$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft File: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json) Hash identifier: MJ165FUpu8bYi10ALLfHBetOvlpRHSgF9PnDzPZCV54= Subject key identifier: BD:9D:5E:5B:C1:B1:1A:49:E9:45:10:6C:84:F6:BB:5B:22:0F:8B:59 Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2 Certificate issuer: /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2 Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft Manifest number: 0911 Signing time: Fri 22 Aug 2025 20:26:06 +0000 Manifest this update: Fri 22 Aug 2025 20:26:06 +0000 Manifest next update: Fri 29 Aug 2025 20:26:06 +0000 Files and hashes: 1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: t0WV4n/5IOxMNCTv0jyYHLLAJqHQhJfpvP3gSQrgdOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16, serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2 Validity Not Before: Aug 22 20:26:06 2025 GMT Not After : Aug 29 20:26:06 2025 GMT Subject: CN=68a8d25e-a820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:46:18:a1:d6:c4:1f:45:61:49:8f:55:e1: 54:4a:05:4c:35:2d:60:64:0f:ae:8d:6c:96:f9:96: 74:85:4f:53:14:30:f3:ee:ae:1e:45:e6:0d:f3:80: 71:d0:30:db:5e:8b:c9:63:a1:25:d9:a8:4c:b0:10: 1e:02:53:cc:02:6b:ee:66:42:74:9d:ac:04:e5:6a: 8b:3c:5d:fc:86:90:e4:e5:4b:8c:07:bb:1d:57:f4: fa:e9:77:f0:87:e7:71:6c:af:6e:da:58:3c:67:a4: 4e:6b:bd:76:ca:22:9a:1c:98:89:f2:cb:f3:1a:57: 92:d1:4e:ae:ec:6a:9b:46:bd:b6:2f:1b:43:75:4e: 54:75:50:1f:bf:47:6b:c1:9e:82:88:d0:66:fb:40: 24:85:36:94:84:1c:00:f0:1e:cb:3c:0e:a1:37:4a: c1:ec:68:14:59:04:fb:ad:1f:44:e6:5c:c2:ce:09: 20:46:54:43:02:d6:f6:5a:a2:77:ee:1d:97:48:15: 16:5c:21:74:ba:d8:59:1a:80:36:0c:f0:37:f5:36: 74:5f:e1:eb:f6:53:21:c3:e1:e1:10:36:86:8a:6f: bb:bd:15:33:70:f3:b9:fc:84:17:a6:10:75:04:42: 04:9a:c2:c7:44:ac:0b:04:82:32:c8:89:6b:8b:fa: 0f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9D:5E:5B:C1:B1:1A:49:E9:45:10:6C:84:F6:BB:5B:22:0F:8B:59 X509v3 Authority Key Identifier: keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:91:17:e0:45:23:49:be:3f:8a:dd:5d:87:5d:cb:fb:dc:15: d7:1d:d7:70:d6:78:9a:24:a3:83:52:f2:22:22:d4:3d:36:75: 25:50:38:a3:5b:17:e7:11:54:5c:03:32:6b:f4:59:06:f6:24: 44:d2:c2:ac:9a:89:7f:52:48:06:ac:65:2a:ad:99:ff:dc:c5: e3:86:35:b1:69:f0:16:99:98:94:85:17:47:a1:21:cf:9e:a9: ba:ee:41:2f:4b:4c:f4:41:a8:14:ee:bc:54:50:89:58:3b:95: d0:be:cb:5c:ae:d6:3e:e0:5c:26:cb:4a:37:4d:61:76:44:a2: f8:b6:ce:2b:a5:cb:a6:23:c6:bb:f1:2e:34:b5:df:c8:bc:69: 0d:96:d8:40:23:4f:eb:4f:fe:7b:b6:a5:93:6a:8c:71:90:07: 35:da:3f:ab:93:51:e9:fe:d3:44:14:29:bc:1a:c1:05:30:2f: 76:78:4e:e0:ce:a1:3e:6c:41:72:31:f0:a5:1f:87:a8:81:01: 36:b0:d1:9e:17:ee:ff:a4:9e:e8:db:49:a0:e3:9f:4e:94:4e: 42:d5:b8:86:ed:ac:3b:8f:04:7a:6b:75:a8:32:7d:52:33:60: f3:a2:0d:5a:d0:0d:38:d4:de:97:4d:a5:c5:5b:39:5a:42:19: a3:1e:7e:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKEI5QTBCRUZGOTJBRjdDREUxOTAwODUwNTJGMUY0RjFG OTJCREE0RjIwHhcNMjUwODIyMjAyNjA2WhcNMjUwODI5MjAyNjA2WjAYMRYwFAYD VQQDEw02OGE4ZDI1ZS1hODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfpGGKHWxB9FYUmPVeFUSgVMNS1gZA+ujWyW+ZZ0hU9TFDDz7q4eReYN84Bx 0DDbXovJY6El2ahMsBAeAlPMAmvuZkJ0nawE5WqLPF38hpDk5UuMB7sdV/T66Xfw h+dxbK9u2lg8Z6ROa712yiKaHJiJ8svzGleS0U6u7GqbRr22LxtDdU5UdVAfv0dr wZ6CiNBm+0AkhTaUhBwA8B7LPA6hN0rB7GgUWQT7rR9E5lzCzgkgRlRDAtb2WqJ3 7h2XSBUWXCF0uthZGoA2DPA39TZ0X+Hr9lMhw+HhEDaGim+7vRUzcPO5/IQXphB1 BEIEmsLHRKwLBIIyyIlri/oPWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2dXlvB sRpJ6UUQbIT2u1siD4tZMB8GA1UdIwQYMBaAFLmgvv+Sr3zeGQCFBS8fTx+SvaTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9ENTA5NEZBNkFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi91YUMtXzVLdmZONFpBSVVGTHg5UEg1Szlw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VhQy1fNUt2Zk40WkFJVUZMeDlQSDVLOXBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9ENTA5NEZBNkFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi91YUMtXzVLdmZO NFpBSVVGTHg5UEg1SzlwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/kRfgRSNJvj+K3V2HXcv73BXXHddw1niaJKODUvIiItQ9NnUlUDij WxfnEVRcAzJr9FkG9iRE0sKsmol/UkgGrGUqrZn/3MXjhjWxafAWmZiUhRdHoSHP nqm67kEvS0z0QagU7rxUUIlYO5XQvstcrtY+4Fwmy0o3TWF2RKL4ts4rpcumI8a7 8S40td/IvGkNlthAI0/rT/57tqWTaoxxkAc12j+rk1Hp/tNEFCm8GsEFMC92eE7g zqE+bEFyMfClH4eogQE2sNGeF+7/pJ7o20mg459OlE5C1biG7aw7jwR6a3WoMn1S M2Dzog1a0A041N6XTaXFWzlaQhmjHn5R -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:03 2025 by rpki-client