$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft File: UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json) Hash identifier: TxakTErekEyFOuONS+caY04ZenX3bG+8qt7CaYwcwJE= Subject key identifier: C8:35:56:7E:B3:FD:5B:5F:5C:D5:B5:E5:08:37:56:5A:9C:FF:4B:55 Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A Certificate issuer: /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft Manifest number: 010F Signing time: Sat 23 Aug 2025 05:07:01 +0000 Manifest this update: Sat 23 Aug 2025 05:07:00 +0000 Manifest next update: Sat 30 Aug 2025 05:07:00 +0000 Files and hashes: 1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: E96Jehac7FWbaiLbVViWhTJGiU+rKl0nGE5MqfkdvLI=) 2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: 0mdd1hPCY77vgsAR82vZE3qWvhrgXofs3UYJMwrKnGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Validity Not Before: Aug 23 05:07:00 2025 GMT Not After : Aug 30 05:07:00 2025 GMT Subject: CN=68a94c74-85ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:56:b2:cf:ac:69:71:65:2c:4f:26:0c:ff:77: ad:53:22:81:e7:4f:09:88:1a:e0:0b:ae:bc:51:84: a1:10:4f:a9:83:85:aa:4d:98:4b:d0:ec:22:fd:df: c4:87:52:29:d6:60:a4:9a:a9:c7:39:7a:29:e1:ce: 44:ba:f0:c1:6c:7c:d6:2d:e1:c9:04:2c:5c:a5:17: 58:9d:83:85:69:58:85:cc:64:13:7c:77:aa:89:b0: 37:7b:da:1b:47:92:fd:2d:89:32:c4:9d:80:fa:2e: e8:4f:68:9e:fe:f4:43:c5:7f:1e:4a:20:61:0b:1c: 33:c6:c5:99:67:6e:d8:19:d6:0d:66:de:68:b8:d3: 89:e0:74:2f:30:fe:3d:08:a5:5a:41:33:fd:66:ae: 9c:a9:81:8f:27:1c:28:60:f5:95:d0:47:31:a6:49: 03:2b:b0:90:6c:83:2d:7e:42:09:50:af:db:42:56: 4e:45:3f:c1:e1:b0:72:f1:f6:fe:32:bf:4d:f5:62: ef:2e:14:16:50:e2:c0:03:2f:f4:22:fc:89:f6:d6: b5:48:47:5f:db:63:3a:10:32:a5:dd:b9:ff:cb:34: b4:9e:1a:34:72:f3:cc:08:ed:c6:b7:c4:f9:f9:f9: 30:5b:8e:e3:c3:97:d3:72:6b:27:04:44:be:3d:c7: 96:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:35:56:7E:B3:FD:5B:5F:5C:D5:B5:E5:08:37:56:5A:9C:FF:4B:55 X509v3 Authority Key Identifier: keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:9d:b7:95:72:c3:1d:8d:3d:70:81:ab:15:0e:e5:02:18:7e: 07:2d:4c:93:8e:de:84:0e:c8:22:e4:36:31:db:2c:80:71:ae: a8:32:e6:05:78:9b:19:37:0c:24:92:71:2c:ad:89:48:50:6a: e7:4b:a4:01:d3:5c:43:c0:7d:ca:4a:15:52:6c:fb:8f:9f:9a: dd:34:11:47:63:74:7e:28:82:3a:46:47:e4:5b:cf:12:57:30: 0e:d1:0d:11:ca:77:3d:01:49:cf:2c:bd:c1:05:a9:26:56:a3: ee:4d:b0:20:7c:f6:e9:de:86:25:47:df:71:7b:08:18:45:89: 1f:61:db:90:b0:19:00:ef:0d:89:36:ed:7f:b4:6a:47:3c:71: 08:61:51:d6:10:3d:e2:33:7a:e4:ef:4b:db:dd:65:14:d9:4e: c8:66:e1:78:36:c4:40:9c:7f:51:66:95:21:fe:43:16:78:5b: a2:bc:76:ee:9d:d6:bf:52:13:d8:89:cc:e0:86:94:4a:b9:13: e2:85:42:f7:bc:1d:55:f6:49:6f:95:eb:38:87:db:0d:1c:3e: 61:13:ed:f8:39:b4:c2:83:95:50:45:33:88:1b:07:e7:b9:bb: af:c6:f7:3b:dc:cc:96:44:bf:7c:3b:eb:6b:73:62:f2:28:49: d8:f6:9e:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFQzQxMTAvBgNVBAUTKDUzMjQwNjVBNjEzRDJEMTA3ODE3OUM2MjE2MzcxQ0ND NkE3NzUwN0EwHhcNMjUwODIzMDUwNzAwWhcNMjUwODMwMDUwNzAwWjAYMRYwFAYD VQQDEw02OGE5NGM3NC04NWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4layz6xpcWUsTyYM/3etUyKB508JiBrgC668UYShEE+pg4WqTZhL0Owi/d/E h1Ip1mCkmqnHOXop4c5EuvDBbHzWLeHJBCxcpRdYnYOFaViFzGQTfHeqibA3e9ob R5L9LYkyxJ2A+i7oT2ie/vRDxX8eSiBhCxwzxsWZZ27YGdYNZt5ouNOJ4HQvMP49 CKVaQTP9Zq6cqYGPJxwoYPWV0EcxpkkDK7CQbIMtfkIJUK/bQlZORT/B4bBy8fb+ Mr9N9WLvLhQWUOLAAy/0IvyJ9ta1SEdf22M6EDKl3bn/yzS0nho0cvPMCO3Gt8T5 +fkwW47jw5fTcmsnBES+PceWyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMg1Vn6z /VtfXNW15Qg3Vlqc/0tVMB8GA1UdIwQYMBaAFFMkBlphPS0QeBecYhY3HMxqd1B6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEVDNC80NTA2NDc5MEU1 QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxSQjRGNXhpRmpjY3pHcDNV SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5UUdXbUU5TFJCNEY1eGlGamNjekdwM1VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEVDNC80NTA2NDc5MEU1QjExMUVFOUUzNUMzMzNDNEY5QUUwMi9VeVFHV21FOUxS QjRGNXhpRmpjY3pHcDNVSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBnbeVcsMdjT1wgasVDuUCGH4HLUyTjt6EDsgi5DYx2yyAca6oMuYF eJsZNwwkknEsrYlIUGrnS6QB01xDwH3KShVSbPuPn5rdNBFHY3R+KII6RkfkW88S VzAO0Q0Rync9AUnPLL3BBakmVqPuTbAgfPbp3oYlR99xewgYRYkfYduQsBkA7w2J Nu1/tGpHPHEIYVHWED3iM3rk70vb3WUU2U7IZuF4NsRAnH9RZpUh/kMWeFuivHbu nda/UhPYiczghpRKuRPihUL3vB1V9klvles4h9sNHD5hE+34ObTCg5VQRTOIGwfn ubuvxvc73MyWRL98O+trc2LyKEnY9p6c -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:09 2025 by rpki-client