$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json) Hash identifier: PVlA6xFGul/c3GraxX0k+KNIn8drFeBdXnmwkj+VB0k= Subject key identifier: 46:87:E3:58:6E:66:C1:31:44:CB:5F:38:54:7D:FE:CA:D1:0B:F4:E1 Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft Manifest number: 0C6A Signing time: Wed 02 Jul 2025 18:40:30 +0000 Manifest this update: Wed 02 Jul 2025 18:40:30 +0000 Manifest next update: Wed 09 Jul 2025 18:40:30 +0000 Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: Dp5XCtkrVQ73CMOZwJ+zuYeHIrBQ5BQmBzdPNOXB8nI=) 2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: I8Ss/Oj3Q9umSrFxZnObaXQe/cu017hGcC027pv/vs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Validity Not Before: Jul 2 18:40:30 2025 GMT Not After : Jul 9 18:40:30 2025 GMT Subject: CN=68657d1e-1381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:cc:e6:c7:b3:e3:1c:99:8b:d9:cd:ee:2d: a9:52:6c:25:bb:d4:f9:a9:d2:65:47:18:19:41:93: 20:86:16:8a:56:2f:9e:98:89:3b:a1:73:2a:e4:c9: cd:ac:f4:55:ae:84:4e:a8:41:70:15:21:05:4a:cd: ac:2e:1e:ab:6c:6b:6a:d8:70:58:b9:fe:26:76:6c: 90:9f:7f:2d:3b:5d:af:de:96:b6:21:49:95:2e:17: a8:3e:b5:eb:4c:a5:d1:a8:21:cd:91:02:a1:62:23: bb:fa:91:5c:76:b4:eb:85:5d:5f:6f:6c:51:11:35: d1:22:b4:9c:f3:ec:7d:5f:bd:b9:88:36:c9:dd:fa: 8a:f0:44:b0:9d:60:5f:91:0e:78:8f:f3:d0:b1:2c: 36:67:e2:a2:9d:c9:4b:75:7f:58:69:d6:3b:1d:26: fa:a9:f6:7a:2a:49:3a:bd:f6:1a:2a:9f:bd:c1:a5: b6:b4:12:6e:cd:aa:62:6e:d0:90:c8:ff:33:51:18: 1e:f8:db:5b:ac:65:0a:86:9e:b0:b3:0e:8c:9d:cd: ea:db:6d:1a:93:52:e6:c3:81:12:f6:22:85:01:d0: 81:74:7c:fc:ef:25:6f:17:0e:a1:44:dc:18:68:af: 25:37:f7:d5:87:4d:b4:f6:08:33:f9:d2:a9:94:11: ff:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:87:E3:58:6E:66:C1:31:44:CB:5F:38:54:7D:FE:CA:D1:0B:F4:E1 X509v3 Authority Key Identifier: keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ab:e7:6e:e4:a8:c3:f7:a0:58:e2:e7:4e:03:83:c2:49:73: 4d:47:90:a8:f2:b7:fe:fa:01:e3:3d:0e:bb:5b:04:b9:7e:9a: b3:d8:7c:77:b2:d8:35:8b:ff:e6:1d:12:be:4b:53:e8:5a:d2: ff:d0:c4:8d:42:ba:bf:6b:57:8a:aa:f6:64:e4:07:49:83:b1: 4d:2e:d1:c8:7f:63:b7:d4:e8:1a:4b:1d:b5:57:fc:6a:1d:21: c1:dc:53:72:63:38:de:04:fc:bc:17:63:ac:a6:6d:b1:f2:76: ad:fc:00:19:20:85:f3:58:a2:bd:0f:e6:21:3d:7d:34:e4:ac: 16:72:80:08:e6:b8:a3:b8:74:4b:0f:72:93:27:46:b6:17:a4: 42:77:9d:d3:12:7e:40:20:1c:45:64:fd:ef:51:9b:e2:e1:ec: 64:22:e7:de:5e:4d:1b:fe:d9:84:d1:8a:0b:9e:2c:ee:d1:20: ba:ad:d7:79:39:8e:1f:b2:d3:00:76:36:43:51:22:30:9f:df: 8f:ae:eb:99:e9:a4:0b:56:58:a3:da:e3:c9:3e:98:01:31:b1: d5:2d:d2:45:87:ea:f0:ae:52:94:9e:f2:96:79:7d:e8:9b:60: 00:dd:7e:52:5d:47:4f:d8:6c:29:b4:a6:56:18:4b:38:21:3f: 76:dc:e8:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy QzYwMDQ2MzgwHhcNMjUwNzAyMTg0MDMwWhcNMjUwNzA5MTg0MDMwWjAYMRYwFAYD VQQDEw02ODY1N2QxZS0xMzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVzM5sez4xyZi9nN7i2pUmwlu9T5qdJlRxgZQZMghhaKVi+emIk7oXMq5MnN rPRVroROqEFwFSEFSs2sLh6rbGtq2HBYuf4mdmyQn38tO12v3pa2IUmVLheoPrXr TKXRqCHNkQKhYiO7+pFcdrTrhV1fb2xRETXRIrSc8+x9X725iDbJ3fqK8ESwnWBf kQ54j/PQsSw2Z+KinclLdX9YadY7HSb6qfZ6Kkk6vfYaKp+9waW2tBJuzapibtCQ yP8zURge+NtbrGUKhp6wsw6Mnc3q220ak1Lmw4ES9iKFAdCBdHz87yVvFw6hRNwY aK8lN/fVh0209ggz+dKplBH/LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaH41hu ZsExRMtfOFR9/srRC/ThMB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2 MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ4My8xNDk3NDdCRTA2MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFI QjJXMDVoMS11YklzWUFSamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOq+du5KjD96BY4udOA4PCSXNNR5Co8rf++gHjPQ67WwS5fpqz2Hx3 stg1i//mHRK+S1PoWtL/0MSNQrq/a1eKqvZk5AdJg7FNLtHIf2O31OgaSx21V/xq HSHB3FNyYzjeBPy8F2Ospm2x8nat/AAZIIXzWKK9D+YhPX005KwWcoAI5rijuHRL D3KTJ0a2F6RCd53TEn5AIBxFZP3vUZvi4exkIufeXk0b/tmE0YoLnizu0SC6rdd5 OY4fstMAdjZDUSIwn9+PruuZ6aQLVlij2uPJPpgBMbHVLdJFh+rwrlKUnvKWeX3o m2AA3X5SXUdP2GwptKZWGEs4IT923Ogu -----END CERTIFICATE-----Generated at Thu Jul 3 20:54:11 2025 by rpki-client