$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json) Hash identifier: Ivev0up17G/0rAiOmXf4nf4Pwcuh8zHg41TgHHRjnrE= Subject key identifier: 3F:C9:E8:54:2F:1C:BB:41:80:E2:2C:66:32:3C:17:56:FF:9C:AD:AD Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Certificate serial: 0469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft Manifest number: 05C8 Signing time: Sat 23 Aug 2025 00:28:15 +0000 Manifest this update: Sat 23 Aug 2025 00:28:15 +0000 Manifest next update: Sat 30 Aug 2025 00:28:15 +0000 Files and hashes: 1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: LgzLuGIFbiI6r5wOGlLQnJ4k3g+wPSpIw3hky0ggCSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Validity Not Before: Aug 23 00:28:15 2025 GMT Not After : Aug 30 00:28:15 2025 GMT Subject: CN=68a90b1f-98b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:52:2d:e9:08:d0:0f:45:66:36:17:9c:18:b6: 0a:9f:f5:a4:74:6b:de:6c:a8:cc:35:4e:10:cd:e4: ef:b1:29:13:ef:89:cf:5e:ce:14:5e:ba:ce:32:d5: 84:fd:4e:61:0f:91:f4:82:03:75:92:a4:91:14:72: bc:ed:c5:17:08:73:d9:5b:ee:1c:c8:cc:bd:ea:c8: 2b:40:71:28:fa:ca:f2:4d:e1:aa:6e:38:cb:02:82: 6b:3e:c4:16:01:38:41:0f:74:c5:bf:90:d5:9d:13: 7d:20:9f:44:74:e6:da:14:33:6a:07:ec:86:4d:e3: 72:5a:00:39:2a:18:b1:16:b9:49:57:b3:f5:d4:cf: 65:d6:c8:d5:3b:bc:3a:d7:4d:ed:47:95:ef:71:d6: 80:83:7a:4e:b9:ce:f4:08:4f:cf:5c:73:37:ae:e2: e6:df:48:06:f4:c1:16:9d:b2:c3:75:48:e1:18:b7: fb:8c:b1:ed:e5:74:5e:89:37:87:67:fd:c5:6a:f8: 27:fa:27:7d:4e:9c:8c:a3:fa:24:35:f8:02:6d:5f: 7d:e8:2e:c6:5c:8d:3b:76:1b:73:00:60:42:13:91: 35:63:72:1c:0a:0a:81:01:43:9d:aa:ee:12:8a:b7: 54:35:76:ed:9c:05:2e:0e:cf:25:7f:c3:5f:bb:81: 01:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C9:E8:54:2F:1C:BB:41:80:E2:2C:66:32:3C:17:56:FF:9C:AD:AD X509v3 Authority Key Identifier: keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:76:73:50:20:24:c6:c7:1b:8f:69:99:f3:de:f6:f1:71:eb: c7:41:4a:bc:96:3a:91:8f:3d:00:bc:8d:21:e1:56:9d:34:b0: 0d:34:df:19:4e:5b:0f:b3:ac:29:13:bd:4f:66:3d:7f:03:d5: 84:94:cd:80:63:40:9e:76:8c:5d:64:cc:d5:f6:fe:ff:15:e9: db:d5:ee:3d:a5:78:e8:14:8e:8a:82:8b:32:03:88:08:86:7c: 91:29:37:ed:63:e0:cd:13:56:19:ed:4c:2d:1c:53:af:77:18: 2d:97:cc:26:71:ec:61:c1:0d:8b:33:ae:a2:59:49:61:38:6a: 4e:0f:7e:ac:52:0c:33:7e:b4:08:75:dd:01:96:23:47:53:19: 8e:54:a7:ae:4e:96:96:08:27:9e:31:de:61:ff:1f:41:74:27: cd:ce:94:50:5b:2c:e5:9c:80:7c:32:7e:59:0f:c1:ad:20:64: 73:a3:aa:e8:49:dd:de:a4:60:c2:77:70:cb:17:35:0d:74:d6: 6b:c3:1f:c8:78:e4:6f:59:09:3b:22:45:66:e6:46:06:7c:3e: e8:9b:7e:60:74:f6:92:01:84:92:87:f4:eb:01:9b:24:93:60: 30:b8:a3:ae:be:39:c4:f2:12:e3:df:4f:33:44:65:6f:33:0f: 29:52:51:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEI4Rjg0NkI0MzUzQjY0MjlBQzQwNDNGMzJCQjc4OTRD RjgzODU1RkQwHhcNMjUwODIzMDAyODE1WhcNMjUwODMwMDAyODE1WjAYMRYwFAYD VQQDEw02OGE5MGIxZi05OGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1It6QjQD0VmNhecGLYKn/WkdGvebKjMNU4QzeTvsSkT74nPXs4UXrrOMtWE /U5hD5H0ggN1kqSRFHK87cUXCHPZW+4cyMy96sgrQHEo+sryTeGqbjjLAoJrPsQW AThBD3TFv5DVnRN9IJ9EdObaFDNqB+yGTeNyWgA5KhixFrlJV7P11M9l1sjVO7w6 103tR5XvcdaAg3pOuc70CE/PXHM3ruLm30gG9MEWnbLDdUjhGLf7jLHt5XReiTeH Z/3Favgn+id9TpyMo/okNfgCbV996C7GXI07dhtzAGBCE5E1Y3IcCgqBAUOdqu4S irdUNXbtnAUuDs8lf8Nfu4EBeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/J6FQv HLtBgOIsZjI8F1b/nK2tMB8GA1UdIwQYMBaAFLj4RrQ1O2QprEBD8yu3iUz4OFX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pDbXNRRVB6SzdlSlRQZzRW ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQaEd0RFU3WkNtc1FFUHpLN2VKVFBnNFZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pD bXNRRVB6SzdlSlRQZzRWZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBdnNQICTGxxuPaZnz3vbxcevHQUq8ljqRjz0AvI0h4VadNLANNN8Z TlsPs6wpE71PZj1/A9WElM2AY0CedoxdZMzV9v7/Fenb1e49pXjoFI6KgosyA4gI hnyRKTftY+DNE1YZ7UwtHFOvdxgtl8wmcexhwQ2LM66iWUlhOGpOD36sUgwzfrQI dd0BliNHUxmOVKeuTpaWCCeeMd5h/x9BdCfNzpRQWyzlnIB8Mn5ZD8GtIGRzo6ro Sd3epGDCd3DLFzUNdNZrwx/IeORvWQk7IkVm5kYGfD7om35gdPaSAYSSh/TrAZsk k2AwuKOuvjnE8hLj308zRGVvMw8pUlHl -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:07 2025 by rpki-client