$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft File: US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json) Hash identifier: gDWyS+tOWveIfWViZaECFhRWEjLqzy92LFqF55iHLi0= Subject key identifier: AC:E0:4A:68:82:D2:2C:F0:35:8E:B2:60:3B:0F:3D:CB:D5:AA:F6:D6 Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Certificate serial: 054C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft Manifest number: 053F Signing time: Sat 06 Sep 2025 23:51:16 +0000 Manifest this update: Sat 06 Sep 2025 23:51:15 +0000 Manifest next update: Sat 13 Sep 2025 23:51:15 +0000 Files and hashes: 1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: gyLMjsicbT5Zk/Hq+Wn3c6ZrZ01FkFT1pG69MqAqk0c=) 2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: Qi+WEKvtCWtvGFWFUb38yBqHoAd83mtV7+scTOUOMc4=) 3: E1755B4E24D711EDBE2C660BC4F9AE02.roa (hash: aLricGiGlyJJZTbRrMECo3zkg40wJti6wIrN+dUyP7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1356 (0x54c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Validity Not Before: Sep 6 23:51:15 2025 GMT Not After : Sep 13 23:51:15 2025 GMT Subject: CN=68bcc8f4-70b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:0c:d9:16:d9:4f:ed:f0:b0:44:de:ae:7a: 0c:8c:aa:60:9c:4d:dd:d8:45:4d:0a:19:af:eb:4f: ee:93:44:ea:ce:d0:07:77:ed:f6:20:50:c7:0f:35: c0:10:9b:db:22:8c:04:38:cd:c4:c6:62:27:d1:a3: 81:a4:5e:c9:72:a7:8e:01:ec:cb:d7:96:b2:67:ff: 99:b8:f7:f0:36:19:d1:4f:38:dd:27:f4:f4:a5:5e: d6:9e:9c:0b:15:f4:8b:7e:93:38:11:c9:0f:c9:20: 2f:64:dc:5d:5e:98:a9:96:b2:30:6d:75:1e:3f:95: 7d:e5:3a:94:a3:b2:5b:65:cc:7e:45:6b:e2:ff:3a: 5d:03:09:13:a0:2f:14:df:b2:0f:17:19:2e:a8:06: 48:e6:48:ec:20:c2:e0:98:9f:6f:fa:e8:0f:ba:1f: 6b:02:eb:82:10:42:bb:6e:bc:7c:ee:5f:7a:d4:f8: 04:1c:c7:42:6e:f9:45:6a:b9:70:9e:62:3b:1a:64: d4:f4:fa:43:c5:f1:92:37:dd:b0:09:f7:ba:1c:fa: de:95:6f:7c:2b:ce:5f:97:0d:65:6c:2f:e7:fe:81: f1:3f:20:6b:60:6e:fa:57:d4:16:8a:9a:a2:5c:88: 5a:13:cb:07:8d:53:f5:ff:f1:d8:73:b5:37:32:23: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E0:4A:68:82:D2:2C:F0:35:8E:B2:60:3B:0F:3D:CB:D5:AA:F6:D6 X509v3 Authority Key Identifier: keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:24:05:f1:26:64:a7:dc:bc:ec:3e:94:cb:c5:14:c3:3c:03: af:e6:31:da:2f:bc:b4:59:16:0f:4f:c9:7c:71:cc:85:05:a7: 0b:bf:40:60:98:3d:a2:86:86:57:a2:cf:20:43:65:57:68:2f: cd:d6:68:69:65:9f:12:de:3a:aa:32:87:22:c3:be:96:44:00: 7c:7c:b7:9c:8b:af:af:39:25:45:19:ff:6c:ab:74:23:77:72: 1e:6f:6d:78:45:c4:d9:81:3b:b8:d0:02:43:fb:7e:dd:b9:2c: e4:f0:18:12:ae:8b:24:39:62:cf:55:22:5d:e2:20:7b:44:a9: b5:11:11:c9:c8:01:f9:15:60:7b:ed:8d:15:c4:6f:f7:59:58: ad:38:6f:35:97:bf:22:94:fd:25:39:c1:11:c3:69:1c:95:59: dc:7e:c4:c4:71:25:5c:31:19:f0:86:d7:5e:5d:38:c4:97:a2: 12:9e:a4:fe:b0:00:9c:20:f4:54:c9:71:21:42:ea:0c:d3:40: 1e:64:5f:c7:07:4a:e2:a8:42:cc:f1:ff:ce:99:34:75:74:bd: 26:0e:db:b6:b6:00:24:59:f7:9d:2d:d5:30:33:99:ad:c4:03: a3:73:87:27:79:8f:22:ba:8c:af:22:46:25:a7:06:6b:a9:6a: a2:80:b7:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4 RUI0RTIyNUYwHhcNMjUwOTA2MjM1MTE1WhcNMjUwOTEzMjM1MTE1WjAYMRYwFAYD VQQDEw02OGJjYzhmNC03MGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+oM2RbZT+3wsETernoMjKpgnE3d2EVNChmv60/uk0TqztAHd+32IFDHDzXA EJvbIowEOM3ExmIn0aOBpF7JcqeOAezL15ayZ/+ZuPfwNhnRTzjdJ/T0pV7WnpwL FfSLfpM4EckPySAvZNxdXpiplrIwbXUeP5V95TqUo7JbZcx+RWvi/zpdAwkToC8U 37IPFxkuqAZI5kjsIMLgmJ9v+ugPuh9rAuuCEEK7brx87l961PgEHMdCbvlFarlw nmI7GmTU9PpDxfGSN92wCfe6HPrelW98K85flw1lbC/n/oHxPyBrYG76V9QWipqi XIhaE8sHjVP1//HYc7U3MiNptQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzgSmiC 0izwNY6yYDsPPcvVqvbWMB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTU2Qy9GQjMwNUE1RTBDOEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3 eDNHUXFFLWJHTnVPdE9JbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMJAXxJmSn3LzsPpTLxRTDPAOv5jHaL7y0WRYPT8l8ccyFBacLv0Bg mD2ihoZXos8gQ2VXaC/N1mhpZZ8S3jqqMociw76WRAB8fLeci6+vOSVFGf9sq3Qj d3Ieb214RcTZgTu40AJD+37duSzk8BgSroskOWLPVSJd4iB7RKm1ERHJyAH5FWB7 7Y0VxG/3WVitOG81l78ilP0lOcERw2kclVncfsTEcSVcMRnwhtdeXTjEl6ISnqT+ sACcIPRUyXEhQuoM00AeZF/HB0riqELM8f/OmTR1dL0mDtu2tgAkWfedLdUwM5mt xAOjc4cneY8iuoyvIkYlpwZrqWqigLeX -----END CERTIFICATE-----Generated at Mon Sep 8 14:25:12 2025 by rpki-client