$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft File: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft (raw, json) Hash identifier: weRWbwyr2Lcr4bZ2hKabsGFhWd7Esy6j/1YXWQedZRE= Subject key identifier: 5A:22:54:C2:64:24:38:9B:DE:72:4A:89:68:C3:DF:98:26:C1:5A:C6 Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4 Certificate issuer: /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft Manifest number: D5 Signing time: Sat 23 Aug 2025 05:53:55 +0000 Manifest this update: Sat 23 Aug 2025 05:53:54 +0000 Manifest next update: Sat 30 Aug 2025 05:53:54 +0000 Files and hashes: 1: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl (hash: mxy4Ov1ArvK2+J7jsA9UYFxM2PlTx/IEh0Leiqgr4Io=) 2: D5C6712C2BF811F0A209EF6DC4F9AE02.roa (hash: 8rr+Ae0hpqDQA95PGvgN3goNJqA35l83x4zl3ssPb/c=) 3: 627CDAE66FE011EF937A9931C4F9AE02.roa (hash: sF1oxR3P0INbgPwkH87j+/9/A1n7qBr9P83Zm+8FV2A=) 4: AC038F18740611F0B304387CC4F9AE02.roa (hash: Odj1pliiYQRq/sR/Y5HzPODQczZMdgtZfqLJSE59i+w=) 5: 4C7FE6802C7711F084452D84C4F9AE02.roa (hash: DoSA6UaERiqEdMCY3op+YtVmTlaoSDMgolhw801td7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4 Validity Not Before: Aug 23 05:53:54 2025 GMT Not After : Aug 30 05:53:54 2025 GMT Subject: CN=68a95772-dd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e7:6d:64:6e:61:84:5d:40:d1:8c:0f:7a:7f: 00:3f:13:a9:98:f9:27:dc:80:b7:c9:d0:06:b5:95: 3f:60:e1:ba:b7:aa:f2:aa:9f:66:d3:34:2c:31:4c: a5:e8:5b:c8:c3:aa:aa:49:9f:65:d8:46:ad:a1:01: 2e:d8:eb:e0:f3:bd:6f:76:ed:7c:b4:45:fe:ec:bf: c7:12:87:80:eb:30:49:ce:1e:2d:98:3f:3f:b7:22: 02:4d:d9:a5:40:2f:4a:14:bb:01:e6:b1:05:08:64: 5f:59:dc:68:75:b3:db:e5:dc:82:36:6d:e2:2a:9b: 52:02:6e:01:f2:8f:af:7e:88:6e:bf:f8:4f:b5:60: 80:27:4c:15:0f:78:eb:6c:a1:72:ba:8c:14:c2:e5: fa:e6:09:39:69:33:28:03:62:62:ac:26:a0:cc:f7: 3c:66:91:15:ae:68:8b:0b:b7:02:6f:2e:93:52:c6: c5:3c:dc:78:bf:47:95:75:e0:d0:5e:45:1c:c4:c7: 56:a7:88:ab:3a:e1:4b:99:df:90:03:75:a0:1a:5e: d7:54:2c:61:3d:3e:09:86:b3:e4:bd:b2:54:0c:41: 57:f2:58:fe:f3:0b:db:ad:95:ac:da:73:00:d3:1f: d3:55:21:f6:c1:90:2a:55:f2:e6:1c:c6:14:c8:7c: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:22:54:C2:64:24:38:9B:DE:72:4A:89:68:C3:DF:98:26:C1:5A:C6 X509v3 Authority Key Identifier: keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:64:dc:ea:d4:b0:b9:16:29:8f:31:f8:c7:46:27:a9:e2:9c: 