$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft File: rUZnzujj-e3_kuf7uzf_xmwAc6I.mft (raw, json) Hash identifier: 6333bnE8ZOLczESi6UI6wMr3HrRv7Qi4fJqrMCgkQrI= Subject key identifier: A5:4F:F4:51:8F:86:64:08:15:72:3F:92:AE:37:14:CE:A1:70:F9:B2 Authority key identifier: AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2 Certificate issuer: /CN=A919C0F6/serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft Manifest number: 01AF Signing time: Sat 23 Aug 2025 03:16:36 +0000 Manifest this update: Sat 23 Aug 2025 03:16:35 +0000 Manifest next update: Sat 30 Aug 2025 03:16:35 +0000 Files and hashes: 1: rUZnzujj-e3_kuf7uzf_xmwAc6I.crl (hash: X3QFP2IQ3HXSaZzsHdjSTxSt9hUfbhTvmTvMZXelOm0=) 2: D016C916EF5A11EDA6863E67C4F9AE02.roa (hash: eiPnVd5qH0st8XKPTvL7lm0W7OhTr1gyWFD5Z01ogbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C0F6, serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2 Validity Not Before: Aug 23 03:16:35 2025 GMT Not After : Aug 30 03:16:35 2025 GMT Subject: CN=68a93294-026f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:50:2a:f1:fa:37:34:b5:e9:ad:62:9b:9d: 9a:f0:74:a4:ca:65:3b:71:8e:91:2b:49:13:be:2b: 89:28:7c:54:dd:af:34:a7:98:f4:0a:6d:b0:a5:92: ec:b7:23:94:47:18:a6:85:56:0f:89:f1:c0:4a:d0: dd:9e:34:ed:48:d2:01:48:50:17:4e:55:75:24:b0: 9a:4b:8b:63:60:94:4c:6c:fc:09:4c:e5:2b:fa:d9: 30:4c:91:9b:8f:e2:fa:00:92:84:71:f5:ec:84:b5: 80:f2:00:11:42:8d:ea:ba:ce:1c:48:75:9d:5d:4d: 01:d6:0d:dd:6d:cd:12:13:55:82:f5:e0:6f:b2:b5: 79:94:4d:92:ba:c1:0f:cc:4b:61:79:82:ef:b7:e3: fe:eb:6f:87:30:db:63:fd:1f:77:8e:13:f5:f8:8c: 96:4b:d3:a2:c7:5d:78:4a:93:28:e2:f7:27:f6:80: f4:b8:ce:ab:d0:3d:31:40:5d:33:a4:c4:60:6f:45: 65:7f:12:37:62:c1:db:f5:20:5b:50:2f:fb:9a:93: dd:51:1d:4f:1f:29:2c:cb:44:23:b1:93:99:a7:7d: 3b:ec:92:6d:ba:6a:3b:b4:1a:20:df:8e:25:a2:f5: f4:aa:99:69:11:ea:66:96:f3:b2:35:70:eb:84:fa: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4F:F4:51:8F:86:64:08:15:72:3F:92:AE:37:14:CE:A1:70:F9:B2 X509v3 Authority Key Identifier: keyid:AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2b:19:2a:c3:8b:44:65:bc:f1:36:37:bb:32:43:20:ee:f1: 21:35:59:74:1d:06:30:19:e5:46:a1:d8:1e:63:8c:f1:5d:81: 01:34:fe:25:d2:dd:d7:5c:90:da:8a:a0:61:25:4a:02:a6:bf: d7:41:5b:4d:91:be:8a:61:93:ad:a5:68:20:34:07:fb:4e:53: 9a:d7:26:ed:ff:f1:aa:10:0e:91:69:25:71:6d:96:2a:f6:35: 3d:be:bc:93:a2:60:d4:85:cd:cb:39:f2:7d:ec:b0:4c:71:97: 46:ac:c1:4e:25:40:6e:6f:03:80:59:9e:c3:13:0f:e9:f0:fe: 57:61:b5:44:f5:71:ea:31:ad:12:e5:41:f1:bc:63:3c:cb:1c: 67:59:2f:0a:d2:61:bc:92:fd:81:ea:5a:b9:c4:d3:93:9a:3e: 1a:dc:c0:4b:e5:f4:09:d6:77:95:fb:b2:35:94:1e:8b:cc:d9: 81:09:73:5b:6a:71:6a:eb:50:d6:7a:92:67:65:31:92:8d:35: 5b:0a:b6:03:38:cf:7e:2d:fa:1c:58:3f:06:c8:34:a9:a2:e6: cd:ce:9e:1e:f0:51:ff:d9:f9:52:69:92:de:1b:87:18:fd:07: b8:a8:b0:ce:d5:a2:74:9b:41:45:61:bf:45:be:fc:8e:4d:a3: b6:1e:94:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMwRjYxMTAvBgNVBAUTKEFENDY2N0NFRThFM0Y5RURGRjkyRTdGQkJCMzdGRkM2 NkMwMDczQTIwHhcNMjUwODIzMDMxNjM1WhcNMjUwODMwMDMxNjM1WjAYMRYwFAYD VQQDEw02OGE5MzI5NC0wMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPNQKvH6NzS16a1im52a8HSkymU7cY6RK0kTviuJKHxU3a80p5j0Cm2wpZLs tyOURximhVYPifHAStDdnjTtSNIBSFAXTlV1JLCaS4tjYJRMbPwJTOUr+tkwTJGb j+L6AJKEcfXshLWA8gARQo3qus4cSHWdXU0B1g3dbc0SE1WC9eBvsrV5lE2SusEP zEtheYLvt+P+62+HMNtj/R93jhP1+IyWS9Oix114SpMo4vcn9oD0uM6r0D0xQF0z pMRgb0VlfxI3YsHb9SBbUC/7mpPdUR1PHyksy0QjsZOZp3077JJtumo7tBog344l ovX0qplpEepmlvOyNXDrhPp7GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVP9FGP hmQIFXI/kq43FM6hcPmyMB8GA1UdIwQYMBaAFK1GZ87o4/nt/5Ln+7s3/8ZsAHOi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzBGNi9EMkJCNzU1QUVG NEYxMUVEQjVENzFGNDZDNEY5QUUwMi9yVVpuenVqai1lM19rdWY3dXpmX3htd0Fj NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVWm56dWpqLWUzX2t1Zjd1emZfeG13QWM2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzBGNi9EMkJCNzU1QUVGNEYxMUVEQjVENzFGNDZDNEY5QUUwMi9yVVpuenVqai1l M19rdWY3dXpmX3htd0FjNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNKxkqw4tEZbzxNje7MkMg7vEhNVl0HQYwGeVGodgeY4zxXYEBNP4l 0t3XXJDaiqBhJUoCpr/XQVtNkb6KYZOtpWggNAf7TlOa1ybt//GqEA6RaSVxbZYq 9jU9vryTomDUhc3LOfJ97LBMcZdGrMFOJUBubwOAWZ7DEw/p8P5XYbVE9XHqMa0S 5UHxvGM8yxxnWS8K0mG8kv2B6lq5xNOTmj4a3MBL5fQJ1neV+7I1lB6LzNmBCXNb anFq61DWepJnZTGSjTVbCrYDOM9+LfocWD8GyDSpoubNzp4e8FH/2flSaZLeG4cY /Qe4qLDO1aJ0m0FFYb9FvvyOTaO2HpSB -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:22 2025 by rpki-client