$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft File: u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft (raw, json) Hash identifier: PEFxBAIq+5Vikb3Q05MSFxHQcqVCxNW1qXEMOtrUo3Y= Subject key identifier: C1:63:5B:7C:35:12:93:D8:09:2B:4B:F7:20:E8:A5:6C:89:BB:A0:C7 Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7 Certificate issuer: /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7 Certificate serial: 06D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft Manifest number: 06CB Signing time: Thu 18 Sep 2025 22:19:38 +0000 Manifest this update: Thu 18 Sep 2025 22:19:37 +0000 Manifest next update: Thu 25 Sep 2025 22:19:37 +0000 Files and hashes: 1: u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl (hash: 4O6ZvFnnOC9tS//5gHPkn2wZZEeCq0N3FiWLZhc6jf0=) 2: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (hash: hyfMZHqHSYXqXmUoPBYl5C2bAAKrO9L6ZCwOSgIJA4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E3E3, serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7 Validity Not Before: Sep 18 22:19:37 2025 GMT Not After : Sep 25 22:19:37 2025 GMT Subject: CN=68cc857a-1808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bc:5e:64:39:ec:d9:18:19:0a:89:f3:0a:d2: cb:88:e7:73:50:43:81:9a:05:ca:13:ef:00:8e:0f: 21:88:64:f6:21:41:e7:f0:db:be:13:e2:fa:3f:2c: 27:a2:8f:c7:47:2e:a5:b9:70:db:72:e5:e6:0a:f6: ea:aa:d7:b2:c5:dc:7e:3a:22:2d:19:37:33:52:66: 51:29:62:83:ed:3a:26:07:cc:d4:78:53:eb:eb:9e: 72:94:70:15:e5:cd:1e:a4:ef:21:88:bb:2d:3d:ff: 6c:f0:81:dd:92:ce:fb:d4:6c:26:46:60:aa:2e:b0: 94:6c:7c:e4:bc:20:87:7d:d8:7c:20:6a:2f:98:5a: ef:74:02:8d:b4:83:c8:2d:f8:90:8a:ed:54:70:6b: 53:f5:c8:4f:94:55:62:34:7d:fe:9b:73:bf:f9:d5: f8:84:73:3c:ec:8f:f2:fe:a8:ad:a2:65:ea:de:ad: 6b:c7:15:4d:ac:d4:ed:39:e9:c9:48:ec:3e:43:5f: a5:4c:41:d6:f7:19:81:58:79:99:7c:55:e1:1f:1e: 4e:08:b7:31:17:89:c6:2a:ac:d5:9d:ba:9c:8e:fc: 8e:25:2b:d4:54:ef:ed:e0:a7:01:67:c8:52:f6:db: f3:3c:55:d7:c1:9f:80:49:fd:7b:29:cb:45:47:fa: d9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:63:5B:7C:35:12:93:D8:09:2B:4B:F7:20:E8:A5:6C:89:BB:A0:C7 X509v3 Authority Key Identifier: keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6f:db:d3:a0:14:57:dd:86:49:69:14:c1:88:ab:9f:57:49: 60:81:55:5f:51:c2:cf:99:f7:bb:06:fb:c2:17:08:c3:12:b0: 95:57:8f:04:9a:f7:27:44:8f:a9:87:84:2d:b3:c2:d2:cf:f7: 69:20:21:67:0c:25:19:56:11:3b:57:64:ae:fc:6d:7b:d5:3e: 0b:45:4e:59:08:01:01:e3:ad:ae:29:8d:2a:55:32:1f:8e:a6: bc:b2:1f:97:a4:6c:bf:0b:74:97:81:d4:d4:64:75:32:65:2b: a8:37:0a:91:a0:58:2f:ed:ab:ff:12:18:c5:03:9a:25:29:06: 83:3e:82:d8:83:e2:72:fe:b0:1e:1d:e1:f3:ee:8a:03:03:b3: 77:0a:9a:13:9e:29:36:4c:e5:53:20:95:09:73:e4:2c:13:74: c8:bd:1a:fb:fb:8f:b0:62:35:fd:0c:2c:35:c8:97:5d:78:6f: 8a:d8:06:71:6b:d2:ff:70:6e:2e:e2:05:95:a7:31:03:a3:cd: 34:e4:f6:92:a6:f7:08:e0:14:45:6f:df:53:25:1b:b0:fb:b9: 71:84:0d:6b:25:f6:d5:05:27:56:e2:2a:29:99:ee:e7:8b:9e: 8a:e9:33:e9:73:a8:d0:57:43:2c:6e:37:65:09:33:ee:16:b6: 0f:6f:9a:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUzRTMxMTAvBgNVBAUTKEJCQ0M3NjBBRkUzRTlGMEE5Qjg4QzhFQzdBNDlFRDdD REQwMzk2RjcwHhcNMjUwOTE4MjIxOTM3WhcNMjUwOTI1MjIxOTM3WjAYMRYwFAYD VQQDEw02OGNjODU3YS0xODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47xeZDns2RgZConzCtLLiOdzUEOBmgXKE+8Ajg8hiGT2IUHn8Nu+E+L6Pywn oo/HRy6luXDbcuXmCvbqqteyxdx+OiItGTczUmZRKWKD7TomB8zUeFPr655ylHAV 5c0epO8hiLstPf9s8IHdks771GwmRmCqLrCUbHzkvCCHfdh8IGovmFrvdAKNtIPI LfiQiu1UcGtT9chPlFViNH3+m3O/+dX4hHM87I/y/qitomXq3q1rxxVNrNTtOenJ SOw+Q1+lTEHW9xmBWHmZfFXhHx5OCLcxF4nGKqzVnbqcjvyOJSvUVO/t4KcBZ8hS 9tvzPFXXwZ+ASf17KctFR/rZmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFjW3w1 EpPYCStL9yDopWyJu6DHMB8GA1UdIwQYMBaAFLvMdgr+Pp8Km4jI7HpJ7XzdA5b3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNFMy8wOEI4RDBEMjZG M0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53cWJpTWpzZWtudGZOMERs dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U4eDJDdjQtbndxYmlNanNla250Zk4wRGx2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTNFMy8wOEI4RDBEMjZGM0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53 cWJpTWpzZWtudGZOMERsdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBub9vToBRX3YZJaRTBiKufV0lggVVfUcLPmfe7BvvCFwjDErCVV48E mvcnRI+ph4Qts8LSz/dpICFnDCUZVhE7V2Su/G171T4LRU5ZCAEB462uKY0qVTIf jqa8sh+XpGy/C3SXgdTUZHUyZSuoNwqRoFgv7av/EhjFA5olKQaDPoLYg+Jy/rAe HeHz7ooDA7N3CpoTnik2TOVTIJUJc+QsE3TIvRr7+4+wYjX9DCw1yJddeG+K2AZx a9L/cG4u4gWVpzEDo8005PaSpvcI4BRFb99TJRuw+7lxhA1rJfbVBSdW4iopme7n i56K6TPpc6jQV0MsbjdlCTPuFrYPb5pC -----END CERTIFICATE-----Generated at Fri Sep 19 11:07:48 2025 by rpki-client