$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft File: UWKb64D735TtmmQ_14yB2nO2uho.mft (raw, json) Hash identifier: ThIlGjjWyKuy3d7rxAHDsp0SZkj55VG/2UJPy6Ya2mQ= Subject key identifier: 98:D2:1D:AB:20:C8:75:34:61:28:DE:ED:DD:89:89:DB:6C:60:7B:90 Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A Certificate issuer: /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A Certificate serial: 0A8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft Manifest number: 0A7C Signing time: Fri 04 Jul 2025 19:57:56 +0000 Manifest this update: Fri 04 Jul 2025 19:57:56 +0000 Manifest next update: Fri 11 Jul 2025 19:57:56 +0000 Files and hashes: 1: UWKb64D735TtmmQ_14yB2nO2uho.crl (hash: vaz3V1wTW0kBd3JPseCZnch16YuXsgdf4GHbyBgdUoY=) 2: 803C622E9B9111EDBC921164C4F9AE02.roa (hash: JKSXjO226xcOScXDTLlLmKcqRbFLpyx8mcjgczPn3KQ=) 3: 7F1EA1189B9111EDBC921164C4F9AE02.roa (hash: +r3x7TjQH2xnW46hg1hPTiKOH9bzDtcSJAR+NZYlHHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2700 (0xa8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EAD0, serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A Validity Not Before: Jul 4 19:57:56 2025 GMT Not After : Jul 11 19:57:56 2025 GMT Subject: CN=68683244-ba89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2f:8c:c7:a9:69:de:2b:2e:94:3c:a1:1c:aa: bc:b7:6b:de:0b:90:e9:ca:c1:d0:6e:a4:2a:fc:20: dd:cf:ae:4b:c6:0e:bc:9d:6e:2e:85:3b:06:a7:ed: 0c:fb:13:59:db:c6:39:54:48:55:d9:f7:d9:9d:25: 34:c5:22:f3:07:5d:9b:a9:f9:f7:a8:bc:fd:4c:40: 69:78:32:84:60:a8:fb:9d:09:6a:bf:2f:f9:c7:3a: 6b:84:b7:61:ca:6e:a4:38:86:63:7e:47:75:9f:65: ea:20:12:9a:70:64:f2:66:d3:1d:5d:d6:ab:c9:d8: 37:74:5a:e9:27:02:de:ba:4f:11:84:f4:60:d1:da: d6:69:9d:3c:7c:a3:15:6d:bd:51:c1:59:db:b4:a8: 1c:8a:08:fb:e4:36:1e:72:60:f3:2c:81:d9:d1:a0: 26:7f:08:73:1f:25:50:7e:4a:27:9a:3a:26:df:fa: f4:ec:27:36:78:3e:93:58:07:e0:12:cd:72:7c:40: d9:53:14:19:f2:42:f4:97:4f:3c:4e:3a:7f:e9:79: d7:d9:4d:92:06:7b:a1:f7:7e:ef:4b:7e:11:ae:18: 51:ba:1c:6d:51:87:6b:2f:36:b1:ea:74:90:be:5f: e9:ff:f0:76:f6:10:d4:21:2b:e3:5f:d4:29:13:7b: 0d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D2:1D:AB:20:C8:75:34:61:28:DE:ED:DD:89:89:DB:6C:60:7B:90 X509v3 Authority Key Identifier: keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:9c:06:4b:95:60:29:00:4d:da:5e:f1:0c:c6:07:de:e0:4f: 