$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json) Hash identifier: HhOEPrSLJ+gnU7qBFwZP9QiXcUTgczjzutYqMYqnoe4= Subject key identifier: 2D:B4:BB:AD:36:BB:D2:A4:A9:13:6A:93:F6:4C:40:46:E5:D3:F9:3C Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft Manifest number: 0172 Signing time: Sat 23 Aug 2025 03:54:50 +0000 Manifest this update: Sat 23 Aug 2025 03:54:50 +0000 Manifest next update: Sat 30 Aug 2025 03:54:50 +0000 Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: /Y3/kp4c0fNc9JxbNbeJOcTqubG7Xlcj9a8cnXghZBY=) 2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: 3T/MseZ6JXWgLESYBTBgDLBC7fpGasfK+B1pI77N9vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Validity Not Before: Aug 23 03:54:50 2025 GMT Not After : Aug 30 03:54:50 2025 GMT Subject: CN=68a93b8a-cdd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:e2:57:01:01:0f:0d:d4:5e:95:12:2d:6d: b0:2b:89:da:bf:a3:52:c5:f2:8e:92:4b:e5:6c:e3: 41:69:00:08:38:1d:cf:b1:a0:fb:a3:6a:46:25:bc: 53:26:e8:f5:4f:ca:3b:c4:7c:0e:3e:e9:27:17:33: f0:e7:1f:38:d2:b9:7e:49:cd:b7:b6:c9:ab:2c:06: ea:fb:fe:cb:dd:08:f2:04:b7:4e:a2:35:1a:e0:7d: 58:2c:4d:c1:08:2c:78:94:fc:97:b6:f0:72:12:cc: 3a:33:3b:b4:41:e1:7f:53:9d:42:2f:e5:4f:d7:d4: dd:8b:1c:b5:c5:90:12:eb:f0:69:10:7a:64:cc:a3: d9:e0:61:22:a6:e9:28:cb:b9:98:5e:b8:fc:0c:74: 85:92:00:7b:70:da:88:0e:40:df:23:56:88:95:75: 93:e8:97:50:a0:3f:8a:69:d2:fc:dc:fe:ff:07:31: 7b:7f:a0:b7:84:0e:3a:4b:2c:40:ed:f4:9a:69:d2: 51:cc:c0:ef:76:61:fe:aa:71:46:49:fe:45:82:5c: 83:f6:a0:9e:31:ff:80:98:46:b3:32:60:39:20:9f: 1c:72:62:d4:74:14:70:a5:0a:60:a0:ef:e2:07:85: e2:54:cf:28:e8:8e:47:c9:c4:7c:97:4a:f4:97:56: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B4:BB:AD:36:BB:D2:A4:A9:13:6A:93:F6:4C:40:46:E5:D3:F9:3C X509v3 Authority Key Identifier: keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:e1:56:b8:5a:76:8c:b9:6c:f7:6a:bf:12:73:91:23:1a:e1: d3:93:65:ad:e9:a0:c8:7a:65:ce:ca:ee:f0:f6:87:ae:ec:bf: 38:c0:fa:cc:dd:45:4e:b4:f8:4a:e3:c3:07:6a:cb:50:4f:09: fc:91:d8:aa:a7:59:78:3f:db:c4:1d:71:8e:45:6f:9b:13:75: 99:c5:7f:2d:1d:e8:99:43:11:50:dc:76:0b:10:8c:5b:91:f3: 4b:97:dd:d0:3b:a8:27:10:99:03:e7:07:11:7e:87:02:ff:53: 43:59:40:75:13:83:b0:df:3f:58:49:96:19:31:b2:4d:fb:55: ab:24:51:a9:33:21:12:f3:f5:38:32:91:e4:0e:df:77:cc:be: f9:60:13:e9:d5:28:cf:00:8c:84:15:43:05:19:4d:64:34:18: ce:b7:1f:bf:3b:82:a2:59:a4:81:3c:52:6b:43:89:8f:df:8f: bb:f1:db:5e:2c:e3:fc:eb:76:21:89:7f:aa:9a:f7:39:5d:30: 1e:28:eb:78:18:ec:e1:f9:97:fd:de:23:ab:b4:49:93:10:09: 2a:d1:ba:1b:cb:23:d7:f9:9d:48:f0:39:7c:84:45:3a:8f:7b: f7:e6:8e:55:9a:2f:bb:c2:1f:e0:bb:40:99:cd:2b:01:b0:59: 4a:36:00:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCQ0MxMTAvBgNVBAUTKEZENDVDQzU0MDNDNjRDRkIyMzBBQTdERUVEMTBCQzY4 MjI4RDc0NzMwHhcNMjUwODIzMDM1NDUwWhcNMjUwODMwMDM1NDUwWjAYMRYwFAYD VQQDEw02OGE5M2I4YS1jZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniviVwEBDw3UXpUSLW2wK4nav6NSxfKOkkvlbONBaQAIOB3PsaD7o2pGJbxT Juj1T8o7xHwOPuknFzPw5x840rl+Sc23tsmrLAbq+/7L3QjyBLdOojUa4H1YLE3B CCx4lPyXtvByEsw6Mzu0QeF/U51CL+VP19Tdixy1xZAS6/BpEHpkzKPZ4GEipuko y7mYXrj8DHSFkgB7cNqIDkDfI1aIlXWT6JdQoD+KadL83P7/BzF7f6C3hA46SyxA 7fSaadJRzMDvdmH+qnFGSf5FglyD9qCeMf+AmEazMmA5IJ8ccmLUdBRwpQpgoO/i B4XiVM8o6I5HycR8l0r0l1bwGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC20u602 u9KkqRNqk/ZMQEbl0/k8MB8GA1UdIwQYMBaAFP1FzFQDxkz7Iwqn3u0QvGgijXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkJDQy85MDRFNTBGMDQ4 RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQc2pDcWZlN1JDOGFDS05k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VWE1WQVBHVFBzakNxZmU3UkM4YUNLTmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkJDQy85MDRFNTBGMDQ4RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQ c2pDcWZlN1JDOGFDS05kSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl4Va4WnaMuWz3ar8Sc5EjGuHTk2Wt6aDIemXOyu7w9oeu7L84wPrM 3UVOtPhK48MHastQTwn8kdiqp1l4P9vEHXGORW+bE3WZxX8tHeiZQxFQ3HYLEIxb kfNLl93QO6gnEJkD5wcRfocC/1NDWUB1E4Ow3z9YSZYZMbJN+1WrJFGpMyES8/U4 MpHkDt93zL75YBPp1SjPAIyEFUMFGU1kNBjOtx+/O4KiWaSBPFJrQ4mP34+78dte LOP863YhiX+qmvc5XTAeKOt4GOzh+Zf93iOrtEmTEAkq0bobyyPX+Z1I8Dl8hEU6 j3v35o5Vmi+7wh/gu0CZzSsBsFlKNgAY -----END CERTIFICATE-----Generated at Sat Aug 23 17:45:11 2025 by rpki-client