$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: Z4eZgL3Mqu60UUBUEdI7yXZncU9Kkf3kcbE694U/7qk= Subject key identifier: 22:E3:51:4A:EC:A0:42:86:DE:13:5F:4C:2F:64:95:8C:F7:D5:AC:2D Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 0354 Signing time: Tue 09 Sep 2025 01:11:08 +0000 Manifest this update: Tue 09 Sep 2025 01:11:08 +0000 Manifest next update: Tue 16 Sep 2025 01:11:08 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: oYmZQqZ4x7yUj48CDYxJm1U7s/2cawMG2urVBi72Rkc=) 2: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: MnpTevKrhY7L4cqXUyU9PXlqHjDSUZYAGeApiPXwlBI=) 3: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: fuFQR3XBNeUBp3GuT5Rq8XdFNfctvFuOXUDcjAZyCQA=) 4: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: Oo/z3Tl848fDTqTqN7CA+y187n0AUvuUe1PsbRy+loY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Sep 9 01:11:08 2025 GMT Not After : Sep 16 01:11:08 2025 GMT Subject: CN=68bf7eac-6291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:43:8a:2d:9e:a4:39:05:4e:4b:88:c4:26: d6:cc:60:01:c7:db:bf:8a:cc:f5:ce:c1:75:28:03: 80:6d:fc:79:b5:e6:89:af:65:11:c1:fd:10:39:37: 71:cc:d4:5f:15:8e:89:7d:65:cb:15:98:95:40:31: 38:99:c3:84:19:6f:ab:2b:9b:06:30:46:09:41:36: 7f:e9:a9:0e:fc:db:3c:e6:78:00:6e:3f:70:c9:fa: 79:ec:1b:37:36:6d:27:74:c1:b0:df:5d:c2:22:26: ce:37:5b:f1:18:fe:78:dd:35:b2:dc:75:26:3f:fb: 0b:be:4b:93:3c:5a:42:e0:0e:90:d2:9f:4c:28:81: c8:82:92:61:1a:4a:bd:71:63:20:a8:02:0d:43:81: 2b:fa:8b:db:fc:e1:1c:b7:c9:a6:ae:8e:44:67:da: 15:02:af:00:a8:7d:7e:00:11:27:20:44:a6:1b:09: 76:15:e1:ec:0e:3c:f6:19:47:b8:fe:22:05:fd:7c: 41:2b:89:85:e2:0f:05:7b:45:7e:6d:7d:36:78:32: 5b:5e:d6:89:a7:1a:35:02:6c:04:b6:35:53:d6:f2: 79:4e:61:6c:a7:00:e1:20:96:ae:45:88:65:f0:e7: db:fa:93:77:f0:36:81:c4:7e:76:18:41:58:e0:07: 27:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E3:51:4A:EC:A0:42:86:DE:13:5F:4C:2F:64:95:8C:F7:D5:AC:2D X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:fc:f3:87:19:2f:12:c7:bb:2d:f2:21:cb:71:08:ca:28:e2: 7a:90:df:a8:a0:b1:2a:2b:4f:84:eb:b6:cb:74:db:ea:f8:3a: 4a:fb:c9:f3:1e:4c:28:7d:c8:68:ca:60:56:50:9f:9e:27:7b: f0:05:65:11:52:9a:56:58:72:40:2c:e8:4e:9f:60:71:10:84: 7e:56:2c:76:1c:b9:aa:c2:26:f1:ae:78:a9:de:7c:3a:04:0d: 9d:69:88:81:b9:41:b2:03:a4:76:c3:7c:7e:3d:1f:eb:5a:d3: e1:02:59:c2:9d:d7:1e:b4:23:f2:0c:c5:fe:37:79:44:10:8b: d6:91:64:43:d4:81:f7:61:5a:45:61:16:44:4a:9a:80:6b:d6: 93:b6:37:5b:f6:96:35:7e:b9:8b:39:48:f4:28:b6:c3:96:eb: 70:6b:a8:53:c4:0b:6a:2b:ce:82:9e:b3:f6:64:1f:fd:b8:d7: 24:ef:fa:c7:55:c7:3f:01:2a:f7:f5:83:60:0c:a3:37:2c:d9: 22:99:68:82:55:01:e3:f3:08:a4:72:cb:3b:03:48:f6:6a:f5: 12:d6:ac:f8:4d:e3:37:ec:75:77:a9:22:07:1e:ed:cc:0a:1b: 02:90:92:3a:a3:d1:e3:7b:17:d2:a5:2f:34:ec:df:17:8f:74: db:13:2b:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjUwOTA5MDExMTA4WhcNMjUwOTE2MDExMTA4WjAYMRYwFAYD VQQDEw02OGJmN2VhYy02MjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHhDii2epDkFTkuIxCbWzGABx9u/isz1zsF1KAOAbfx5teaJr2URwf0QOTdx zNRfFY6JfWXLFZiVQDE4mcOEGW+rK5sGMEYJQTZ/6akO/Ns85ngAbj9wyfp57Bs3 Nm0ndMGw313CIibON1vxGP543TWy3HUmP/sLvkuTPFpC4A6Q0p9MKIHIgpJhGkq9 cWMgqAINQ4Er+ovb/OEct8mmro5EZ9oVAq8AqH1+ABEnIESmGwl2FeHsDjz2GUe4 /iIF/XxBK4mF4g8Fe0V+bX02eDJbXtaJpxo1AmwEtjVT1vJ5TmFspwDhIJauRYhl 8Ofb+pN38DaBxH52GEFY4AcnkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLjUUrs oEKG3hNfTC9klYz31awtMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDL/POHGS8Sx7st8iHLcQjKKOJ6kN+ooLEqK0+E67bLdNvq+DpK+8nz HkwofchoymBWUJ+eJ3vwBWURUppWWHJALOhOn2BxEIR+Vix2HLmqwibxrnip3nw6 BA2daYiBuUGyA6R2w3x+PR/rWtPhAlnCndcetCPyDMX+N3lEEIvWkWRD1IH3YVpF YRZESpqAa9aTtjdb9pY1frmLOUj0KLbDlutwa6hTxAtqK86CnrP2ZB/9uNck7/rH Vcc/ASr39YNgDKM3LNkimWiCVQHj8wikcss7A0j2avUS1qz4TeM37HV3qSIHHu3M ChsCkJI6o9HjexfSpS807N8Xj3TbEyvW -----END CERTIFICATE-----Generated at Wed Sep 10 13:33:54 2025 by rpki-client