$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft File: uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json) Hash identifier: YlsO6bK01+ywL7EMriftqdl/PqY+TYs3m830MSnOJ8A= Subject key identifier: 17:D7:9F:D3:6D:96:58:AC:B0:CC:7B:4A:21:B1:37:56:C1:5D:78:AA Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 Certificate issuer: /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Certificate serial: 0500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft Manifest number: 04FB Signing time: Fri 22 Aug 2025 23:52:06 +0000 Manifest this update: Fri 22 Aug 2025 23:52:05 +0000 Manifest next update: Fri 29 Aug 2025 23:52:05 +0000 Files and hashes: 1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: FBn5sxy/jBm2clkpi8raHSVADVNd5fHjGe/xmV8oOqk=) 2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: RIj5d7qyUoWph1Jio4J8GkYeyIP1U8prnBb8m/i4EDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDCB, serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Validity Not Before: Aug 22 23:52:05 2025 GMT Not After : Aug 29 23:52:05 2025 GMT Subject: CN=68a902a5-0965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:91:96:5a:6c:dd:b6:26:0e:00:41:82:fb: 85:7d:ab:ac:5b:81:40:76:80:fb:b8:89:cd:4e:0e: 3d:06:7c:e4:ee:ab:9a:54:d8:03:fa:6f:da:57:cc: 93:a7:a9:16:51:6a:4b:a7:af:2c:a4:de:d4:ad:dd: 22:c0:a2:55:fb:b9:a3:1a:5f:45:0b:e7:19:15:e4: a8:a7:ea:20:58:7d:ec:b3:d5:2d:81:e6:31:ef:ee: 38:07:84:20:97:e3:63:b5:94:41:98:c5:30:e7:6e: 56:32:f7:1d:d6:84:d2:fe:f3:89:e6:99:ba:a8:ba: 79:3e:e7:27:6b:02:23:1e:4f:ea:76:f7:2f:11:56: 01:dd:03:f5:3b:89:5d:57:97:5b:c3:91:6c:d0:ba: 78:48:99:8a:d7:9d:60:93:52:ba:d0:0a:a0:56:7d: 34:7a:28:bc:db:e0:65:21:73:fb:fd:ad:c5:1c:a1: 21:db:de:3a:6f:4d:80:b0:c0:14:dc:a4:61:b1:37: 3e:24:09:5b:49:cf:d6:e1:a6:4b:f5:0d:79:81:59: 06:24:e4:2a:d2:0c:43:43:c0:4f:73:fd:c4:4b:34: 60:3a:53:05:81:96:66:54:b8:42:38:8c:19:59:0d: ca:82:85:b2:17:9b:60:93:e0:19:a7:e4:07:cb:9f: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D7:9F:D3:6D:96:58:AC:B0:CC:7B:4A:21:B1:37:56:C1:5D:78:AA X509v3 Authority Key Identifier: keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:4f:7d:16:8f:cb:49:cb:53:cc:6c:aa:69:f8:f5:5b:ff:a1: 82:2e:e8:3c:b5:4e:a8:d6:cf:b9:55:6a:85:79:00:6e:ca:c1: b4:11:0c:db:5f:e7:e5:02:c4:06:e4:72:8f:04:b1:e3:d2:93: 9d:7a:56:79:07:09:19:85:bd:27:39:7e:85:ad:c1:61:86:c5: 35:ed:a9:f7:86:92:1b:9b:54:30:a5:06:03:f4:fe:3c:86:88: b0:d7:b8:e6:59:19:fa:9d:25:dd:ce:9c:36:f1:4a:11:04:98: 02:0f:50:3d:ba:48:c3:3e:8a:08:db:68:d1:a0:ce:8a:fb:e7: 8f:4f:fc:f4:12:0b:23:c0:ca:59:55:fc:d4:d2:0b:75:98:f7: e4:68:a7:04:52:e4:b6:f6:8c:7e:41:dd:95:dd:a8:d0:77:b2: 38:a7:44:7a:ae:ec:d3:30:ca:e5:44:97:16:71:ce:53:37:12: ea:62:e4:47:db:1e:ff:e9:82:44:19:5f:73:ed:84:93:f5:58: 9d:d5:25:ee:68:5c:57:8b:d4:21:74:57:5e:9f:95:ae:23:3a: 60:66:c8:1f:00:b8:9e:7f:00:85:9c:86:6c:85:01:af:82:bf: 55:2b:ad:d0:28:85:de:ff:d6:66:a9:8e:53:74:d0:59:4b:9a: 1a:8e:d8:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQ0IxMTAvBgNVBAUTKEJBMTYwNTY5QjkxNUUyNEM2QUU2QzI0ODk0RDA0RjlE NEEzOTE2OTIwHhcNMjUwODIyMjM1MjA1WhcNMjUwODI5MjM1MjA1WjAYMRYwFAYD VQQDEw02OGE5MDJhNS0wOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWqRllps3bYmDgBBgvuFfausW4FAdoD7uInNTg49Bnzk7quaVNgD+m/aV8yT p6kWUWpLp68spN7Urd0iwKJV+7mjGl9FC+cZFeSop+ogWH3ss9UtgeYx7+44B4Qg l+NjtZRBmMUw525WMvcd1oTS/vOJ5pm6qLp5PucnawIjHk/qdvcvEVYB3QP1O4ld V5dbw5Fs0Lp4SJmK151gk1K60AqgVn00eii82+BlIXP7/a3FHKEh2946b02AsMAU 3KRhsTc+JAlbSc/W4aZL9Q15gVkGJOQq0gxDQ8BPc/3ESzRgOlMFgZZmVLhCOIwZ WQ3KgoWyF5tgk+AZp+QHy583TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfXn9Nt llissMx7SiGxN1bBXXiqMB8GA1UdIwQYMBaAFLoWBWm5FeJMaubCSJTQT51KORaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDQi84QTgyMDk0NDIw RUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRreHE1c0pJbE5CUG5VbzVG cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VoWUZhYmtWNGt4cTVzSklsTkJQblVvNUZwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDQi84QTgyMDk0NDIwRUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRr eHE1c0pJbE5CUG5VbzVGcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkT30Wj8tJy1PMbKpp+PVb/6GCLug8tU6o1s+5VWqFeQBuysG0EQzb X+flAsQG5HKPBLHj0pOdelZ5BwkZhb0nOX6FrcFhhsU17an3hpIbm1QwpQYD9P48 hoiw17jmWRn6nSXdzpw28UoRBJgCD1A9ukjDPooI22jRoM6K++ePT/z0EgsjwMpZ VfzU0gt1mPfkaKcEUuS29ox+Qd2V3ajQd7I4p0R6ruzTMMrlRJcWcc5TNxLqYuRH 2x7/6YJEGV9z7YST9Vid1SXuaFxXi9QhdFden5WuIzpgZsgfALiefwCFnIZshQGv gr9VK63QKIXe/9ZmqY5TdNBZS5oajthm -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:35 2025 by rpki-client