$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft File: uftCI-sDug7mzge0ZgIXr69xbV0.mft (raw, json) Hash identifier: fT1KPNqPK4QJWH471baGK4d7iutvI5mz3Vtv40M9pc8= Subject key identifier: BA:39:87:7F:97:C0:E4:68:DF:FC:A8:C3:3B:02:3A:97:41:08:BF:5C Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D Certificate issuer: /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft Manifest number: 068E Signing time: Fri 22 Aug 2025 22:27:40 +0000 Manifest this update: Fri 22 Aug 2025 22:27:39 +0000 Manifest next update: Fri 29 Aug 2025 22:27:39 +0000 Files and hashes: 1: uftCI-sDug7mzge0ZgIXr69xbV0.crl (hash: eBELazY6bY71tJzAogZAyVvuzgxS19x57b3f9jqd8qo=) 2: 179D126A80BB11EB8827C40AC4F9AE02.roa (hash: Z2FHnDXg4Ip1mKaBZDT4wmtIm4sbvDrPsJ6u/yKuqxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D5A2, serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Validity Not Before: Aug 22 22:27:39 2025 GMT Not After : Aug 29 22:27:39 2025 GMT Subject: CN=68a8eedc-b475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:a2:9a:0e:c2:74:46:09:3d:ca:e2:a6:33: 3e:49:57:fc:54:62:f8:bb:c4:8a:b5:59:d4:15:f7: 9d:45:b5:ef:09:d2:fb:8b:7c:f4:f8:53:67:11:ad: ec:b2:9f:df:3a:08:b7:1e:31:88:ef:06:b1:80:5b: d0:d3:a1:e0:cf:6f:96:18:40:b2:84:83:cb:41:77: 5e:3b:5b:c5:12:b9:bc:85:f1:c3:14:97:d1:4d:7a: 3f:2c:cf:a1:ff:6f:2b:e9:8f:d9:06:4a:ef:dd:6c: 74:54:0d:a9:ec:7a:5d:83:9e:8a:bc:5c:2b:93:17: 36:a7:c7:b5:57:67:66:2d:c9:83:03:fb:b9:ff:5c: 14:b8:68:4a:59:a1:f9:6d:66:e2:6c:11:ac:eb:36: a0:33:fe:ab:52:ec:f0:3d:4f:c2:5e:0d:6b:8a:06: e1:0f:90:a8:b5:d8:2f:57:10:ac:60:bf:d3:20:a6: 79:7e:b3:fe:e0:e6:6f:d9:11:ac:e7:67:bf:f7:3f: 83:a8:c9:e0:f7:40:40:99:f7:6f:6a:46:80:7a:c5: 8f:ae:94:8c:2c:06:7e:28:90:3d:9c:6f:2b:14:1d: f1:db:57:9f:07:0e:53:09:f2:1a:13:45:b4:6b:c4: 7d:fb:1c:a6:48:63:5e:0f:bc:8d:98:f6:1f:67:e7: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:39:87:7F:97:C0:E4:68:DF:FC:A8:C3:3B:02:3A:97:41:08:BF:5C X509v3 Authority Key Identifier: keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:e2:88:29:8b:a4:8f:46:63:55:d3:ac:88:fc:e4:88:4e:e5: d8:71:d9:d2:40:b7:64:0e:ab:d0:ca:31:ea:63:84:ac:f2:94: dc:27:d0:78:b0:fa:93:34:67:9a:dc:32:b7:25:c8:ab:03:c7: 21:ec:3b:94:ab:57:37:69:0a:2c:c5:d2:28:ea:fd:e2:6d:4b: 72:80:6a:af:d6:fc:07:71:01:c2:e8:c9:4e:d4:bb:0e:f6:a9: ca:d8:cb:6f:2a:2c:99:ad:d9:fb:40:27:00:bd:df:2e:ee:b2: bc:b1:cc:c0:75:5e:af:f0:e9:34:61:58:27:e7:fb:91:7b:37: 00:30:25:89:18:9d:1e:69:0c:4b:46:ae:a7:ba:90:45:3e:74: 20:4b:74:9e:79:14:15:68:91:a9:6d:8d:57:b7:b0:e7:ef:ca: 5d:40:6b:35:be:f0:e8:92:44:a1:8f:f9:33:2b:0c:58:3f:6f: 25:8e:61:b9:47:ef:1a:51:82:b7:a2:2f:fd:40:ac:2c:51:b0: d3:b2:48:3e:c2:4b:95:31:5a:d4:27:08:c1:e6:ba:50:16:1e: 5a:e3:24:05:94:85:95:4c:28:26:28:89:61:15:7f:4e:98:b4: 04:63:65:d6:81:80:51:6d:47:6a:6b:a7:0b:dd:39:96:41:17: eb:08:08:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ1QTIxMTAvBgNVBAUTKEI5RkI0MjIzRUIwM0JBMEVFNkNFMDdCNDY2MDIxN0FG QUY3MTZENUQwHhcNMjUwODIyMjIyNzM5WhcNMjUwODI5MjIyNzM5WjAYMRYwFAYD VQQDEw02OGE4ZWVkYy1iNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02Wimg7CdEYJPcripjM+SVf8VGL4u8SKtVnUFfedRbXvCdL7i3z0+FNnEa3s sp/fOgi3HjGI7waxgFvQ06Hgz2+WGECyhIPLQXdeO1vFErm8hfHDFJfRTXo/LM+h /28r6Y/ZBkrv3Wx0VA2p7Hpdg56KvFwrkxc2p8e1V2dmLcmDA/u5/1wUuGhKWaH5 bWbibBGs6zagM/6rUuzwPU/CXg1rigbhD5CotdgvVxCsYL/TIKZ5frP+4OZv2RGs 52e/9z+DqMng90BAmfdvakaAesWPrpSMLAZ+KJA9nG8rFB3x21efBw5TCfIaE0W0 a8R9+xymSGNeD7yNmPYfZ+ciAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo5h3+X wORo3/yowzsCOpdBCL9cMB8GA1UdIwQYMBaAFLn7QiPrA7oO5s4HtGYCF6+vcW1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDVBMi9DMjFBNTM4Njgw QjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVnN216Z2UwWmdJWHI2OXhi VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmdENJLXNEdWc3bXpnZTBaZ0lYcjY5eGJWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDVBMi9DMjFBNTM4NjgwQjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVn N216Z2UwWmdJWHI2OXhiVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ4ogpi6SPRmNV06yI/OSITuXYcdnSQLdkDqvQyjHqY4Ss8pTcJ9B4 sPqTNGea3DK3JcirA8ch7DuUq1c3aQosxdIo6v3ibUtygGqv1vwHcQHC6MlO1LsO 9qnK2MtvKiyZrdn7QCcAvd8u7rK8sczAdV6v8Ok0YVgn5/uRezcAMCWJGJ0eaQxL Rq6nupBFPnQgS3SeeRQVaJGpbY1Xt7Dn78pdQGs1vvDokkShj/kzKwxYP28ljmG5 R+8aUYK3oi/9QKwsUbDTskg+wkuVMVrUJwjB5rpQFh5a4yQFlIWVTCgmKIlhFX9O mLQEY2XWgYBRbUdqa6cL3TmWQRfrCAjj -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:44 2025 by rpki-client