$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft File: UzfctqkbQdUhGkTCFqljq6zH4rA.mft (raw, json) Hash identifier: mkx/1zIkG7ebLP6ZnSfFkXDf6OSVDPTditviL5udIA4= Subject key identifier: 91:B7:E5:2E:EC:27:74:EA:B6:CE:DE:1D:2C:56:BB:7B:EF:D1:C0:42 Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 Certificate issuer: /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Certificate serial: 34C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft Manifest number: 34BD Signing time: Fri 22 Aug 2025 14:46:32 +0000 Manifest this update: Fri 22 Aug 2025 14:46:32 +0000 Manifest next update: Fri 29 Aug 2025 14:46:32 +0000 Files and hashes: 1: UzfctqkbQdUhGkTCFqljq6zH4rA.crl (hash: aIJn1ZZwpiJLbvxzHv860hr/wXhwpWB43LejzMzSjvI=) 2: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (hash: dOS+EBN8T4gv4pfAW5HZ87ld30CEjTabsXZtn+f9BiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13511 (0x34c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Validity Not Before: Aug 22 14:46:32 2025 GMT Not After : Aug 29 14:46:32 2025 GMT Subject: CN=68a882c8-bf38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:15:3b:33:97:40:60:50:2f:7e:da:e0:5a: 5e:f5:20:cd:45:72:58:86:2f:a6:77:9f:8a:17:02: 4b:03:0e:29:43:69:26:63:62:c4:68:a2:6e:dd:53: a3:e0:e2:88:84:93:98:e3:e2:e7:c1:38:d6:af:84: 6e:3a:09:cd:03:68:d3:97:5a:5f:af:29:88:6b:15: dd:1d:93:f5:f2:5b:49:16:20:3b:08:38:65:93:92: 81:f2:ae:21:2d:c6:67:f1:7c:cc:31:9d:ff:d1:3d: d5:0c:a6:0b:ae:11:71:30:c9:fc:04:40:9a:da:f0: f6:fc:02:2a:96:cb:54:db:0f:4a:66:a9:e8:9b:cd: 43:b4:0b:a3:49:f5:2b:5c:2a:d9:a4:97:71:22:39: 55:7b:9a:82:c5:76:6f:e5:da:35:13:21:24:9e:c6: 83:bb:b1:e3:ed:5f:76:ad:7b:67:b6:91:13:db:9a: 96:bd:17:19:8a:54:d1:d8:46:5e:9e:94:34:83:fd: 86:96:f5:4c:da:64:b9:8e:22:8c:e6:5a:a0:28:24: d1:1c:f0:fe:ac:81:f6:f5:ef:c2:e2:82:ab:d2:a3: d5:47:7b:8f:b9:7a:90:ed:c0:62:f3:2b:fa:54:94: 62:dd:f8:09:a3:1d:83:12:95:cb:7b:4b:81:6e:0f: ee:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:E5:2E:EC:27:74:EA:B6:CE:DE:1D:2C:56:BB:7B:EF:D1:C0:42 X509v3 Authority Key Identifier: keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:37:9c:bf:7d:2d:92:85:a6:d1:58:92:ab:ae:79:8b:22:dc: 3c:e0:cf:cd:67:f8:77:d6:d3:3b:87:4f:6c:b3:72:22:03:5b: 3a:fb:80:72:33:dd:38:24:8b:74:9b:24:7d:eb:96:2c:e0:66: 81:85:af:95:4e:dc:e1:52:55:d6:58:b1:04:da:9e:20:6e:92: 05:6a:95:71:23:5c:27:d3:aa:1f:38:3f:28:31:2c:e3:6f:f7: dd:7f:16:60:30:45:64:26:39:9f:06:bf:51:52:8d:85:84:a4: 20:61:9f:47:69:95:ae:76:54:03:7e:ce:18:64:a7:c2:53:19: ac:9c:f7:a4:02:a4:e4:9f:3e:28:b5:c6:58:33:8f:48:0a:ba: fc:56:3f:e1:93:b4:81:eb:b9:d7:62:db:98:fb:7a:b7:d3:d4: bc:86:60:0a:66:32:61:09:85:f2:cd:dd:56:8e:e1:7d:46:15: 6c:10:8e:7d:69:4b:fd:ad:df:73:d2:40:1f:06:b4:46:cb:e4: da:06:cf:1f:32:e0:a9:83:78:fa:d2:d8:0e:22:c7:b8:b8:b7: d2:df:3c:4e:d0:bd:d2:ef:de:59:de:09:6f:06:d6:8a:cb:c7: 55:24:b5:ed:76:09:a8:8d:84:fc:5f:a8:4b:26:5b:7d:91:2d: 53:ad:8c:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkMxMTAvBgNVBAUTKDUzMzdEQ0I2QTkxQjQxRDUyMTFBNDRDMjE2QTk2M0FC QUNDN0UyQjAwHhcNMjUwODIyMTQ0NjMyWhcNMjUwODI5MTQ0NjMyWjAYMRYwFAYD VQQDEw02OGE4ODJjOC1iZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cIVOzOXQGBQL37a4Fpe9SDNRXJYhi+md5+KFwJLAw4pQ2kmY2LEaKJu3VOj 4OKIhJOY4+LnwTjWr4RuOgnNA2jTl1pfrymIaxXdHZP18ltJFiA7CDhlk5KB8q4h LcZn8XzMMZ3/0T3VDKYLrhFxMMn8BECa2vD2/AIqlstU2w9KZqnom81DtAujSfUr XCrZpJdxIjlVe5qCxXZv5do1EyEknsaDu7Hj7V92rXtntpET25qWvRcZilTR2EZe npQ0g/2GlvVM2mS5jiKM5lqgKCTRHPD+rIH29e/C4oKr0qPVR3uPuXqQ7cBi8yv6 VJRi3fgJox2DEpXLe0uBbg/uzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG35S7s J3Tqts7eHSxWu3vv0cBCMB8GA1UdIwQYMBaAFFM33LapG0HVIRpEwhapY6usx+Kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCQy8zNzMwODM4MDFE OTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFkVWhHa1RDRnFsanE2ekg0 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6ZmN0cWtiUWRVaEdrVENGcWxqcTZ6SDRyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCQy8zNzMwODM4MDFEOTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFk VWhHa1RDRnFsanE2ekg0ckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6N5y/fS2ShabRWJKrrnmLItw84M/NZ/h31tM7h09ss3IiA1s6+4By M904JIt0myR965Ys4GaBha+VTtzhUlXWWLEE2p4gbpIFapVxI1wn06ofOD8oMSzj b/fdfxZgMEVkJjmfBr9RUo2FhKQgYZ9HaZWudlQDfs4YZKfCUxmsnPekAqTknz4o tcZYM49ICrr8Vj/hk7SB67nXYtuY+3q309S8hmAKZjJhCYXyzd1WjuF9RhVsEI59 aUv9rd9z0kAfBrRGy+TaBs8fMuCpg3j60tgOIse4uLfS3zxO0L3S795Z3glvBtaK y8dVJLXtdgmojYT8X6hLJlt9kS1TrYyJ -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:38 2025 by rpki-client