$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json) Hash identifier: 58yUohV9avS99YZr9Z+N1B7dpNee97PqoUSmHENl1Sk= Subject key identifier: 1C:72:71:8F:D6:F7:A8:FD:42:A5:76:3F:F7:73:D0:0C:54:E5:74:C0 Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft Manifest number: 0184 Signing time: Sat 23 Aug 2025 03:46:23 +0000 Manifest this update: Sat 23 Aug 2025 03:46:23 +0000 Manifest next update: Sat 30 Aug 2025 03:46:23 +0000 Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: p3MO+gvOF0uc5pzGKSHD8G/1uZB1MrsRP/M1rLrq83s=) 2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: XriNyYQKMZeCx4DyUlQQcZMbwakRSuvthukZKTR7zuU=) 3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: foSc151i9Iw1FdFYIvaUCOjJLGeEf5CPJvtL9xEjyMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Validity Not Before: Aug 23 03:46:23 2025 GMT Not After : Aug 30 03:46:23 2025 GMT Subject: CN=68a9398f-40ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:b6:c6:91:eb:de:ac:0d:c0:85:b2:f4:db: 6e:42:d5:c8:fe:30:0e:fd:3e:74:f8:3c:1c:86:be: f3:08:54:83:b8:b8:8e:cf:0c:e1:e3:ab:87:8c:9f: 88:70:33:c5:63:26:dd:c0:24:01:45:e1:49:f7:23: 3b:ce:03:5d:66:2c:02:25:df:cf:5a:50:8c:70:6e: 82:c4:63:3c:4a:3a:7d:32:28:d7:08:07:9a:11:0a: 08:25:c4:bc:3d:85:af:67:78:3f:c7:66:a1:b6:e7: 0a:6c:1b:c7:5f:22:be:d8:9b:03:f1:5d:b0:69:05: 9e:6c:c9:94:8e:8a:f0:44:93:d8:ba:49:36:32:76: 00:bb:f2:a9:70:42:7c:a9:cf:4b:50:49:d9:0b:ad: df:ab:a8:f7:b8:42:27:33:a9:b8:97:74:5a:20:e7: de:9a:37:b6:16:5b:2c:50:f9:7f:37:ec:0f:58:59: a3:58:1d:4e:c5:49:74:5c:66:aa:1e:27:13:bf:da: f9:5c:09:8c:84:81:e3:ce:36:f1:ff:3c:70:2f:7c: 8a:78:04:2a:30:2a:08:a7:a1:bb:78:b3:9f:d6:68: 8a:eb:24:ef:ff:32:11:93:08:be:d9:f7:1d:0a:3b: 80:61:c7:69:0b:cf:65:9d:90:71:6c:9e:19:f8:6a: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:72:71:8F:D6:F7:A8:FD:42:A5:76:3F:F7:73:D0:0C:54:E5:74:C0 X509v3 Authority Key Identifier: keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a6:e4:9a:86:5e:92:69:f5:d4:43:d6:9d:58:1d:bb:bc:ed: 1a:39:e4:e2:2b:94:30:c5:c9:f4:94:dc:58:e7:0e:df:d1:ec: 34:81:c3:bb:7a:89:75:5e:46:5b:9c:bd:c3:27:47:50:f4:42: 33:54:86:ef:d1:61:53:b4:12:d1:c2:4a:76:76:ea:8a:a9:16: 7f:a7:21:39:e2:14:1d:8f:af:ed:ee:ac:a2:18:2d:ba:95:a8: e6:58:f2:45:b4:5c:77:07:67:e6:e2:36:15:3a:ca:6f:f1:b7: 43:8d:0a:a4:a4:ff:ff:ca:88:d7:99:43:1c:99:e7:ad:63:56: 89:9b:58:09:82:e7:e8:ed:af:d4:58:90:ea:36:a8:f7:1b:f5: fc:77:66:16:11:f3:64:63:f6:82:1d:32:2c:17:0c:6b:4e:7e: 1a:75:d1:81:32:bb:be:78:22:f1:c8:6e:1c:c3:ce:bf:b2:28: bc:55:16:85:b2:15:45:5a:24:fe:1f:f0:c7:36:a8:13:de:57: d8:f3:3b:19:08:e7:7a:74:cc:f0:6e:5b:33:f0:d4:8f:ca:84: 6f:f2:fd:6a:8b:08:ba:b5:41:d0:b4:80:90:ce:60:a6:e7:81: 61:ec:11:65:fb:12:f0:05:59:c5:fe:11:68:5b:a2:2c:04:23: 36:b2:ba:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD NjZFMTJDOUYwHhcNMjUwODIzMDM0NjIzWhcNMjUwODMwMDM0NjIzWjAYMRYwFAYD VQQDEw02OGE5Mzk4Zi00MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPm2xpHr3qwNwIWy9NtuQtXI/jAO/T50+Dwchr7zCFSDuLiOzwzh46uHjJ+I cDPFYybdwCQBReFJ9yM7zgNdZiwCJd/PWlCMcG6CxGM8Sjp9MijXCAeaEQoIJcS8 PYWvZ3g/x2ahtucKbBvHXyK+2JsD8V2waQWebMmUjorwRJPYukk2MnYAu/KpcEJ8 qc9LUEnZC63fq6j3uEInM6m4l3RaIOfemje2FlssUPl/N+wPWFmjWB1OxUl0XGaq HicTv9r5XAmMhIHjzjbx/zxwL3yKeAQqMCoIp6G7eLOf1miK6yTv/zIRkwi+2fcd CjuAYcdpC89lnZBxbJ4Z+GoDXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxycY/W 96j9QqV2P/dz0AxU5XTAMB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0 RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjBGQS8yMDZERkM1MDM0RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3 cnR4WkhfeU56YW5HYmhMSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZpuSahl6SafXUQ9adWB27vO0aOeTiK5Qwxcn0lNxY5w7f0ew0gcO7 eol1XkZbnL3DJ0dQ9EIzVIbv0WFTtBLRwkp2duqKqRZ/pyE54hQdj6/t7qyiGC26 lajmWPJFtFx3B2fm4jYVOspv8bdDjQqkpP//yojXmUMcmeetY1aJm1gJgufo7a/U WJDqNqj3G/X8d2YWEfNkY/aCHTIsFwxrTn4addGBMru+eCLxyG4cw86/sii8VRaF shVFWiT+H/DHNqgT3lfY8zsZCOd6dMzwblsz8NSPyoRv8v1qiwi6tUHQtICQzmCm 54Fh7BFl+xLwBVnF/hFoW6IsBCM2srod -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:25 2025 by rpki-client