56:b8:3c:77:42:37:97:ee:00:6d:f4:10:0c:a1:6e:e7:65:f9: 9a:37:4b:51:dd:98:51:ab:d2:a1:af:a4:f1:c1:26:24:df:ef: 8d:ad:0e:9a:78:08:81:81:5d:15:d0:fb:60:ab:6d:19:00:10: 9b:34:5b:9d:a5:85:c7:51:3f:fa:57:27:7c:41:3f:58:d9:36: 29:ed:02:db:22:c2:d4:c4:1f:f7:88:c0:10:68:79:b8:6c:32: 67:6c:cb:e7:c8:91:7d:b7:a7:ea:18:05:8d:16:71:2d:00:0d: 99:a9:2a:26:67:34:fc:d5:90:56:3d:50:cf:7f:05:3c:1a:4e: 3b:53:d8:2b:14:06:55:62:e1:ec:a4:84:44:56:5f:21:0a:a1: de:f8:ce:ff:89:76:cc:a7:b6:97:d8:6d:8b:96:55:02:10:d6: 7a:3b:70:8e:e7:5d:c9:4f:46:88:87:60:8a:99:63:8b:0c:09: 2a:f2:7a:70:a2:e6:72:46:dc:35:a5:52:b1:ab:7d:9e:3f:04: 33:99:21:86:9b:79:05:52:4d:8d:7b:6a:80:5f:79:d7:bf:80: 79:fc:3c:55:ed:03:2b:b6:69:b2:f4:81:42:a5:39:27:fb:79: 69:4f:f9:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0OUMxMTAvBgNVBAUTKDUyRURGRURGRUExNTM1QzEzRUU4QTAwRTU1RkM3RDUx NDQ2RDY3RDQwHhcNMjUwODIzMDU1MzU0WhcNMjUwODMwMDU1MzU0WjAYMRYwFAYD VQQDEw02OGE5NTc3Mi1kZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+dtZG5hhF1A0YwPen8APxOpmPkn3IC3ydAGtZU/YOG6t6ryqp9m0zQsMUyl 6FvIw6qqSZ9l2EatoQEu2Ovg871vdu18tEX+7L/HEoeA6zBJzh4tmD8/tyICTdml QC9KFLsB5rEFCGRfWdxodbPb5dyCNm3iKptSAm4B8o+vfohuv/hPtWCAJ0wVD3jr bKFyuowUwuX65gk5aTMoA2JirCagzPc8ZpEVrmiLC7cCby6TUsbFPNx4v0eVdeDQ XkUcxMdWp4irOuFLmd+QA3WgGl7XVCxhPT4JhrPkvbJUDEFX8lj+8wvbrZWs2nMA 0x/TVSH2wZAqVfLmHMYUyHyu0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoiVMJk JDib3nJKiWjD35gmwVrGMB8GA1UdIwQYMBaAFFLt/t/qFTXBPuigDlX8fVFEbWfU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9FNkFCMkNERTRB MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9VdTMtMy1vVk5jRS02S0FPVmZ4OVVVUnRa OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1My0zLW9WTmNFLTZLQU9WZng5VVVSdFo5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ5Qy9FNkFCMkNERTRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9VdTMtMy1vVk5j RS02S0FPVmZ4OVVVUnRaOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmZNzq1LC5FimPMfjHRiep4pxWuDx3QjeX7gBt9BAMoW7nZfmaN0tR 3ZhRq9Khr6TxwSYk3++NrQ6aeAiBgV0V0Ptgq20ZABCbNFudpYXHUT/6Vyd8QT9Y 2TYp7QLbIsLUxB/3iMAQaHm4bDJnbMvnyJF9t6fqGAWNFnEtAA2ZqSomZzT81ZBW PVDPfwU8Gk47U9grFAZVYuHspIREVl8hCqHe+M7/iXbMp7aX2G2LllUCENZ6O3CO 513JT0aIh2CKmWOLDAkq8npwouZyRtw1pVKxq32ePwQzmSGGm3kFUk2Ne2qAX3nX v4B5/DxV7QMrtmmy9IFCpTkn+3lpT/my -----END CERTIFICATE-----Generated at Sun Aug 24 05:04:48 2025 by rpki-client