$ rpki-client -vvf rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft File: UnWd41wCZ5226TLqiGidwQ1czK4.mft (raw, json) Hash identifier: auBDuyjPVut59JSij/IgR9pelqXykWYMPiYns27RZD0= Subject key identifier: 05:B9:33:8B:AA:A9:05:25:FE:C2:1C:21:68:33:B0:71:C3:80:EC:54 Authority key identifier: 52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE Certificate issuer: /CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft Manifest number: 0178 Signing time: Wed 17 Sep 2025 04:16:50 +0000 Manifest this update: Wed 17 Sep 2025 04:16:49 +0000 Manifest next update: Wed 24 Sep 2025 04:16:49 +0000 Files and hashes: 1: UnWd41wCZ5226TLqiGidwQ1czK4.crl (hash: yQRz4UEiPvjf0CglJxFiIjKzllQPAq9X5eoRDm/nTMM=) 2: 503DC7FA547F11EE9512EE75C4F9AE02.roa (hash: 33db+G2HmqK4GM+/q2Pot6yftpHMysN5n0HwgMWkack=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919014C, serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE Validity Not Before: Sep 17 04:16:49 2025 GMT Not After : Sep 24 04:16:49 2025 GMT Subject: CN=68ca3632-a0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:d4:6d:de:4a:b2:db:8f:0c:a9:be:81:52: 39:da:1d:3d:86:bf:e9:61:cf:e2:1b:65:ec:79:57: c2:ba:f9:a9:d7:67:63:87:72:6c:c4:5d:b1:87:df: e4:5b:24:b5:77:05:b0:c8:be:a9:e2:e5:e8:53:40: 9e:03:ab:b9:b4:20:6f:6a:10:d0:28:58:f8:a5:31: 94:30:49:3f:00:79:d9:d6:99:cd:fb:cd:b2:39:63: 95:54:44:8c:78:59:62:cb:3f:e0:ac:2b:84:4e:cf: d6:84:63:95:ec:13:c0:a5:37:4a:07:7c:bc:a9:c6: 1b:7a:e3:3c:df:cb:82:aa:08:4e:53:ca:0d:cb:46: af:e2:c9:ef:9a:c3:44:41:96:a0:e8:4e:e0:91:6e: 8b:07:57:1a:fc:1f:dd:e3:22:8a:f8:ec:f0:db:3a: ac:27:58:01:59:b6:9f:07:8e:48:ae:82:0e:a7:4b: 18:cc:7c:8b:c2:fe:34:e9:6f:c9:2c:6c:b7:fc:49: 63:21:73:f6:48:72:6c:61:49:62:23:23:a6:c7:52: 0c:6d:b4:8b:c9:34:bb:e0:3d:23:30:48:4e:a3:c2: b7:a3:54:b2:3e:f4:b8:af:84:ae:c0:54:c8:14:25: a4:2a:a3:83:15:43:32:8b:10:9f:d9:71:4f:d4:3d: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B9:33:8B:AA:A9:05:25:FE:C2:1C:21:68:33:B0:71:C3:80:EC:54 X509v3 Authority Key Identifier: keyid:52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:bf:0f:ae:ec:f9:13:2c:56:71:7c:2c:5e:03:1e:c5:71:a9: 65:93:bc:14:10:b8:b3:b6:d4:7a:3a:3a:dd:5d:b6:01:a8:35: 26:73:5e:36:91:16:7c:f3:9a:ad:bb:8f:bc:2e:e5:89:87:27: 1e:67:99:c7:7a:99:55:15:eb:42:97:dc:68:ce:36:0d:ff:fa: 69:77:8c:a4:cf:2f:22:72:3f:76:ed:1e:4c:25:af:46:aa:30: 7b:39:7b:e6:06:03:30:c9:43:5d:a8:e2:4e:f0:11:4b:31:53: 64:6a:71:2c:14:c7:17:09:8b:7d:4a:2c:aa:6c:63:77:c5:0c: 33:e4:ab:35:09:31:c8:5e:77:ca:7d:1e:b3:06:32:b2:ac:59: 15:7e:49:8a:5b:07:98:54:64:3d:27:9d:90:ac:56:45:06:bd: 58:28:10:bd:97:d1:c0:e9:34:b5:f3:eb:aa:7a:0f:e6:fe:bc: e7:fc:25:89:99:fc:d0:08:1a:08:ce:ac:33:5d:a8:f0:c9:ef: 77:b7:48:be:77:21:79:59:4f:a6:7a:ea:4c:3a:d5:4f:fa:fc: 8f:41:6a:03:58:05:18:bf:c6:49:45:e0:9e:90:de:8e:da:2f: ac:04:70:92:0e:61:cc:06:bf:d2:98:73:b4:3d:d4:14:34:a7: f4:99:ba:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAxNEMxMTAvBgNVBAUTKDUyNzU5REUzNUMwMjY3OURCNkU5MzJFQTg4Njg5REMx MEQ1Q0NDQUUwHhcNMjUwOTE3MDQxNjQ5WhcNMjUwOTI0MDQxNjQ5WjAYMRYwFAYD VQQDEw02OGNhMzYzMi1hMGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRTUbd5KstuPDKm+gVI52h09hr/pYc/iG2XseVfCuvmp12djh3JsxF2xh9/k WyS1dwWwyL6p4uXoU0CeA6u5tCBvahDQKFj4pTGUMEk/AHnZ1pnN+82yOWOVVESM eFliyz/grCuETs/WhGOV7BPApTdKB3y8qcYbeuM838uCqghOU8oNy0av4snvmsNE QZag6E7gkW6LB1ca/B/d4yKK+Ozw2zqsJ1gBWbafB45IroIOp0sYzHyLwv406W/J LGy3/EljIXP2SHJsYUliIyOmx1IMbbSLyTS74D0jMEhOo8K3o1SyPvS4r4SuwFTI FCWkKqODFUMyixCf2XFP1D3P0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAW5M4uq qQUl/sIcIWgzsHHDgOxUMB8GA1UdIwQYMBaAFFJ1neNcAmedtuky6ohoncENXMyu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDE0Qy8xNTRGQUMyQzU0 N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1MjI2VExxaUdpZHdRMWN6 SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VuV2Q0MXdDWjUyMjZUTHFpR2lkd1ExY3pLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDE0Qy8xNTRGQUMyQzU0N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1 MjI2VExxaUdpZHdRMWN6SzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQvw+u7PkTLFZxfCxeAx7Fcallk7wUELizttR6OjrdXbYBqDUmc142 kRZ885qtu4+8LuWJhyceZ5nHeplVFetCl9xozjYN//ppd4ykzy8icj927R5MJa9G qjB7OXvmBgMwyUNdqOJO8BFLMVNkanEsFMcXCYt9SiyqbGN3xQwz5Ks1CTHIXnfK fR6zBjKyrFkVfkmKWweYVGQ9J52QrFZFBr1YKBC9l9HA6TS18+uqeg/m/rzn/CWJ mfzQCBoIzqwzXajwye93t0i+dyF5WU+meupMOtVP+vyPQWoDWAUYv8ZJReCekN6O 2i+sBHCSDmHMBr/SmHO0PdQUNKf0mbrR -----END CERTIFICATE-----Generated at Thu Sep 18 23:50:52 2025 by rpki-client