$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json) Hash identifier: Fk1u9iZ0tM8vAD1Pzrp4z8PsrLdq4yTiy008tIiQpUs= Subject key identifier: 6F:91:FB:88:DD:51:34:CF:40:52:F2:CE:BE:0D:85:2A:BC:0A:A4:5B Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 08DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft Manifest number: 193E Signing time: Wed 02 Jul 2025 17:33:07 +0000 Manifest this update: Wed 02 Jul 2025 17:33:06 +0000 Manifest next update: Wed 09 Jul 2025 17:33:06 +0000 Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: IivFp+RKELpdto1VshE+9OB37dDiR5xwasiMuTsbMis=) 2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: mtUL6kpWcJ0s0WYAq9l26D9HLDGvLgZ5GCmZqFRcyjs=) 3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: F8NUI5IF7FjRVcKD/tqhJ5Q4QNzh0QGai7XMrRHjkus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2271 (0x8df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Jul 2 17:33:06 2025 GMT Not After : Jul 9 17:33:06 2025 GMT Subject: CN=68656d52-f8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:08:f5:e8:01:cf:5b:19:ce:b9:f6:16:d3: 93:56:7f:ff:13:d0:bc:eb:af:50:65:75:c8:c1:a4: 0d:2d:c3:c8:9c:ca:f2:f8:79:0b:40:08:1f:fe:52: 3c:53:f5:71:2a:c5:0b:c6:71:ac:16:66:7c:e4:1f: 5d:ba:b1:5f:61:c7:f4:35:61:b7:1a:c6:5b:f3:fd: 71:4c:ea:c6:48:07:c5:fe:3c:46:74:86:b8:3a:11: 76:fc:1a:d9:cf:93:80:92:f1:21:75:78:35:63:82: 8a:e2:c2:ba:02:b2:64:31:dd:94:d8:ed:7c:06:f1: 98:3b:d0:49:1e:47:ff:c2:82:b3:b8:cf:b0:ff:2a: 28:f2:c1:e5:83:82:91:7e:e6:8f:e1:17:c4:cf:e9: 27:72:53:7a:6f:fc:93:3d:b2:0e:a2:b7:d2:f3:e1: 6d:f0:c3:3a:cd:3e:be:3a:79:21:a2:4a:e6:5b:57: bc:3c:6f:4d:9c:cd:64:0e:fa:f3:0b:1c:d3:84:f6: 45:54:c9:68:c9:60:e9:18:2f:15:5c:05:89:32:6f: bd:73:fc:29:11:25:66:84:c0:bf:11:3f:67:31:71: 3d:3a:ce:7c:5a:c4:3d:4d:86:e0:3f:90:6f:94:58: 27:a3:a3:a0:bc:9f:24:3a:7b:6b:4e:49:f6:71:f2: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:91:FB:88:DD:51:34:CF:40:52:F2:CE:BE:0D:85:2A:BC:0A:A4:5B X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3c:9c:c3:17:73:a1:67:a7:2d:4b:50:2c:f9:b9:cc:e0:3e: 02:b1:18:ed:59:02:22:09:3b:35:3d:ec:e2:c5:a9:66:1c:ac: 0e:8c:92:50:9b:0e:33:80:dd:37:f0:b7:4a:99:28:6a:83:6d: 3d:ef:a3:e3:9c:0e:f4:5c:92:1f:65:48:36:58:b2:f4:7d:0c: 02:8f:5d:81:6b:11:7f:ad:3c:06:cf:ef:cd:84:76:85:f9:ce: 24:f9:cb:c6:b9:b3:83:56:f8:7a:a8:f9:32:d9:1a:32:6d:d3: 4a:b0:b6:61:2c:90:74:26:b2:30:2b:2c:4e:95:a9:ba:4f:00: 6b:7f:83:32:50:b2:6a:76:3b:de:3e:c6:2a:ab:99:b8:44:95: 8c:fc:cb:ce:3a:b5:1e:9c:47:c4:c8:51:22:36:16:f7:0d:a9: ba:94:49:8f:e7:be:d8:c6:64:dc:f4:e4:d0:82:66:97:02:3b: 13:e4:20:42:d4:eb:fd:64:20:97:dd:ab:01:5c:fa:37:66:a5: e0:0d:f4:0c:36:91:9c:3d:10:dc:18:f3:42:ee:1c:e4:34:1c: 9c:12:f4:0f:f4:16:af:75:19:5f:2c:f7:6b:b3:75:fb:8a:52: 8d:38:dd:42:ee:af:ba:08:85:e9:eb:3b:76:34:27:cd:dd:92: ac:11:89:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjUwNzAyMTczMzA2WhcNMjUwNzA5MTczMzA2WjAYMRYwFAYD VQQDEw02ODY1NmQ1Mi1mOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1J4I9egBz1sZzrn2FtOTVn//E9C8669QZXXIwaQNLcPInMry+HkLQAgf/lI8 U/VxKsULxnGsFmZ85B9durFfYcf0NWG3GsZb8/1xTOrGSAfF/jxGdIa4OhF2/BrZ z5OAkvEhdXg1Y4KK4sK6ArJkMd2U2O18BvGYO9BJHkf/woKzuM+w/yoo8sHlg4KR fuaP4RfEz+knclN6b/yTPbIOorfS8+Ft8MM6zT6+OnkhokrmW1e8PG9NnM1kDvrz CxzThPZFVMloyWDpGC8VXAWJMm+9c/wpESVmhMC/ET9nMXE9Os58WsQ9TYbgP5Bv lFgno6OgvJ8kOntrTkn2cfJelwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+R+4jd UTTPQFLyzr4NhSq8CqRbMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa NF96Y01uUDAwWTAtTUVYY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoPJzDF3OhZ6ctS1As+bnM4D4CsRjtWQIiCTs1PezixalmHKwOjJJQ mw4zgN038LdKmShqg20976PjnA70XJIfZUg2WLL0fQwCj12BaxF/rTwGz+/NhHaF +c4k+cvGubODVvh6qPky2RoybdNKsLZhLJB0JrIwKyxOlam6TwBrf4MyULJqdjve PsYqq5m4RJWM/MvOOrUenEfEyFEiNhb3Dam6lEmP577YxmTc9OTQgmaXAjsT5CBC 1Ov9ZCCX3asBXPo3ZqXgDfQMNpGcPRDcGPNC7hzkNBycEvQP9BavdRlfLPdrs3X7 ilKNON1C7q+6CIXp6zt2NCfN3ZKsEYkY -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:05 2025 by rpki-client