$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft File: Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft (raw, json) Hash identifier: t1c+QBYLZ9OG/w5t9AyAFqeDenGisvxED5hZMw6tc4M= Subject key identifier: FD:D1:C0:14:FD:50:93:38:0A:D6:B5:F8:41:88:01:24:AE:2E:31:36 Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E Certificate issuer: /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft Manifest number: 01FE Signing time: Sat 23 Aug 2025 02:36:23 +0000 Manifest this update: Sat 23 Aug 2025 02:36:22 +0000 Manifest next update: Sat 30 Aug 2025 02:36:22 +0000 Files and hashes: 1: Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl (hash: vgIeKht4KPeemKY2jNhYC5apOCZ4++FnVbXI2PcPtCI=) 2: 2F38972E672B11EEBA84E00CC4F9AE02.roa (hash: F2m4EZaWhb+L+raUozQ7KqaAu1awnSWg4wSyn9tXN5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CDC4, serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Validity Not Before: Aug 23 02:36:22 2025 GMT Not After : Aug 30 02:36:22 2025 GMT Subject: CN=68a92926-d3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:c5:74:e0:a0:66:81:cd:49:67:22:ce:67: 85:08:b3:aa:66:e7:b0:b3:58:4b:c8:85:47:b6:71: cd:6c:1a:84:f1:6d:12:1f:8e:a8:3e:fc:c4:34:1e: f5:72:2c:2e:11:7d:f7:b9:88:3e:e8:d0:fd:04:9a: 34:80:ee:36:51:c3:1d:6b:8b:e4:ad:5b:ab:c6:5d: da:9c:10:1b:fc:5d:ae:19:ba:f3:b3:30:42:f8:fe: 09:b4:26:25:a5:dd:8d:fe:28:9c:fc:b3:fc:20:04: 95:75:c2:c9:7a:e3:44:24:09:bd:cf:d9:f1:16:d5: e6:ef:92:5f:f7:3e:00:46:75:10:49:7b:f8:74:29: 5a:8e:9d:a0:7f:4a:f6:d5:6d:04:f8:d4:8f:0c:3a: 01:75:eb:79:77:5c:13:ec:46:a0:f1:56:96:31:d5: 79:0e:d7:a0:1f:6c:23:65:3f:0c:6e:90:ee:dc:7f: 3b:b5:cd:ed:6b:5f:5a:4b:48:8e:e5:b0:9d:9b:07: 6a:d1:61:89:b0:9e:97:cc:16:4c:fd:af:d9:8a:b4: 6a:82:48:7d:a5:df:39:b6:24:83:2d:4b:36:c7:dd: aa:61:f4:82:5e:3e:5a:8a:18:be:ef:19:b4:b3:9a: 9f:ad:31:87:7c:a1:a5:31:f3:b0:65:dc:19:ac:30: e4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D1:C0:14:FD:50:93:38:0A:D6:B5:F8:41:88:01:24:AE:2E:31:36 X509v3 Authority Key Identifier: keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:d1:0b:e8:31:81:68:c4:75:e2:3c:92:e3:9b:21:99:f1:10: f9:04:5f:bb:75:98:b3:76:8d:be:53:ec:47:a0:15:20:d6:6d: 26:35:76:c3:33:52:e5:c7:e4:ae:d3:d1:2e:90:b2:27:08:e6: 4f:9e:25:89:c0:d0:bf:07:3d:91:93:0a:dd:27:35:73:a0:79: dc:d6:21:be:d3:d8:00:ec:6f:57:b3:e0:70:56:f2:9d:42:19: ec:d1:66:64:d2:5b:34:5f:fd:49:d3:0d:59:5b:53:d6:5a:63: 3d:aa:da:df:d0:4b:b9:8d:94:8b:f5:91:06:57:71:e6:36:52: 6a:60:18:24:95:70:ff:1f:48:7d:72:06:7d:f5:83:22:c1:74: 38:73:fa:c0:52:3a:c5:60:35:49:d7:eb:28:3d:1f:e5:29:1c: 3e:54:06:fb:89:2c:0c:17:af:9d:64:96:56:f6:4d:19:66:ca: ba:49:7d:cb:a5:7b:5a:fb:e9:c3:a8:f2:9d:de:44:d3:3b:8b: fd:20:79:ea:23:fe:0e:a4:f1:54:d6:58:bf:da:bf:17:a9:65: 13:0e:72:cd:a9:ce:24:03:14:27:47:97:e7:62:04:c1:8e:c3: 97:71:34:d8:ea:e8:37:1d:81:a9:60:ce:6f:b3:38:3d:b3:ea: 91:2b:28:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NEQzQxMTAvBgNVBAUTKDUyOEY2RUNFMDgyQkVCM0REMEE2NkQ5MTQ3M0ZDQzY1 NjlDRDVGNEUwHhcNMjUwODIzMDIzNjIyWhcNMjUwODMwMDIzNjIyWjAYMRYwFAYD VQQDEw02OGE5MjkyNi1kM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKrFdOCgZoHNSWcizmeFCLOqZuews1hLyIVHtnHNbBqE8W0SH46oPvzENB71 ciwuEX33uYg+6ND9BJo0gO42UcMda4vkrVurxl3anBAb/F2uGbrzszBC+P4JtCYl pd2N/iic/LP8IASVdcLJeuNEJAm9z9nxFtXm75Jf9z4ARnUQSXv4dClajp2gf0r2 1W0E+NSPDDoBdet5d1wT7Eag8VaWMdV5DtegH2wjZT8MbpDu3H87tc3ta19aS0iO 5bCdmwdq0WGJsJ6XzBZM/a/ZirRqgkh9pd85tiSDLUs2x92qYfSCXj5aihi+7xm0 s5qfrTGHfKGlMfOwZdwZrDDkZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3RwBT9 UJM4Cta1+EGIASSuLjE2MB8GA1UdIwQYMBaAFFKPbs4IK+s90KZtkUc/zGVpzV9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0RDNC9GODQ4NUY2Njgw Q0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6M1FwbTJSUnpfTVpXbk5Y MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvOXV6Z2dyNnozUXBtMlJSel9NWlduTlgwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0RDNC9GODQ4NUY2NjgwQ0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6 M1FwbTJSUnpfTVpXbk5YMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp0QvoMYFoxHXiPJLjmyGZ8RD5BF+7dZizdo2+U+xHoBUg1m0mNXbD M1Llx+Su09EukLInCOZPniWJwNC/Bz2RkwrdJzVzoHnc1iG+09gA7G9Xs+BwVvKd Qhns0WZk0ls0X/1J0w1ZW1PWWmM9qtrf0Eu5jZSL9ZEGV3HmNlJqYBgklXD/H0h9 cgZ99YMiwXQ4c/rAUjrFYDVJ1+soPR/lKRw+VAb7iSwMF6+dZJZW9k0ZZsq6SX3L pXta++nDqPKd3kTTO4v9IHnqI/4OpPFU1li/2r8XqWUTDnLNqc4kAxQnR5fnYgTB jsOXcTTY6ug3HYGpYM5vszg9s+qRKyha -----END CERTIFICATE-----Generated at Sun Aug 24 00:02:57 2025 by rpki-client