$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: usd/W0OrNVoYbl1aTZ3b0uzGD0XBzLVDRe1Xo5jzYRQ= Subject key identifier: A1:61:6C:6B:43:75:7C:53:A5:C0:4A:24:A6:A0:3F:05:D8:0E:AD:A1 Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0E8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0E88 Signing time: Thu 18 Sep 2025 17:52:34 +0000 Manifest this update: Thu 18 Sep 2025 17:52:34 +0000 Manifest next update: Thu 25 Sep 2025 17:52:34 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: 2Ldm8DQoPw3qchKdbHdAABhrigFRw2dOUWjKvLHRTYc=) 2: 350711FA881211EE9710F928C4F9AE02.roa (hash: qIQKdkJiQ6vR/a23UDA9XAzbB7yWjWrazranQiTao60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3726 (0xe8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Sep 18 17:52:34 2025 GMT Not After : Sep 25 17:52:34 2025 GMT Subject: CN=68cc46e2-6d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:82:b3:3e:57:ec:6c:2a:a2:1b:21:60:46:85: ea:9b:d7:6e:f4:0f:24:eb:b0:75:61:99:7b:06:5f: b2:fd:4a:94:9c:98:28:16:12:c8:8e:a9:3d:65:b1: 2a:c2:82:37:bf:76:8d:6f:93:0a:39:b1:53:27:59: a1:c8:04:35:12:11:81:b6:e5:33:c6:7f:42:f4:a2: 6d:d2:9f:63:f8:6e:6a:23:c9:70:46:bb:79:74:79: f8:f5:44:97:37:84:16:23:93:57:f4:6a:04:06:02: 82:05:e5:6a:af:b6:b9:18:bc:c6:c3:6b:77:fa:29: cf:0c:7e:7c:c1:53:de:28:d2:1d:23:97:98:b3:33: ae:24:f7:fd:e0:3b:af:b8:ca:74:f4:de:72:39:9c: 4b:dc:fc:63:57:2c:50:ea:e7:7d:f4:6a:46:3c:e9: d4:cc:af:34:ad:1e:3e:9f:9e:5f:85:58:91:d5:fd: 3b:17:10:98:25:94:2f:b8:04:bd:cd:ba:e2:e0:01: f9:af:f3:69:43:e3:f5:cf:c2:b8:18:38:a1:1e:8f: c9:bf:1c:1f:a0:fd:89:7d:b8:6c:4d:74:cc:7b:80: f1:0e:13:d1:de:04:42:15:ba:e9:4f:57:d0:33:71: 50:42:f4:1b:c6:c3:94:bf:63:fe:58:75:d1:82:07: 44:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:61:6C:6B:43:75:7C:53:A5:C0:4A:24:A6:A0:3F:05:D8:0E:AD:A1 X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:fb:6e:de:4c:0f:dc:1f:2a:8f:f6:10:83:f2:67:ec:aa:50: 14:3d:a7:8b:50:5e:7e:e0:a0:21:e3:2d:c6:73:4d:e3:ad:51: bc:74:65:6c:88:a5:c1:3b:76:33:a5:bf:15:0a:e6:7a:f4:e6: 26:fc:92:5c:ce:46:5b:64:f8:cd:48:5a:3e:11:da:c2:b6:c8: 0d:28:01:85:01:53:06:16:25:93:9c:92:a2:ca:5f:38:cf:91: e2:6d:23:4a:f4:5c:6c:ef:a0:48:68:7c:a6:2c:14:4a:3f:6a: a9:5f:60:12:72:3f:71:98:58:fa:99:70:53:b0:3d:59:b6:9d: 09:22:6d:a9:2d:34:9a:35:c3:a8:f5:6c:8d:6b:f2:65:44:91: 6a:0e:3c:6e:ce:89:a8:a1:fb:75:91:34:40:67:da:e8:39:46: 66:c4:bb:db:da:f3:6a:8c:0c:e4:51:cd:d7:97:49:e4:aa:79: 78:00:91:66:e2:a7:6f:cb:7b:31:91:7e:28:12:bd:6d:75:a5: 6f:d3:7a:34:3b:d6:8c:cb:1f:77:99:5a:be:f8:ae:b9:3b:dc: 5d:0b:f2:55:f9:d0:43:d8:e6:c6:00:c2:42:11:b1:03:16:77: fa:59:d0:c0:5b:52:96:d5:b0:20:66:c5:49:de:0f:d8:4b:47: ad:d7:e4:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjUwOTE4MTc1MjM0WhcNMjUwOTI1MTc1MjM0WjAYMRYwFAYD VQQDEw02OGNjNDZlMi02ZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA84KzPlfsbCqiGyFgRoXqm9du9A8k67B1YZl7Bl+y/UqUnJgoFhLIjqk9ZbEq woI3v3aNb5MKObFTJ1mhyAQ1EhGBtuUzxn9C9KJt0p9j+G5qI8lwRrt5dHn49USX N4QWI5NX9GoEBgKCBeVqr7a5GLzGw2t3+inPDH58wVPeKNIdI5eYszOuJPf94Duv uMp09N5yOZxL3PxjVyxQ6ud99GpGPOnUzK80rR4+n55fhViR1f07FxCYJZQvuAS9 zbri4AH5r/NpQ+P1z8K4GDihHo/JvxwfoP2JfbhsTXTMe4DxDhPR3gRCFbrpT1fQ M3FQQvQbxsOUv2P+WHXRggdEJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFhbGtD dXxTpcBKJKagPwXYDq2hMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf+27eTA/cHyqP9hCD8mfsqlAUPaeLUF5+4KAh4y3Gc03jrVG8dGVs iKXBO3Yzpb8VCuZ69OYm/JJczkZbZPjNSFo+EdrCtsgNKAGFAVMGFiWTnJKiyl84 z5HibSNK9Fxs76BIaHymLBRKP2qpX2AScj9xmFj6mXBTsD1Ztp0JIm2pLTSaNcOo 9WyNa/JlRJFqDjxuzomooft1kTRAZ9roOUZmxLvb2vNqjAzkUc3Xl0nkqnl4AJFm 4qdvy3sxkX4oEr1tdaVv03o0O9aMyx93mVq++K65O9xdC/JV+dBD2ObGAMJCEbED Fnf6WdDAW1KW1bAgZsVJ3g/YS0et1+RD -----END CERTIFICATE-----Generated at Fri Sep 19 12:39:56 2025 by rpki-client