$ rpki-client -vvf rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft File: uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft (raw, json) Hash identifier: wLdFQWJiYB6VeqrcHDRqqGV8067jNEKabaQyVyM3SEw= Subject key identifier: 61:E2:6B:7D:7D:FC:C0:B5:ED:D9:97:FE:8A:16:64:55:9B:1E:1F:D0 Authority key identifier: BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB Certificate issuer: /CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft Manifest number: 018B Signing time: Wed 13 Aug 2025 04:02:48 +0000 Manifest this update: Wed 13 Aug 2025 04:02:47 +0000 Manifest next update: Wed 20 Aug 2025 04:02:47 +0000 Files and hashes: 1: uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl (hash: hU4ztytmy5h9rlSv+WU1x5zLDZMb4zwG3uXp4M9bbHE=) 2: 859871F2215D11EE963E9A52C4F9AE02.roa (hash: Z3peH/mE9SV9hvZtkmemszIcaOCUTsQPfGHf/GpQqto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 04:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113217, serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB Validity Not Before: Aug 13 04:02:47 2025 GMT Not After : Aug 20 04:02:47 2025 GMT Subject: CN=689c0e67-e25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6f:68:83:e2:1e:c4:48:04:12:2d:07:0a:c6: 18:8d:08:b6:c9:f9:85:26:93:2a:81:46:10:28:36: 05:fe:5d:42:c6:32:a3:49:d0:42:80:47:61:ea:b0: c9:de:95:42:a1:ae:b1:a1:3b:4e:1c:2e:c4:bb:0a: 6e:7c:7a:1f:94:85:cd:0f:48:81:0a:6e:c9:5e:c6: 19:cb:58:fb:ff:0c:79:a0:99:76:99:68:0a:4e:9e: 15:0e:dd:11:d8:80:2a:8e:c1:1f:b8:79:1f:08:7e: 3b:47:7b:61:33:d8:5f:3a:36:27:07:19:f7:ea:67: 25:41:91:d6:59:1a:25:48:e6:dd:b6:91:6e:bf:9a: 39:b3:30:84:65:99:35:0d:b2:fa:12:76:63:c6:a4: 9b:5a:0d:b5:5d:fc:fc:d8:ba:37:2f:5c:52:b9:87: 53:58:9f:c6:de:54:15:4e:d8:96:a7:ab:f6:96:cf: b8:91:0b:47:b2:4a:a0:c6:25:68:71:c3:69:ac:e8: de:9f:bf:98:ab:b5:65:36:18:f9:46:f6:db:a4:5e: 9a:bc:60:03:e0:97:d4:b7:2a:38:c3:c4:70:0f:91: d2:6b:8c:e8:b9:bb:cf:8b:04:65:1b:e5:60:11:c2: 56:45:1c:30:2e:95:45:fa:9d:6a:4b:2f:db:48:61: dc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E2:6B:7D:7D:FC:C0:B5:ED:D9:97:FE:8A:16:64:55:9B:1E:1F:D0 X509v3 Authority Key Identifier: keyid:BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:40:7f:b3:d5:0e:06:12:9f:4e:2d:d4:40:3b:0d:a9:da:11: f8:9f:d2:cf:c7:8f:fb:b2:f4:6a:1b:82:89:d3:21:b5:13:39: e0:9e:28:36:85:7e:9b:f5:34:30:0c:b6:c4:6f:54:fc:9d:68: 15:79:65:3c:d9:b5:f5:89:98:0d:c8:fe:d1:99:3a:83:16:2e: 39:fb:24:58:c6:39:65:af:88:80:76:70:14:61:df:35:44:74: 4f:b9:de:0e:84:d3:a6:3c:30:0b:cb:78:01:e1:63:6b:d6:4c: 42:56:b4:08:06:59:37:59:c2:50:95:fc:8e:10:c3:ac:11:74: ca:7d:64:78:9d:7f:b9:33:b5:cb:9f:6c:c0:85:30:46:c5:38: 62:1f:ef:ca:03:60:9d:9e:b9:f5:62:63:88:f1:77:67:d0:c8: 09:b0:bb:bf:63:0f:96:30:6d:df:b9:0a:4f:49:50:e3:db:cf: 2c:90:2c:4c:1b:63:f5:06:67:32:bc:26:0f:3d:db:da:1e:df: 2c:b0:af:d6:f9:e0:30:3a:e0:46:10:47:dd:e9:19:c4:9d:e4: ff:01:ae:6f:eb:1b:d5:16:9d:ea:0b:81:82:b4:29:42:5f:ec: c4:b8:4e:bc:d7:72:7e:25:bf:c0:4d:90:c2:40:25:d0:bc:38: 00:6d:5d:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMyMTcxMTAvBgNVBAUTKEJCMzAwNzhDRjY4Nzc4N0QzQTVCM0U1MzRDMDg5NzE2 QTg2QjEzQkIwHhcNMjUwODEzMDQwMjQ3WhcNMjUwODIwMDQwMjQ3WjAYMRYwFAYD VQQDEw02ODljMGU2Ny1lMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4m9og+IexEgEEi0HCsYYjQi2yfmFJpMqgUYQKDYF/l1CxjKjSdBCgEdh6rDJ 3pVCoa6xoTtOHC7EuwpufHoflIXND0iBCm7JXsYZy1j7/wx5oJl2mWgKTp4VDt0R 2IAqjsEfuHkfCH47R3thM9hfOjYnBxn36mclQZHWWRolSObdtpFuv5o5szCEZZk1 DbL6EnZjxqSbWg21Xfz82Lo3L1xSuYdTWJ/G3lQVTtiWp6v2ls+4kQtHskqgxiVo ccNprOjen7+Yq7VlNhj5RvbbpF6avGAD4JfUtyo4w8RwD5HSa4zoubvPiwRlG+Vg EcJWRRwwLpVF+p1qSy/bSGHc8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHia319 /MC17dmX/ooWZFWbHh/QMB8GA1UdIwQYMBaAFLswB4z2h3h9Ols+U0wIlxaoaxO7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzIxNy9ENzIxOTZEMDIx NUMxMUVFQkNCNUIyNEVDNEY5QUUwMi91ekFIalBhSGVIMDZXejVUVEFpWEZxaHJF N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V6QUhqUGFIZUgwNld6NVRUQWlYRnFockU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzIxNy9ENzIxOTZEMDIxNUMxMUVFQkNCNUIyNEVDNEY5QUUwMi91ekFIalBhSGVI MDZXejVUVEFpWEZxaHJFN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClQH+z1Q4GEp9OLdRAOw2p2hH4n9LPx4/7svRqG4KJ0yG1Ezngnig2 hX6b9TQwDLbEb1T8nWgVeWU82bX1iZgNyP7RmTqDFi45+yRYxjllr4iAdnAUYd81 RHRPud4OhNOmPDALy3gB4WNr1kxCVrQIBlk3WcJQlfyOEMOsEXTKfWR4nX+5M7XL n2zAhTBGxThiH+/KA2Cdnrn1YmOI8Xdn0MgJsLu/Yw+WMG3fuQpPSVDj288skCxM G2P1BmcyvCYPPdvaHt8ssK/W+eAwOuBGEEfd6RnEneT/Aa5v6xvVFp3qC4GCtClC X+zEuE6813J+Jb/ATZDCQCXQvDgAbV1F -----END CERTIFICATE-----Generated at Wed Aug 13 05:57:01 2025 by rpki-client