$ rpki-client -vvf rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft File: V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft (raw, json) Hash identifier: QbKBTCZCyl4CBhrYa9C/41+mezcc+B9a1GkKM9+z4p0= Subject key identifier: 3F:D9:0D:71:04:67:09:41:60:DB:ED:EC:15:84:A5:39:CC:2F:79:60 Authority key identifier: 57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7 Certificate issuer: /CN=A9132DF5/serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7 Certificate serial: 0F25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft Manifest number: 0F1D Signing time: Wed 06 Aug 2025 17:45:49 +0000 Manifest this update: Wed 06 Aug 2025 17:45:49 +0000 Manifest next update: Wed 13 Aug 2025 17:45:49 +0000 Files and hashes: 1: V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl (hash: hF30dP5HVcDWqDjouoGPtklwMaNlSOgIxrxBLRt5F6I=) 2: 3058390A7C4511E984DEA431C4F9AE02.roa (hash: 9rDCv+WsiAPR7NnxfH7AASwbAfQNHmC84LRbeE1lu4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 17:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3877 (0xf25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132DF5, serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7 Validity Not Before: Aug 6 17:45:49 2025 GMT Not After : Aug 13 17:45:49 2025 GMT Subject: CN=689394cd-0df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:a9:8a:7c:24:d7:a5:b3:f7:4a:6c:f9:b2: 26:df:cf:20:20:b4:92:ce:28:15:29:fe:09:81:0f: ec:bf:5a:76:26:20:c4:5b:c5:c8:d1:1b:4d:24:4b: 48:e7:62:38:99:6a:06:7d:cc:8d:98:f6:91:15:fc: fd:74:b5:19:f6:a2:2d:f2:27:20:a9:8d:67:ab:8a: 60:16:04:ce:dd:03:0e:b5:51:36:5b:95:83:03:22: a6:80:5f:14:86:45:65:3f:e6:8e:bf:c6:7a:c8:c6: d2:e5:c8:15:ed:de:21:d5:1b:c3:5e:45:24:3d:9c: 96:a4:9d:04:4d:90:0d:f5:58:3a:68:12:b3:70:1f: 63:24:d4:81:71:ad:06:c4:bf:66:a3:be:bc:ab:83: 7b:f7:d8:a6:64:73:54:fb:75:d0:db:73:c6:2f:81: 63:b9:d7:42:5c:dd:bb:a6:9d:3a:aa:ec:6f:ec:5d: 7a:1c:3d:fc:6e:b2:43:83:c8:a5:fb:8e:d3:ae:0d: da:7c:2a:20:89:cb:36:ac:cb:f4:7e:52:c3:59:a5: 0b:3b:da:c1:03:4d:e1:27:cf:7e:f9:cb:9a:e6:6d: de:8a:42:74:8d:ea:46:dc:34:1d:eb:e4:0b:70:f4: 8f:9a:e0:55:04:af:1d:84:2e:f5:d6:06:b7:c2:4d: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D9:0D:71:04:67:09:41:60:DB:ED:EC:15:84:A5:39:CC:2F:79:60 X509v3 Authority Key Identifier: keyid:57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:0b:d4:a1:28:b7:c3:1a:30:c4:0f:f0:bf:ec:04:aa:04:fa: 2b:ac:19:64:31:68:35:d1:47:63:2a:d1:5d:6e:f8:e4:1f:b1: 47:33:10:ec:08:0f:ce:cf:18:a0:e9:0a:14:8b:27:5b:81:05: 20:3a:eb:57:e1:0d:57:98:ef:86:e4:f7:fb:bf:64:ca:7d:d1: da:73:22:59:60:b9:fc:96:8a:69:92:84:1a:e3:6c:2b:12:51: 24:eb:62:a6:37:1a:5b:03:b9:db:f1:2f:5c:44:30:57:0a:91: 2f:66:2f:b7:53:7c:7e:87:e1:b1:43:c7:c4:77:74:5e:37:15: b6:92:a5:94:c9:34:42:a0:e4:58:6d:1b:15:a1:f9:da:55:30: 28:c2:35:76:b7:5f:7b:69:5a:0f:3c:a8:35:6d:bd:ee:fb:7f: 7c:17:68:6c:2b:3e:6f:23:57:c6:c5:dd:60:dd:48:ec:6f:5f: a1:91:db:47:ff:8b:52:45:c8:dc:0e:ab:79:b7:cf:86:c8:f9: 1c:7d:be:73:78:3a:ea:4b:66:f2:91:03:f2:69:19:dd:c7:2f: 07:e5:44:9a:ca:2d:ce:93:43:18:e3:5e:7e:2f:6e:1d:c9:27: be:ec:cb:f9:01:f8:06:14:cc:a6:57:2d:da:0f:01:28:ec:fa: 79:e4:9f:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJERjUxMTAvBgNVBAUTKDU3RkI4OTM5NTM4OTY0MEI2ODY5QTVFMjQwNzRCNDJF NDIxRTJCRDcwHhcNMjUwODA2MTc0NTQ5WhcNMjUwODEzMTc0NTQ5WjAYMRYwFAYD VQQDEw02ODkzOTRjZC0wZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqGpinwk16Wz90ps+bIm388gILSSzigVKf4JgQ/sv1p2JiDEW8XI0RtNJEtI 52I4mWoGfcyNmPaRFfz9dLUZ9qIt8icgqY1nq4pgFgTO3QMOtVE2W5WDAyKmgF8U hkVlP+aOv8Z6yMbS5cgV7d4h1RvDXkUkPZyWpJ0ETZAN9Vg6aBKzcB9jJNSBca0G xL9mo768q4N799imZHNU+3XQ23PGL4FjuddCXN27pp06quxv7F16HD38brJDg8il +47Trg3afCogics2rMv0flLDWaULO9rBA03hJ89++cua5m3eikJ0jepG3DQd6+QL cPSPmuBVBK8dhC711ga3wk1ZzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/ZDXEE ZwlBYNvt7BWEpTnML3lgMB8GA1UdIwQYMBaAFFf7iTlTiWQLaGml4kB0tC5CHivX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkRGNS84MjA3MkU3QTdD NDMxMUU5ODI4NjUxMkNDNEY5QUUwMi9WX3VKT1ZPSlpBdG9hYVhpUUhTMExrSWVL OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZfdUpPVk9KWkF0b2FhWGlRSFMwTGtJZUs5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkRGNS84MjA3MkU3QTdDNDMxMUU5ODI4NjUxMkNDNEY5QUUwMi9WX3VKT1ZPSlpB dG9hYVhpUUhTMExrSWVLOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1C9ShKLfDGjDED/C/7ASqBPorrBlkMWg10UdjKtFdbvjkH7FHMxDs CA/Ozxig6QoUiydbgQUgOutX4Q1XmO+G5Pf7v2TKfdHacyJZYLn8loppkoQa42wr ElEk62KmNxpbA7nb8S9cRDBXCpEvZi+3U3x+h+GxQ8fEd3ReNxW2kqWUyTRCoORY bRsVofnaVTAowjV2t197aVoPPKg1bb3u+398F2hsKz5vI1fGxd1g3Ujsb1+hkdtH /4tSRcjcDqt5t8+GyPkcfb5zeDrqS2bykQPyaRndxy8H5USayi3Ok0MY415+L24d ySe+7Mv5AfgGFMymVy3aDwEo7Pp55J8w -----END CERTIFICATE-----Generated at Fri Aug 8 10:22:23 2025 by rpki-client