$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json) Hash identifier: 5WAjiDOxgGIJBatHcrJd0GcMqYEdgPd1mhIHxCR5MU4= Subject key identifier: 7E:EE:92:B5:D8:98:FA:13:59:D9:34:A8:13:23:23:15:9A:5E:02:AE Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Certificate serial: 0828 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft Manifest number: 080A Signing time: Fri 22 Aug 2025 21:05:32 +0000 Manifest this update: Fri 22 Aug 2025 21:05:32 +0000 Manifest next update: Fri 29 Aug 2025 21:05:32 +0000 Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: eZXmCfdUPknPFmde0nYgNgGXmck7MDJUDwMN3n716uA=) 2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: RcdkSPfjnAmz3uVP4FBhLTQ0GFBSdezmu4kQPa/+yaY=) 3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: A1w8tHzqGX+jD/ISNBe9aPcQuL2J3HJQzhH/YAzCdq0=) 4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XTLM9Il3d4SVArTDp/CLgDo1h6RlBLONdep9WAa5H5I=) 5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: cXIuMnEWUiuT4kupzUNHJo4zj/W45Qb9cwkr7yvw0vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2088 (0x828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Validity Not Before: Aug 22 21:05:32 2025 GMT Not After : Aug 29 21:05:32 2025 GMT Subject: CN=68a8db9c-dce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:53:24:ec:d8:b4:85:5d:d7:d7:ff:3d:cd: a2:c0:71:34:ec:25:cb:3f:3b:22:fb:0d:75:c8:88: cd:e8:c9:a8:af:84:34:01:b5:a9:c0:08:7d:bb:44: 47:91:de:24:38:18:33:fe:e1:30:a4:41:27:75:2a: b9:42:67:39:03:ad:45:4f:74:aa:60:4f:4c:d7:8d: bc:32:a5:d5:56:f7:9a:ff:bc:11:f8:b5:fc:d1:04: c5:dc:f9:b7:52:a4:a7:c1:fe:89:cc:6c:01:64:91: e6:7e:b8:47:ec:19:df:b2:d9:e5:2e:38:98:4f:0a: 8d:d1:ae:94:c3:d9:9f:be:77:6c:4a:cc:d4:64:97: 88:f4:a8:1d:8e:29:a0:b0:db:91:18:64:67:23:ab: 12:b9:11:e6:78:8b:78:3b:74:d5:cd:c8:41:b5:00: e8:18:82:44:49:bb:98:9a:2a:0c:34:7b:9c:a8:36: 8d:b0:74:d9:ae:72:d6:23:b1:18:8b:49:23:50:20: d8:15:4c:21:4a:90:fb:cd:a6:f7:7f:3f:83:f7:c8: 91:70:a6:87:d0:9e:1f:ba:af:18:d4:5b:52:03:8a: 8b:a7:eb:31:58:ba:77:dc:8f:2b:3c:5c:ab:c9:29: ec:74:31:45:3d:c1:91:b0:75:2a:9d:85:a4:dd:78: 15:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EE:92:B5:D8:98:FA:13:59:D9:34:A8:13:23:23:15:9A:5E:02:AE X509v3 Authority Key Identifier: keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:2b:1d:99:5f:dc:bc:0f:5a:48:ee:88:9a:75:d1:62:82:34: 31:95:67:81:d5:da:a2:9f:04:4b:48:f5:1d:46:94:2a:9d:a9: ba:ad:11:94:bf:ac:16:cd:a0:e2:b8:d9:89:d4:17:2f:68:b7: ab:84:73:29:89:64:59:e0:d3:d2:72:5e:47:3c:41:ff:69:f8: b2:a8:0c:35:83:ab:a5:b4:79:82:c6:69:f0:7d:90:d6:37:71: ab:15:66:7f:57:92:5f:83:fd:1f:de:dc:46:e1:5d:06:56:f9: 70:56:4b:82:ea:1f:4c:76:fb:c0:3c:eb:7e:c3:cb:65:fc:fb: 53:af:3b:5d:0b:1c:74:05:1b:83:20:2f:c1:72:ab:3a:ae:47: b1:b0:cb:d2:71:b6:b9:32:c3:31:33:26:57:10:ec:43:64:cb: 07:fd:eb:ea:f5:32:37:35:86:47:0e:11:94:11:72:3e:b9:51: a9:cb:5e:4f:85:f3:31:4f:2b:38:4d:62:48:02:d4:1a:e2:ee: f3:7f:00:bf:43:4f:b7:56:d6:2f:be:f4:2c:c4:65:82:a9:2b: 89:89:70:84:09:98:fc:69:c2:ff:2a:81:cc:f1:4d:cd:51:73: fd:b3:be:c4:d2:aa:f0:c6:69:ff:3c:34:ea:d3:85:43:44:34: 8a:3e:2c:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2 QzNBMEUxQzkwHhcNMjUwODIyMjEwNTMyWhcNMjUwODI5MjEwNTMyWjAYMRYwFAYD VQQDEw02OGE4ZGI5Yy1kY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyVTJOzYtIVd19f/Pc2iwHE07CXLPzsi+w11yIjN6Mmor4Q0AbWpwAh9u0RH kd4kOBgz/uEwpEEndSq5Qmc5A61FT3SqYE9M1428MqXVVvea/7wR+LX80QTF3Pm3 UqSnwf6JzGwBZJHmfrhH7BnfstnlLjiYTwqN0a6Uw9mfvndsSszUZJeI9Kgdjimg sNuRGGRnI6sSuRHmeIt4O3TVzchBtQDoGIJESbuYmioMNHucqDaNsHTZrnLWI7EY i0kjUCDYFUwhSpD7zab3fz+D98iRcKaH0J4fuq8Y1FtSA4qLp+sxWLp33I8rPFyr ySnsdDFFPcGRsHUqnYWk3XgVkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7ukrXY mPoTWdk0qBMjIxWaXgKuMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTgzQi83OTJEMTQ4QUYyODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEpp NFVjMzJUN2o1dk5zT2c0Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnKx2ZX9y8D1pI7oiaddFigjQxlWeB1dqinwRLSPUdRpQqnam6rRGU v6wWzaDiuNmJ1BcvaLerhHMpiWRZ4NPScl5HPEH/afiyqAw1g6ultHmCxmnwfZDW N3GrFWZ/V5Jfg/0f3txG4V0GVvlwVkuC6h9MdvvAPOt+w8tl/PtTrztdCxx0BRuD IC/Bcqs6rkexsMvScba5MsMxMyZXEOxDZMsH/evq9TI3NYZHDhGUEXI+uVGpy15P hfMxTys4TWJIAtQa4u7zfwC/Q0+3VtYvvvQsxGWCqSuJiXCECZj8acL/KoHM8U3N UXP9s77E0qrwxmn/PDTq04VDRDSKPiwd -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:19 2025 by rpki-client