$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: aPB04WyDoHpn0rzGZO3DJK6Z1ujnJDdZRaBrfiqBR9c= Subject key identifier: D6:B3:77:E7:A7:00:A1:DD:29:7D:E3:74:7C:02:78:AF:13:7C:7D:03 Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 1012 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 1953 Signing time: Fri 22 Aug 2025 17:33:57 +0000 Manifest this update: Fri 22 Aug 2025 17:33:56 +0000 Manifest next update: Fri 29 Aug 2025 17:33:56 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: yMTbxU144fjvJVoSYk6GC+uqD4Pbf14WXVejJk23S6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4114 (0x1012) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: Aug 22 17:33:56 2025 GMT Not After : Aug 29 17:33:56 2025 GMT Subject: CN=68a8aa05-2219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:90:a0:97:bc:a3:42:c7:74:eb:aa:e8:a7:b0: 07:a8:21:6b:36:33:3c:97:a9:35:a4:ef:0e:be:8b: 2e:31:46:1f:18:62:d4:dd:fc:40:96:21:c5:a6:95: f6:19:41:8e:42:73:d7:60:ed:06:ae:a8:8c:80:a4: 6b:ca:cc:f0:3d:d2:0a:24:74:15:e6:df:09:ec:a3: bf:73:b6:eb:88:c2:58:62:fa:52:16:62:54:b4:b0: 3b:b1:e6:21:da:0a:f3:84:aa:9d:41:43:b4:77:f1: f7:28:b9:75:d1:01:b8:5c:70:da:11:e0:b9:dc:bd: b7:e3:ce:a7:45:c7:a3:41:12:a6:5e:60:b5:51:37: 75:ad:5b:a6:29:57:e8:ea:d9:51:b6:29:02:ba:48: 6c:9d:3e:7f:b2:1b:6a:a9:6f:4e:07:a9:f2:91:cb: 2c:dc:ee:35:b1:d0:12:32:f9:d6:15:96:e6:b0:24: 15:6b:9b:56:0e:c3:c3:ae:e0:84:5e:e2:a1:4a:3c: 67:92:c8:26:ec:c3:2a:06:b8:74:4d:ea:51:e3:62: 8f:03:27:ca:ff:4c:b3:76:ee:93:75:60:a5:16:70: 74:fb:8d:0f:f5:9e:05:f9:69:75:3b:71:99:1e:99: a5:1f:b9:55:91:de:fe:34:89:d5:e3:65:e0:1d:cc: 9e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B3:77:E7:A7:00:A1:DD:29:7D:E3:74:7C:02:78:AF:13:7C:7D:03 X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3d:f8:f1:8e:a1:50:f2:03:77:c3:a3:d3:a3:25:2d:ba:eb: 53:f9:47:65:4c:79:4f:88:8b:f9:18:5c:44:e0:00:c7:f0:60: ee:33:fe:f8:e7:4c:58:ac:0f:e7:d7:68:01:2c:8d:21:8b:74: f9:b9:ce:be:bc:01:7b:ca:36:67:80:ad:80:d7:9d:4f:a0:87: f5:9b:8f:91:aa:1d:29:d8:72:9e:7d:43:81:1c:cb:09:9c:60: c4:e3:c8:fb:7f:d5:16:f9:81:9c:b1:85:c4:1b:23:7e:32:86: c4:0a:c5:e9:d1:fc:22:cb:e1:a4:31:72:d3:c1:8f:22:9a:7e: c8:03:56:54:19:ed:02:62:09:7f:cd:85:01:94:0d:10:54:85: ca:20:9f:71:00:ef:17:55:4e:35:93:18:f2:d0:89:d1:72:b2: 2f:3f:15:1e:04:d9:22:c3:ab:fe:c5:ee:65:25:2b:cc:0d:53: bb:d4:aa:76:4e:5b:ac:4a:cd:0a:11:e3:bb:92:cf:47:93:77: 67:8a:4b:a7:74:71:f3:dd:3e:53:63:99:89:41:43:d1:9b:92: 10:d2:45:e3:c2:87:8b:6b:b4:2f:99:59:75:b4:57:48:b6:e3: f2:dc:54:6b:f2:c6:73:99:a3:bf:41:83:e6:ef:e8:88:53:78: c7:f6:bf:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjUwODIyMTczMzU2WhcNMjUwODI5MTczMzU2WjAYMRYwFAYD VQQDEw02OGE4YWEwNS0yMjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ZCgl7yjQsd066rop7AHqCFrNjM8l6k1pO8OvosuMUYfGGLU3fxAliHFppX2 GUGOQnPXYO0GrqiMgKRryszwPdIKJHQV5t8J7KO/c7briMJYYvpSFmJUtLA7seYh 2grzhKqdQUO0d/H3KLl10QG4XHDaEeC53L23486nRcejQRKmXmC1UTd1rVumKVfo 6tlRtikCukhsnT5/shtqqW9OB6nykcss3O41sdASMvnWFZbmsCQVa5tWDsPDruCE XuKhSjxnksgm7MMqBrh0TepR42KPAyfK/0yzdu6TdWClFnB0+40P9Z4F+Wl1O3GZ HpmlH7lVkd7+NInV42XgHcye/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNazd+en AKHdKX3jdHwCeK8TfH0DMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMPfjxjqFQ8gN3w6PToyUtuutT+UdlTHlPiIv5GFxE4ADH8GDuM/74 50xYrA/n12gBLI0hi3T5uc6+vAF7yjZngK2A151PoIf1m4+Rqh0p2HKefUOBHMsJ nGDE48j7f9UW+YGcsYXEGyN+MobECsXp0fwiy+GkMXLTwY8imn7IA1ZUGe0CYgl/ zYUBlA0QVIXKIJ9xAO8XVU41kxjy0InRcrIvPxUeBNkiw6v+xe5lJSvMDVO71Kp2 TlusSs0KEeO7ks9Hk3dnikundHHz3T5TY5mJQUPRm5IQ0kXjwoeLa7QvmVl1tFdI tuPy3FRr8sZzmaO/QYPm7+iIU3jH9r8i -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:01 2025 by rpki-client