$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: 9r0gfdweCubG0poi65XwN73HER+cFbxOaVmC1saFPHs= Subject key identifier: 02:2C:48:D4:BC:A5:FD:C6:00:6F:C5:CA:9D:3A:C3:06:61:30:8B:8D Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 1953 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 1953 Signing time: Fri 22 Aug 2025 16:29:58 +0000 Manifest this update: Fri 22 Aug 2025 16:29:57 +0000 Manifest next update: Fri 29 Aug 2025 16:29:57 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: 3dwxJOzmTwIWSqY+WhpkkEZPxAhYDmh9q5HYVEj4rkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6483 (0x1953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Validity Not Before: Aug 22 16:29:57 2025 GMT Not After : Aug 29 16:29:57 2025 GMT Subject: CN=68a89b05-2f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:02:84:e4:f0:e5:cc:48:aa:e0:ad:03:b4: 65:69:3c:a1:35:82:11:15:03:a9:3d:80:a9:8c:0f: cc:59:3f:cb:52:cd:c1:90:8c:cd:b5:dc:e5:ba:0a: cc:03:54:31:20:6f:82:fb:0b:cf:68:d3:e1:41:76: cd:74:6b:cb:38:a4:65:95:2e:77:aa:02:2d:bb:c3: 87:c5:b3:be:16:8c:5e:00:ca:ec:a4:79:5f:1b:8e: 17:ed:48:34:14:c0:6b:55:16:2a:4c:d2:ba:19:28: 8a:bc:ac:32:f9:20:c7:80:e6:da:81:87:86:a7:e8: 2c:50:fa:ab:8c:e5:18:1a:6a:19:2b:90:55:7f:17: a7:67:ba:0b:81:33:f8:7c:2b:23:7e:3f:26:ab:6d: d9:36:82:a3:13:98:34:fe:6f:53:07:22:cd:86:4b: 41:8e:d7:69:e1:ca:d7:7a:6a:13:46:e1:3b:1a:78: 42:98:27:d8:22:c6:30:84:e2:a5:af:e0:a9:c0:67: 02:d8:4b:3d:1a:d9:a1:20:87:b4:ba:fa:75:b3:03: 27:37:ba:c6:05:8a:39:fa:b4:23:1a:05:c9:54:90: 2e:a1:13:35:cc:71:86:61:aa:3e:43:34:38:f1:cc: 06:60:61:3d:8c:87:ee:b1:98:af:cf:38:8d:1e:10: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2C:48:D4:BC:A5:FD:C6:00:6F:C5:CA:9D:3A:C3:06:61:30:8B:8D X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e2:8c:0a:99:a1:66:51:7e:c0:d2:2a:b2:34:75:7a:e1:53: d2:f0:53:44:63:c8:34:13:c3:5b:ca:02:85:11:d3:6d:66:11: 90:0b:32:f4:d9:2d:19:54:e2:b7:56:bd:60:16:a5:a0:b4:60: 13:0c:d4:a2:cd:cc:4b:09:9f:42:f1:68:31:ec:7a:cf:92:58: eb:e2:29:fe:ba:fb:b7:08:98:7a:ca:f6:6b:74:72:cb:b5:63: e6:75:aa:d2:0a:31:c5:83:64:00:d7:72:8e:ee:f9:08:2c:f5: 9c:74:b6:55:54:5c:30:4e:1a:23:8b:12:56:2f:ee:23:ad:10: e9:c2:5c:02:98:3d:82:15:ce:62:ed:6f:0a:c3:32:f0:a4:b1: 17:72:d2:b1:f1:da:4e:b4:f6:5a:aa:1f:58:ed:81:53:0b:ed: a7:7a:19:36:49:c1:e6:ca:4b:75:c1:0a:18:a3:dc:40:01:9b: 53:25:95:91:c8:ea:86:87:c8:86:e7:3d:66:5e:d9:09:4b:7b: a4:1d:1e:0f:f5:b7:71:5b:4d:92:71:a7:f9:1b:2a:00:eb:17: e0:8e:33:ba:9c:47:9c:54:e9:69:97:f6:73:97:b5:b7:d7:92: a2:3c:b5:9d:da:dc:c7:41:35:a1:21:63:1e:18:23:21:28:f0: 33:d4:2e:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjUwODIyMTYyOTU3WhcNMjUwODI5MTYyOTU3WjAYMRYwFAYD VQQDEw02OGE4OWIwNS0yZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApl8ChOTw5cxIquCtA7RlaTyhNYIRFQOpPYCpjA/MWT/LUs3BkIzNtdzlugrM A1QxIG+C+wvPaNPhQXbNdGvLOKRllS53qgItu8OHxbO+FoxeAMrspHlfG44X7Ug0 FMBrVRYqTNK6GSiKvKwy+SDHgObagYeGp+gsUPqrjOUYGmoZK5BVfxenZ7oLgTP4 fCsjfj8mq23ZNoKjE5g0/m9TByLNhktBjtdp4crXemoTRuE7GnhCmCfYIsYwhOKl r+CpwGcC2Es9GtmhIIe0uvp1swMnN7rGBYo5+rQjGgXJVJAuoRM1zHGGYao+QzQ4 8cwGYGE9jIfusZivzziNHhC6EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIsSNS8 pf3GAG/Fyp06wwZhMIuNMB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf4owKmaFmUX7A0iqyNHV64VPS8FNEY8g0E8NbygKFEdNtZhGQCzL0 2S0ZVOK3Vr1gFqWgtGATDNSizcxLCZ9C8Wgx7HrPkljr4in+uvu3CJh6yvZrdHLL tWPmdarSCjHFg2QA13KO7vkILPWcdLZVVFwwThojixJWL+4jrRDpwlwCmD2CFc5i 7W8KwzLwpLEXctKx8dpOtPZaqh9Y7YFTC+2nehk2ScHmykt1wQoYo9xAAZtTJZWR yOqGh8iG5z1mXtkJS3ukHR4P9bdxW02Scaf5GyoA6xfgjjO6nEecVOlpl/Zzl7W3 15KiPLWd2tzHQTWhIWMeGCMhKPAz1C7v -----END CERTIFICATE-----Generated at Sat Aug 23 21:02:24 2025 by rpki-client