$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json) Hash identifier: CMQArPYsgikfNrE4nkhH51Gq4xknwAFxPKWW9230EaQ= Subject key identifier: 28:89:DE:74:44:E1:97:97:44:68:45:36:6C:BA:96:91:DE:E5:B0:69 Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft Manifest number: 016A Signing time: Thu 03 Jul 2025 04:01:58 +0000 Manifest this update: Thu 03 Jul 2025 04:01:58 +0000 Manifest next update: Thu 10 Jul 2025 04:01:58 +0000 Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: u+f1QwHbPFa9Ggaqv7jssqdhJLXOGk87KOYpq/+oNoQ=) 2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: XriNyYQKMZeCx4DyUlQQcZMbwakRSuvthukZKTR7zuU=) 3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: foSc151i9Iw1FdFYIvaUCOjJLGeEf5CPJvtL9xEjyMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Validity Not Before: Jul 3 04:01:58 2025 GMT Not After : Jul 10 04:01:58 2025 GMT Subject: CN=686600b6-ef34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:98:3c:d7:29:65:28:f1:ab:43:e1:fe:f6: a9:23:8b:41:fc:7d:25:0a:0a:a3:dc:88:40:dd:ed: ba:04:16:65:35:c2:a2:64:87:6b:1f:7e:80:10:5e: f9:cf:5a:0d:da:ab:08:e7:80:03:d4:49:6d:46:28: 35:67:ec:27:79:6e:9a:86:0d:a2:24:2b:c9:17:d4: 70:dd:10:c5:df:4f:36:f7:39:96:c8:ac:2d:06:d1: 34:38:5e:68:85:77:b0:23:3d:4b:10:10:57:44:94: d5:1a:fc:d6:85:6c:c5:22:6a:bd:16:1f:e4:e6:25: 9a:a9:04:f5:82:0b:23:cd:1a:98:61:24:fb:6a:c6: d0:e1:4d:5f:04:74:4e:a7:cd:e6:27:3e:54:c5:f7: 2c:08:76:7b:f1:98:3f:17:7c:29:a8:99:90:45:d1: 2a:42:3c:96:f0:ed:0b:ee:07:f1:46:cb:ba:c2:db: 55:95:f7:97:ed:35:99:49:3f:85:e6:07:ec:3c:e3: 9b:2c:7d:fd:ab:fc:10:4b:7e:4c:65:1c:c3:23:e3: 36:a8:60:59:bc:41:bc:ef:e7:d0:33:fb:f9:69:74: 7c:5b:55:0b:f5:15:74:59:2a:5d:6b:7a:21:31:c3: 61:fe:19:a8:6c:4f:07:53:b2:a7:56:67:c8:d9:fc: 35:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:89:DE:74:44:E1:97:97:44:68:45:36:6C:BA:96:91:DE:E5:B0:69 X509v3 Authority Key Identifier: keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:34:47:92:0b:8d:54:81:1d:fe:f4:56:f7:1c:13:42:3d:86: ce:b4:d9:17:0d:a0:05:b1:77:93:3a:11:e2:65:53:95:85:3d: 88:b4:08:8e:fe:d2:22:3a:5d:b8:cc:81:df:45:ac:09:f3:01: 09:76:8e:97:36:31:0e:e1:c7:34:a6:40:d5:5b:5c:1c:09:7f: af:63:02:34:5f:37:36:55:1d:5f:1b:e9:f7:0b:00:c3:37:10: bc:77:b3:3d:84:c9:1c:96:7c:70:ff:5b:2f:23:0e:6c:c2:e5: 42:a2:9e:6c:3d:cd:66:60:52:d6:f1:f5:5d:7e:ee:65:f6:1d: 9f:a3:c6:09:46:e5:88:55:ca:22:60:0c:ef:85:a6:a7:25:9a: 75:3d:8d:aa:95:ed:a0:27:24:84:be:8d:fe:84:6c:29:e2:0d: ec:87:d0:cb:7c:00:04:38:36:5d:16:a5:85:8f:62:4e:4c:e3: 06:e2:85:75:a4:a4:92:82:f4:51:41:04:1c:75:27:3c:1a:33: c8:37:d6:ea:9d:7c:c4:5a:f0:02:1d:d8:90:1b:69:39:53:84: ca:ef:3c:10:aa:00:91:8f:8b:04:05:84:d3:bf:a6:b6:c7:cc: 31:d4:76:96:1d:a7:a5:c2:2d:75:be:7a:1f:27:f4:de:80:49: 6a:e6:2c:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD NjZFMTJDOUYwHhcNMjUwNzAzMDQwMTU4WhcNMjUwNzEwMDQwMTU4WjAYMRYwFAYD VQQDEw02ODY2MDBiNi1lZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOmYPNcpZSjxq0Ph/vapI4tB/H0lCgqj3IhA3e26BBZlNcKiZIdrH36AEF75 z1oN2qsI54AD1EltRig1Z+wneW6ahg2iJCvJF9Rw3RDF30829zmWyKwtBtE0OF5o hXewIz1LEBBXRJTVGvzWhWzFImq9Fh/k5iWaqQT1ggsjzRqYYST7asbQ4U1fBHRO p83mJz5UxfcsCHZ78Zg/F3wpqJmQRdEqQjyW8O0L7gfxRsu6wttVlfeX7TWZST+F 5gfsPOObLH39q/wQS35MZRzDI+M2qGBZvEG87+fQM/v5aXR8W1UL9RV0WSpda3oh McNh/hmobE8HU7KnVmfI2fw1+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiJ3nRE 4ZeXRGhFNmy6lpHe5bBpMB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0 RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjBGQS8yMDZERkM1MDM0RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3 cnR4WkhfeU56YW5HYmhMSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCONEeSC41UgR3+9Fb3HBNCPYbOtNkXDaAFsXeTOhHiZVOVhT2ItAiO /tIiOl24zIHfRawJ8wEJdo6XNjEO4cc0pkDVW1wcCX+vYwI0Xzc2VR1fG+n3CwDD NxC8d7M9hMkclnxw/1svIw5swuVCop5sPc1mYFLW8fVdfu5l9h2fo8YJRuWIVcoi YAzvhaanJZp1PY2qle2gJySEvo3+hGwp4g3sh9DLfAAEODZdFqWFj2JOTOMG4oV1 pKSSgvRRQQQcdSc8GjPIN9bqnXzEWvACHdiQG2k5U4TK7zwQqgCRj4sEBYTTv6a2 x8wx1HaWHaelwi11vnofJ/TegElq5iz2 -----END CERTIFICATE-----Generated at Thu Jul 3 15:07:24 2025 by rpki-client