$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft File: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json) Hash identifier: 2WpmHLB2dTlBZ+FhjdKM+/Pp1rhakjHtEyU4UbjZWzQ= Subject key identifier: 9D:AE:F1:BB:C8:42:20:81:BB:CA:8C:D6:22:F6:B5:B1:03:14:F9:C6 Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft Manifest number: 025F Signing time: Sat 09 Aug 2025 02:19:58 +0000 Manifest this update: Sat 09 Aug 2025 02:19:57 +0000 Manifest next update: Sat 16 Aug 2025 02:19:57 +0000 Files and hashes: 1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: s0iO6kG+Yoj3hDLtr3HuKkIbFLOWcfcGoejDdxi/an0=) 2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: J01BFnUaU0xtnZuM7Va9qQmT/vUQNXlVHCchEwi5LNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Validity Not Before: Aug 9 02:19:57 2025 GMT Not After : Aug 16 02:19:57 2025 GMT Subject: CN=6896b04d-9261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:df:5a:af:b1:ca:1c:b7:2f:01:e6:4e:a1: 8f:23:13:cd:24:18:71:34:1d:28:b0:86:43:16:fb: 3e:e9:35:9b:06:67:6a:58:12:ca:05:4c:e2:c4:8e: 22:2c:c1:c6:bb:96:b4:fd:cb:e0:df:d7:6f:f0:53: c5:57:4c:3a:65:a8:8c:3d:45:15:56:4c:93:0a:18: e2:68:6d:ac:16:b5:1e:1d:bd:76:72:d7:31:d5:e2: 25:17:47:f3:63:62:82:8e:b9:81:07:e0:5c:b8:50: ab:34:d2:00:3b:90:c3:ed:8e:c8:5c:84:a3:74:f2: da:25:05:f4:ce:ae:10:36:77:ca:f5:8c:e3:3c:68: d9:aa:cd:63:28:6e:18:12:05:a7:79:6f:e2:1c:72: b6:9f:9b:6f:b1:02:9a:38:ab:b0:aa:4e:44:06:77: 0a:36:a2:1c:6b:ed:44:f8:df:b7:81:a8:9e:1d:0a: a0:b1:33:e1:2c:14:e0:f8:f0:59:a8:84:8f:9d:58: 6d:fc:00:f9:c8:ef:28:7f:8b:20:02:69:84:83:bb: e2:86:3a:f2:79:60:9a:83:e4:48:62:3a:11:d3:c5: e2:ef:f9:da:8a:c9:b1:8b:c4:8b:75:26:e3:93:89: a3:df:c3:3d:16:df:3c:b3:ab:da:d6:28:ea:15:ec: 7c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AE:F1:BB:C8:42:20:81:BB:CA:8C:D6:22:F6:B5:B1:03:14:F9:C6 X509v3 Authority Key Identifier: keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:7e:db:49:7d:16:94:24:06:aa:45:04:c1:7c:d1:e2:46:99: ea:d5:f6:4e:d4:46:91:57:89:bf:80:c8:46:c8:4e:e2:51:ad: cc:e2:a4:b6:83:39:34:68:26:88:7e:7b:2c:2c:91:93:54:15: 76:49:78:e1:b5:18:80:97:a7:f6:f0:f6:05:58:0c:f4:1e:01: 89:a1:44:ce:12:e1:bc:81:df:42:e2:a2:91:59:4a:aa:14:34: 91:87:21:f2:af:f4:a3:7f:b0:cd:a4:be:9f:65:61:b9:a7:90: ad:49:6c:80:14:9e:c5:1a:52:46:de:1d:05:92:87:8d:ff:e3: d9:71:04:c9:dc:79:eb:a4:4c:7d:2b:60:07:1c:80:b6:6e:46: 3e:9f:1e:3c:53:28:45:e0:f2:0a:df:1c:5d:3e:ce:f9:7d:ce: ba:42:db:02:b5:f2:a0:72:26:ec:db:4d:0b:58:25:c6:fd:78: 3f:af:c2:d2:41:4e:e1:6f:a1:34:29:3f:73:ed:01:71:89:03: 2b:e4:34:fd:d1:8e:6d:0c:8b:0b:1d:56:d4:01:5a:e4:0a:a1: da:60:86:ed:44:8d:45:69:ff:20:c4:cf:c8:e8:5d:75:1c:12: f2:32:0e:48:59:df:c4:51:9a:43:f1:f9:0b:f7:f5:d4:08:b2: 6f:98:2c:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEN0QxMTAvBgNVBAUTKDUyMjJBMTYxOURGRkYwNENCMDk3QkI1MTZBMDc0Q0NE MURBRkZDNzgwHhcNMjUwODA5MDIxOTU3WhcNMjUwODE2MDIxOTU3WjAYMRYwFAYD VQQDEw02ODk2YjA0ZC05MjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyG3fWq+xyhy3LwHmTqGPIxPNJBhxNB0osIZDFvs+6TWbBmdqWBLKBUzixI4i LMHGu5a0/cvg39dv8FPFV0w6ZaiMPUUVVkyTChjiaG2sFrUeHb12ctcx1eIlF0fz Y2KCjrmBB+BcuFCrNNIAO5DD7Y7IXISjdPLaJQX0zq4QNnfK9YzjPGjZqs1jKG4Y EgWneW/iHHK2n5tvsQKaOKuwqk5EBncKNqIca+1E+N+3gaieHQqgsTPhLBTg+PBZ qISPnVht/AD5yO8of4sgAmmEg7vihjryeWCag+RIYjoR08Xi7/naismxi8SLdSbj k4mj38M9Ft88s6va1ijqFex8wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2u8bvI QiCBu8qM1iL2tbEDFPnGMB8GA1UdIwQYMBaAFFIioWGd//BMsJe7UWoHTM0dr/x4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ3RC9BMzM5NjMwRTI3 NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhFeXdsN3RSYWdkTXpSMnZf SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VpS2hZWjNfOEV5d2w3dFJhZ2RNelIydl9IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkQ3RC9BMzM5NjMwRTI3NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhF eXdsN3RSYWdkTXpSMnZfSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJfttJfRaUJAaqRQTBfNHiRpnq1fZO1EaRV4m/gMhGyE7iUa3M4qS2 gzk0aCaIfnssLJGTVBV2SXjhtRiAl6f28PYFWAz0HgGJoUTOEuG8gd9C4qKRWUqq FDSRhyHyr/Sjf7DNpL6fZWG5p5CtSWyAFJ7FGlJG3h0FkoeN/+PZcQTJ3HnrpEx9 K2AHHIC2bkY+nx48UyhF4PIK3xxdPs75fc66QtsCtfKgcibs200LWCXG/Xg/r8LS QU7hb6E0KT9z7QFxiQMr5DT90Y5tDIsLHVbUAVrkCqHaYIbtRI1Faf8gxM/I6F11 HBLyMg5IWd/EUZpD8fkL9/XUCLJvmCyW -----END CERTIFICATE-----Generated at Sat Aug 9 23:14:41 2025 by rpki-client