$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft File: ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json) Hash identifier: 3PurTH4CzPa/0exUNWUL0TPdZVUvuQmCWeeMPozzkpo= Subject key identifier: 8A:34:C7:C0:EE:79:A5:2A:79:16:05:3C:32:43:BF:BD:BA:9D:EA:15 Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 Certificate issuer: /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft Manifest number: 60 Signing time: Sat 23 Aug 2025 07:19:11 +0000 Manifest this update: Sat 23 Aug 2025 07:19:11 +0000 Manifest next update: Sat 30 Aug 2025 07:19:11 +0000 Files and hashes: 1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: r5SNv47EGCmf0Q1sUmSJyWCHHKwqp6soL6FK2MPOL3M=) 2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: 97oa3zBzp7Gq4BpVUI5kKb706Ag3AZCc/4WlkzLjgfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Validity Not Before: Aug 23 07:19:11 2025 GMT Not After : Aug 30 07:19:11 2025 GMT Subject: CN=68a96b6f-0147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:eb:a3:b1:11:45:dd:09:f0:b2:9d:99:31: 5d:6f:63:05:a5:d8:5c:28:3f:53:58:fc:28:7a:54: 76:4e:42:fd:85:68:bd:4b:d1:b5:27:50:85:43:54: 8d:98:ef:0b:86:12:46:04:f6:bb:74:7a:83:c0:88: d9:df:9a:ba:78:c2:e7:7e:20:8d:18:81:79:a3:07: 86:fd:04:79:ad:a6:e9:86:12:de:64:b0:91:da:c1: a3:a8:ef:f3:d2:ee:c6:47:6d:00:2a:81:a3:ed:dc: 23:b9:65:7f:d3:42:a5:eb:be:af:7d:cb:4d:42:5d: 5b:82:7b:13:6a:b2:da:12:d2:2e:37:ac:2a:01:0b: 01:5e:9c:15:92:19:39:b5:fd:ac:42:ca:bd:39:58: 21:cc:62:de:f0:9b:39:d3:49:9a:5d:b2:33:ae:0f: 88:22:a8:34:f0:76:cc:de:f0:f3:0d:be:52:d4:75: 26:9a:e4:18:29:38:7a:51:7f:2d:46:b0:9f:f2:33: 67:e1:f9:6b:da:39:93:ed:1f:3f:35:51:84:08:37: 54:39:0c:48:26:09:e9:5a:91:81:ed:97:92:c6:c1: a6:3b:1e:de:e4:1e:a6:ff:1d:ec:6d:75:46:db:3f: 03:c6:da:e1:10:55:60:0c:ea:4a:9f:94:ff:73:13: 1c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:34:C7:C0:EE:79:A5:2A:79:16:05:3C:32:43:BF:BD:BA:9D:EA:15 X509v3 Authority Key Identifier: keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:98:a4:b6:fb:ef:17:44:9a:65:1b:91:80:e4:43:a1:9f:a0: 8f:3f:49:71:37:a5:f8:3f:b4:40:9f:23:6b:2d:03:c7:b4:92: 86:85:fb:a7:07:39:3e:3f:83:ba:f6:00:4b:ba:7e:b6:17:97: e3:1e:72:fc:fb:84:3b:e9:4a:2b:fa:a6:a9:19:c2:7a:ed:3a: c5:1f:59:fb:83:ed:c0:c1:7f:e2:fb:f6:08:dc:e5:38:19:86: 62:e8:8e:c8:c3:98:53:09:4c:ab:ef:7c:91:d1:43:de:2e:1c: 43:3f:26:96:64:b7:4c:3e:f4:17:88:2e:5b:8d:04:83:e2:eb: 61:c7:5e:42:16:f7:e4:fd:89:32:05:3a:57:69:0d:bd:ce:93: 9b:83:88:3d:2f:e8:52:b8:6e:86:9c:6f:ae:e1:ed:d6:70:39: 38:dd:bb:4b:dc:fd:09:dc:85:54:54:45:b1:2c:cf:a4:80:34: 02:d1:53:6f:c0:13:4c:00:e1:50:93:89:ee:43:55:5e:84:77: 7b:ec:39:75:25:d8:c0:23:6d:60:84:69:b2:b6:0e:71:b8:1d: ab:14:aa:d8:10:92:5a:7b:13:6a:2a:68:17:17:de:74:17:a4: 12:0e:d4:76:0f:78:13:86:9f:bd:20:60:0c:dc:1f:3b:ab:bf: 25:4f:43:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDU2MjExMC8GA1UEBRMoQjlGQURDNDFFN0UxRjk3NTZDN0JDOUIzREUzOTcyQ0JG NkNGNjBCNTAeFw0yNTA4MjMwNzE5MTFaFw0yNTA4MzAwNzE5MTFaMBgxFjAUBgNV BAMTDTY4YTk2YjZmLTAxNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrE+ujsRFF3Qnwsp2ZMV1vYwWl2FwoP1NY/Ch6VHZOQv2FaL1L0bUnUIVDVI2Y 7wuGEkYE9rt0eoPAiNnfmrp4wud+II0YgXmjB4b9BHmtpumGEt5ksJHawaOo7/PS 7sZHbQAqgaPt3CO5ZX/TQqXrvq99y01CXVuCexNqstoS0i43rCoBCwFenBWSGTm1 /axCyr05WCHMYt7wmznTSZpdsjOuD4giqDTwdsze8PMNvlLUdSaa5BgpOHpRfy1G sJ/yM2fh+WvaOZPtHz81UYQIN1Q5DEgmCelakYHtl5LGwaY7Ht7kHqb/HextdUbb PwPG2uEQVWAM6kqflP9zExwZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUijTHwO55 pSp5FgU8MkO/vbqd6hUwHwYDVR0jBBgwFoAUufrcQefh+XVse8mz3jlyy/bPYLUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNTYyLzY2QzNDOTdFRURG OTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhWc2U4bXozamx5eV9iUFlM VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZyY1FlZmgtWFZzZThtejNqbHl5X2JQWUxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NTYyLzY2QzNDOTdFRURGOTExRUZBOUNEQTgzOEM0RjlBRTAyL3VmcmNRZWZoLVhW c2U4bXozamx5eV9iUFlMVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFCYpLb77xdEmmUbkYDkQ6GfoI8/SXE3pfg/tECfI2stA8e0koaF+6cH OT4/g7r2AEu6frYXl+Mecvz7hDvpSiv6pqkZwnrtOsUfWfuD7cDBf+L79gjc5TgZ hmLojsjDmFMJTKvvfJHRQ94uHEM/JpZkt0w+9BeILluNBIPi62HHXkIW9+T9iTIF OldpDb3Ok5uDiD0v6FK4boacb67h7dZwOTjdu0vc/QnchVRURbEsz6SANALRU2/A E0wA4VCTie5DVV6Ed3vsOXUl2MAjbWCEabK2DnG4HasUqtgQklp7E2oqaBcX3nQX pBIO1HYPeBOGn70gYAzcHzurvyVPQ9c= -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:56 2025 by rpki-client