$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: EUxvip/MRcyUvUCLrFTFYpl7gzgtmZnF4BGpMCvd8p4= Subject key identifier: 8C:F7:39:D4:2E:7F:9F:88:AF:4C:70:3B:AB:AF:83:97:A4:D4:65:13 Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0BCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0BCF Signing time: Tue 12 Aug 2025 19:05:21 +0000 Manifest this update: Tue 12 Aug 2025 19:05:21 +0000 Manifest next update: Tue 19 Aug 2025 19:05:20 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: tJelqhfNWVFPsj2Q184VEZebBkTOuesr6Y0mNdr5dYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3023 (0xbcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: Aug 12 19:05:21 2025 GMT Not After : Aug 19 19:05:20 2025 GMT Subject: CN=689b9071-cc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:f3:ed:b4:84:8d:2b:bf:74:fb:7b:62:c8: 69:2b:67:4f:1d:d3:99:b6:e3:a0:1b:aa:09:6e:31: 9e:0c:75:76:ee:81:15:74:b4:ee:2d:a3:76:cf:fc: 51:32:31:4c:e2:09:ff:6b:fa:11:e1:93:03:b2:c7: a0:8f:43:35:9b:ed:e2:43:88:c8:b9:61:a9:5f:ce: c2:4a:71:9e:e8:a5:4e:8f:fc:28:f4:1c:4d:99:75: f4:f7:79:56:7f:22:6b:8a:92:c4:70:f0:50:e9:30: b9:16:2c:0c:d8:34:49:c6:39:6d:97:fa:99:e9:18: 31:4a:78:cc:a6:41:cf:29:49:bf:d2:e9:a7:8c:06: 66:9e:ff:0e:04:27:08:0e:9b:67:54:9b:94:28:35: 9d:53:74:36:d1:d8:80:d2:1e:95:de:e3:91:70:69: be:78:bc:60:46:1c:36:db:f4:28:14:10:4b:01:87: ab:a3:22:34:6c:d3:3e:5d:22:73:ee:36:86:6c:89: 87:05:4e:92:42:21:a0:c4:e0:12:0c:22:8b:4c:8e: d7:8d:55:43:ab:ee:4f:d7:0b:76:6b:04:9d:b2:35: 3c:4a:e3:96:13:f7:70:c1:67:ed:26:67:6e:6a:a3: a0:c0:1d:1b:80:94:35:9a:78:08:cb:63:86:11:45: 13:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F7:39:D4:2E:7F:9F:88:AF:4C:70:3B:AB:AF:83:97:A4:D4:65:13 X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6d:5a:57:99:b3:c7:16:6a:b7:ee:4c:8d:1e:ed:f7:06:b8: a6:54:3b:ee:14:ba:e8:d3:fd:40:ee:40:5e:20:28:a9:e0:a5: c4:12:fd:c2:d3:5e:6e:6f:0a:13:18:a2:50:11:42:41:4f:30: 31:59:30:a8:e1:72:34:29:55:12:9d:40:e6:ad:c4:58:db:fe: f0:bd:69:ba:36:2d:2b:77:84:ee:1f:19:ec:12:c5:07:5b:e9: 53:8f:ad:46:52:63:63:6b:23:73:69:b0:29:12:55:ed:91:64: bb:d1:81:06:f3:ac:1d:ac:ea:72:37:85:df:8d:ff:4c:c0:38: 49:64:e7:6a:b1:75:4e:f9:6c:59:16:3d:1c:56:7e:26:78:49: 90:60:91:2a:f1:f0:d0:da:77:2c:03:1c:93:fd:7e:a8:d6:c0: c8:bd:69:2e:87:57:da:86:bf:6f:44:4e:87:9f:96:c5:b1:61: 41:59:a1:50:e7:77:7e:f1:46:9a:52:12:a2:26:b3:e9:de:e4: 67:b8:bd:81:8f:80:2a:80:39:80:5f:14:a3:70:98:76:82:08: 32:a6:a8:d8:fb:f7:c9:a6:38:d9:c8:b8:c4:c0:88:f7:b0:46: 30:b3:a9:fc:1a:d9:a7:19:81:8f:41:ca:ea:23:f8:3f:44:85: ed:88:32:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjUwODEyMTkwNTIxWhcNMjUwODE5MTkwNTIwWjAYMRYwFAYD VQQDEw02ODliOTA3MS1jYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzR7z7bSEjSu/dPt7YshpK2dPHdOZtuOgG6oJbjGeDHV27oEVdLTuLaN2z/xR MjFM4gn/a/oR4ZMDssegj0M1m+3iQ4jIuWGpX87CSnGe6KVOj/wo9BxNmXX093lW fyJripLEcPBQ6TC5FiwM2DRJxjltl/qZ6RgxSnjMpkHPKUm/0umnjAZmnv8OBCcI DptnVJuUKDWdU3Q20diA0h6V3uORcGm+eLxgRhw22/QoFBBLAYeroyI0bNM+XSJz 7jaGbImHBU6SQiGgxOASDCKLTI7XjVVDq+5P1wt2awSdsjU8SuOWE/dwwWftJmdu aqOgwB0bgJQ1mngIy2OGEUUThwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIz3OdQu f5+Ir0xwO6uvg5ek1GUTMB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAObVpXmbPHFmq37kyNHu33BrimVDvuFLro0/1A7kBeICip4KXEEv3C 015ubwoTGKJQEUJBTzAxWTCo4XI0KVUSnUDmrcRY2/7wvWm6Ni0rd4TuHxnsEsUH W+lTj61GUmNjayNzabApElXtkWS70YEG86wdrOpyN4Xfjf9MwDhJZOdqsXVO+WxZ Fj0cVn4meEmQYJEq8fDQ2ncsAxyT/X6o1sDIvWkuh1fahr9vRE6Hn5bFsWFBWaFQ 53d+8UaaUhKiJrPp3uRnuL2Bj4AqgDmAXxSjcJh2gggypqjY+/fJpjjZyLjEwIj3 sEYws6n8GtmnGYGPQcrqI/g/RIXtiDIU -----END CERTIFICATE-----Generated at Tue Aug 12 22:46:19 2025 by rpki-client