$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: L0XgqWRA/4HVzfn7g6i/HzmRAtlpwb+i7ae36q1xxYI= Subject key identifier: E5:38:BE:C7:C5:39:D8:B3:75:B5:D8:6C:E9:B3:6A:72:5C:12:14:D4 Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 100B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 1945 Signing time: Fri 08 Aug 2025 17:38:36 +0000 Manifest this update: Fri 08 Aug 2025 17:38:35 +0000 Manifest next update: Fri 15 Aug 2025 17:38:35 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: iKPiyJF30YmQKTtUzfBe1EcOW3wB76twzyk4Z2vdvSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4107 (0x100b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: Aug 8 17:38:35 2025 GMT Not After : Aug 15 17:38:35 2025 GMT Subject: CN=6896361c-e3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:8d:52:5b:fa:80:27:42:7a:ae:89:68:ea: dd:4d:0b:c0:1a:bc:ed:97:75:52:63:72:22:49:59: cc:60:d2:84:c3:f0:47:3d:e4:4c:62:1d:03:c3:73: 39:1d:f0:01:5d:75:0e:d6:bd:f5:76:f3:55:ea:8b: 97:5a:26:59:92:c4:c4:fc:8f:4e:e1:46:b1:29:45: e3:6a:da:75:22:7d:56:a7:8a:85:1c:0e:e0:cc:40: 44:50:c2:1f:65:3f:ff:bc:a9:a8:73:1b:59:6e:1f: 1b:5a:eb:58:f2:9b:85:64:fc:d5:bd:5e:55:bc:2e: b7:b0:57:f2:b1:f1:f7:2a:35:6b:db:19:be:83:90: c2:7c:ca:3f:72:56:b3:1b:82:ca:a0:d0:97:15:3a: 05:1d:f0:f1:c8:d5:ac:a4:f8:e3:9c:3a:06:86:d3: 73:20:8d:53:f9:57:59:a2:07:99:34:c1:41:72:29: 8c:0d:64:a8:a4:1a:1a:b1:6e:e8:e4:69:37:68:b8: 0e:25:0f:8d:20:e5:81:7c:3c:ab:37:3d:2b:98:48: 85:47:6a:3b:3d:d5:46:7c:a9:04:34:31:c7:95:f2: 81:98:96:e2:f5:90:a6:1e:3d:45:1b:33:5e:09:db: 0c:e6:b4:fb:2e:36:84:fa:ba:e9:57:47:31:3f:9c: c0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:38:BE:C7:C5:39:D8:B3:75:B5:D8:6C:E9:B3:6A:72:5C:12:14:D4 X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:fc:01:f5:f9:fa:f6:c0:fd:68:cc:64:3b:46:66:7b:59:76: c7:c5:d5:8d:f1:46:bd:05:b1:99:bd:bb:bc:0f:5a:2f:d3:90: 1a:e7:85:5c:81:92:8d:7b:9a:34:77:ef:9f:9d:ad:e9:62:bf: aa:6f:dd:22:22:e6:e1:cc:56:56:51:c3:9f:69:94:df:da:ef: d9:a6:63:10:19:f8:1b:67:a9:5e:fe:70:b3:ce:c3:00:82:92: db:98:17:f7:88:fe:b7:f1:b7:65:91:7b:d8:e3:3c:3e:58:5d: a0:76:f1:6e:1c:b7:21:9a:37:33:99:97:ca:18:ea:d3:5b:f5: 65:86:b9:e5:79:37:0b:c0:40:d1:c6:f3:56:76:14:c3:3e:3e: 1f:55:a8:38:80:2e:cd:b9:c4:55:18:79:af:28:d6:e4:41:e0: b4:ba:9a:b3:2d:8c:c4:f1:6e:c1:f1:2d:4b:42:4f:28:90:3e: 5a:80:07:ae:f8:3d:cc:c2:e6:e1:95:24:45:35:48:56:af:4b: 71:e3:8b:21:20:e5:5e:1e:ce:c9:75:e6:8c:1a:ce:40:64:37: b4:58:1c:0e:34:78:08:78:24:be:ad:fb:22:83:8b:74:ee:6e: 34:21:99:e4:a9:8b:cf:eb:c3:63:77:28:85:6f:8b:c1:10:fa: 5d:fd:ed:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjUwODA4MTczODM1WhcNMjUwODE1MTczODM1WjAYMRYwFAYD VQQDEw02ODk2MzYxYy1lM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vuNUlv6gCdCeq6JaOrdTQvAGrztl3VSY3IiSVnMYNKEw/BHPeRMYh0Dw3M5 HfABXXUO1r31dvNV6ouXWiZZksTE/I9O4UaxKUXjatp1In1Wp4qFHA7gzEBEUMIf ZT//vKmocxtZbh8bWutY8puFZPzVvV5VvC63sFfysfH3KjVr2xm+g5DCfMo/claz G4LKoNCXFToFHfDxyNWspPjjnDoGhtNzII1T+VdZogeZNMFBcimMDWSopBoasW7o 5Gk3aLgOJQ+NIOWBfDyrNz0rmEiFR2o7PdVGfKkENDHHlfKBmJbi9ZCmHj1FGzNe CdsM5rT7LjaE+rrpV0cxP5zAjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU4vsfF OdizdbXYbOmzanJcEhTUMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz/AH1+fr2wP1ozGQ7RmZ7WXbHxdWN8Ua9BbGZvbu8D1ov05Aa54Vc gZKNe5o0d++fna3pYr+qb90iIubhzFZWUcOfaZTf2u/ZpmMQGfgbZ6le/nCzzsMA gpLbmBf3iP638bdlkXvY4zw+WF2gdvFuHLchmjczmZfKGOrTW/VlhrnleTcLwEDR xvNWdhTDPj4fVag4gC7NucRVGHmvKNbkQeC0upqzLYzE8W7B8S1LQk8okD5agAeu +D3MwubhlSRFNUhWr0tx44shIOVeHs7JdeaMGs5AZDe0WBwONHgIeCS+rfsig4t0 7m40IZnkqYvP68NjdyiFb4vBEPpd/e0F -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:12 2025 by rpki-client