$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json) Hash identifier: sZVOJFir6Gi8gWCA8oRLXbTU06UFp+5MOAiBUmxHRBU= Subject key identifier: 9C:8F:FA:E8:C0:96:36:EB:60:29:B9:50:56:38:B4:80:53:86:B5:B8 Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft Manifest number: C2 Signing time: Sat 23 Aug 2025 05:56:24 +0000 Manifest this update: Sat 23 Aug 2025 05:56:23 +0000 Manifest next update: Sat 30 Aug 2025 05:56:23 +0000 Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: 3Uurz57l26mg9B+R+usmixOeTJMJsUMrxouU4/8xq5s=) 2: 27995372566911EF9D53B517C4F9AE02.roa (hash: xq/tIHChRUQ/SVgEnorDvzsCIu9u4UcNJR+//ggbghs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Validity Not Before: Aug 23 05:56:23 2025 GMT Not After : Aug 30 05:56:23 2025 GMT Subject: CN=68a95807-c58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:77:08:63:01:5c:9f:f4:68:dc:f8:29:7d:fa: 1b:8c:c9:a5:1d:68:cc:b5:0c:a2:0f:da:15:91:a2: 07:10:9f:84:42:55:4e:d8:0f:07:86:0d:fa:d8:19: 79:6f:90:9f:26:8b:35:0a:8f:99:aa:54:3c:0e:1c: 5b:7f:81:1c:f9:0f:10:0c:62:74:79:89:00:e0:4a: f1:f9:3b:6a:99:1a:15:e2:51:00:cd:c3:aa:6c:51: 15:18:83:7b:b8:28:d6:a7:f7:76:f6:95:97:ad:12: 7f:59:00:86:af:48:e5:51:7f:0e:98:0e:9e:12:f3: 86:4c:eb:e1:14:9d:11:71:be:17:da:e5:4d:f4:cb: ec:fd:61:d7:24:7f:ad:7b:53:aa:06:9f:d1:22:66: a1:9e:b3:a4:f3:2a:0c:1f:af:76:a2:a8:0a:ce:fe: 7e:ab:ac:3b:c3:e2:3e:06:c4:59:3e:f6:3b:f0:94: c5:39:ba:38:ee:dd:88:10:6f:25:b9:f3:f8:69:ba: 9b:b6:d3:22:79:2e:5b:ce:00:58:9e:d1:b9:82:82: 59:aa:78:53:ed:2b:ae:15:fa:68:c6:e5:07:40:87: 32:30:08:12:af:d6:eb:a5:fe:cb:87:e9:a9:1e:0c: 40:b9:35:2d:b9:4c:4f:6c:d6:2d:1e:f9:e5:e8:5c: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8F:FA:E8:C0:96:36:EB:60:29:B9:50:56:38:B4:80:53:86:B5:B8 X509v3 Authority Key Identifier: keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5a:01:73:fb:b6:d4:45:fd:e8:e5:ea:39:f2:18:2d:2a:5a: ee:8f:52:59:29:e4:91:d4:92:ad:c1:71:9e:73:84:ee:e5:e9: 0a:a8:0c:23:62:14:9c:fb:be:e6:86:f0:35:f4:c9:89:fd:f1: ee:fb:4d:d7:82:7f:02:d2:a7:22:89:8f:c2:dd:4c:09:8f:fc: 0e:0c:55:9a:d2:c1:26:9e:16:d2:ad:8e:fc:05:c1:4e:1c:7d: 89:38:65:6f:95:06:92:31:d2:74:56:af:55:f3:84:77:2d:b5: dc:3a:ef:30:3a:d2:36:6d:76:08:18:41:16:18:5a:12:b2:d5: 15:46:49:f5:54:fa:e9:38:78:0c:4d:a1:15:f3:5a:a3:1d:a4: 87:b8:17:c9:9c:31:b7:1f:b3:ec:b3:aa:ac:29:5b:6a:83:75: 39:7f:20:29:37:25:5c:77:1c:8c:5f:6a:2e:94:51:3b:45:3f: 4b:ca:de:5e:3e:3c:9e:3c:49:a1:1b:24:f0:8b:31:d4:4d:3e: b5:a4:fb:84:d3:e0:b6:fe:5f:c6:f2:19:b0:1f:14:c5:50:9c: 36:6f:1f:d5:ca:c4:4c:c6:66:2c:75:fb:b4:25:e3:13:7a:78: 58:e0:55:52:13:e1:16:c7:52:d6:c7:fb:27:29:4c:42:75:e7: 9d:92:fc:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKEI5MUEyNENGMDQ3MTExMTdDOEMzQkEyNjRBMzMzOTVE QTc3RjkxQjQwHhcNMjUwODIzMDU1NjIzWhcNMjUwODMwMDU1NjIzWjAYMRYwFAYD VQQDEw02OGE5NTgwNy1jNThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HcIYwFcn/Ro3PgpffobjMmlHWjMtQyiD9oVkaIHEJ+EQlVO2A8Hhg362Bl5 b5CfJos1Co+ZqlQ8Dhxbf4Ec+Q8QDGJ0eYkA4Erx+TtqmRoV4lEAzcOqbFEVGIN7 uCjWp/d29pWXrRJ/WQCGr0jlUX8OmA6eEvOGTOvhFJ0Rcb4X2uVN9Mvs/WHXJH+t e1OqBp/RImahnrOk8yoMH692oqgKzv5+q6w7w+I+BsRZPvY78JTFObo47t2IEG8l ufP4abqbttMieS5bzgBYntG5goJZqnhT7SuuFfpoxuUHQIcyMAgSr9brpf7Lh+mp HgxAuTUtuUxPbNYtHvnl6Fyf1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyP+ujA ljbrYCm5UFY4tIBThrW4MB8GA1UdIwQYMBaAFLkaJM8EcREXyMO6JkozOV2nf5G0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9CODY1QjM3RTU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVSZkl3N29tU2pNNVhhZF9r YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2tiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9CODY1QjM3RTU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVS Zkl3N29tU2pNNVhhZF9rYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeWgFz+7bURf3o5eo58hgtKlruj1JZKeSR1JKtwXGec4Tu5ekKqAwj YhSc+77mhvA19MmJ/fHu+03Xgn8C0qciiY/C3UwJj/wODFWa0sEmnhbSrY78BcFO HH2JOGVvlQaSMdJ0Vq9V84R3LbXcOu8wOtI2bXYIGEEWGFoSstUVRkn1VPrpOHgM TaEV81qjHaSHuBfJnDG3H7Pss6qsKVtqg3U5fyApNyVcdxyMX2oulFE7RT9Lyt5e PjyePEmhGyTwizHUTT61pPuE0+C2/l/G8hmwHxTFUJw2bx/VysRMxmYsdfu0JeMT enhY4FVSE+EWx1LWx/snKUxCdeedkvwV -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:47 2025 by rpki-client