$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: aQYpZRJ9jtqoWuGNlMrlIUOF7u/WVn9zLaTXYGvrBHc= Subject key identifier: C4:A8:CC:2C:05:CE:DB:12:17:A0:C0:D3:D7:0F:79:26:CD:21:9A:5F Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 09B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 09AB Signing time: Fri 22 Aug 2025 20:10:19 +0000 Manifest this update: Fri 22 Aug 2025 20:10:19 +0000 Manifest next update: Fri 29 Aug 2025 20:10:19 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: RhWvJxqxVhlUy7G2hUUxtJhMiK8k8sg6HTYRAVPrSdg=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: KzsEqYZi4RymBpkz6QVCB3ieArM+VhARkW/2ksmdU8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2481 (0x9b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Validity Not Before: Aug 22 20:10:19 2025 GMT Not After : Aug 29 20:10:19 2025 GMT Subject: CN=68a8ceab-3f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:b4:0b:21:4a:65:9e:b2:b1:33:45:51:39: 43:b2:18:48:c0:27:5f:10:ce:45:9a:17:96:16:11: a3:5e:69:01:2b:fe:38:49:89:b0:7d:f4:d5:95:af: 00:9d:25:6b:94:16:66:ea:9b:36:26:ab:30:b5:8a: 35:cd:cf:ff:0b:fa:80:9f:09:58:27:81:df:b4:a4: b8:e2:50:da:27:8f:06:0b:97:46:fc:bd:df:14:7b: 9d:2b:d0:cf:c2:c7:b9:6f:26:fd:5a:5e:a6:e7:b3: 78:df:24:2e:e4:6d:89:43:25:50:e4:fb:ad:7d:48: c8:0e:af:a7:d5:d9:d1:75:45:6b:7e:11:92:b8:c0: 5b:3d:e3:e9:39:f9:5b:b5:57:e9:8d:d9:4e:06:00: 64:9e:4b:f8:6a:e8:fd:51:5a:fa:90:50:10:3c:5a: 1a:b0:4b:d7:48:7a:fa:a6:72:39:e9:84:cc:4a:d1: 2e:47:b9:19:78:f0:93:f0:fe:cc:65:57:a8:6a:c6: cb:ee:6e:0b:ff:6a:52:47:95:da:92:02:88:2a:83: 5f:02:9c:f9:93:02:83:59:62:4d:03:e8:cc:63:92: b3:ea:e3:71:82:68:74:94:ad:06:81:40:de:ad:5d: d4:ae:5a:3f:13:0b:5b:d1:f3:76:c3:09:75:0c:25: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A8:CC:2C:05:CE:DB:12:17:A0:C0:D3:D7:0F:79:26:CD:21:9A:5F X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ab:a9:66:02:4b:b9:b0:2a:79:bd:da:77:64:25:7f:b4:d3: 76:c8:97:7d:5b:56:11:03:4c:94:f7:37:cc:29:4a:43:e6:e0: 29:c3:8c:7b:22:7e:7b:0a:1a:72:17:4c:f4:f3:db:64:a8:27: 93:6a:d0:fb:56:af:78:f5:58:07:d1:87:ab:3a:67:ba:e4:a7: e5:38:65:23:33:bf:37:50:86:bc:ec:3c:b0:ec:00:01:1e:2b: f2:b9:88:80:4e:79:f7:30:65:19:99:06:ba:0f:95:9a:a8:93: 3f:50:b8:e3:a3:0f:73:64:f3:03:9b:8e:f8:e3:1d:27:db:59: fe:41:38:5a:51:12:82:b9:23:58:eb:35:9c:1d:0e:ed:b0:7a: bd:55:82:ca:21:24:83:3f:2b:c8:4d:83:ad:3e:e6:83:8b:d6: bc:97:39:12:c0:92:46:55:07:ff:84:70:34:15:2d:21:9f:91: c8:d7:49:f7:32:8a:68:9b:50:b9:e7:19:45:73:d1:2f:84:8c: e6:eb:67:f3:d4:42:74:34:83:e0:61:6a:94:1b:92:04:e9:8e: de:47:31:e0:55:64:c2:33:41:28:3f:e6:89:d0:7a:b0:84:69: 68:ce:af:12:d1:a5:95:8a:fb:f4:c4:91:82:86:08:04:4c:88: a8:71:9e:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjUwODIyMjAxMDE5WhcNMjUwODI5MjAxMDE5WjAYMRYwFAYD VQQDEw02OGE4Y2VhYi0zZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrq0CyFKZZ6ysTNFUTlDshhIwCdfEM5FmheWFhGjXmkBK/44SYmwffTVla8A nSVrlBZm6ps2JqswtYo1zc//C/qAnwlYJ4HftKS44lDaJ48GC5dG/L3fFHudK9DP wse5byb9Wl6m57N43yQu5G2JQyVQ5PutfUjIDq+n1dnRdUVrfhGSuMBbPePpOflb tVfpjdlOBgBknkv4auj9UVr6kFAQPFoasEvXSHr6pnI56YTMStEuR7kZePCT8P7M ZVeoasbL7m4L/2pSR5XakgKIKoNfApz5kwKDWWJNA+jMY5Kz6uNxgmh0lK0GgUDe rV3Urlo/Ewtb0fN2wwl1DCXa9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSozCwF ztsSF6DA09cPeSbNIZpfMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFq6lmAku5sCp5vdp3ZCV/tNN2yJd9W1YRA0yU9zfMKUpD5uApw4x7 In57ChpyF0z089tkqCeTatD7Vq949VgH0YerOme65KflOGUjM783UIa87Dyw7AAB HivyuYiATnn3MGUZmQa6D5WaqJM/ULjjow9zZPMDm4744x0n21n+QThaURKCuSNY 6zWcHQ7tsHq9VYLKISSDPyvITYOtPuaDi9a8lzkSwJJGVQf/hHA0FS0hn5HI10n3 Mopom1C55xlFc9EvhIzm62fz1EJ0NIPgYWqUG5IE6Y7eRzHgVWTCM0EoP+aJ0Hqw hGlozq8S0aWVivv0xJGChggETIiocZ7Y -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:24 2025 by rpki-client