$ rpki-client -vvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft File: UHF-n6DMN8QGf4M-kPt-chDzxZM.mft (raw, json) Hash identifier: KN1jYf54Y6SaghtV2woyltAuMZdphkNdQLA6hPf/OMc= Subject key identifier: C4:2A:56:01:3C:87:FB:D8:B2:7C:4D:10:42:BE:2C:D2:E2:31:FC:73 Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 Certificate issuer: /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Certificate serial: 0791 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft Manifest number: 078B Signing time: Fri 22 Aug 2025 21:37:21 +0000 Manifest this update: Fri 22 Aug 2025 21:37:21 +0000 Manifest next update: Fri 29 Aug 2025 21:37:21 +0000 Files and hashes: 1: UHF-n6DMN8QGf4M-kPt-chDzxZM.crl (hash: RkMwrKSSxBiZiTtJhgSgFdNTEzEQ2KhBypkMX1QRtd4=) 2: BDAC3ACA1E7111EB93874336C4F9AE02.roa (hash: nkmWs3iqAu0OPxxjsFN0b2stVXj3stQjYTM1Oq4SJSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937 (0x791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917552B, serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Validity Not Before: Aug 22 21:37:21 2025 GMT Not After : Aug 29 21:37:21 2025 GMT Subject: CN=68a8e311-7a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:e4:bd:49:db:eb:8f:b0:c4:46:88:94:97: b6:4f:aa:a4:e7:ea:3c:12:9c:ac:4c:a8:ee:6c:58: fa:93:57:6c:f0:79:74:57:ab:4e:ae:6e:41:37:8a: 95:02:8d:ef:bb:53:3a:02:f8:4a:22:b0:a4:6d:05: 44:b6:c1:79:aa:e1:99:d1:79:e6:c9:6b:54:bd:9b: fd:2e:8d:45:79:12:f9:d4:d2:c2:c1:96:b9:1b:19: 37:3d:a4:cf:72:df:d5:ec:43:c4:3c:a4:30:0d:16: f5:20:2f:73:86:a2:d3:4e:ed:d2:4a:2c:7a:16:00: 6b:29:8e:3b:9f:dc:09:5e:8a:6e:93:08:e0:25:30: 94:5a:58:1c:da:33:90:15:64:b8:0a:5c:39:61:d2: 23:9c:83:9f:44:69:0f:c4:e4:33:5c:3c:69:a1:f7: a8:60:fb:d1:ce:b4:b9:86:1a:31:46:c7:fb:2d:41: 53:7c:65:ec:8b:ea:87:2f:d0:2a:7b:67:68:90:06: 75:6d:b7:5c:42:8e:00:77:ce:5f:b6:87:59:46:8f: d6:6f:4e:1b:0e:5b:fd:30:ef:df:f4:98:a4:d5:04: b8:42:2f:c4:9a:09:f3:65:ff:1c:fe:b0:ff:78:26: c5:87:ca:9f:c1:64:84:95:26:76:4b:c4:e3:8e:e9: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2A:56:01:3C:87:FB:D8:B2:7C:4D:10:42:BE:2C:D2:E2:31:FC:73 X509v3 Authority Key Identifier: keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:83:87:02:a5:0c:a3:d5:8c:3e:af:91:e3:99:2d:0e:3b:bf: 97:f4:66:bc:27:65:5a:df:73:b6:60:ce:13:5d:18:4f:62:fe: 1a:9c:a8:ae:9d:e1:61:b0:85:93:b0:7c:3c:e0:d6:92:2f:8d: c6:a8:9e:b0:d4:6b:27:e9:d2:c0:6f:7b:01:8b:07:05:d5:30: f5:cb:31:1c:db:03:ec:3d:67:00:33:f7:43:37:a1:ab:cc:7e: cc:cc:36:9d:28:20:13:de:6c:29:bf:19:d1:0b:cd:63:de:96: 94:34:b6:df:7a:fe:96:ac:c6:9b:ff:ae:90:6a:f1:38:e4:26: 98:cd:56:1c:1a:b5:0e:9b:4c:08:50:37:d0:5b:32:fc:a3:93: 91:6d:e1:68:e4:0c:c8:d3:6a:73:03:5b:c3:ab:69:8b:73:93: 1b:fe:b9:43:7c:85:42:ec:72:4e:e7:7a:92:e3:b4:d9:48:63: d0:96:fd:2b:81:7c:8e:fb:c2:85:37:15:2f:d0:9a:78:8e:bb: f4:db:53:39:ee:9b:dc:4c:f8:a7:6e:58:0e:eb:ef:9d:0a:b4: cd:e1:64:04:02:63:37:d1:35:2e:9d:0d:2c:e1:b1:66:9c:32: 46:77:c8:09:53:fe:c7:30:88:c3:e2:97:e5:c0:92:45:d0:fb: 66:d4:a6:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MkIxMTAvBgNVBAUTKDUwNzE3RTlGQTBDQzM3QzQwNjdGODMzRTkwRkI3RTcy MTBGM0M1OTMwHhcNMjUwODIyMjEzNzIxWhcNMjUwODI5MjEzNzIxWjAYMRYwFAYD VQQDEw02OGE4ZTMxMS03YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AfkvUnb64+wxEaIlJe2T6qk5+o8EpysTKjubFj6k1ds8Hl0V6tOrm5BN4qV Ao3vu1M6AvhKIrCkbQVEtsF5quGZ0XnmyWtUvZv9Lo1FeRL51NLCwZa5Gxk3PaTP ct/V7EPEPKQwDRb1IC9zhqLTTu3SSix6FgBrKY47n9wJXopukwjgJTCUWlgc2jOQ FWS4Clw5YdIjnIOfRGkPxOQzXDxpofeoYPvRzrS5hhoxRsf7LUFTfGXsi+qHL9Aq e2dokAZ1bbdcQo4Ad85ftodZRo/Wb04bDlv9MO/f9Jik1QS4Qi/EmgnzZf8c/rD/ eCbFh8qfwWSElSZ2S8TjjulS9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQqVgE8 h/vYsnxNEEK+LNLiMfxzMB8GA1UdIwQYMBaAFFBxfp+gzDfEBn+DPpD7fnIQ88WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyQi9EODNENjI5NDFF NkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44UUdmNE0ta1B0LWNoRHp4 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIRi1uNkRNTjhRR2Y0TS1rUHQtY2hEenhaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyQi9EODNENjI5NDFFNkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44 UUdmNE0ta1B0LWNoRHp4Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEg4cCpQyj1Yw+r5HjmS0OO7+X9Ga8J2Va33O2YM4TXRhPYv4anKiu neFhsIWTsHw84NaSL43GqJ6w1Gsn6dLAb3sBiwcF1TD1yzEc2wPsPWcAM/dDN6Gr zH7MzDadKCAT3mwpvxnRC81j3paUNLbfev6WrMab/66QavE45CaYzVYcGrUOm0wI UDfQWzL8o5ORbeFo5AzI02pzA1vDq2mLc5Mb/rlDfIVC7HJO53qS47TZSGPQlv0r gXyO+8KFNxUv0Jp4jrv021M57pvcTPinblgO6++dCrTN4WQEAmM30TUunQ0s4bFm nDJGd8gJU/7HMIjD4pflwJJF0Ptm1Kah -----END CERTIFICATE-----Generated at Sat Aug 23 22:40:08 2025 by rpki-client