$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft File: uDIFubLHQGPjdvNxFYOXBe277Ng.mft (raw, json) Hash identifier: gXSC6fvDxtp6RdSCaxGjkHd4ew9faRUzlYV2/Eo/zc4= Subject key identifier: 8D:03:EA:A5:BF:9C:6A:C3:30:B9:77:36:F3:26:0B:55:BC:2A:62:C1 Authority key identifier: B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8 Certificate issuer: /CN=A9130138/serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft Manifest number: 035F Signing time: Sat 23 Aug 2025 01:11:22 +0000 Manifest this update: Sat 23 Aug 2025 01:11:22 +0000 Manifest next update: Sat 30 Aug 2025 01:11:22 +0000 Files and hashes: 1: uDIFubLHQGPjdvNxFYOXBe277Ng.crl (hash: s9A3JXwft9V6bNP3pCr0Z8D+ft6nJi4KHN9SKz21ewM=) 2: A7DEA0DAC47D11ECB544A26DC4F9AE02.roa (hash: f9p5nsZx4jMNkGPcJOkOhsmegpIzdL9T3kUEUM+NbsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8 Validity Not Before: Aug 23 01:11:22 2025 GMT Not After : Aug 30 01:11:22 2025 GMT Subject: CN=68a9153a-dfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:97:04:f7:39:9d:9b:c3:03:22:3e:bc:2a: d9:f4:d1:9d:7f:8a:1c:1e:bc:52:6d:2c:10:d0:1c: a2:54:f3:3a:84:0d:bd:ad:11:c0:b3:10:9f:fc:8a: ee:7d:c4:f9:4a:75:2b:ca:64:50:2a:20:a6:2d:5e: 70:6a:40:9c:68:a8:15:74:0d:86:7b:b3:4e:5e:61: 46:dc:8a:c9:d7:9e:60:74:b2:af:c9:c3:e4:2d:1c: 4a:d2:4c:4c:39:fb:93:47:68:29:c6:67:11:63:7f: f5:4f:94:20:32:25:cd:9e:9a:c6:21:f8:26:45:64: 47:e4:66:8a:78:a0:89:76:d9:ba:2a:dc:bd:90:5e: 8b:f2:82:09:f8:22:7a:a8:2a:17:08:0a:ef:ce:d0: 1d:55:51:21:0f:d1:9e:e9:bf:2c:e6:9f:60:46:77: 8e:6e:f0:93:6e:ea:9f:15:c9:78:cc:dd:44:7f:e5: 59:32:2a:e7:1b:42:1b:03:ce:fd:35:ce:34:10:a0: a3:84:1a:f6:af:23:56:86:e3:2f:9f:8b:c1:08:a4: 78:de:55:f4:75:ef:a2:40:f6:7e:90:7c:ba:52:a8: 53:35:c1:72:59:8e:2c:6d:db:f9:04:03:16:8f:a9: 29:9b:32:b0:fb:c2:be:56:20:f4:3d:a2:13:c4:68: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:03:EA:A5:BF:9C:6A:C3:30:B9:77:36:F3:26:0B:55:BC:2A:62:C1 X509v3 Authority Key Identifier: keyid:B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:ee:6c:29:e3:88:42:2a:ac:c2:44:27:6c:1d:9c:30:cf:c5: 25:8f:da:67:0a:7d:19:fc:40:8d:38:d0:99:eb:80:a7:77:78: 47:86:43:e3:6c:b4:f7:41:f8:c2:23:c9:e1:af:86:13:39:e3: 3f:3a:04:25:0d:61:50:c2:46:37:ce:81:32:93:a4:9b:9c:fa: 29:2c:e2:73:28:8d:1a:c2:25:3e:ec:fd:21:7e:0c:26:cf:0e: 54:52:4d:3c:4f:82:55:18:89:a9:9c:54:df:cf:80:ae:a0:a2: 48:81:b1:a2:d7:53:65:38:d4:12:be:bf:35:6b:39:10:ce:54: 56:28:e7:26:ef:04:13:55:4a:65:60:12:47:c4:51:bd:17:c3: 4f:f0:2b:ed:0d:5e:d4:b9:a3:af:3a:32:2b:e8:b4:1f:50:25: cb:33:55:ff:7f:02:3b:9f:26:2a:81:3f:69:06:c2:d2:c7:fb: 10:bd:17:1a:33:3f:ff:f0:55:d0:ac:a6:88:91:78:ad:08:22: a1:e6:75:c2:be:6e:8f:f8:bd:3e:f2:f2:a4:ce:32:db:e9:97: 5c:c0:f9:95:97:14:62:ad:c2:87:ad:1b:9d:d0:cf:0b:16:98: 40:ad:fb:fc:10:f9:ce:35:41:48:0b:6f:41:e4:71:5d:ba:88: 7c:02:60:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKEI4MzIwNUI5QjJDNzQwNjNFMzc2RjM3MTE1ODM5NzA1 RURCQkVDRDgwHhcNMjUwODIzMDExMTIyWhcNMjUwODMwMDExMTIyWjAYMRYwFAYD VQQDEw02OGE5MTUzYS1kZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQyXBPc5nZvDAyI+vCrZ9NGdf4ocHrxSbSwQ0ByiVPM6hA29rRHAsxCf/Iru fcT5SnUrymRQKiCmLV5wakCcaKgVdA2Ge7NOXmFG3IrJ155gdLKvycPkLRxK0kxM OfuTR2gpxmcRY3/1T5QgMiXNnprGIfgmRWRH5GaKeKCJdtm6Kty9kF6L8oIJ+CJ6 qCoXCArvztAdVVEhD9Ge6b8s5p9gRneObvCTbuqfFcl4zN1Ef+VZMirnG0IbA879 Nc40EKCjhBr2ryNWhuMvn4vBCKR43lX0de+iQPZ+kHy6UqhTNcFyWY4sbdv5BAMW j6kpmzKw+8K+ViD0PaITxGhTJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0D6qW/ nGrDMLl3NvMmC1W8KmLBMB8GA1UdIwQYMBaAFLgyBbmyx0Bj43bzcRWDlwXtu+zY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC81OUZCQTJCMkM0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi91RElGdWJMSFFHUGpkdk54RllPWEJlMjc3 TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3VESUZ1YkxIUUdQamR2TnhGWU9YQmUyNzdOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC81OUZCQTJCMkM0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi91RElGdWJMSFFH UGpkdk54RllPWEJlMjc3TmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS7mwp44hCKqzCRCdsHZwwz8Ulj9pnCn0Z/ECNONCZ64Cnd3hHhkPj bLT3QfjCI8nhr4YTOeM/OgQlDWFQwkY3zoEyk6SbnPopLOJzKI0awiU+7P0hfgwm zw5UUk08T4JVGImpnFTfz4CuoKJIgbGi11NlONQSvr81azkQzlRWKOcm7wQTVUpl YBJHxFG9F8NP8CvtDV7UuaOvOjIr6LQfUCXLM1X/fwI7nyYqgT9pBsLSx/sQvRca Mz//8FXQrKaIkXitCCKh5nXCvm6P+L0+8vKkzjLb6ZdcwPmVlxRircKHrRud0M8L FphArfv8EPnONUFIC29B5HFduoh8AmBy -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:04 2025 by rpki-client