$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json) Hash identifier: MqJyoM2FCHdmASmDl9PbLWwQrFVK+246PBAKJaftjog= Subject key identifier: 14:DB:93:A1:FE:D5:84:D4:08:7C:FD:6D:96:FA:6F:14:DF:FC:11:82 Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft Manifest number: 1972 Signing time: Fri 22 Aug 2025 17:27:48 +0000 Manifest this update: Fri 22 Aug 2025 17:27:47 +0000 Manifest next update: Fri 29 Aug 2025 17:27:47 +0000 Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: eYIxtS1xtrfc7dzJ13n88l8mLQTw2aARFRdk967pal4=) 2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: mtUL6kpWcJ0s0WYAq9l26D9HLDGvLgZ5GCmZqFRcyjs=) 3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: F8NUI5IF7FjRVcKD/tqhJ5Q4QNzh0QGai7XMrRHjkus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Aug 22 17:27:47 2025 GMT Not After : Aug 29 17:27:47 2025 GMT Subject: CN=68a8a893-86fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:5f:1d:af:54:56:d3:28:12:7c:55:d0:1e: ed:8c:29:26:27:d2:11:b6:4e:32:08:91:8f:37:b5: 4c:3b:4e:bf:d6:bf:12:1e:d1:9e:92:0c:5d:0f:35: b2:ba:04:09:e6:6f:d5:58:2f:cf:42:c2:ad:a7:47: b5:34:8c:ec:b3:de:11:46:3f:81:00:f1:fc:2a:96: ec:a3:c9:81:77:99:45:3e:a0:49:ab:f6:cc:9a:b1: df:07:69:77:d4:7f:16:6e:19:3e:d5:51:78:b8:7a: d1:fb:cb:d3:49:ec:32:1b:d9:7a:9e:fb:8a:68:6b: 5c:a4:d4:cf:d5:87:6b:f2:78:85:6f:9e:03:39:3a: 51:95:66:f9:13:2c:39:cb:35:1f:bb:ba:e2:28:2b: e2:d5:9d:8d:1f:b4:ae:7c:5e:b0:f8:bf:32:ce:f0: 85:ea:c6:a0:c2:d9:f1:45:b4:ba:28:5e:66:56:4a: 6a:88:f3:3f:65:02:56:3a:4e:1d:9c:59:f7:c3:6e: 6f:86:ad:8e:21:9a:2d:48:7e:25:fb:5c:65:33:79: cd:54:52:07:c5:a4:00:53:9b:f9:7b:26:7b:cb:33: 70:e9:3d:b3:0c:e7:4c:38:be:3d:f7:99:69:84:a5: 6f:36:10:86:d6:9b:16:25:4a:f6:30:75:6b:61:2a: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DB:93:A1:FE:D5:84:D4:08:7C:FD:6D:96:FA:6F:14:DF:FC:11:82 X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c6:44:7a:a2:5c:93:8d:26:a3:cc:99:05:99:8f:09:5a:70: 80:e6:12:58:01:52:b5:99:25:b6:43:65:81:c5:7e:47:d7:db: fe:c6:56:ec:26:40:d0:a2:77:d4:ed:7e:e3:2b:7f:5a:ae:d0: 74:8d:e4:4e:d6:0d:6f:6c:99:94:23:52:20:c8:93:46:d4:b5: 46:07:03:88:d0:83:2e:80:57:62:c3:a7:ad:4a:0e:11:c4:73: e3:7c:97:3c:5d:97:2d:ac:88:46:f8:eb:69:35:d1:41:c4:f8: b4:ba:5e:31:9b:b2:a4:09:e6:c5:b2:9b:5b:30:05:07:92:94: 22:8d:13:a8:7d:a5:b2:99:dd:c7:42:81:e6:e4:48:3b:e1:29: c3:32:80:5f:3a:dd:18:9d:8b:b5:25:d5:41:57:ce:b9:4d:99: 15:6d:56:e7:47:ae:aa:fe:48:49:12:cf:af:89:a1:8b:74:b9: af:2e:62:9d:3e:c5:46:18:b0:16:c9:d8:3c:75:8c:ca:3c:ae: 5b:a4:e2:66:f4:b6:2d:7a:ec:24:a5:5c:f6:3f:2e:25:7a:ed: c8:e1:5d:7e:2e:eb:29:69:94:b1:b6:d5:8d:5c:ca:7a:15:73: c6:17:8e:64:3e:59:a6:db:72:68:89:a7:03:20:cd:ce:b3:90: c8:1e:f4:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjUwODIyMTcyNzQ3WhcNMjUwODI5MTcyNzQ3WjAYMRYwFAYD VQQDEw02OGE4YTg5My04NmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIpfHa9UVtMoEnxV0B7tjCkmJ9IRtk4yCJGPN7VMO06/1r8SHtGekgxdDzWy ugQJ5m/VWC/PQsKtp0e1NIzss94RRj+BAPH8Kpbso8mBd5lFPqBJq/bMmrHfB2l3 1H8Wbhk+1VF4uHrR+8vTSewyG9l6nvuKaGtcpNTP1Ydr8niFb54DOTpRlWb5Eyw5 yzUfu7riKCvi1Z2NH7SufF6w+L8yzvCF6sagwtnxRbS6KF5mVkpqiPM/ZQJWOk4d nFn3w25vhq2OIZotSH4l+1xlM3nNVFIHxaQAU5v5eyZ7yzNw6T2zDOdMOL4995lp hKVvNhCG1psWJUr2MHVrYSpvKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTbk6H+ 1YTUCHz9bZb6bxTf/BGCMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa NF96Y01uUDAwWTAtTUVYY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNxkR6olyTjSajzJkFmY8JWnCA5hJYAVK1mSW2Q2WBxX5H19v+xlbs JkDQonfU7X7jK39artB0jeRO1g1vbJmUI1IgyJNG1LVGBwOI0IMugFdiw6etSg4R xHPjfJc8XZctrIhG+OtpNdFBxPi0ul4xm7KkCebFsptbMAUHkpQijROofaWymd3H QoHm5Eg74SnDMoBfOt0YnYu1JdVBV865TZkVbVbnR66q/khJEs+viaGLdLmvLmKd PsVGGLAWydg8dYzKPK5bpOJm9LYteuwkpVz2Py4leu3I4V1+LuspaZSxttWNXMp6 FXPGF45kPlmm23JoiacDIM3Os5DIHvRw -----END CERTIFICATE-----Generated at Sun Aug 24 07:14:48 2025 by rpki-client