$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft File: UTbgDQPR84UAq2cpty7T1yzWoQU.mft (raw, json) Hash identifier: ehpWdwblMFdC2sk4t5rJJCyyyZNroRCxh4p5F94Q7Eg= Subject key identifier: 1E:C9:A4:72:6E:D2:8E:0F:55:0C:0E:60:DA:6C:F1:71:96:FB:7A:36 Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05 Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105 Certificate serial: 1E3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft Manifest number: 1E27 Signing time: Fri 22 Aug 2025 16:08:53 +0000 Manifest this update: Fri 22 Aug 2025 16:08:53 +0000 Manifest next update: Fri 29 Aug 2025 16:08:53 +0000 Files and hashes: 1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl (hash: KQemKycw0fFmNXVLvJgz7JwhXIWSct3LEPukrjAlC9k=) 2: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (hash: rt/eyNRwh3HSmHt+oMSmnpP/31deXcLSwt8yukP8jbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7740 (0x1e3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105 Validity Not Before: Aug 22 16:08:53 2025 GMT Not After : Aug 29 16:08:53 2025 GMT Subject: CN=68a89615-6181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:d4:e3:42:c0:0e:91:b3:0d:c4:b1:db:f5: 07:eb:b3:6f:48:25:05:9a:57:68:37:c5:32:b7:bb: 83:07:df:b4:cd:be:c1:d7:aa:e2:4b:53:61:3b:42: d1:cc:d4:09:37:03:34:03:6d:53:51:31:6e:85:01: 12:ee:81:61:dc:21:b9:01:08:d0:31:11:f2:9b:b2: 9e:9b:2d:00:fd:49:73:33:5a:23:f8:6b:ad:0f:37: 34:af:16:02:a6:e6:ae:3e:47:ee:f4:d4:6d:cb:3e: 66:48:e0:ce:e1:cb:fa:04:f6:d8:ef:95:27:9e:16: 8d:3e:c8:d7:ab:3f:78:e8:32:61:70:00:aa:93:81: d2:0d:61:99:55:c9:77:b8:56:3e:2f:65:68:32:c3: 5f:f3:27:10:82:2b:8e:97:23:94:70:15:84:8d:dc: d4:0d:0f:d6:e9:fc:8e:af:e5:f8:9c:14:bc:8e:e2: 2b:48:7e:30:84:32:af:7c:1f:cb:d5:87:5b:16:cd: a3:ac:e0:1e:81:b8:d2:33:5f:9b:fa:39:97:8f:8c: c4:86:c6:71:76:a0:1b:57:7d:15:c7:2b:e4:3c:bb: 8f:59:28:bd:56:e3:e9:a3:c9:66:be:12:c6:e7:f7: 6e:82:be:94:2f:d9:4b:b3:6a:f2:ad:b3:12:4b:fe: ba:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C9:A4:72:6E:D2:8E:0F:55:0C:0E:60:DA:6C:F1:71:96:FB:7A:36 X509v3 Authority Key Identifier: keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:cc:6c:fb:de:f9:b5:2f:7c:b0:16:0c:7d:9a:cd:16:61:33: 7b:39:68:67:02:5f:33:ac:53:03:23:56:30:6b:97:47:3f:6c: 4b:1f:4c:34:a0:a3:75:8e:0a:af:1b:bc:88:06:4b:7f:8f:e7: 8d:b7:fd:6d:72:73:3f:c0:2f:0f:7f:7b:59:3b:41:5b:87:82: fa:59:b7:7b:18:91:ca:75:a4:16:1d:1b:55:5d:01:d4:b4:26: 14:7e:64:d8:63:15:72:4f:4e:df:ab:e6:fd:4c:3d:55:8e:9a: 65:ff:2d:c5:0e:f0:4e:57:13:c4:46:d6:79:7b:79:99:f0:08: b8:7d:24:6b:49:0f:53:b0:61:46:42:a1:ec:33:78:81:31:32: f3:d8:33:65:4e:cb:28:08:9a:4b:f0:eb:6a:9a:09:be:f5:e8: ab:42:0a:37:e0:76:d3:48:73:41:5c:bc:33:79:3b:7f:6f:27: e4:4a:2f:00:15:8d:84:fd:3c:6c:b9:80:93:c7:67:a4:fe:75: 2f:8f:c9:75:9e:63:65:42:25:7e:4c:35:3e:74:5a:7d:b1:c6: dc:55:67:90:33:45:62:c8:c2:66:2b:10:9c:7a:8c:02:77:24: b5:b4:f1:9e:df:dd:34:7d:c4:f0:9e:6f:df:87:f6:83:de:6f: 82:d5:a2:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKDUxMzZFMDBEMDNEMUYzODUwMEFCNjcyOUI3MkVEM0Q3 MkNENkExMDUwHhcNMjUwODIyMTYwODUzWhcNMjUwODI5MTYwODUzWjAYMRYwFAYD VQQDEw02OGE4OTYxNS02MTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPXU40LADpGzDcSx2/UH67NvSCUFmldoN8Uyt7uDB9+0zb7B16riS1NhO0LR zNQJNwM0A21TUTFuhQES7oFh3CG5AQjQMRHym7Kemy0A/UlzM1oj+GutDzc0rxYC puauPkfu9NRtyz5mSODO4cv6BPbY75UnnhaNPsjXqz946DJhcACqk4HSDWGZVcl3 uFY+L2VoMsNf8ycQgiuOlyOUcBWEjdzUDQ/W6fyOr+X4nBS8juIrSH4whDKvfB/L 1YdbFs2jrOAegbjSM1+b+jmXj4zEhsZxdqAbV30VxyvkPLuPWSi9VuPpo8lmvhLG 5/dugr6UL9lLs2ryrbMSS/66PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7JpHJu 0o4PVQwOYNps8XGW+3o2MB8GA1UdIwQYMBaAFFE24A0D0fOFAKtnKbcu09cs1qEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zMDQxOTdFODhG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0VUFxMmNwdHk3VDF5eldv UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VUYmdEUVBSODRVQXEyY3B0eTdUMXl6V29RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjNCQy8zMDQxOTdFODhGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0 VUFxMmNwdHk3VDF5eldvUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4zGz73vm1L3ywFgx9ms0WYTN7OWhnAl8zrFMDI1Ywa5dHP2xLH0w0 oKN1jgqvG7yIBkt/j+eNt/1tcnM/wC8Pf3tZO0Fbh4L6Wbd7GJHKdaQWHRtVXQHU tCYUfmTYYxVyT07fq+b9TD1Vjppl/y3FDvBOVxPERtZ5e3mZ8Ai4fSRrSQ9TsGFG QqHsM3iBMTLz2DNlTssoCJpL8Otqmgm+9eirQgo34HbTSHNBXLwzeTt/byfkSi8A FY2E/TxsuYCTx2ek/nUvj8l1nmNlQiV+TDU+dFp9scbcVWeQM0ViyMJmKxCceowC dyS1tPGe3900fcTwnm/fh/aD3m+C1aKS -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:52 2025 by rpki-client