$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json) Hash identifier: jHWZZ8xgNtAex1XWbhfenmABUGhHfawz29UbjdEBzDs= Subject key identifier: 1F:0F:0B:B8:F7:E4:2E:2D:AB:50:0D:5F:A4:02:D6:94:3E:43:D4:CC Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft Manifest number: 0D17 Signing time: Fri 22 Aug 2025 18:13:54 +0000 Manifest this update: Fri 22 Aug 2025 18:13:53 +0000 Manifest next update: Fri 29 Aug 2025 18:13:53 +0000 Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: zH+o6RNcYX67ttg7L22RoQMbL1QacVgcsxOfF+WovgU=) 2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: B9TNU/jgE/B9qF/pLkXeXHo28NX5WSHP3+HqoCXSOUM=) 3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: yXlaLhbx5YRuGCOCxZS+UVUBHLhciPfPZJOpJ77jS10=) 4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: 6pM1TQdNb79+DA6IOYbwXDIQvGxFIYUOEy7bg1GioZ4=) 5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: KHH4guWZz2QPTGfSHIABOFeNEzmNYAkAEdSlj0Q8gIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: Aug 22 18:13:53 2025 GMT Not After : Aug 29 18:13:53 2025 GMT Subject: CN=68a8b361-d6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:a5:c3:ea:4f:5a:3d:7b:4f:62:60:bc:80: e3:e3:a5:27:0f:c7:2b:67:62:51:aa:3d:f4:0b:2a: 84:4a:37:c5:42:7e:a9:86:4c:88:62:63:4b:91:01: a0:fe:7c:f5:98:b0:58:ab:28:73:df:33:70:a7:15: 97:fc:90:c4:49:ce:ec:50:04:3d:b3:16:c9:43:df: 48:9e:47:b8:de:7d:45:eb:c1:26:b2:26:b6:6c:c9: e5:31:36:da:21:f7:79:95:d4:25:71:dc:7b:de:41: 8d:8f:79:29:8e:40:46:db:fb:50:40:de:76:e2:e2: ba:ba:ed:9d:e3:6e:69:72:b6:f4:49:ce:f2:f7:4c: e0:3d:d5:ba:df:c0:af:46:72:0a:59:e9:83:c0:dc: e2:3f:9f:0a:c0:e2:a7:97:06:d7:a7:d3:ab:8d:e9: a0:0b:43:27:67:3a:ac:7e:d8:2e:9e:61:03:c1:ec: ae:7d:5f:43:74:3c:66:2b:85:e2:6c:ef:87:01:70: 69:c0:93:ee:5a:c3:f8:ea:fa:7e:77:c7:68:a1:e6: e7:68:5f:60:0e:92:4d:67:a9:3b:ca:40:b6:d7:1c: dc:89:e7:e1:25:cf:49:1f:2f:82:d2:65:b1:73:d1: 2a:68:b4:c9:fc:d8:77:04:ac:a7:97:fd:23:8f:28: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0F:0B:B8:F7:E4:2E:2D:AB:50:0D:5F:A4:02:D6:94:3E:43:D4:CC X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:87:54:9c:ca:c8:62:ea:9a:2c:1a:8e:3a:a8:e9:84:fa:31: 60:a4:c6:9e:3d:fe:55:e3:83:03:c2:9d:58:94:fc:08:d7:c7: 08:c2:73:7d:24:18:3e:45:90:f4:b1:62:f8:56:fa:c9:80:ad: bc:49:c5:6e:00:cd:66:66:58:0a:20:f1:b6:10:e5:a8:cf:6e: a1:18:c2:dd:7e:87:18:cc:24:60:e2:00:2c:af:ca:35:65:97: 7a:b4:db:b4:61:f6:0e:94:48:73:59:c0:a5:18:6a:ff:f9:7d: 6c:94:3e:c4:d6:a7:2f:11:cb:1b:a5:4b:d0:fa:83:ed:cf:fe: b9:12:34:af:45:32:59:40:28:3d:de:0a:e5:8c:c0:70:91:64: 87:7e:21:8f:88:a0:46:d5:d3:a4:ee:a6:fa:03:40:c3:4c:99: b7:d1:fb:89:18:bd:d0:15:35:9e:c4:ce:0a:fc:d7:3c:bb:01: b8:a6:16:8f:a2:c7:f8:d8:83:9b:99:d1:a9:ce:6f:e8:31:78: bd:44:24:ab:3a:65:2d:4e:0d:e6:ea:88:d9:17:d9:4a:f7:54: ff:aa:f0:e6:12:83:ad:f7:3c:74:50:ed:82:2d:a0:be:2f:bc: aa:1c:a6:21:14:b3:dc:95:47:f2:86:97:22:cb:a5:58:8b:8e: 4d:e6:1e:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjUwODIyMTgxMzUzWhcNMjUwODI5MTgxMzUzWjAYMRYwFAYD VQQDEw02OGE4YjM2MS1kNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMKlw+pPWj17T2JgvIDj46UnD8crZ2JRqj30CyqESjfFQn6phkyIYmNLkQGg /nz1mLBYqyhz3zNwpxWX/JDESc7sUAQ9sxbJQ99Inke43n1F68Emsia2bMnlMTba Ifd5ldQlcdx73kGNj3kpjkBG2/tQQN524uK6uu2d425pcrb0Sc7y90zgPdW638Cv RnIKWemDwNziP58KwOKnlwbXp9OrjemgC0MnZzqsftgunmEDweyufV9DdDxmK4Xi bO+HAXBpwJPuWsP46vp+d8dooebnaF9gDpJNZ6k7ykC21xzciefhJc9JHy+C0mWx c9EqaLTJ/Nh3BKynl/0jjyjluQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8PC7j3 5C4tq1ANX6QC1pQ+Q9TMMB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgh1Scyshi6posGo46qOmE+jFgpMaePf5V44MDwp1YlPwI18cIwnN9 JBg+RZD0sWL4VvrJgK28ScVuAM1mZlgKIPG2EOWoz26hGMLdfocYzCRg4gAsr8o1 ZZd6tNu0YfYOlEhzWcClGGr/+X1slD7E1qcvEcsbpUvQ+oPtz/65EjSvRTJZQCg9 3grljMBwkWSHfiGPiKBG1dOk7qb6A0DDTJm30fuJGL3QFTWexM4K/Nc8uwG4phaP osf42IObmdGpzm/oMXi9RCSrOmUtTg3m6ojZF9lK91T/qvDmEoOt9zx0UO2CLaC+ L7yqHKYhFLPclUfyhpciy6VYi45N5h6W -----END CERTIFICATE-----Generated at Sat Aug 23 03:05:43 2025 by rpki-client