8c:38:48:e6:af:47:fb:79:a1:e0:c7:33:6c:43:d5:74:ca:f0: 3e:71:e6:c8:f4:0d:f1:1b:4f:44:1a:5c:4c:91:de:40:6a:94: 4c:2e:de:b7:e0:65:8d:3f:6a:b9:34:63:01:47:b0:3e:91:39: 4c:27:0f:a6:a1:04:52:16:68:79:17:e8:1c:7c:15:e1:fc:1f: ce:58:05:df:3a:98:06:4c:88:da:a1:57:bd:51:df:66:d2:5c: 65:89:10:e1:a6:31:6c:45:69:b4:d4:3b:dc:ec:ce:9d:bd:e5: 65:c0:59:65:54:cd:0b:41:81:35:0a:8a:53:ab:4e:07:62:91: 6b:09:ce:18:92:e7:d1:72:ce:1f:0b:b1:d5:13:d5:50:36:30: 7a:d8:f7:e6:24:64:68:95:54:f5:34:3f:3c:67:3a:b0:45:05: 9b:4d:a2:6e:ff:21:a0:43:d1:90:82:69:72:05:9f:31:da:68: 9a:c1:68:c7:1c:db:b0:7e:d3:62:b5:eb:1c:84:ce:19:fa:89: c9:dd:29:a4:dc:4c:f8:59:35:0e:df:ab:3f:95:20:e5:6d:75: c4:13:46:11:a8:1d:08:67:15:97:b7:09:8f:36:40:f6:fe:7e: 5c:6b:a0:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBRDAxMTAvBgNVBAUTKDUxNjI5QkVCODBGQkRGOTRFRDlBNjQzRkQ3OEM4MURB NzNCNkJBMUEwHhcNMjUwNzA0MTk1NzU2WhcNMjUwNzExMTk1NzU2WjAYMRYwFAYD VQQDEw02ODY4MzI0NC1iYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS+Mx6lp3isulDyhHKq8t2veC5DpysHQbqQq/CDdz65Lxg68nW4uhTsGp+0M +xNZ28Y5VEhV2ffZnSU0xSLzB12bqfn3qLz9TEBpeDKEYKj7nQlqvy/5xzprhLdh ym6kOIZjfkd1n2XqIBKacGTyZtMdXdarydg3dFrpJwLeuk8RhPRg0drWaZ08fKMV bb1RwVnbtKgcigj75DYecmDzLIHZ0aAmfwhzHyVQfkonmjom3/r07Cc2eD6TWAfg Es1yfEDZUxQZ8kL0l088Tjp/6XnX2U2SBnuh937vS34RrhhRuhxtUYdrLzax6nSQ vl/p//B29hDUISvjX9QpE3sNswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjSHasg yHU0YSje7d2JidtsYHuQMB8GA1UdIwQYMBaAFFFim+uA+9+U7ZpkP9eMgdpztroa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUFEMC8yMUZBNUIwNjYx RUUxMUVBOTI1RDYyMjVDNEY5QUUwMi9VV0tiNjRENzM1VHRtbVFfMTR5QjJuTzJ1 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VXS2I2NEQ3MzVUdG1tUV8xNHlCMm5PMnVoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUFEMC8yMUZBNUIwNjYxRUUxMUVBOTI1RDYyMjVDNEY5QUUwMi9VV0tiNjRENzM1 VHRtbVFfMTR5QjJuTzJ1aG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4nAZLlWApAE3aXvEMxgfe4E+MOEjmr0f7eaHgxzNsQ9V0yvA+cebI 9A3xG09EGlxMkd5AapRMLt634GWNP2q5NGMBR7A+kTlMJw+moQRSFmh5F+gcfBXh /B/OWAXfOpgGTIjaoVe9Ud9m0lxliRDhpjFsRWm01Dvc7M6dveVlwFllVM0LQYE1 CopTq04HYpFrCc4YkufRcs4fC7HVE9VQNjB62PfmJGRolVT1ND88ZzqwRQWbTaJu /yGgQ9GQgmlyBZ8x2miawWjHHNuwftNiteschM4Z+onJ3Smk3Ez4WTUO36s/lSDl bXXEE0YRqB0IZxWXtwmPNkD2/n5ca6AM -----END CERTIFICATE-----Generated at Fri Jul 4 22:27:34 2025 by rpki-client