:49:83:15:e7:b3:b3:b6:1d:c6:90:a7:e4:63:c9: 85:17:8d:14:68:f1:0b:62:7c:f7:f2:68:30:6e:60:b4:1e:03: 12:db:5d:86:c8:93:61:f0:b4:bf:89:19:cb:dc:3f:27:73:36: ec:57:a6:a5:f8:9a:1a:cc:d1:3e:58:ff:06:2e:34:45:18:07: 48:82:51:7c:85:87:1b:69:dd:2d:aa:0b:b5:08:97:76:dc:5c: 5b:48:1f:4f:40:17:63:ce:2f:08:7a:b2:92:76:3d:24:78:9c: 36:36:1b:30:3b:01:40:db:5c:9e:fd:96:de:6d:19:28:a7:cd: 6e:b3:8c:c6:28:25:2e:2d:1d:fe:82:b9:b9:d2:18:fb:a5:46: 18:d0:0e:20:29:59:3f:78:64:e6:ea:d0:eb:cb:33:2a:ab:b9: 10:53:1e:92:74:64:b6:ad:9b:ec:d0:d1:34:a7:21:ab:c6:95: 0f:37:0f:e1:5b:a0:ad:d7:c0:de:80:88:f9:bf:64:66:5d:5b: b3:1b:e7:59:92:e7:f7:4c:dc:e7:4f:b3:94:70:9c:78:97:a4: bd:13:ec:5b:c7:cf:c3:a8:a3:5f:13:eb:c1:cb:bb:f5:0a:a2: 6d:ad:71:e7:47:d2:2b:c6:be:99:d4:0c:d4:56:c1:41:c2:74: 83:2e:00:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDQ3RjUwQzk1OEJGOUNGNTQ1QzYwMUFERUIwNEY4QTA1 RTEwMUQ5QTUwHhcNMjUwOTA1MDUwNzQyWhcNMjUwOTEyMDUwNzQyWjAYMRYwFAYD VQQDEw02OGJhNzAxZS00MWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvLpm12Yu+orc91zaUUDwNUxZIuLNk3HVqt6nO+h5ollCW3yd+AymBjdF2gV UsAoFSlmZc1lQ8z+OJlxXOOkTLzPuThCQ8IAVcwA5rwN67KguGvk7SoeZygr9LDO nthaui1BC5hBtPxXs24SaKDJAJB3asRCT5GOugnGTrXFKCCYfpMdhFhYcgPrdY19 s51m7+fehgqFm5v2eXEbeFDxakzP+z3/mDyAhcwbR7HWhih3/k8ssS0rqQ42LTcy 8Pmw1MZreCrnBTdY7RkqsvZkGIS3mA5A8fGJTVZDBwuX43GnftTWqGPjAzVwbl8+ pjMKWUB74A/pOz3L5WYoioN9eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtYMatb lejuaoz3uPdDbf41VL91MB8GA1UdIwQYMBaAFEf1DJWL+c9UXGAa3rBPigXhAdml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC84RjUyNDg4RUQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9SX1VNbFl2NXoxUmNZQnJlc0UtS0JlRUIy YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JfVU1sWXY1ejFSY1lCcmVzRS1LQmVFQjJhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC84RjUyNDg4RUQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9SX1VNbFl2NXox UmNZQnJlc0UtS0JlRUIyYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB50+rkSYMV57Ozth3GkKfkY8mFF40UaPELYnz38mgwbmC0HgMS212G yJNh8LS/iRnL3D8nczbsV6al+JoazNE+WP8GLjRFGAdIglF8hYcbad0tqgu1CJd2 3FxbSB9PQBdjzi8IerKSdj0keJw2NhswOwFA21ye/ZbebRkop81us4zGKCUuLR3+ grm50hj7pUYY0A4gKVk/eGTm6tDryzMqq7kQUx6SdGS2rZvs0NE0pyGrxpUPNw/h W6Ct18DegIj5v2RmXVuzG+dZkuf3TNznT7OUcJx4l6S9E+xbx8/DqKNfE+vBy7v1 CqJtrXHnR9Irxr6Z1AzUVsFBwnSDLgAf -----END CERTIFICATE-----Generated at Sat Sep 6 15:21:33 2025 by rpki-client