$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: M2kKbXZacH2lpr/dc37iNi06PxzMofHyETKzv5Qg+e4= Subject key identifier: 0E:82:06:40:B0:4F:6D:6D:8A:AB:04:B0:94:11:A2:8D:60:A9:BD:80 Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0BA1 Signing time: Fri 22 Aug 2025 19:06:30 +0000 Manifest this update: Fri 22 Aug 2025 19:06:29 +0000 Manifest next update: Fri 29 Aug 2025 19:06:29 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: wc855Gi+l6ju6C6WbkHRj5ReMkQnTq1DphljPM0NQbM=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: b6SG981ws9YTohF7YJYfD6V/fAmms72gE/FD/yHhvRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: Aug 22 19:06:29 2025 GMT Not After : Aug 29 19:06:29 2025 GMT Subject: CN=68a8bfb5-bc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f2:07:f3:61:18:7a:62:a6:2c:b0:42:4a:1f: 66:d7:02:c0:ba:7f:8d:4b:2a:6e:aa:cf:3f:7c:49: 7f:8f:f4:8b:af:c6:44:6c:c1:a9:6b:39:8f:d3:1b: f7:8d:df:82:60:84:00:ec:b1:ac:36:08:09:5f:e7: d4:33:89:e0:d5:81:fc:fb:e1:16:4d:eb:81:f4:5b: b7:07:b0:10:a5:27:38:e2:fa:4f:01:6d:b5:cd:56: cd:5b:61:0b:62:a8:d9:ca:d8:0c:ab:b3:72:44:ca: 0f:8c:1d:47:72:ad:eb:9a:23:8f:61:ad:cb:9c:67: ab:a6:a1:01:30:d2:16:39:76:0e:94:a8:1f:2d:cc: 97:8c:3a:cf:1e:b9:8d:b1:ce:ce:64:d0:c3:8f:a3: b1:2d:ba:d4:42:46:4f:2d:19:8a:b2:84:3b:06:11: 1c:14:7a:41:6f:f9:cc:54:38:2b:2a:9f:eb:0a:40: 18:26:a5:7f:e9:07:44:ec:c2:9f:e0:8e:59:2e:21: 51:d6:f9:39:33:63:a4:d5:28:70:f4:df:3f:9f:cd: ef:41:64:2b:48:e5:b5:8b:50:c1:df:7e:c4:08:cf: a6:1b:56:a4:6c:64:94:44:96:08:54:d9:66:dd:ff: 90:b3:06:3b:07:fc:58:b8:39:39:bd:6d:94:9e:12: d9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:82:06:40:B0:4F:6D:6D:8A:AB:04:B0:94:11:A2:8D:60:A9:BD:80 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:87:67:1d:b8:96:7d:0f:70:62:61:02:a1:6a:3a:79:4f:10: b7:25:f3:fc:b7:d1:04:85:35:93:de:c6:88:72:8b:49:9a:5c: 24:c3:94:6b:a3:e3:1e:73:06:a1:d4:57:3b:08:13:92:ad:09: 5b:e2:d0:01:4a:ac:6f:fe:05:45:df:63:23:c2:d0:c9:22:a8: a9:1d:fb:f7:2a:48:fc:bf:92:2f:ff:97:0d:3c:18:f8:96:c1: a7:e8:a9:50:ca:9f:f1:73:f1:50:00:28:40:4a:25:56:76:5e: bb:28:3b:6f:79:10:18:41:53:8a:b4:1e:e9:27:92:c3:ba:5f: 4c:78:96:21:a2:89:fc:65:84:4c:f8:b6:29:a7:23:fa:40:28: 2e:5a:68:8f:27:c3:e8:50:ff:2d:d6:1b:96:7c:34:8e:4d:03: 4b:56:60:d9:15:0a:e5:eb:ad:69:12:b3:bd:e1:51:10:5d:a9: 00:b0:04:b0:02:bb:33:eb:a3:b2:f8:5f:d0:df:70:9d:19:73: 0f:e2:d2:6c:f0:1a:b4:55:27:fb:01:eb:c4:52:9b:2b:10:3c: cc:5c:c1:8f:e6:71:96:f9:cb:b2:c5:d8:30:45:5d:54:c9:44: 93:13:ee:f8:6a:4e:69:36:ec:80:5f:a3:f3:cb:73:4a:ad:54: d0:b3:9e:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUwODIyMTkwNjI5WhcNMjUwODI5MTkwNjI5WjAYMRYwFAYD VQQDEw02OGE4YmZiNS1iYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPIH82EYemKmLLBCSh9m1wLAun+NSypuqs8/fEl/j/SLr8ZEbMGpazmP0xv3 jd+CYIQA7LGsNggJX+fUM4ng1YH8++EWTeuB9Fu3B7AQpSc44vpPAW21zVbNW2EL YqjZytgMq7NyRMoPjB1Hcq3rmiOPYa3LnGerpqEBMNIWOXYOlKgfLcyXjDrPHrmN sc7OZNDDj6OxLbrUQkZPLRmKsoQ7BhEcFHpBb/nMVDgrKp/rCkAYJqV/6QdE7MKf 4I5ZLiFR1vk5M2Ok1Shw9N8/n83vQWQrSOW1i1DB337ECM+mG1akbGSURJYIVNlm 3f+QswY7B/xYuDk5vW2UnhLZtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6CBkCw T21tiqsEsJQRoo1gqb2AMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXh2cduJZ9D3BiYQKhajp5TxC3JfP8t9EEhTWT3saIcotJmlwkw5Rr o+Mecwah1Fc7CBOSrQlb4tABSqxv/gVF32MjwtDJIqipHfv3Kkj8v5Iv/5cNPBj4 lsGn6KlQyp/xc/FQAChASiVWdl67KDtveRAYQVOKtB7pJ5LDul9MeJYhoon8ZYRM +LYppyP6QCguWmiPJ8PoUP8t1huWfDSOTQNLVmDZFQrl661pErO94VEQXakAsASw Arsz66Oy+F/Q33CdGXMP4tJs8Bq0VSf7AevEUpsrEDzMXMGP5nGW+cuyxdgwRV1U yUSTE+74ak5pNuyAX6Pzy3NKrVTQs57w -----END CERTIFICATE-----Generated at Sun Aug 24 01:00:41 2025 by rpki-client