$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft File: uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json) Hash identifier: wNv+tbNc8LJeSS3BF6W5ubIxK/968KNpe4y1I6TM5fE= Subject key identifier: 70:6B:D4:51:FE:C7:CA:69:62:5A:F0:B9:D3:99:13:21:CE:EE:14:55 Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 Certificate issuer: /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft Manifest number: 0122 Signing time: Thu 07 Aug 2025 05:15:32 +0000 Manifest this update: Thu 07 Aug 2025 05:15:32 +0000 Manifest next update: Thu 14 Aug 2025 05:15:32 +0000 Files and hashes: 1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: 9mZ+nDJPx51UxTjnK5+WP/NdSH+IuLjeagFmTRtx+G8=) 2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: rOfi7pLc2YXhQ9Pw2aUr9rz0+D/rY6Ijcu5KC1k/f/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91320D4, serialNumber=B97A7F015A736074DF38445C98074378219D2995 Validity Not Before: Aug 7 05:15:32 2025 GMT Not After : Aug 14 05:15:32 2025 GMT Subject: CN=68943674-876b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6f:a4:4b:a0:42:48:f8:d8:4d:3d:8c:46:0a: 9d:87:3d:b7:ea:77:8f:37:8a:8f:b2:f9:de:a5:1a: 57:4b:7c:af:07:86:f1:e3:67:2a:ed:48:46:29:b6: 7c:91:6e:35:e4:ae:b3:00:19:bc:e3:26:60:f9:ce: 24:52:dc:6a:f1:15:1b:3d:0b:9b:11:81:13:22:94: a6:24:53:2d:83:ae:91:0e:c6:f2:7e:7a:d8:5a:fc: ce:4f:72:7b:ef:c2:28:2a:f7:9e:4a:10:5f:b2:8c: 4a:59:a0:af:4c:3e:7c:d0:b4:95:92:d5:d8:8c:2a: 68:1c:59:c6:9f:40:49:d0:9f:43:a7:51:73:90:18: cb:86:dd:bf:31:d4:75:48:92:ea:49:b9:d3:a2:7b: 4f:90:a4:56:1d:4a:da:d3:cd:63:0a:7e:d5:d2:9b: 4c:d8:7b:f9:a1:d7:98:87:d2:6f:e7:64:c5:1a:bd: 6e:fb:d2:20:71:56:9e:27:c6:63:70:2e:d1:4b:33: fa:00:b3:50:b5:9f:99:1d:8e:89:63:f1:c7:b3:8d: e8:c7:d9:76:00:5b:13:66:49:08:ea:34:43:21:ff: 56:d2:3d:fc:77:30:ce:99:b6:c7:7f:2d:27:ad:e8: 70:c6:33:f0:11:a9:25:13:69:fe:5c:34:17:38:4f: 4d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6B:D4:51:FE:C7:CA:69:62:5A:F0:B9:D3:99:13:21:CE:EE:14:55 X509v3 Authority Key Identifier: keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9d:14:e0:99:b7:bc:e2:a0:95:24:4b:d6:24:bb:7a:c9:40: b8:50:d7:30:4b:54:a6:cc:ec:a2:25:7d:78:14:4b:69:4a:04: 00:40:7f:8a:08:93:4f:2f:4d:d0:27:ae:da:d0:92:d4:9d:97: a5:d9:66:1e:7c:42:98:ac:ee:0b:60:66:a9:e8:0c:a5:30:4c: d3:cc:8e:6b:11:00:29:4e:a0:f4:92:21:e4:dc:9b:1f:c4:cd: ec:66:32:5c:5c:6e:d1:24:ba:45:89:d9:61:1e:28:80:3f:48: b0:8b:83:1b:9a:24:44:f1:a6:0c:ea:9c:f1:cf:3d:8e:c2:c8: d9:80:c1:b5:dd:dd:8f:3d:32:a2:73:38:0e:02:52:98:de:6d: 83:9f:b1:3a:6b:38:40:22:f1:a4:2e:67:c1:9a:20:f2:f8:2c: f4:8c:4a:be:51:e5:73:80:e3:3e:e5:d1:58:ea:de:04:15:b6: c4:f3:2d:d6:95:33:df:75:52:02:4e:1b:5f:44:11:63:63:d8: bc:6d:0b:2b:26:d5:90:d8:ff:be:ab:0d:91:ac:cd:d4:e3:24: cf:2b:25:00:07:2d:ae:b9:ff:9d:e0:5f:8c:ad:22:ee:ae:12: 9a:76:37:fd:f1:5f:c9:69:e7:c8:4c:7d:52:bf:2f:e2:fc:e7: 12:aa:7f:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIwRDQxMTAvBgNVBAUTKEI5N0E3RjAxNUE3MzYwNzRERjM4NDQ1Qzk4MDc0Mzc4 MjE5RDI5OTUwHhcNMjUwODA3MDUxNTMyWhcNMjUwODE0MDUxNTMyWjAYMRYwFAYD VQQDEw02ODk0MzY3NC04NzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk2+kS6BCSPjYTT2MRgqdhz236nePN4qPsvnepRpXS3yvB4bx42cq7UhGKbZ8 kW415K6zABm84yZg+c4kUtxq8RUbPQubEYETIpSmJFMtg66RDsbyfnrYWvzOT3J7 78IoKveeShBfsoxKWaCvTD580LSVktXYjCpoHFnGn0BJ0J9Dp1FzkBjLht2/MdR1 SJLqSbnTontPkKRWHUra081jCn7V0ptM2Hv5odeYh9Jv52TFGr1u+9IgcVaeJ8Zj cC7RSzP6ALNQtZ+ZHY6JY/HHs43ox9l2AFsTZkkI6jRDIf9W0j38dzDOmbbHfy0n rehwxjPwEaklE2n+XDQXOE9N1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBr1FH+ x8ppYlrwudOZEyHO7hRVMB8GA1UdIwQYMBaAFLl6fwFac2B03zhEXJgHQ3ghnSmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjBENC8wRTNGMEM2NkJD MTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellIVGZPRVJjbUFkRGVDR2RL WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYcF9BVnB6WUhUZk9FUmNtQWREZUNHZEtaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjBENC8wRTNGMEM2NkJDMTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellI VGZPRVJjbUFkRGVDR2RLWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsnRTgmbe84qCVJEvWJLt6yUC4UNcwS1SmzOyiJX14FEtpSgQAQH+K CJNPL03QJ67a0JLUnZel2WYefEKYrO4LYGap6AylMEzTzI5rEQApTqD0kiHk3Jsf xM3sZjJcXG7RJLpFidlhHiiAP0iwi4MbmiRE8aYM6pzxzz2OwsjZgMG13d2PPTKi czgOAlKY3m2Dn7E6azhAIvGkLmfBmiDy+Cz0jEq+UeVzgOM+5dFY6t4EFbbE8y3W lTPfdVICThtfRBFjY9i8bQsrJtWQ2P++qw2RrM3U4yTPKyUABy2uuf+d4F+MrSLu rhKadjf98V/JaefITH1Svy/i/OcSqn85 -----END CERTIFICATE-----Generated at Sat Aug 9 02:57:39 2025 by rpki-client