$ rpki-client -vvf rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft File: 7UHN-Ie33i9cIBvogU8ejfPQIB8.mft (raw, json) Hash identifier: /SKoC59Zap/TPw3Lho3NbX6RN17HYSa0hpQQW8uuqb4= Subject key identifier: 84:FC:48:CC:B1:E9:B1:E5:35:16:22:50:E1:DD:FA:5D:43:1D:B0:FC Authority key identifier: ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F Certificate issuer: /CN=A916C832/serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft Manifest number: 3F Signing time: Sat 23 Aug 2025 07:42:59 +0000 Manifest this update: Sat 23 Aug 2025 07:42:58 +0000 Manifest next update: Sat 30 Aug 2025 07:42:58 +0000 Files and hashes: 1: 7UHN-Ie33i9cIBvogU8ejfPQIB8.crl (hash: uT0uNmwsWbAEbsrsJwi1CSHjHds04wYBcIaEa5NUSso=) 2: AA3FBE4A1E6111F093F53B75C4F9AE02.roa (hash: LSRr7TMpx9Qi1u09QfccXCZNggaDKCGxTg8r/GddSHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C832, serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F Validity Not Before: Aug 23 07:42:58 2025 GMT Not After : Aug 30 07:42:58 2025 GMT Subject: CN=68a97103-3d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:c6:fb:4a:cc:1f:a6:f1:8b:4a:27:a7:1e: 33:08:06:a9:72:c2:11:14:68:20:cf:1c:b2:d3:b4: e0:d6:b6:fd:c7:b0:3f:88:ec:dc:05:59:09:f2:77: 02:19:a7:bb:7a:b9:4d:96:92:18:a3:eb:da:99:55: 06:38:6f:53:a9:fd:fe:d8:71:15:9d:7c:33:15:f0: 33:ca:1c:95:90:42:38:6a:61:34:a8:6a:17:fa:0c: 6e:45:8f:96:9a:15:0f:be:c6:96:aa:b5:3e:5b:70: 21:a7:e3:35:a9:04:a8:9e:e5:3f:8a:0b:46:fc:fa: a6:15:ff:8b:b8:87:11:fa:ac:3b:b8:a7:f0:0d:48: 62:c9:3b:df:1e:00:ad:8c:4c:0c:c9:d6:4d:d0:28: aa:a0:31:c7:df:ae:be:79:6e:96:b5:83:d7:d3:52: ba:fc:e1:d3:ff:bf:5f:00:1f:68:d8:3e:49:25:91: 8e:83:f2:d4:52:57:a1:a4:8c:b7:bb:d8:a9:09:ac: 1f:a4:1b:88:96:bf:d7:4c:e6:a0:38:92:b8:ea:d1: 54:eb:60:88:b4:c7:52:5b:46:1f:d3:7b:d3:fd:5f: 30:9d:9d:28:97:84:1a:1d:a3:28:bb:53:7b:cd:bb: 2b:77:2f:44:37:f8:85:53:57:b6:b6:86:85:4e:d2: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FC:48:CC:B1:E9:B1:E5:35:16:22:50:E1:DD:FA:5D:43:1D:B0:FC X509v3 Authority Key Identifier: keyid:ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9e:bb:82:cb:36:ba:33:39:99:8e:2d:25:6b:3e:3f:26:a7: 82:a7:c0:c6:73:5b:f3:5c:27:10:b9:2c:ad:94:d6:0d:e8:cf: 36:e7:bb:5d:61:1c:92:65:65:3e:ee:35:8e:74:6a:11:36:20: c9:63:6c:ec:60:5c:ce:70:02:aa:4f:f8:80:26:1e:bf:22:bc: 9e:a8:73:54:b8:06:65:aa:a9:b4:24:54:2f:2a:1a:82:86:69: 71:4e:ea:86:5d:db:12:7c:39:c2:c1:60:8a:a2:64:85:2d:c5: ca:56:2a:b9:16:86:8c:95:13:46:2d:7b:3d:20:06:30:bd:d9: 95:a4:86:f5:6c:00:f8:13:63:ce:92:08:e2:9b:b7:6b:3b:25: af:89:5c:ca:b3:d5:0c:b4:60:4e:4b:3f:17:c2:71:21:09:b5: 89:4c:e9:48:f8:94:97:8d:b8:20:1f:b3:72:cc:99:5f:34:00: fd:1c:6b:f8:93:fa:c1:c9:50:98:19:16:61:99:f0:f5:94:9e: b8:19:10:77:8c:bf:53:ac:5c:99:96:69:c3:be:6e:1e:95:7e: 66:da:fe:0d:03:e3:38:5a:9b:e2:1d:5b:0c:a8:21:6e:6e:f2: 8f:1e:f8:bc:ff:ab:3a:0b:9a:2d:25:e4:dc:56:20:64:57:cc: 19:dd:b4:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzgzMjExMC8GA1UEBRMoRUQ0MUNERjg4N0I3REUyRjVDMjAxQkU4ODE0RjFFOERG M0QwMjAxRjAeFw0yNTA4MjMwNzQyNThaFw0yNTA4MzAwNzQyNThaMBgxFjAUBgNV BAMTDTY4YTk3MTAzLTNkNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq8sb7SswfpvGLSienHjMIBqlywhEUaCDPHLLTtODWtv3HsD+I7NwFWQnydwIZ p7t6uU2Wkhij69qZVQY4b1Op/f7YcRWdfDMV8DPKHJWQQjhqYTSoahf6DG5Fj5aa FQ++xpaqtT5bcCGn4zWpBKie5T+KC0b8+qYV/4u4hxH6rDu4p/ANSGLJO98eAK2M TAzJ1k3QKKqgMcffrr55bpa1g9fTUrr84dP/v18AH2jYPkklkY6D8tRSV6GkjLe7 2KkJrB+kG4iWv9dM5qA4krjq0VTrYIi0x1JbRh/Te9P9XzCdnSiXhBodoyi7U3vN uyt3L0Q3+IVTV7a2hoVO0qaXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhPxIzLHp seU1FiJQ4d36XUMdsPwwHwYDVR0jBBgwFoAU7UHN+Ie33i9cIBvogU8ejfPQIB8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDODMyLzVCNjE4MDYwMUU2 MTExRjA5MzRGNkY3NEM0RjlBRTAyLzdVSE4tSWUzM2k5Y0lCdm9nVThlamZQUUlC OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1VITi1JZTMzaTljSUJ2b2dVOGVqZlBRSUI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD ODMyLzVCNjE4MDYwMUU2MTExRjA5MzRGNkY3NEM0RjlBRTAyLzdVSE4tSWUzM2k5 Y0lCdm9nVThlamZQUUlCOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE6eu4LLNrozOZmOLSVrPj8mp4KnwMZzW/NcJxC5LK2U1g3ozzbnu11h HJJlZT7uNY50ahE2IMljbOxgXM5wAqpP+IAmHr8ivJ6oc1S4BmWqqbQkVC8qGoKG aXFO6oZd2xJ8OcLBYIqiZIUtxcpWKrkWhoyVE0Ytez0gBjC92ZWkhvVsAPgTY86S COKbt2s7Ja+JXMqz1Qy0YE5LPxfCcSEJtYlM6Uj4lJeNuCAfs3LMmV80AP0ca/iT +sHJUJgZFmGZ8PWUnrgZEHeMv1OsXJmWacO+bh6Vfmba/g0D4zham+IdWwyoIW5u 8o8e+Lz/qzoLmi0l5NxWIGRXzBndtKM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:45 2025 by rpki-client