$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft File: UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json) Hash identifier: e8s9Exwka6ncfpF29QZhQ+RWNEHDzgdgwWZo58XDbN8= Subject key identifier: D3:24:23:80:DD:54:62:16:BD:EC:D0:35:5D:BB:AA:5C:55:26:64:40 Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft Manifest number: 0201 Signing time: Sat 23 Aug 2025 02:25:58 +0000 Manifest this update: Sat 23 Aug 2025 02:25:58 +0000 Manifest next update: Sat 30 Aug 2025 02:25:58 +0000 Files and hashes: 1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: PePsykU33i5VneNJmxDan2mAX0Y1LrMqLrNW2qk7gd8=) 2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: h7PFINLKglbbD51solfuF7q/5uroEa7Bk3jUBzQnwh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE, serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Validity Not Before: Aug 23 02:25:58 2025 GMT Not After : Aug 30 02:25:58 2025 GMT Subject: CN=68a926b6-7626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:41:ff:b9:42:80:55:3a:38:ad:c8:9d:b7: 52:e3:60:b9:29:ef:aa:a1:29:a9:e1:db:67:06:12: 87:ee:9d:c4:9c:46:bc:f2:88:28:8a:95:1d:fd:96: 34:11:62:4a:78:4c:06:01:77:5c:8a:0c:95:18:aa: 19:ab:2a:69:2b:29:83:6b:40:e4:06:72:86:af:57: 3e:46:a0:eb:89:cb:e8:12:db:23:a9:bd:6d:36:a0: 66:de:61:48:77:d8:f6:20:b6:a8:1c:5a:ec:93:6a: 59:a8:18:7c:dd:83:54:80:00:67:65:06:00:8d:e8: 56:5e:32:bf:a7:9e:0c:95:3e:50:b4:00:13:87:46: 14:ed:11:23:27:7b:82:c3:23:7c:01:a5:6e:77:9a: 84:da:46:f0:32:20:ab:4b:44:52:29:3a:88:0c:f8: d2:22:2a:62:6f:3c:7d:48:c3:34:7c:c6:c1:26:fd: 47:79:d5:c9:9c:18:98:10:3a:05:7b:a0:41:11:02: ec:4e:72:75:22:2a:5a:e8:cd:9e:cd:cc:71:81:75: f4:08:3c:b1:0a:02:a0:ad:3b:a8:6b:71:84:d8:a3: 6b:ab:ca:57:95:57:04:ec:7c:ee:a7:4b:00:15:df: 31:d1:a9:a2:23:5d:f9:97:75:ca:52:df:37:a7:98: 70:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:24:23:80:DD:54:62:16:BD:EC:D0:35:5D:BB:AA:5C:55:26:64:40 X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:40:9a:30:a8:e1:e5:55:bc:09:ab:96:16:3b:da:fc:6e:a0: f1:05:71:5c:fd:25:9e:43:46:08:de:37:7d:61:55:12:64:3c: cd:a8:1f:ba:62:a2:31:b7:44:c4:0b:29:00:78:e9:60:d1:db: cc:3c:71:4b:a1:f1:65:41:66:1f:6d:4d:ae:e4:ab:1b:2f:79: f9:58:1a:86:67:f3:f2:cf:db:c6:29:4d:c3:0c:81:72:a7:a2: 8f:ab:85:2e:1b:55:cd:09:a1:d0:31:98:a6:6c:9e:8f:66:65: df:28:51:74:a1:c9:3e:3a:84:b6:4e:56:c2:0f:96:0c:a9:8e: d3:85:10:72:a5:8d:6d:67:12:0a:22:e0:c2:e9:a5:ec:07:b6: 49:5d:9d:35:bc:87:e5:2a:07:e1:11:c6:57:42:7c:5b:bd:9c: 2d:a6:9d:92:54:25:b6:7b:66:b4:24:8c:e0:4c:94:46:1f:6a: c2:c0:ba:f7:95:55:a3:21:b3:86:ca:f7:75:d4:21:68:a9:ca: 60:1c:5e:ec:61:f8:ae:5f:38:2e:a9:b2:7d:df:f9:c1:b3:bf: 28:62:52:5c:3a:cb:e5:e3:1f:d3:72:2f:e1:71:ac:fd:77:2a: 4c:b8:eb:c7:19:94:27:5c:0d:94:bd:39:ca:86:2f:5a:63:83: 1f:e1:38:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjUwODIzMDIyNTU4WhcNMjUwODMwMDIyNTU4WjAYMRYwFAYD VQQDEw02OGE5MjZiNi03NjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqlB/7lCgFU6OK3InbdS42C5Ke+qoSmp4dtnBhKH7p3EnEa88ogoipUd/ZY0 EWJKeEwGAXdcigyVGKoZqyppKymDa0DkBnKGr1c+RqDricvoEtsjqb1tNqBm3mFI d9j2ILaoHFrsk2pZqBh83YNUgABnZQYAjehWXjK/p54MlT5QtAATh0YU7REjJ3uC wyN8AaVud5qE2kbwMiCrS0RSKTqIDPjSIipibzx9SMM0fMbBJv1HedXJnBiYEDoF e6BBEQLsTnJ1Iipa6M2ezcxxgXX0CDyxCgKgrTuoa3GE2KNrq8pXlVcE7Hzup0sA Fd8x0amiI135l3XKUt83p5hwgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMkI4Dd VGIWvezQNV27qlxVJmRAMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlCRS82RkNGQjg2NjZCQjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZX UHJXTW42ZFpLaHZZQmJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeQJowqOHlVbwJq5YWO9r8bqDxBXFc/SWeQ0YI3jd9YVUSZDzNqB+6 YqIxt0TECykAeOlg0dvMPHFLofFlQWYfbU2u5KsbL3n5WBqGZ/Pyz9vGKU3DDIFy p6KPq4UuG1XNCaHQMZimbJ6PZmXfKFF0ock+OoS2TlbCD5YMqY7ThRBypY1tZxIK IuDC6aXsB7ZJXZ01vIflKgfhEcZXQnxbvZwtpp2SVCW2e2a0JIzgTJRGH2rCwLr3 lVWjIbOGyvd11CFoqcpgHF7sYfiuXzguqbJ93/nBs78oYlJcOsvl4x/Tci/hcaz9 dypMuOvHGZQnXA2UvTnKhi9aY4Mf4Ti/ -----END CERTIFICATE-----Generated at Sun Aug 24 05:01:19 2025 by rpki-client