$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: m78MXh5yxOR4kdhEX6S15d241hAEqx9jVcQ7r/J6+0M= Subject key identifier: FF:06:FF:BB:B9:91:71:BA:A2:60:6F:3E:C3:D5:BE:0C:33:53:D2:3E Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 08F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 08E7 Signing time: Fri 22 Aug 2025 20:31:32 +0000 Manifest this update: Fri 22 Aug 2025 20:31:32 +0000 Manifest next update: Fri 29 Aug 2025 20:31:32 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: eGSMgOwcQs63GIhQ29ERpgxe/Xt52GCF91pHhxBIIUI=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2291 (0x8f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: Aug 22 20:31:32 2025 GMT Not After : Aug 29 20:31:32 2025 GMT Subject: CN=68a8d3a4-b6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c9:e9:7b:73:a8:0e:53:05:61:98:bd:9f:d0: c7:eb:b8:36:7d:1d:f0:2b:39:80:eb:a6:b8:3d:ad: 19:c9:c0:d1:53:2d:9e:59:79:7d:a4:fa:69:f0:f2: 5e:fa:5a:1e:96:56:9f:f2:76:dd:14:04:1a:80:f7: 68:24:40:80:df:93:44:ad:72:96:b3:87:89:f1:a9: 2e:b1:d1:27:1a:8b:6e:29:c2:11:be:42:75:7e:87: 31:96:01:ad:27:d3:61:1a:83:a3:40:ae:9d:fb:59: 5e:c6:29:bd:1e:ed:91:fd:15:bf:ee:bc:af:bd:0d: 2f:5b:29:ca:71:33:ea:b8:d1:77:2f:e3:0d:bb:ba: 8b:4f:9a:36:f0:a8:66:c2:f1:9b:36:57:6d:b0:55: 75:1c:dc:4f:97:7a:db:cb:6c:83:20:76:fa:e7:87: e8:bd:b5:83:b1:5a:fc:07:64:55:2a:4a:9a:00:81: db:cb:1c:1b:95:20:4f:f2:ce:c6:48:d6:ab:4f:f5: 3d:21:ff:8f:e2:d7:0e:b4:a7:e9:11:1e:fa:e0:69: fd:82:cf:35:69:eb:62:43:0b:73:02:3b:79:71:23: b4:97:8e:40:41:f0:e9:3e:ec:ee:ca:21:6e:58:73: e0:45:39:c6:1c:f9:c3:cb:ad:60:87:67:c2:dc:e4: 8b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:06:FF:BB:B9:91:71:BA:A2:60:6F:3E:C3:D5:BE:0C:33:53:D2:3E X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:81:ee:e8:e5:2b:76:a9:e6:1e:d3:e8:2b:18:80:7b:f6:60: 07:2e:59:d4:8a:63:eb:1f:49:b1:e5:4b:da:7f:e4:31:29:be: 7b:1c:99:cb:58:90:46:da:aa:84:46:c8:08:e0:12:e2:77:27: 00:58:d3:70:19:3d:24:f6:0b:58:b7:67:ed:cc:e6:e6:75:78: 7c:55:50:5d:de:bb:21:ba:2b:d1:90:24:35:84:d4:bc:3f:dc: 6c:6f:99:f2:37:db:53:22:e4:12:12:a9:f7:d5:a8:b5:bc:56: d1:ae:f4:ec:3e:b0:d9:e4:cf:80:ff:95:11:c3:09:0a:c6:0f: 48:3d:58:94:c6:eb:6d:c8:cb:f3:a2:31:d4:33:15:b3:68:f6: 2d:42:41:41:5c:75:d4:59:eb:06:5e:9a:4d:e2:50:99:44:ef: 8d:3e:f8:d4:ea:a5:78:59:fa:20:99:21:96:24:a3:54:f9:d9: 8f:db:ab:e4:49:37:89:92:b7:29:b3:8b:ae:8b:e4:e5:22:b5: 7b:fa:01:23:4b:f7:43:a1:b5:c7:9b:13:72:aa:e1:f5:83:46: 2c:84:3e:ea:8a:8a:3c:a8:73:cd:0d:bb:ee:2c:36:75:14:a4: 78:f4:10:61:50:61:5c:70:87:7d:15:f0:9d:14:6a:12:b8:54: ca:14:60:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjUwODIyMjAzMTMyWhcNMjUwODI5MjAzMTMyWjAYMRYwFAYD VQQDEw02OGE4ZDNhNC1iNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4snpe3OoDlMFYZi9n9DH67g2fR3wKzmA66a4Pa0ZycDRUy2eWXl9pPpp8PJe +loellaf8nbdFAQagPdoJECA35NErXKWs4eJ8akusdEnGotuKcIRvkJ1focxlgGt J9NhGoOjQK6d+1lexim9Hu2R/RW/7ryvvQ0vWynKcTPquNF3L+MNu7qLT5o28Khm wvGbNldtsFV1HNxPl3rby2yDIHb654fovbWDsVr8B2RVKkqaAIHbyxwblSBP8s7G SNarT/U9If+P4tcOtKfpER764Gn9gs81aetiQwtzAjt5cSO0l45AQfDpPuzuyiFu WHPgRTnGHPnDy61gh2fC3OSLcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8G/7u5 kXG6omBvPsPVvgwzU9I+MB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHge7o5St2qeYe0+grGIB79mAHLlnUimPrH0mx5Uvaf+QxKb57HJnL WJBG2qqERsgI4BLidycAWNNwGT0k9gtYt2ftzObmdXh8VVBd3rshuivRkCQ1hNS8 P9xsb5nyN9tTIuQSEqn31ai1vFbRrvTsPrDZ5M+A/5URwwkKxg9IPViUxuttyMvz ojHUMxWzaPYtQkFBXHXUWesGXppN4lCZRO+NPvjU6qV4WfogmSGWJKNU+dmP26vk STeJkrcps4uui+TlIrV7+gEjS/dDobXHmxNyquH1g0YshD7qioo8qHPNDbvuLDZ1 FKR49BBhUGFccId9FfCdFGoSuFTKFGBp -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:11 2025 by rpki-client