$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft File: UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json) Hash identifier: z/JSks63IhDi1jdZUCEthdJ0vp0YDocuhbbIv6Znvxo= Subject key identifier: 6A:59:D9:2A:52:3D:BC:CB:8F:50:FF:54:21:46:BF:1B:D6:FE:86:7A Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 Certificate issuer: /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Certificate serial: 0C17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft Manifest number: 0C10 Signing time: Fri 22 Aug 2025 18:50:58 +0000 Manifest this update: Fri 22 Aug 2025 18:50:58 +0000 Manifest next update: Fri 29 Aug 2025 18:50:58 +0000 Files and hashes: 1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: 9O1+yOcDG3hFEBc3iKRPohE4UqpIO/NpZlHlj8O1AjY=) 2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: 44EICOrdULHxxmbJqfrzipdifGEHemkJ/PfPJGyHNtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3095 (0xc17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Validity Not Before: Aug 22 18:50:58 2025 GMT Not After : Aug 29 18:50:58 2025 GMT Subject: CN=68a8bc12-63f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:a2:c7:4b:24:53:13:1b:29:3c:63:36:c7: 95:64:e4:a4:c4:d9:85:e5:47:e0:85:62:71:19:b7: 51:a9:1e:f1:e4:4d:24:b2:e7:f2:ed:02:f8:67:24: c6:c1:79:6f:5b:d4:a2:92:b4:71:4a:49:06:94:39: 06:0e:b3:3d:d2:0e:84:88:70:cf:85:aa:58:bf:8e: 6e:2f:03:c5:d4:45:3e:8c:aa:02:6a:f1:31:96:13: 52:b7:5a:62:69:cc:7c:41:e4:ca:1f:3b:c3:ab:fd: e9:52:28:71:c3:80:55:7c:5a:18:57:3f:85:2d:3f: ab:d2:37:77:74:a0:aa:9f:97:1f:4a:b1:97:fa:0d: 2b:af:f6:4f:84:67:cc:2d:66:06:a8:b5:5b:83:35: aa:98:ef:5e:d2:98:41:82:5c:29:05:b5:4f:6e:7f: d6:e3:2e:e1:1b:e4:e6:4e:c3:79:28:7a:23:90:68: 0a:b7:3c:b2:3d:f6:26:e2:ee:d7:f8:d8:af:b6:b1: c6:8c:10:fa:12:cb:57:8f:91:e3:c6:ad:7d:87:25: b9:41:d2:ec:91:73:f0:3f:bc:b5:6b:85:96:9a:33: 7f:22:47:a6:cd:62:80:da:5a:e6:bb:ff:64:89:38: 63:df:c9:ff:7e:c4:66:f0:e8:ca:20:76:a6:30:4a: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:59:D9:2A:52:3D:BC:CB:8F:50:FF:54:21:46:BF:1B:D6:FE:86:7A X509v3 Authority Key Identifier: keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:dc:eb:51:7b:b6:1a:a4:16:37:37:91:84:5c:5f:37:7a:cb: 9b:81:23:65:0a:fe:0f:b6:1e:7a:3f:b6:37:6a:f4:d6:d5:a7: 26:03:2d:b1:fd:d2:68:07:a7:5d:25:0a:b4:ab:3a:7d:aa:fd: 53:56:b2:17:08:2d:9f:ed:a9:bb:6f:6a:a0:3d:21:74:af:b6: b0:e6:37:d6:7d:b8:7c:55:38:cb:ce:6d:2e:8f:35:b6:b8:37: d1:51:2d:93:2b:3a:1d:da:fb:91:d6:f0:28:84:06:e5:b6:74: 83:34:88:af:42:67:a4:0f:52:d0:7f:df:94:9d:a4:52:e9:88: 10:a3:d0:6a:29:e4:9d:25:ea:bb:cd:50:04:7d:aa:e3:27:60: 5a:3f:21:d4:96:6c:ec:b7:e4:9f:df:0f:03:28:a1:dd:93:df: 19:3b:68:12:32:03:90:be:68:74:d0:a9:c4:08:44:e2:2a:30: 62:59:f0:27:ae:e1:cb:c9:56:ce:28:fe:52:ec:79:57:36:7a: e1:0a:c9:4c:e6:77:7d:66:26:df:61:50:bc:34:f7:12:d7:46: bd:19:3e:2d:db:fa:cd:c7:d4:65:51:bc:4a:2b:b7:ef:e1:08: 2a:99:0b:b6:56:67:da:c7:01:05:c9:47:23:98:cd:fd:f6:0f: 44:aa:58:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MDMxMTAvBgNVBAUTKDUwN0EwRUFGNDc1MUFDQjUyQzJDN0ZCRjk4MUQxMUJD RTgzNThCQTEwHhcNMjUwODIyMTg1MDU4WhcNMjUwODI5MTg1MDU4WjAYMRYwFAYD VQQDEw02OGE4YmMxMi02M2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6eix0skUxMbKTxjNseVZOSkxNmF5UfghWJxGbdRqR7x5E0ksufy7QL4ZyTG wXlvW9SikrRxSkkGlDkGDrM90g6EiHDPhapYv45uLwPF1EU+jKoCavExlhNSt1pi acx8QeTKHzvDq/3pUihxw4BVfFoYVz+FLT+r0jd3dKCqn5cfSrGX+g0rr/ZPhGfM LWYGqLVbgzWqmO9e0phBglwpBbVPbn/W4y7hG+TmTsN5KHojkGgKtzyyPfYm4u7X +NivtrHGjBD6EstXj5Hjxq19hyW5QdLskXPwP7y1a4WWmjN/IkemzWKA2lrmu/9k iThj38n/fsRm8OjKIHamMEoANwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpZ2SpS PbzLj1D/VCFGvxvW/oZ6MB8GA1UdIwQYMBaAFFB6Dq9HUay1LCx/v5gdEbzoNYuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgwMy9EODZBQkYwMDE3 NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJMVXNMSC1fbUIwUnZPZzFp NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIb09yMGRSckxVc0xILV9tQjBSdk9nMWk2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgwMy9EODZBQkYwMDE3NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJM VXNMSC1fbUIwUnZPZzFpNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW3OtRe7YapBY3N5GEXF83esubgSNlCv4Pth56P7Y3avTW1acmAy2x /dJoB6ddJQq0qzp9qv1TVrIXCC2f7am7b2qgPSF0r7aw5jfWfbh8VTjLzm0ujzW2 uDfRUS2TKzod2vuR1vAohAbltnSDNIivQmekD1LQf9+UnaRS6YgQo9BqKeSdJeq7 zVAEfarjJ2BaPyHUlmzst+Sf3w8DKKHdk98ZO2gSMgOQvmh00KnECETiKjBiWfAn ruHLyVbOKP5S7HlXNnrhCslM5nd9ZibfYVC8NPcS10a9GT4t2/rNx9RlUbxKK7fv 4QgqmQu2VmfaxwEFyUcjmM399g9EqlgU -----END CERTIFICATE-----Generated at Sun Aug 24 04:48:01 2025 by rpki-client