$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft File: -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json) Hash identifier: 6twP1xgPEUappfAG9SvO4lJBWXvnqGYamU64KJlce6Q= Subject key identifier: 57:39:9F:12:1F:DA:E8:A5:9D:CB:E8:61:83:F0:5D:A4:BC:A3:58:0B Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft Manifest number: 01BA Signing time: Fri 19 Sep 2025 03:31:35 +0000 Manifest this update: Fri 19 Sep 2025 03:31:35 +0000 Manifest next update: Fri 26 Sep 2025 03:31:35 +0000 Files and hashes: 1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: OWxaC9GiAr7ftMBhfqDB9m80sSH52kLNNQXeZv31Mno=) 2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: RiSzecgrf2L+I7okqYMacDikMwDpRb3b5jlgRjgQGAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Validity Not Before: Sep 19 03:31:35 2025 GMT Not After : Sep 26 03:31:35 2025 GMT Subject: CN=68ccce97-d9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:87:3c:0b:15:7e:26:9c:db:f1:a7:a3:76: ee:26:7d:e0:98:e6:a7:52:34:5b:51:a1:01:96:e2: 3f:12:a8:7c:93:e9:92:cd:ef:d6:ff:c1:7a:37:9a: 06:7a:59:50:e2:84:fb:96:d1:ca:2d:f1:2b:d4:62: 8a:ba:73:1a:4f:bc:cc:ba:7d:95:d1:19:45:72:d9: 98:e9:51:60:3e:8c:36:26:b8:b8:2e:d1:ad:df:5a: 9d:b5:47:d7:38:02:08:c5:6b:b8:9a:9e:40:e2:c5: 8f:26:14:85:80:d1:3c:dd:42:41:f4:af:73:20:00: bc:8a:2e:1b:28:03:bf:2d:77:a5:65:80:9c:94:de: ed:63:a4:14:d2:91:c0:97:96:2f:82:6b:02:55:e1: 16:90:7e:a1:c0:98:d2:ad:42:82:30:da:9c:be:b1: 50:d9:f3:14:35:1d:c8:9f:5d:62:73:59:3a:f9:1d: c3:89:96:cd:55:dc:fa:7f:f4:88:31:05:b6:d6:20: 55:f7:a0:b9:2f:45:f8:1b:f3:1e:42:a2:67:2a:b4: 20:3f:35:f8:a5:0b:9c:92:bb:61:ed:ba:c8:99:34: b4:4d:7e:a5:d0:f8:47:2f:23:fb:71:dd:ce:23:44: 78:73:69:f6:28:5a:2b:a9:59:9e:67:81:7b:bc:79: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:39:9F:12:1F:DA:E8:A5:9D:CB:E8:61:83:F0:5D:A4:BC:A3:58:0B X509v3 Authority Key Identifier: keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:fd:61:a1:d0:38:c9:2f:68:92:02:3d:60:dd:d1:4e:eb:dc: 65:8d:99:80:9d:f5:50:1c:59:ab:b2:f0:7f:26:49:6d:6c:68: b4:cc:f6:4b:ca:30:d0:64:31:1c:b3:bc:27:02:94:1c:6b:5f: 68:9f:9c:a5:0a:0e:41:6d:d4:e9:bb:57:f4:0d:ca:13:25:41: 76:d3:b7:28:7a:12:12:67:a3:10:5c:f3:c4:ac:9b:49:fd:bd: 59:a0:46:b4:3c:98:5e:b8:f8:f8:c2:13:bf:5f:a4:0a:0d:b6: 01:83:a6:8d:e7:79:c7:33:b2:f7:7e:54:d6:f4:66:8f:82:74: df:a0:c2:bd:95:e0:cb:50:1f:e5:02:47:65:fe:ab:b2:d5:b6: 31:61:fa:68:43:7b:65:5c:9f:88:26:cb:4c:d8:d8:00:0b:9f: 25:b7:bd:d6:27:57:dc:4c:05:88:b1:14:fc:f3:42:ef:3c:61: a8:f3:12:29:2a:65:58:8a:22:95:d6:7f:5c:ce:d7:bb:61:9b: 19:8c:c1:94:52:eb:a0:a6:1d:09:fa:3f:b9:73:97:9d:90:71: 39:fb:23:9b:bc:a3:c9:6e:8a:42:4d:2f:a3:e6:5c:f3:6b:9f: 09:bb:69:db:48:ff:98:cf:d1:37:41:0a:95:92:11:df:67:fc: 2e:23:c0:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMkExMTAvBgNVBAUTKEZBRTIxNDE0RDExM0RCNzhENTRGRUFCQTFCNjA2Rjg1 NEEyNDBCRDEwHhcNMjUwOTE5MDMzMTM1WhcNMjUwOTI2MDMzMTM1WjAYMRYwFAYD VQQDEw02OGNjY2U5Ny1kOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr+HPAsVfiac2/Gno3buJn3gmOanUjRbUaEBluI/Eqh8k+mSze/W/8F6N5oG ellQ4oT7ltHKLfEr1GKKunMaT7zMun2V0RlFctmY6VFgPow2Jri4LtGt31qdtUfX OAIIxWu4mp5A4sWPJhSFgNE83UJB9K9zIAC8ii4bKAO/LXelZYCclN7tY6QU0pHA l5YvgmsCVeEWkH6hwJjSrUKCMNqcvrFQ2fMUNR3In11ic1k6+R3DiZbNVdz6f/SI MQW21iBV96C5L0X4G/MeQqJnKrQgPzX4pQuckrth7brImTS0TX6l0PhHLyP7cd3O I0R4c2n2KForqVmeZ4F7vHmL6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFc5nxIf 2uilncvoYYPwXaS8o1gLMB8GA1UdIwQYMBaAFPriFBTRE9t41U/quhtgb4VKJAvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEyQS8xNDc3MTFCMkYz QkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIzalZULXE2RzJCdmhVb2tD OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11SVVGTkVUMjNqVlQtcTZHMkJ2aFVva0M5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEyQS8xNDc3MTFCMkYzQkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIz alZULXE2RzJCdmhVb2tDOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr/WGh0DjJL2iSAj1g3dFO69xljZmAnfVQHFmrsvB/JkltbGi0zPZL yjDQZDEcs7wnApQca19on5ylCg5BbdTpu1f0DcoTJUF207coehISZ6MQXPPErJtJ /b1ZoEa0PJheuPj4whO/X6QKDbYBg6aN53nHM7L3flTW9GaPgnTfoMK9leDLUB/l Akdl/quy1bYxYfpoQ3tlXJ+IJstM2NgAC58lt73WJ1fcTAWIsRT880LvPGGo8xIp KmVYiiKV1n9czte7YZsZjMGUUuugph0J+j+5c5edkHE5+yObvKPJbopCTS+j5lzz a58Ju2nbSP+Yz9E3QQqVkhHfZ/wuI8Dd -----END CERTIFICATE-----Generated at Fri Sep 19 11:05:21 2025 by rpki-client