$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json) Hash identifier: 8BwRNhgcA18xRPysWWtgcYFt2m0mI5sTuzLNpGEO9vc= Subject key identifier: 64:C5:CD:8F:42:7E:AB:6B:CC:5B:C1:CE:33:38:8B:0A:CA:39:51:FA Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Certificate serial: 0C13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft Manifest number: 0BF4 Signing time: Fri 22 Aug 2025 19:01:05 +0000 Manifest this update: Fri 22 Aug 2025 19:01:04 +0000 Manifest next update: Fri 29 Aug 2025 19:01:04 +0000 Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: lTjlzF/8MvzQ3/BDKwUftWSvqNg7GlwLz3DRIE9wQrQ=) 2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 8xiW94BgUeQq9ZYVRmXYA3GrrXRDCnXkWRMC2enXdlY=) 3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZnbBQLWijX811JvZiE0GpFPKxpLE1gcXnN9dflC4yH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3091 (0xc13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507 Validity Not Before: Aug 22 19:01:04 2025 GMT Not After : Aug 29 19:01:04 2025 GMT Subject: CN=68a8be71-683d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:cb:46:ac:92:72:d5:e0:64:45:60:68:1e: 53:4b:39:88:9a:6b:2d:79:b5:75:c8:cc:29:91:f2: c2:7e:85:a4:7e:98:c7:43:45:4a:06:3e:9e:58:75: 00:5c:ce:e3:62:d3:fe:ba:9e:16:f8:b4:74:9b:ed: 10:1e:9b:f8:96:40:aa:22:c3:9c:6a:be:e7:53:b3: 5b:a3:8f:e4:f7:58:f5:77:4c:3e:b8:72:13:8c:34: 76:81:29:bf:d2:b3:c5:1f:61:ad:9e:2d:2e:d8:d3: 78:e3:ee:07:fe:d2:2f:aa:ed:be:f4:71:9c:59:d0: e1:69:56:5c:bf:f4:f9:9b:c6:29:34:c0:d4:d5:84: 7d:ec:cc:ab:88:10:86:a3:d0:dd:dc:b5:a2:c2:8d: d4:9d:80:79:b8:91:c8:6a:c3:cd:6d:5e:76:05:1d: 97:a3:15:44:9a:79:d4:f1:90:5b:cc:5e:98:4a:87: 67:d9:f0:6b:0c:c6:1b:71:98:4f:c0:69:e0:de:9b: 7c:60:5a:c7:f3:7d:52:63:a9:1b:5d:d1:44:f4:e8: 8d:b1:0a:30:cf:39:be:13:9c:f6:87:cc:90:f9:75: 39:ca:a8:a2:da:05:5a:92:60:46:c1:d0:3e:f7:20: 98:b9:49:10:b9:7d:58:3e:28:41:74:eb:c3:d5:a2: 0b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C5:CD:8F:42:7E:AB:6B:CC:5B:C1:CE:33:38:8B:0A:CA:39:51:FA X509v3 Authority Key Identifier: keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:1a:6c:74:46:04:62:6e:14:1a:2e:38:28:f7:1d:0b:67:e7: a6:60:fe:9f:6d:75:c5:56:f5:6a:ec:f9:fb:7d:89:ae:3b:49: e1:bd:39:c6:53:d9:90:e3:68:ba:5a:0d:df:25:c1:3c:ed:eb: 25:54:77:c0:9d:58:8f:31:77:38:12:a0:9d:bf:d0:84:28:03: 3b:89:16:9a:a6:bb:64:75:fa:94:dd:f7:70:26:69:94:fd:e3: 21:2f:8e:f1:98:b7:da:f8:90:ae:f1:de:92:b2:16:b1:27:ef: a0:31:72:4f:ff:c7:c2:88:40:e6:2e:5d:81:d2:5e:3a:53:8c: f3:02:83:49:83:7d:dd:f1:cf:12:23:03:12:9d:82:1b:d1:5c: d1:b8:f1:45:c5:1a:fc:a9:68:a5:29:8f:fb:bf:9d:cc:9a:16: 2f:68:cc:3b:44:fd:7e:27:98:06:fa:32:c2:c7:10:2b:1c:ea: de:52:d3:33:25:7c:2c:9c:bb:5c:81:37:33:01:d5:68:8e:f0: 7a:c2:b4:67:e0:0d:c0:d3:ca:af:21:dd:20:c0:74:e8:c1:52: 8f:4b:9a:e9:06:97:da:7a:25:2e:7a:9b:2c:7c:18:b4:4a:32: f1:cd:45:83:cf:35:ec:15:a7:e9:4b:c6:51:a3:73:18:8d:13: 80:de:10:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz RDcyRTk1MDcwHhcNMjUwODIyMTkwMTA0WhcNMjUwODI5MTkwMTA0WjAYMRYwFAYD VQQDEw02OGE4YmU3MS02ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4TLRqySctXgZEVgaB5TSzmImmstebV1yMwpkfLCfoWkfpjHQ0VKBj6eWHUA XM7jYtP+up4W+LR0m+0QHpv4lkCqIsOcar7nU7Nbo4/k91j1d0w+uHITjDR2gSm/ 0rPFH2Gtni0u2NN44+4H/tIvqu2+9HGcWdDhaVZcv/T5m8YpNMDU1YR97MyriBCG o9Dd3LWiwo3UnYB5uJHIasPNbV52BR2XoxVEmnnU8ZBbzF6YSodn2fBrDMYbcZhP wGng3pt8YFrH831SY6kbXdFE9OiNsQowzzm+E5z2h8yQ+XU5yqii2gVakmBGwdA+ 9yCYuUkQuX1YPihBdOvD1aIL5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTFzY9C fqtrzFvBzjM4iwrKOVH6MB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Gmx0RgRibhQaLjgo9x0LZ+emYP6fbXXFVvVq7Pn7fYmuO0nhvTnG U9mQ42i6Wg3fJcE87eslVHfAnViPMXc4EqCdv9CEKAM7iRaaprtkdfqU3fdwJmmU /eMhL47xmLfa+JCu8d6SshaxJ++gMXJP/8fCiEDmLl2B0l46U4zzAoNJg33d8c8S IwMSnYIb0VzRuPFFxRr8qWilKY/7v53MmhYvaMw7RP1+J5gG+jLCxxArHOreUtMz JXwsnLtcgTczAdVojvB6wrRn4A3A08qvId0gwHTowVKPS5rpBpfaeiUuepssfBi0 SjLxzUWDzzXsFafpS8ZRo3MYjROA3hAp -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:07 2025 by rpki-client