$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft File: Uaqsf29Y90cHLIfsL0h47xy49M4.mft (raw, json) Hash identifier: H1yiDcO/dPNO+a2RUj6R3DjNXrUNa7mKj/WZjOH2d2k= Subject key identifier: 65:9E:D9:83:3D:B6:78:00:15:6B:20:F9:EF:DE:42:1D:E9:78:BE:5A Authority key identifier: 51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE Certificate issuer: /CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE Certificate serial: 1239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft Manifest number: 1225 Signing time: Fri 04 Jul 2025 17:26:07 +0000 Manifest this update: Fri 04 Jul 2025 17:26:06 +0000 Manifest next update: Fri 11 Jul 2025 17:26:06 +0000 Files and hashes: 1: Uaqsf29Y90cHLIfsL0h47xy49M4.crl (hash: KkyrAsSpOdue3JLA3Sk+cemlDzEJolHmuh844b2r+uY=) 2: AA47599A985F11EEBA5D186DC4F9AE02.roa (hash: abD2sJSusd+EergprKNOfnX9AY5e5SRUlXGm1ps4L/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4665 (0x1239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE Validity Not Before: Jul 4 17:26:06 2025 GMT Not After : Jul 11 17:26:06 2025 GMT Subject: CN=68680eaf-c6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7f:a1:e8:e0:bb:7f:3f:61:29:90:7f:b1:b0: 75:cd:7f:2a:78:54:3c:0a:44:34:ce:38:32:19:15: 4f:47:f7:7b:02:21:c9:8d:1f:6f:7e:43:98:94:71: 60:ff:a1:e2:a8:8f:86:c2:25:46:dc:64:86:90:bd: 8e:89:c4:78:0e:20:b5:17:08:f8:15:23:e7:a6:3b: d2:96:e1:c2:ae:fa:59:3e:70:19:73:bf:9b:b3:57: 32:a4:26:5c:61:f0:03:32:ab:ce:5f:1c:b0:e6:bf: 3a:d6:6d:b3:03:67:4c:e6:fe:50:6c:74:0d:40:8f: 73:a8:09:6b:df:20:82:bb:bf:bc:2e:b6:0d:b4:d8: 74:62:57:5d:05:3d:ec:5c:dd:6f:d7:71:45:e2:2a: 8e:07:a9:cd:f6:8a:af:0d:4e:69:f7:b5:a9:a3:20: 25:c9:35:fa:e7:2e:f8:ad:22:d2:1b:39:58:cd:b5: 91:5f:ba:06:b5:e3:ec:47:3e:f5:c5:d7:67:38:07: d0:12:e5:b6:00:40:ad:b9:2a:10:c0:ca:21:68:40: 38:13:34:6e:fd:9d:4c:84:fc:f5:84:12:94:47:81: ec:94:94:d2:28:d5:0f:13:b9:7d:5a:66:54:24:5f: c2:21:64:2d:56:00:9c:bc:e8:bc:ca:3f:54:fb:df: 85:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9E:D9:83:3D:B6:78:00:15:6B:20:F9:EF:DE:42:1D:E9:78:BE:5A X509v3 Authority Key Identifier: keyid:51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:ee:5a:70:24:bd:4a:3e:d0:53:f1:32:b2:bb:16:ee:76:23: 3d:04:1e:de:5f:cd:a5:84:d2:f6:6e:2f:5c:5f:c8:20:80:40: b0:02:9a:c5:e8:50:08:00:17:7f:bc:8b:39:73:ae:16:0a:45: 49:57:48:71:7a:13:ad:a4:79:25:9f:0a:7f:6c:05:98:26:7e: 5d:cc:96:bb:ec:e1:38:bb:24:fe:67:21:4f:15:61:be:c0:35: 5a:95:8b:37:a4:eb:b8:6c:80:b8:dc:e6:15:1f:b4:7f:f5:be: e9:df:96:a5:b8:c6:fc:ba:ba:1b:bb:3a:63:8a:56:63:76:7a: f7:46:e6:a8:1b:27:53:c5:f5:a8:4a:17:3a:00:7a:1e:9b:5f: ef:7a:9c:9d:be:19:2a:73:bd:9d:aa:32:ed:32:0d:e8:19:68: a5:40:4b:75:0d:ac:16:87:fb:67:27:8b:02:04:8e:69:b2:8a: f9:5f:d2:f5:c2:89:57:3e:a6:9a:f0:17:f4:40:09:bc:37:c9: eb:65:b2:d8:2c:55:87:d1:69:88:06:23:ee:93:5e:ba:b2:ac: 99:05:f4:fa:d8:e2:83:70:19:05:5c:f0:2a:c7:dd:5c:b7:2c: ed:ae:a9:e2:6b:8d:0b:a0:83:a5:60:8b:92:32:9d:6e:a2:dc: 9b:2e:23:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDUxQUFBQzdGNkY1OEY3NDcwNzJDODdFQzJGNDg3OEVG MUNCOEY0Q0UwHhcNMjUwNzA0MTcyNjA2WhcNMjUwNzExMTcyNjA2WjAYMRYwFAYD VQQDEw02ODY4MGVhZi1jNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2n+h6OC7fz9hKZB/sbB1zX8qeFQ8CkQ0zjgyGRVPR/d7AiHJjR9vfkOYlHFg /6HiqI+GwiVG3GSGkL2OicR4DiC1Fwj4FSPnpjvSluHCrvpZPnAZc7+bs1cypCZc YfADMqvOXxyw5r861m2zA2dM5v5QbHQNQI9zqAlr3yCCu7+8LrYNtNh0YlddBT3s XN1v13FF4iqOB6nN9oqvDU5p97WpoyAlyTX65y74rSLSGzlYzbWRX7oGtePsRz71 xddnOAfQEuW2AECtuSoQwMohaEA4EzRu/Z1MhPz1hBKUR4HslJTSKNUPE7l9WmZU JF/CIWQtVgCcvOi8yj9U+9+FAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWe2YM9 tngAFWsg+e/eQh3peL5aMB8GA1UdIwQYMBaAFFGqrH9vWPdHByyH7C9IeO8cuPTO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9GODU4MzQ0RUUz NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9VYXFzZjI5WTkwY0hMSWZzTDBoNDd4eTQ5 TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhcXNmMjlZOTBjSExJZnNMMGg0N3h5NDlNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkNERi9GODU4MzQ0RUUzNkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9VYXFzZjI5WTkw Y0hMSWZzTDBoNDd4eTQ5TTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC7lpwJL1KPtBT8TKyuxbudiM9BB7eX82lhNL2bi9cX8gggECwAprF 6FAIABd/vIs5c64WCkVJV0hxehOtpHklnwp/bAWYJn5dzJa77OE4uyT+ZyFPFWG+ wDValYs3pOu4bIC43OYVH7R/9b7p35aluMb8urobuzpjilZjdnr3RuaoGydTxfWo Shc6AHoem1/vepydvhkqc72dqjLtMg3oGWilQEt1DawWh/tnJ4sCBI5psor5X9L1 wolXPqaa8Bf0QAm8N8nrZbLYLFWH0WmIBiPuk166sqyZBfT62OKDcBkFXPAqx91c tyztrqnia40LoIOlYIuSMp1uotybLiMm -----END CERTIFICATE-----Generated at Sat Jul 5 22:44:39 2025 by rpki-client