$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft File: uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json) Hash identifier: If2T40AkXnFk9jdTBhLohfwvjzGTkW/PDj9QBFMGX8s= Subject key identifier: 75:FB:B4:96:91:AC:44:FD:98:6D:C8:50:53:3C:DC:03:CF:27:3E:3D Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 Certificate issuer: /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft Manifest number: A5 Signing time: Sat 23 Aug 2025 06:27:02 +0000 Manifest this update: Sat 23 Aug 2025 06:27:02 +0000 Manifest next update: Sat 30 Aug 2025 06:27:01 +0000 Files and hashes: 1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: 5Usvi4x7SPFT8bvQylaIju6yrqwkEtMyQwvWJUQeBWU=) 2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: ZCgG7FYX4Z+FrZu/NpwbDBG7rLXKjEvv9WpnC42UALI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Validity Not Before: Aug 23 06:27:02 2025 GMT Not After : Aug 30 06:27:01 2025 GMT Subject: CN=68a95f36-df12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:41:b8:b1:95:e1:7a:97:c0:6f:2d:1f:43:f2: 7e:10:37:98:61:de:14:ad:1b:5e:6f:d4:47:db:7f: eb:df:d7:4b:c4:f1:f6:92:d6:3d:67:b7:5f:48:8f: 0e:eb:bd:a5:1d:12:7c:de:02:77:26:05:2d:51:8a: ab:7e:42:b1:8c:ed:b7:f1:3a:b9:c1:f9:5d:c6:53: 25:ae:96:c8:a8:a8:a4:28:64:15:c4:3d:5f:91:87: 24:23:6f:4b:7b:4a:1e:82:f9:c0:4b:a2:f9:d0:f3: 4f:8d:75:d4:a1:db:c3:eb:fd:15:2b:05:ab:a8:9a: 97:73:a8:38:8c:7f:cc:48:2d:6d:19:11:82:74:0b: 41:b6:01:7c:ba:c6:16:f0:11:09:01:ac:85:08:8d: 96:3e:52:f1:c4:ef:e6:d4:ab:53:2c:c0:a3:b1:3a: af:d0:2c:e8:67:51:93:38:9a:10:48:b3:df:0a:30: 97:03:9e:5c:dd:3d:31:0a:bc:53:9e:b9:4c:72:66: 2d:3d:f7:46:91:fd:0b:b3:c6:be:74:0a:f3:67:ec: 74:60:fb:98:71:b7:dd:bd:53:b7:14:b8:fe:c7:fe: d7:bd:59:ef:b3:a7:16:91:0c:c8:20:d4:5c:38:7e: 9b:c9:d7:51:e1:60:53:f8:5b:04:d3:2c:90:6d:7c: 0c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FB:B4:96:91:AC:44:FD:98:6D:C8:50:53:3C:DC:03:CF:27:3E:3D X509v3 Authority Key Identifier: keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4a:b0:cc:21:9c:53:f9:2d:42:51:85:2f:f9:cb:04:98:19: 35:ec:6f:e8:ef:3e:96:52:6e:1a:82:0c:b8:46:eb:52:59:8c: d5:1c:9b:da:e0:91:60:7c:77:48:cc:95:a5:ef:a5:c6:c2:03: 4e:41:0e:49:c1:50:f8:19:fb:56:9f:51:e5:d1:60:63:7d:d3: cb:94:9f:a3:07:87:75:95:74:6a:0e:f3:94:f1:e2:47:e0:57: e8:5a:9c:c8:e5:77:fb:1c:fc:17:34:bc:80:60:20:73:5d:e7: c7:67:03:26:44:44:dd:eb:44:70:90:47:89:fd:58:2a:75:52: b0:0c:98:53:dc:f4:9b:de:40:8e:2e:0d:39:07:18:0a:e0:90: 25:6d:76:8c:53:39:d8:1a:92:ed:70:e0:31:e0:de:7f:d5:ab: 41:63:d3:44:1a:d5:1b:25:cd:9e:27:77:01:1e:54:8b:61:c8: 6b:ed:97:e1:dc:af:6f:86:58:e8:e9:34:51:75:81:c3:c4:1d: 78:2f:a2:8a:5f:60:20:2e:45:f7:10:06:8c:4e:00:5a:a4:3a: a4:f8:a6:a8:d6:51:1c:f5:7a:4b:c5:6f:03:c7:bf:8f:0f:42: 09:15:7f:be:11:eb:61:f9:52:da:18:e2:bd:bb:06:79:c6:de: ef:44:a8:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3OEUxMTAvBgNVBAUTKEI4QzE5ODUyQUVDN0RBNTFBNDUwQkU3REE3RDk1ODcz QkVERTM3MzQwHhcNMjUwODIzMDYyNzAyWhcNMjUwODMwMDYyNzAxWjAYMRYwFAYD VQQDEw02OGE5NWYzNi1kZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EG4sZXhepfAby0fQ/J+EDeYYd4UrRteb9RH23/r39dLxPH2ktY9Z7dfSI8O 672lHRJ83gJ3JgUtUYqrfkKxjO238Tq5wfldxlMlrpbIqKikKGQVxD1fkYckI29L e0oegvnAS6L50PNPjXXUodvD6/0VKwWrqJqXc6g4jH/MSC1tGRGCdAtBtgF8usYW 8BEJAayFCI2WPlLxxO/m1KtTLMCjsTqv0CzoZ1GTOJoQSLPfCjCXA55c3T0xCrxT nrlMcmYtPfdGkf0Ls8a+dArzZ+x0YPuYcbfdvVO3FLj+x/7XvVnvs6cWkQzIINRc OH6byddR4WBT+FsE0yyQbXwMSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHX7tJaR rET9mG3IUFM83APPJz49MB8GA1UdIwQYMBaAFLjBmFKux9pRpFC+fafZWHO+3jc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Qzc4RS9BMDIwMUIyMDg2 REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJsR2tVTDU5cDlsWWM3N2VO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VNR1lVcTdIMmxHa1VMNTlwOWxZYzc3ZU56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Qzc4RS9BMDIwMUIyMDg2REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJs R2tVTDU5cDlsWWM3N2VOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtSrDMIZxT+S1CUYUv+csEmBk17G/o7z6WUm4aggy4RutSWYzVHJva 4JFgfHdIzJWl76XGwgNOQQ5JwVD4GftWn1Hl0WBjfdPLlJ+jB4d1lXRqDvOU8eJH 4FfoWpzI5Xf7HPwXNLyAYCBzXefHZwMmRETd60RwkEeJ/VgqdVKwDJhT3PSb3kCO Lg05BxgK4JAlbXaMUznYGpLtcOAx4N5/1atBY9NEGtUbJc2eJ3cBHlSLYchr7Zfh 3K9vhljo6TRRdYHDxB14L6KKX2AgLkX3EAaMTgBapDqk+Kao1lEc9XpLxW8Dx7+P D0IJFX++Eeth+VLaGOK9uwZ5xt7vRKi9 -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:05 2025 by rpki-client