$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft File: uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft (raw, json) Hash identifier: fLC9mtEaE2Ui9vGmgiszNUb2s7PffWgqqFCS+whtt7s= Subject key identifier: AE:FF:8E:0E:DD:9E:8F:C4:2A:4B:09:A4:18:A7:DC:E5:16:09:3A:24 Authority key identifier: BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44 Certificate issuer: /CN=A9154388/serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft Manifest number: 86 Signing time: Thu 03 Jul 2025 06:47:30 +0000 Manifest this update: Thu 03 Jul 2025 06:47:29 +0000 Manifest next update: Thu 10 Jul 2025 06:47:29 +0000 Files and hashes: 1: uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl (hash: p1Ab8W8b790gSMc4VFyXpATwG9O1lSQRhNj7ufqvUFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154388, serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044 Validity Not Before: Jul 3 06:47:29 2025 GMT Not After : Jul 10 06:47:29 2025 GMT Subject: CN=68662781-7075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:3b:d8:d7:11:7e:4e:c2:aa:a1:80:b6:5a: c9:61:ef:ec:fb:1e:0e:1f:ee:08:43:3d:e9:b9:6c: 95:77:48:72:67:cd:2e:20:98:f3:f2:4b:3f:2d:22: 0e:f2:49:16:63:33:84:1e:ac:98:e6:11:04:31:97: 69:ab:c6:d7:83:f0:61:4f:10:b5:91:ed:6a:98:b5: 18:45:a8:34:7f:41:4c:80:7b:d5:ac:2c:e7:46:34: 3e:61:59:12:ce:75:7e:0c:e8:0c:95:e8:e9:fe:72: 89:69:07:3f:f2:a7:f1:38:f1:48:24:7d:f6:06:fc: 91:c1:a8:41:b5:a5:cd:d6:05:f9:f4:4b:ae:1a:90: 5a:ec:77:50:dd:f9:6b:b9:e0:2a:8c:69:e3:5a:07: 35:7b:9d:9f:fe:e1:29:02:c8:68:84:c6:c9:77:a7: 1f:c6:c8:22:8c:3a:e4:7c:2d:fb:34:b2:9c:30:f8: 2d:bb:c9:3b:92:93:16:48:f8:f0:80:4d:dd:2e:ea: b7:a1:79:99:d1:03:c4:c0:59:cd:ca:af:20:33:d6: d9:4c:ad:32:2b:b2:0c:d8:91:1b:61:90:ba:19:94: 10:e0:fe:d8:3e:76:e6:67:ba:e2:65:b5:16:13:c4: 3d:58:72:a5:4d:c8:39:47:f5:11:28:60:74:2a:38: 38:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FF:8E:0E:DD:9E:8F:C4:2A:4B:09:A4:18:A7:DC:E5:16:09:3A:24 X509v3 Authority Key Identifier: keyid:BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:69:d8:2e:71:ff:67:d8:28:97:47:e2:f1:ba:6b:ab:d5:17: f1:2c:83:67:72:87:a8:4b:13:b3:98:3f:73:eb:78:0b:c3:1a: 8c:a2:e9:5a:db:dc:f3:df:6c:f1:a1:ac:18:99:58:6d:98:0f: ab:98:71:06:f1:8a:5e:2e:c5:45:4d:24:fa:1e:d1:1d:30:71: 32:e1:c1:68:56:97:75:30:43:d0:d0:a1:d4:97:4c:e4:27:bb: 66:5c:89:1a:4c:2a:c9:ea:d4:a2:c8:f9:48:7b:ea:37:25:e0: 18:db:63:bd:3d:ec:d1:91:fc:19:18:11:40:7d:cb:c4:47:5a: 8a:74:5f:01:af:47:13:a5:18:c6:3a:46:4e:42:13:3e:35:33: ea:83:88:7e:8c:10:e7:c0:73:30:a6:51:2b:47:73:dc:85:21: 72:31:99:16:f7:84:68:2f:1d:cc:31:de:84:dc:2e:88:ba:47: af:25:8c:7e:b6:ad:c8:05:51:01:fc:6a:39:68:4e:52:0b:de: df:68:fb:4d:e6:86:17:a7:ee:da:76:8d:79:ed:41:04:86:e7: 41:c4:26:89:62:a2:e9:ce:c8:fd:f5:7d:f0:63:e8:a6:84:17: 66:93:da:77:6a:20:5b:46:cc:a1:cd:85:af:c4:9e:70:6b:1c: 4f:6b:fa:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzODgxMTAvBgNVBAUTKEJCMkEwRjQ5MzIxRTA4MEIyMjcwQkQwQzhEOUI4RDRC NzkzQjEwNDQwHhcNMjUwNzAzMDY0NzI5WhcNMjUwNzEwMDY0NzI5WjAYMRYwFAYD VQQDEw02ODY2Mjc4MS03MDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfU72NcRfk7CqqGAtlrJYe/s+x4OH+4IQz3puWyVd0hyZ80uIJjz8ks/LSIO 8kkWYzOEHqyY5hEEMZdpq8bXg/BhTxC1ke1qmLUYRag0f0FMgHvVrCznRjQ+YVkS znV+DOgMlejp/nKJaQc/8qfxOPFIJH32BvyRwahBtaXN1gX59EuuGpBa7HdQ3flr ueAqjGnjWgc1e52f/uEpAshohMbJd6cfxsgijDrkfC37NLKcMPgtu8k7kpMWSPjw gE3dLuq3oXmZ0QPEwFnNyq8gM9bZTK0yK7IM2JEbYZC6GZQQ4P7YPnbmZ7riZbUW E8Q9WHKlTcg5R/URKGB0Kjg4AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7/jg7d no/EKksJpBin3OUWCTokMB8GA1UdIwQYMBaAFLsqD0kyHggLInC9DI2bjUt5OxBE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM4OC8zODQ1N0NGNjhD MzcxMUVGODA5MDFDMkVDNEY5QUUwMi91eW9QU1RJZUNBc2ljTDBNalp1TlMzazdF RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3V5b1BTVEllQ0FzaWNMME1qWnVOUzNrN0VFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM4OC8zODQ1N0NGNjhDMzcxMUVGODA5MDFDMkVDNEY5QUUwMi91eW9QU1RJZUNB c2ljTDBNalp1TlMzazdFRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCradgucf9n2CiXR+Lxumur1RfxLINncoeoSxOzmD9z63gLwxqMoula 29zz32zxoawYmVhtmA+rmHEG8YpeLsVFTST6HtEdMHEy4cFoVpd1MEPQ0KHUl0zk J7tmXIkaTCrJ6tSiyPlIe+o3JeAY22O9PezRkfwZGBFAfcvER1qKdF8Br0cTpRjG OkZOQhM+NTPqg4h+jBDnwHMwplErR3PchSFyMZkW94RoLx3MMd6E3C6IukevJYx+ tq3IBVEB/Go5aE5SC97faPtN5oYXp+7ado157UEEhudBxCaJYqLpzsj99X3wY+im hBdmk9p3aiBbRsyhzYWvxJ5waxxPa/pe -----END CERTIFICATE-----Generated at Fri Jul 4 11:23:17 2025 by rpki-client