$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: +Cx3Vd1ZGXXlu6OqrmR81RG3f/n8JORlPKffL9ycZM0= Subject key identifier: 97:AA:E2:52:A4:D4:18:5B:C7:78:D1:78:55:21:72:47:CC:86:2C:F9 Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0B9A Signing time: Fri 08 Aug 2025 19:14:17 +0000 Manifest this update: Fri 08 Aug 2025 19:14:17 +0000 Manifest next update: Fri 15 Aug 2025 19:14:17 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: 4QcUaSDL3fvrHdG8sb6k4KQlvUfM4hW0K7Fb9y9brAk=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: b6SG981ws9YTohF7YJYfD6V/fAmms72gE/FD/yHhvRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: Aug 8 19:14:17 2025 GMT Not After : Aug 15 19:14:17 2025 GMT Subject: CN=68964c89-5446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:40:ad:58:4e:4a:df:a6:02:5a:b6:59:80: 54:4f:0a:1e:b6:22:80:5c:14:0a:b0:e5:c0:26:f2: 82:01:66:3c:da:47:b6:71:b8:c9:91:63:82:8e:55: b1:08:8e:e9:84:49:ba:43:3b:8a:58:fc:26:ad:7e: 97:d8:e0:36:5d:be:61:45:52:7f:ee:1b:74:07:52: 25:ac:52:9a:37:4b:9c:07:92:c5:3b:67:2a:06:53: 83:01:f7:da:e1:7e:e8:ae:01:7f:12:6b:34:d1:c7: 2b:35:af:12:ff:5b:e9:7b:9e:aa:fb:d2:4d:73:cc: ef:c9:97:6b:6a:fd:ee:a0:ee:77:07:e5:d4:e9:15: d3:67:41:95:3d:cd:69:ce:7c:ef:32:08:cb:88:e0: 74:e5:36:b9:24:1e:46:91:1b:ce:e4:37:9c:a1:43: 02:8c:96:7c:7e:ec:4a:73:2a:36:9d:f4:ae:d1:d1: 2c:9e:84:83:25:5e:f1:df:a6:a9:f2:b7:63:bb:74: 0e:06:78:8b:e2:37:3f:3b:f2:c8:30:7f:36:1d:f7: f3:80:0f:28:d0:71:a3:1f:b2:b2:5a:41:4f:7a:1a: 06:cf:4c:31:9c:92:d1:6f:76:7e:dc:ac:c3:71:05: fd:f2:0c:ee:25:71:e3:67:65:70:7f:77:f2:48:0d: 67:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AA:E2:52:A4:D4:18:5B:C7:78:D1:78:55:21:72:47:CC:86:2C:F9 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:3a:7d:1c:c2:27:01:57:5d:d8:91:23:83:56:29:d3:0f:d6: 35:33:33:57:75:3a:14:07:4b:a6:4d:4c:02:b4:31:cc:10:fe: 6e:15:ef:a8:51:22:c8:22:aa:d4:07:62:35:86:99:c1:f6:65: 77:20:d3:0a:3b:53:c5:f5:b2:cb:6b:ef:46:94:a7:16:3d:57: c9:77:db:aa:2c:34:e0:a8:bd:dd:d2:12:28:94:97:26:17:41: 40:bd:0c:de:9b:f2:21:45:0f:8e:3b:c8:55:44:2b:21:fc:bd: f5:2c:23:cf:2a:c3:bc:60:16:9f:1b:0c:12:cc:e9:79:3a:aa: 5b:82:8e:77:e8:d0:18:94:6d:6d:50:9a:74:21:7c:5b:35:ac: 59:a1:4d:ab:08:9d:b7:4f:bb:75:35:d8:4a:af:a2:e3:40:6d: 60:5f:d2:49:ae:55:e6:d0:76:30:92:75:60:49:dc:da:71:e0: 9c:28:c6:43:1a:54:fe:be:64:1f:05:d7:de:d4:63:ba:19:b1: a1:65:1e:7d:21:99:08:dc:8a:eb:b8:2e:5c:8f:73:17:76:0c: ff:f8:46:70:a4:b4:35:9e:43:65:1c:0f:0f:21:ce:92:8e:31: 03:a3:f3:01:af:7f:a2:20:05:9d:81:b5:8d:4d:60:ec:e9:33: 43:90:37:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjUwODA4MTkxNDE3WhcNMjUwODE1MTkxNDE3WjAYMRYwFAYD VQQDEw02ODk2NGM4OS01NDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9lArVhOSt+mAlq2WYBUTwoetiKAXBQKsOXAJvKCAWY82ke2cbjJkWOCjlWx CI7phEm6QzuKWPwmrX6X2OA2Xb5hRVJ/7ht0B1IlrFKaN0ucB5LFO2cqBlODAffa 4X7orgF/Ems00ccrNa8S/1vpe56q+9JNc8zvyZdrav3uoO53B+XU6RXTZ0GVPc1p znzvMgjLiOB05Ta5JB5GkRvO5DecoUMCjJZ8fuxKcyo2nfSu0dEsnoSDJV7x36ap 8rdju3QOBniL4jc/O/LIMH82HffzgA8o0HGjH7KyWkFPehoGz0wxnJLRb3Z+3KzD cQX98gzuJXHjZ2Vwf3fySA1neQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeq4lKk 1Bhbx3jReFUhckfMhiz5MB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWOn0cwicBV13YkSODVinTD9Y1MzNXdToUB0umTUwCtDHMEP5uFe+o USLIIqrUB2I1hpnB9mV3INMKO1PF9bLLa+9GlKcWPVfJd9uqLDTgqL3d0hIolJcm F0FAvQzem/IhRQ+OO8hVRCsh/L31LCPPKsO8YBafGwwSzOl5Oqpbgo536NAYlG1t UJp0IXxbNaxZoU2rCJ23T7t1NdhKr6LjQG1gX9JJrlXm0HYwknVgSdzaceCcKMZD GlT+vmQfBdfe1GO6GbGhZR59IZkI3IrruC5cj3MXdgz/+EZwpLQ1nkNlHA8PIc6S jjEDo/MBr3+iIAWdgbWNTWDs6TNDkDco -----END CERTIFICATE-----Generated at Sun Aug 10 20:03:34 2025 by rpki-client