$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft File: uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json) Hash identifier: ZXiu60M0VAjW9OXWxANMZeEohwETP9XSmsdt8ybQ0qc= Subject key identifier: 3E:9B:B3:E0:5C:32:22:E2:DD:19:23:C7:8F:D9:95:45:02:5F:0F:96 Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft Manifest number: 065A Signing time: Fri 22 Aug 2025 22:44:50 +0000 Manifest this update: Fri 22 Aug 2025 22:44:49 +0000 Manifest next update: Fri 29 Aug 2025 22:44:49 +0000 Files and hashes: 1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: uwV3RwT1XMJ3SMzsMWYU2V9BW1VxwEzqW00l85s3ueM=) 2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: Y2zv5qoN2STM8iOeHa24FYyQDvrtP06yfpXTjv2gJRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Validity Not Before: Aug 22 22:44:49 2025 GMT Not After : Aug 29 22:44:49 2025 GMT Subject: CN=68a8f2e2-5231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:c8:3f:8b:55:43:cd:cd:89:59:7f:ec:17: 98:6f:a3:db:98:09:43:fb:ed:0f:36:1a:77:0e:f6: 8c:bd:ae:3a:db:52:18:84:27:c1:5c:43:c2:e7:36: eb:15:b1:24:ac:78:52:d9:27:db:f0:99:db:62:8b: 9f:1f:e7:3c:1c:fc:d8:da:f7:9e:11:6f:09:c1:c8: a6:f8:4b:4f:92:72:62:25:da:6e:e9:b6:6d:c6:44: 92:a2:a2:cc:d4:c5:07:58:f4:e9:6f:6b:41:44:75: 5e:d3:fb:16:5a:1d:40:6b:ca:79:0c:79:9a:51:6e: fe:5f:80:c0:0c:0b:75:5e:00:b0:cc:ef:fb:c0:14: 36:eb:3e:bf:01:5a:33:b3:64:4b:99:93:45:c0:84: 16:6a:ad:7c:0f:8a:21:08:7a:0b:9d:a7:b4:8f:32: 9c:54:cb:8f:5d:3e:d8:a5:a7:8e:e4:87:b8:ae:a8: 75:97:ed:de:16:cf:42:d6:69:24:cf:1e:ec:91:f6: 60:fb:b5:19:26:d8:5e:72:1b:ba:63:22:0d:54:af: 6f:29:33:b6:f4:2a:95:d5:8a:6d:88:14:d1:09:9c: 08:31:01:fa:5a:11:8d:42:ea:af:94:15:2b:9d:7a: fe:b0:10:44:c5:db:2b:ad:0e:45:d1:a8:75:38:21: 18:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9B:B3:E0:5C:32:22:E2:DD:19:23:C7:8F:D9:95:45:02:5F:0F:96 X509v3 Authority Key Identifier: keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cc:11:21:48:a5:a5:17:2c:e3:04:86:4f:e6:4e:84:83:80: cf:0c:67:8f:d7:86:2a:5f:54:2a:97:38:22:5c:e9:00:e5:f1: 15:0f:9d:1d:4f:21:37:0c:99:77:2d:e2:b7:98:47:78:2b:2b: da:63:4d:89:ac:91:cf:83:dd:1e:bd:65:da:88:56:55:65:0f: 71:4b:ee:ef:fc:5e:49:ed:33:ea:2f:d6:68:c3:24:bd:f9:ba: 65:6a:f4:c2:be:59:b6:ce:2f:21:00:e7:1e:88:fa:00:d2:a8: f9:88:54:b7:52:f3:99:86:12:54:a4:56:94:df:e5:9a:e2:d2: 3e:7d:18:c6:48:5c:b4:ae:6f:86:99:50:5c:2a:80:bb:6b:a9: 9f:75:7f:30:22:a9:fe:28:f5:a8:cf:8e:9a:da:a6:c4:d8:c4: 5a:30:4d:89:d7:d2:7a:0b:cb:e0:75:81:5d:b7:65:87:f6:4a: 74:49:5a:57:f2:db:16:b8:1b:fd:5e:17:b0:7a:32:0c:79:da: 9d:a9:ce:db:15:98:be:5e:f5:d6:45:23:34:f7:94:1a:77:1a: b9:d5:76:1f:2e:af:87:ce:de:a7:61:33:ef:6e:1a:b5:47:85: 2b:5b:3a:d9:c1:3a:fa:a3:fc:4b:38:78:73:89:63:c7:9f:9b: 23:ee:07:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy NkEwMjE3RTYwHhcNMjUwODIyMjI0NDQ5WhcNMjUwODI5MjI0NDQ5WjAYMRYwFAYD VQQDEw02OGE4ZjJlMi01MjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkPIP4tVQ83NiVl/7BeYb6PbmAlD++0PNhp3DvaMva4621IYhCfBXEPC5zbr FbEkrHhS2Sfb8JnbYoufH+c8HPzY2veeEW8Jwcim+EtPknJiJdpu6bZtxkSSoqLM 1MUHWPTpb2tBRHVe0/sWWh1Aa8p5DHmaUW7+X4DADAt1XgCwzO/7wBQ26z6/AVoz s2RLmZNFwIQWaq18D4ohCHoLnae0jzKcVMuPXT7YpaeO5Ie4rqh1l+3eFs9C1mkk zx7skfZg+7UZJthechu6YyINVK9vKTO29CqV1YptiBTRCZwIMQH6WhGNQuqvlBUr nXr+sBBExdsrrQ5F0ah1OCEYnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6bs+Bc MiLi3Rkjx4/ZlUUCXw+WMB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2 OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDcyRC85OEJBNDZCNDk2OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5X dzNhRjhLdmpTdTRtb0NGLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArzBEhSKWlFyzjBIZP5k6Eg4DPDGeP14YqX1QqlzgiXOkA5fEVD50d TyE3DJl3LeK3mEd4KyvaY02JrJHPg90evWXaiFZVZQ9xS+7v/F5J7TPqL9ZowyS9 +bplavTCvlm2zi8hAOceiPoA0qj5iFS3UvOZhhJUpFaU3+Wa4tI+fRjGSFy0rm+G mVBcKoC7a6mfdX8wIqn+KPWoz46a2qbE2MRaME2J19J6C8vgdYFdt2WH9kp0SVpX 8tsWuBv9XhewejIMedqdqc7bFZi+XvXWRSM095Qadxq51XYfLq+Hzt6nYTPvbhq1 R4UrWzrZwTr6o/xLOHhziWPHn5sj7gcS -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:08 2025 by rpki-client