$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft File: UIni3IEtNN89TbWDVc_xSweu3rk.mft (raw, json) Hash identifier: 2SNUobfaHTuuomd0YapVV/HemVf6xXKNRgaGPj0MDeQ= Subject key identifier: 4E:07:81:DD:56:75:A2:E5:17:B5:C2:4B:A8:48:E6:A7:8F:E4:0C:A0 Authority key identifier: 50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9 Certificate issuer: /CN=A919C5C6/serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9 Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft Manifest number: 0422 Signing time: Sat 23 Aug 2025 00:34:35 +0000 Manifest this update: Sat 23 Aug 2025 00:34:34 +0000 Manifest next update: Sat 30 Aug 2025 00:34:34 +0000 Files and hashes: 1: UIni3IEtNN89TbWDVc_xSweu3rk.crl (hash: Cdo+EFx64yPOETHMU2LakFU0kSrncLqP54xFou7MV4I=) 2: 30BF89A0785C11ECB03F8929C4F9AE02.roa (hash: G1PhV+y/NzuJk7L0KrENb/U9OPdJryMQ6kngep9Gb+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C5C6, serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9 Validity Not Before: Aug 23 00:34:34 2025 GMT Not After : Aug 30 00:34:34 2025 GMT Subject: CN=68a90c9b-bc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:5a:a8:ea:bb:3c:75:5a:6a:a4:e8:e1:d9: da:14:0e:45:f1:2d:07:84:83:f1:21:e8:0c:a5:7d: f9:7b:a8:f9:aa:cd:9a:62:d8:2d:a4:2c:7a:f8:15: db:01:77:32:9d:b6:c5:0a:7e:f3:7a:4e:3b:1a:57: 90:e0:2b:11:de:42:73:e3:5a:87:e8:67:a4:fc:59: 3f:3f:97:72:d4:97:ae:e2:3d:7b:52:50:7b:de:a0: f4:eb:32:ae:9e:7b:01:8a:27:fa:3f:48:76:20:ed: 84:a9:1b:53:37:d5:aa:ae:86:37:77:d1:a4:d2:26: c6:7d:f4:49:bb:2a:cf:d5:dc:80:12:47:e6:ea:09: d5:09:75:9c:7b:ed:5d:27:a9:89:6f:8c:92:11:b0: f7:8a:e7:fe:42:94:45:2a:d6:f3:c2:e4:aa:85:78: 11:51:2b:1b:3c:50:6c:ef:d6:95:8b:e6:cd:22:47: d7:d0:c7:f6:4f:5b:6a:77:cb:37:0a:14:0f:06:53: f2:1a:32:d7:b3:d2:63:cf:2d:c0:df:6b:6e:c3:84: d8:b8:ae:41:68:1e:53:de:34:a3:bf:ee:8d:17:f9: 41:74:bd:37:d7:94:9e:f6:4b:ac:9c:45:f6:4e:fd: c6:ba:55:f7:03:b1:dc:d0:ef:a0:fd:a9:bf:56:d2: 1d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:07:81:DD:56:75:A2:E5:17:B5:C2:4B:A8:48:E6:A7:8F:E4:0C:A0 X509v3 Authority Key Identifier: keyid:50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:51:a6:eb:93:c4:d2:ca:22:9d:73:be:b1:be:cd:21:86:45: cf:2a:27:c6:7a:6a:c8:64:c4:f6:de:63:35:aa:eb:65:60:e2: 99:53:bc:53:85:69:62:7f:e9:aa:cd:10:9f:75:c0:87:d7:22: b2:0a:65:4e:26:5d:0b:24:11:7c:1c:b8:47:56:b1:f7:04:01: e7:9a:d7:db:c8:6d:86:f3:30:dd:32:86:89:b9:66:1a:af:07: e0:5d:67:cb:33:9b:2d:61:1f:e4:b5:93:a7:16:39:1e:72:48: b6:b8:e8:42:41:0e:04:c7:fb:81:8e:bc:e5:bb:2e:86:e7:a3: 56:64:14:d0:58:ff:cc:26:6a:3d:98:df:55:41:3e:f1:be:4b: ee:8d:03:30:05:a4:48:c4:8c:5b:01:7d:a7:12:b7:1e:1b:86: 83:36:41:a9:c7:bc:3b:b8:44:2a:6a:54:ef:7e:56:b4:58:72: 79:d3:ae:f9:63:58:ea:7a:26:c0:1e:20:63:ad:86:69:58:ee: 66:3e:58:da:a7:e1:20:fd:d4:b8:c6:29:fd:cb:19:3a:2f:9d: be:ac:e1:ba:1a:1a:e4:70:42:6f:77:23:46:04:df:da:aa:14: f2:4b:e7:e5:3e:2a:e3:11:a9:59:88:6d:19:fa:f4:7d:f6:18: ed:96:93:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1QzYxMTAvBgNVBAUTKDUwODlFMkRDODEyRDM0REYzRDREQjU4MzU1Q0ZGMTRC MDdBRURFQjkwHhcNMjUwODIzMDAzNDM0WhcNMjUwODMwMDAzNDM0WjAYMRYwFAYD VQQDEw02OGE5MGM5Yi1iYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2haqOq7PHVaaqTo4dnaFA5F8S0HhIPxIegMpX35e6j5qs2aYtgtpCx6+BXb AXcynbbFCn7zek47GleQ4CsR3kJz41qH6Gek/Fk/P5dy1Jeu4j17UlB73qD06zKu nnsBiif6P0h2IO2EqRtTN9WqroY3d9Gk0ibGffRJuyrP1dyAEkfm6gnVCXWce+1d J6mJb4ySEbD3iuf+QpRFKtbzwuSqhXgRUSsbPFBs79aVi+bNIkfX0Mf2T1tqd8s3 ChQPBlPyGjLXs9Jjzy3A32tuw4TYuK5BaB5T3jSjv+6NF/lBdL0315Se9kusnEX2 Tv3GulX3A7Hc0O+g/am/VtId0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4Hgd1W daLlF7XCS6hI5qeP5AygMB8GA1UdIwQYMBaAFFCJ4tyBLTTfPU21g1XP8UsHrt65 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVDNi83MzYxNzc3Mjc4 NTgxMUVDOTY5OTMyMEVDNEY5QUUwMi9VSW5pM0lFdE5OODlUYldEVmNfeFN3ZXUz cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VJbmkzSUV0Tk44OVRiV0RWY194U3dldTNyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzVDNi83MzYxNzc3Mjc4NTgxMUVDOTY5OTMyMEVDNEY5QUUwMi9VSW5pM0lFdE5O ODlUYldEVmNfeFN3ZXUzcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzUabrk8TSyiKdc76xvs0hhkXPKifGemrIZMT23mM1qutlYOKZU7xT hWlif+mqzRCfdcCH1yKyCmVOJl0LJBF8HLhHVrH3BAHnmtfbyG2G8zDdMoaJuWYa rwfgXWfLM5stYR/ktZOnFjkecki2uOhCQQ4Ex/uBjrzluy6G56NWZBTQWP/MJmo9 mN9VQT7xvkvujQMwBaRIxIxbAX2nErceG4aDNkGpx7w7uEQqalTvfla0WHJ50675 Y1jqeibAHiBjrYZpWO5mPljap+Eg/dS4xin9yxk6L52+rOG6GhrkcEJvdyNGBN/a qhTyS+flPirjEalZiG0Z+vR99hjtlpNx -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:16 2025 by rpki-client