$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json) Hash identifier: dhA8d1EOwCPIBq3hxUy9nE7DwRCHWKm0Ib6IudmqA2M= Subject key identifier: A3:54:0E:68:AE:91:13:BD:05:3B:B4:DE:5B:EA:68:9A:5F:38:05:6B Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Certificate serial: 0C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft Manifest number: 0C86 Signing time: Fri 22 Aug 2025 18:32:16 +0000 Manifest this update: Fri 22 Aug 2025 18:32:16 +0000 Manifest next update: Fri 29 Aug 2025 18:32:16 +0000 Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: lnuAVyBEf1iotKpolYqMqXoO3R8PPXQPNQi+wqAnYe8=) 2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: n01/3EIjRvyLbA9XmobgbcsSzY3lQa7SmWy3AZPr1nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Validity Not Before: Aug 22 18:32:16 2025 GMT Not After : Aug 29 18:32:16 2025 GMT Subject: CN=68a8b7b0-2bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:f7:2f:0c:e7:45:15:16:a3:84:32:b4:ee: e2:f1:43:5c:dd:34:21:5b:a8:2b:37:63:e5:a7:97: 09:05:9c:ef:bb:53:23:c5:93:cb:4a:11:89:6e:27: 43:62:39:06:c5:68:9b:fa:d6:4c:e5:ba:8c:19:03: 6c:00:b1:9d:67:61:87:64:8f:f6:09:aa:f4:64:95: a7:cc:b8:ae:c4:54:85:40:4b:33:75:af:e5:3c:ad: ab:7a:4a:94:73:66:73:b7:0b:47:13:92:21:9b:ab: e7:a6:b6:ad:13:c3:8e:66:68:23:0e:5d:a5:1e:9f: 61:54:ba:3c:25:4d:55:0d:04:d6:1c:c7:2a:4e:f2: 58:99:e4:34:65:6b:68:0c:47:90:54:64:89:65:d0: a2:bd:8f:99:a9:98:54:43:37:1e:ca:84:26:09:07: 3e:16:a3:36:c6:cb:ee:64:79:e9:2f:9a:4b:71:95: e2:f0:a0:f4:08:b0:8e:ff:26:b6:c7:a1:76:44:48: 9b:60:cf:a4:62:d9:78:cb:87:4c:16:a5:dd:28:57: a2:94:d0:bd:07:27:b5:70:ad:49:66:5f:8f:64:0d: 96:ad:71:07:64:e9:0f:04:81:4b:88:bc:72:ff:2f: f0:ba:94:22:a9:35:1a:5e:51:22:54:17:cf:f2:91: 0e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:54:0E:68:AE:91:13:BD:05:3B:B4:DE:5B:EA:68:9A:5F:38:05:6B X509v3 Authority Key Identifier: keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:f1:a4:96:12:0b:a4:fb:f0:2a:4f:e1:55:8d:e5:e9:65:01: 8a:1f:d8:ce:15:a8:b8:29:d6:80:93:a9:cc:e6:33:4f:ab:73: 90:45:d9:ab:90:37:7a:71:79:b4:b4:e1:08:c5:4e:6c:44:d5: b4:43:e0:e6:9d:98:a0:68:8a:5d:1d:f4:ae:b6:e2:f9:5a:cf: ef:38:d8:86:0d:f3:b3:e3:63:46:54:7a:dd:09:7a:9c:05:f1: 7b:dd:45:a8:c1:83:6f:88:d3:f0:2c:4a:99:55:b6:90:a7:35: 8e:55:68:29:32:bf:50:8f:f5:f8:c4:d2:ee:10:ef:f2:16:5a: 52:f4:96:bd:0c:10:c4:14:4c:a6:76:e9:58:f4:d3:8b:f3:9e: 54:0d:9c:34:09:77:a5:58:6a:ce:72:20:48:b4:7e:1a:87:e1: c4:7f:bd:be:37:16:83:f1:08:f0:87:67:95:9f:05:21:a5:e6: 38:05:c5:6e:f1:5e:c4:48:90:f1:cf:fc:7e:47:58:3d:26:b2: df:91:63:ed:b0:43:01:be:f9:a0:87:ed:99:12:2b:e8:11:be: 7c:e8:7c:ca:09:54:6e:48:fa:26:a4:a2:cf:5e:fc:31:a4:56: a8:f7:cc:1a:78:30:cc:bd:76:3a:f0:db:22:08:4d:a6:09:47: 0e:81:ac:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy QzYwMDQ2MzgwHhcNMjUwODIyMTgzMjE2WhcNMjUwODI5MTgzMjE2WjAYMRYwFAYD VQQDEw02OGE4YjdiMC0yYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYv3LwznRRUWo4QytO7i8UNc3TQhW6grN2Plp5cJBZzvu1MjxZPLShGJbidD YjkGxWib+tZM5bqMGQNsALGdZ2GHZI/2Car0ZJWnzLiuxFSFQEszda/lPK2rekqU c2ZztwtHE5Ihm6vnpratE8OOZmgjDl2lHp9hVLo8JU1VDQTWHMcqTvJYmeQ0ZWto DEeQVGSJZdCivY+ZqZhUQzceyoQmCQc+FqM2xsvuZHnpL5pLcZXi8KD0CLCO/ya2 x6F2REibYM+kYtl4y4dMFqXdKFeilNC9Bye1cK1JZl+PZA2WrXEHZOkPBIFLiLxy /y/wupQiqTUaXlEiVBfP8pEObwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNUDmiu kRO9BTu03lvqaJpfOAVrMB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2 MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ4My8xNDk3NDdCRTA2MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFI QjJXMDVoMS11YklzWUFSamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDt8aSWEguk+/AqT+FVjeXpZQGKH9jOFai4KdaAk6nM5jNPq3OQRdmr kDd6cXm0tOEIxU5sRNW0Q+DmnZigaIpdHfSutuL5Ws/vONiGDfOz42NGVHrdCXqc BfF73UWowYNviNPwLEqZVbaQpzWOVWgpMr9Qj/X4xNLuEO/yFlpS9Ja9DBDEFEym dulY9NOL855UDZw0CXelWGrOciBItH4ah+HEf72+NxaD8Qjwh2eVnwUhpeY4BcVu 8V7ESJDxz/x+R1g9JrLfkWPtsEMBvvmgh+2ZEivoEb586HzKCVRuSPompKLPXvwx pFao98waeDDMvXY68NsiCE2mCUcOgawb -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:27 2025 by rpki-client