$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft File: Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft (raw, json) Hash identifier: NvfO6BnmKYnfQmPgc67uQ8z7cGq1wXQmRrt+O94oplI= Subject key identifier: 5B:76:55:9B:1C:8A:63:B6:0B:FD:2C:3E:43:65:61:4B:FC:33:4A:BB Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 Certificate issuer: /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft Manifest number: 0670 Signing time: Fri 22 Aug 2025 22:41:01 +0000 Manifest this update: Fri 22 Aug 2025 22:41:00 +0000 Manifest next update: Fri 29 Aug 2025 22:41:00 +0000 Files and hashes: 1: Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl (hash: xtnEfoJ1s1E2PanX2xnGrKT/bdqTAh4hqHW4pUhnU3g=) 2: 59018DEE340611ED9C72786AC4F9AE02.roa (hash: rP6Pu7EfL4ZTfd4hkNZXRMND1x04kCFhfmQKKfFcDnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Validity Not Before: Aug 22 22:41:00 2025 GMT Not After : Aug 29 22:41:00 2025 GMT Subject: CN=68a8f1fc-8a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:1c:15:26:da:6b:a8:12:fd:60:1c:05:8e: fd:ad:3a:3d:f4:17:d1:a6:46:a5:48:32:c1:a1:1d: 6c:c3:49:0e:bc:76:80:ac:42:64:29:cd:f7:3c:41: 62:fd:72:c7:bf:8a:b0:33:2e:4a:4f:2b:eb:2e:84: b7:6f:38:9f:71:60:d6:12:22:76:66:aa:cd:4f:e8: c9:83:ba:2c:29:9b:14:3f:dd:aa:d7:44:1f:d1:35: a9:17:54:77:13:77:28:f6:60:63:f7:bd:53:fc:32: 1e:fa:88:e3:b7:3f:6a:72:64:92:de:34:6a:54:2b: 6d:66:ac:01:09:40:99:a9:91:02:6d:9d:62:70:a3: 16:cf:c1:18:5b:ee:52:ba:9b:b0:7f:e8:45:a4:a1: ba:3d:cd:40:7f:d7:2b:54:ba:ab:f0:05:06:a4:2f: ad:e6:e6:62:5e:a3:f8:f0:42:7d:ef:c0:f3:82:b4: 25:12:cb:cd:10:1c:d4:8e:64:b2:d1:44:08:26:98: 9c:81:6a:eb:65:c3:63:b0:41:f1:86:8a:1c:b5:d9: 35:ef:62:dc:e5:e1:20:e6:e3:18:ae:eb:ad:74:b7: 2e:93:d8:4f:06:ba:7d:85:06:0c:94:d2:80:ce:18: fd:e4:0b:1f:ab:30:4e:04:db:93:67:11:dc:f8:c1: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:76:55:9B:1C:8A:63:B6:0B:FD:2C:3E:43:65:61:4B:FC:33:4A:BB X509v3 Authority Key Identifier: keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:7c:ed:0e:8e:c1:1f:32:81:c5:c3:0b:a8:39:de:0d:9b:00: ac:9f:35:93:40:55:ff:0f:f5:f1:8e:72:f1:79:57:e3:db:8e: 4b:ab:ae:6f:b3:3c:aa:05:8a:1f:e0:26:c9:6f:e2:bc:d0:34: 33:f4:31:cf:90:31:d8:4c:c9:77:58:70:ba:6b:28:df:ad:df: 57:b7:25:a0:f5:6e:8f:73:6d:da:87:da:ea:36:3b:66:f9:2a: 20:5f:4f:cf:32:94:79:18:0c:a8:45:71:b3:ad:de:5c:07:45: f2:70:f8:23:06:8a:01:68:c5:84:f7:b9:4a:06:55:8c:07:c6: bf:84:dd:7e:13:8c:4b:73:49:b4:0f:af:44:62:17:32:d3:bd: 38:bf:35:2c:d0:69:67:a7:8e:d4:40:27:82:f1:6e:7e:b6:cc: ae:db:fe:e8:98:1a:c6:20:c5:84:e4:75:03:9f:d3:43:2d:3c: 5b:90:f3:3c:59:60:e3:02:3e:7c:69:d8:53:1c:f3:2e:28:54: 16:15:99:8e:6c:2b:ad:0d:d9:03:1d:0a:50:de:8a:c3:d6:71: e9:9c:bc:f5:e3:77:8e:31:8c:b9:20:f3:35:e0:ff:d1:7d:1e: a0:16:5f:b4:02:1f:d6:35:ee:fd:22:18:69:c2:a1:ee:bd:81: f3:cf:14:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCMzMxMTAvBgNVBAUTKDUxQUVCQTIzRkI3NDVBNTUzQTVFNDk5NkRGMUM4MTcz NDczRjE3OTgwHhcNMjUwODIyMjI0MTAwWhcNMjUwODI5MjI0MTAwWjAYMRYwFAYD VQQDEw02OGE4ZjFmYy04YTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUocFSbaa6gS/WAcBY79rTo99BfRpkalSDLBoR1sw0kOvHaArEJkKc33PEFi /XLHv4qwMy5KTyvrLoS3bzifcWDWEiJ2ZqrNT+jJg7osKZsUP92q10Qf0TWpF1R3 E3co9mBj971T/DIe+ojjtz9qcmSS3jRqVCttZqwBCUCZqZECbZ1icKMWz8EYW+5S upuwf+hFpKG6Pc1Af9crVLqr8AUGpC+t5uZiXqP48EJ978DzgrQlEsvNEBzUjmSy 0UQIJpicgWrrZcNjsEHxhooctdk172Lc5eEg5uMYruutdLcuk9hPBrp9hQYMlNKA zhj95AsfqzBOBNuTZxHc+MHNpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt2VZsc imO2C/0sPkNlYUv8M0q7MB8GA1UdIwQYMBaAFFGuuiP7dFpVOl5Jlt8cgXNHPxeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9DRDM1REIxQTkx MjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFdsVTZYa21XM3h5QmMwY19G NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhNjZJX3QwV2xVNlhrbVczeHlCYzBjX0Y1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0IzMy9DRDM1REIxQTkxMjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFds VTZYa21XM3h5QmMwY19GNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIfO0OjsEfMoHFwwuoOd4NmwCsnzWTQFX/D/XxjnLxeVfj245Lq65v szyqBYof4CbJb+K80DQz9DHPkDHYTMl3WHC6ayjfrd9XtyWg9W6Pc23ah9rqNjtm +SogX0/PMpR5GAyoRXGzrd5cB0XycPgjBooBaMWE97lKBlWMB8a/hN1+E4xLc0m0 D69EYhcy0704vzUs0Glnp47UQCeC8W5+tsyu2/7omBrGIMWE5HUDn9NDLTxbkPM8 WWDjAj58adhTHPMuKFQWFZmObCutDdkDHQpQ3orD1nHpnLz143eOMYy5IPM14P/R fR6gFl+0Ah/WNe79IhhpwqHuvYHzzxRw -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:23 2025 by rpki-client