$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: OUC6g33szWWwye5KxKrolyJ9kBdMF0K7MLKZGdmKlT4= Subject key identifier: C4:E6:D9:29:C9:7C:E5:E0:EF:7B:2A:51:8E:C1:39:F4:E0:05:29:98 Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 0177 Signing time: Tue 09 Sep 2025 03:48:15 +0000 Manifest this update: Tue 09 Sep 2025 03:48:14 +0000 Manifest next update: Tue 16 Sep 2025 03:48:14 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: q65Ar7MltcSr6dRI7O907o+FNxPd/8bnqjL1UFia044=) 2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: ocKjYHSoFFeanr7nSrSoG6NZ1NK1GEX/tAPr3f25J2Y=) 3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 1HOv65dUJu9o7mPWP7pn54wayqG8zRXC99rSkS0sL90=) 4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: DDHsuGR9D/9rz8HARaoFh0MSMFheoZInmf9Cc8/ZZtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: Sep 9 03:48:14 2025 GMT Not After : Sep 16 03:48:14 2025 GMT Subject: CN=68bfa37f-3baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e7:bc:8b:ac:94:bf:71:b2:cf:ab:85:7c:75: d4:f2:9e:16:ae:ad:6b:02:de:03:99:97:98:36:38: 49:e0:46:48:fe:13:0d:4d:37:dd:8e:d1:ab:6a:e2: 04:cc:6a:e7:f0:87:13:a2:3f:08:3a:88:27:45:dd: b6:04:ff:23:2e:be:23:04:6c:56:c9:d0:6b:8f:1b: f7:9b:e3:3f:48:6f:90:45:47:4e:e7:98:04:9c:7d: c2:6c:66:04:fe:13:08:ca:c1:14:dc:d3:7b:33:ab: 7d:8b:f0:9b:2b:1f:7c:0b:f1:11:fe:ae:ec:10:bc: c9:20:ca:95:81:db:4a:8a:b1:cd:48:bf:76:45:bb: e7:a0:a1:d1:e2:f3:da:b6:eb:50:33:b0:20:83:b2: 50:e5:03:3d:dd:08:22:76:32:9f:3a:d2:9b:36:bd: 28:40:81:99:a8:77:21:20:75:97:9f:4d:6c:3d:ef: e0:0c:15:49:b0:6b:b0:0a:83:be:08:0d:24:46:ca: d9:14:c7:90:19:2a:94:03:c4:e6:0a:e6:ec:b3:33: 45:dd:37:83:de:7b:01:fa:f7:f5:c2:91:b8:53:37: 6b:3f:a0:12:39:ab:d7:0a:fc:76:1c:19:e6:36:ce: 45:6c:61:8a:9a:4f:1f:89:6a:ed:42:de:c8:80:a3: 9b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E6:D9:29:C9:7C:E5:E0:EF:7B:2A:51:8E:C1:39:F4:E0:05:29:98 X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8e:a4:b4:93:6a:33:eb:bc:af:da:1f:49:a3:68:3e:35:ef: b8:7a:d0:a3:7d:8e:43:eb:6a:bf:46:aa:5c:5a:40:0e:d8:35: 66:72:84:92:88:11:8f:95:4e:f0:f9:11:e9:5d:3d:51:51:c0: 11:17:47:2d:0a:6b:3c:a3:ab:ab:72:ab:bc:8e:be:45:b8:f8: e5:e4:00:1a:4c:af:1f:95:52:48:bb:56:5b:bd:f9:6d:fa:69: 42:c1:ac:01:51:88:cc:89:d1:9e:27:25:1b:d8:de:77:96:bd: ab:37:a8:45:f2:35:d3:a7:f9:a8:67:32:a6:6e:14:91:80:df: b3:02:f4:46:5e:8e:b9:92:0b:53:ad:c4:c8:5d:83:4b:ce:8f: 4c:1f:e8:fe:82:ac:92:c3:93:81:73:34:30:16:ac:35:5e:dd: 12:dd:cb:ca:d0:bd:c2:a8:7d:5e:2f:2b:fd:70:08:e4:04:2a: b4:63:8b:0e:bb:bd:7e:0d:c6:3d:db:46:e4:0a:04:30:9b:86: 0f:f6:54:1a:0a:56:0a:ba:bd:e0:e4:2f:65:0c:32:e3:d3:c5: d9:af:90:15:92:f9:98:2c:74:c0:b6:37:c1:94:d1:00:48:89: 6d:16:c8:0a:00:13:d0:ae:c8:37:06:bb:aa:64:29:9c:26:32: 69:1c:71:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjUwOTA5MDM0ODE0WhcNMjUwOTE2MDM0ODE0WjAYMRYwFAYD VQQDEw02OGJmYTM3Zi0zYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Oe8i6yUv3Gyz6uFfHXU8p4Wrq1rAt4DmZeYNjhJ4EZI/hMNTTfdjtGrauIE zGrn8IcToj8IOognRd22BP8jLr4jBGxWydBrjxv3m+M/SG+QRUdO55gEnH3CbGYE /hMIysEU3NN7M6t9i/CbKx98C/ER/q7sELzJIMqVgdtKirHNSL92RbvnoKHR4vPa tutQM7Agg7JQ5QM93QgidjKfOtKbNr0oQIGZqHchIHWXn01sPe/gDBVJsGuwCoO+ CA0kRsrZFMeQGSqUA8TmCubsszNF3TeD3nsB+vf1wpG4UzdrP6ASOavXCvx2HBnm Ns5FbGGKmk8fiWrtQt7IgKObcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTm2SnJ fOXg73sqUY7BOfTgBSmYMB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMjqS0k2oz67yv2h9Jo2g+Ne+4etCjfY5D62q/RqpcWkAO2DVmcoSS iBGPlU7w+RHpXT1RUcARF0ctCms8o6urcqu8jr5FuPjl5AAaTK8flVJIu1Zbvflt +mlCwawBUYjMidGeJyUb2N53lr2rN6hF8jXTp/moZzKmbhSRgN+zAvRGXo65kgtT rcTIXYNLzo9MH+j+gqySw5OBczQwFqw1Xt0S3cvK0L3CqH1eLyv9cAjkBCq0Y4sO u71+DcY920bkCgQwm4YP9lQaClYKur3g5C9lDDLj08XZr5AVkvmYLHTAtjfBlNEA SIltFsgKABPQrsg3BruqZCmcJjJpHHE0 -----END CERTIFICATE-----Generated at Wed Sep 10 12:01:40 2025 by rpki-client