$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft File: UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json) Hash identifier: aBOrKTBiQDRC/ba+qwe7KRN2o9ZbXhsl9dN9+Wf8YPQ= Subject key identifier: FA:25:A8:BD:8E:07:97:9E:29:77:BA:D3:87:4D:A6:D2:8E:B7:CB:96 Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft Manifest number: D4 Signing time: Sat 09 Aug 2025 06:01:19 +0000 Manifest this update: Sat 09 Aug 2025 06:01:19 +0000 Manifest next update: Sat 16 Aug 2025 06:01:19 +0000 Files and hashes: 1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: pZwWSf+cssoTvv2loaPfoJf7JQwBdzStkodqmHFS8CE=) 2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: yZ1LidZrlFrNTxapIhIsCTEZZK7lTYC0s/4RKHkPEsg=) 3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Validity Not Before: Aug 9 06:01:19 2025 GMT Not After : Aug 16 06:01:19 2025 GMT Subject: CN=6896e42f-ba04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:b1:64:11:34:37:7d:26:14:83:05:b8:77: 8c:0d:e2:68:43:b2:96:e6:30:54:d0:86:e8:ea:79: 3d:51:40:d2:09:72:94:2d:b0:d9:d2:6e:a8:52:0f: 57:df:67:86:37:cd:c4:92:20:6d:e5:80:e5:e1:58: 73:6c:9b:0c:03:19:70:7f:d2:3f:a9:a2:71:5e:82: 4e:03:04:12:b9:c8:91:14:61:37:3d:a7:da:eb:70: 52:01:f9:22:0d:94:b6:cc:a3:d0:b7:00:a1:98:7a: 28:52:07:ad:25:97:65:63:d8:bb:9a:54:56:e3:ad: 74:93:35:5e:6a:dd:a6:c9:b2:67:13:49:b2:24:82: d5:92:ee:b3:5d:93:a0:d0:72:fd:5c:c2:77:11:8a: ce:87:27:02:2d:39:7b:b6:ef:6e:a4:34:86:00:4d: f1:f0:e7:06:09:9b:f8:b5:0e:54:6e:ec:4f:97:bf: d9:e3:c2:74:9c:b8:62:47:0b:0b:62:75:ce:51:41: 97:43:c7:75:88:17:1a:78:ce:af:73:13:d3:da:a6: 2f:5e:4e:ef:48:db:51:d0:e8:86:c5:13:99:63:8c: 39:ea:7a:e1:21:fc:0b:a8:62:5b:48:e8:d9:c5:ed: f9:e3:07:63:af:a6:39:34:3c:79:c8:b5:d0:d5:92: 10:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:25:A8:BD:8E:07:97:9E:29:77:BA:D3:87:4D:A6:D2:8E:B7:CB:96 X509v3 Authority Key Identifier: keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d3:07:8f:2d:a7:e4:2b:f2:b7:57:40:4a:5d:e7:15:16:e3: 52:8c:8b:9a:55:d7:f9:ee:de:d8:e8:4c:c6:07:a5:bc:6e:24: 4e:42:59:fe:d7:19:ce:49:0c:3d:32:e1:99:84:05:59:5c:a6: 74:45:3c:12:6d:ef:36:9c:b2:d8:32:e4:41:02:aa:00:f4:4c: 68:75:91:68:39:02:7a:47:e1:63:48:9b:e3:bc:9f:87:49:d1: e3:12:13:56:07:7c:c4:ac:51:3f:e5:07:0a:7c:4b:e2:d5:45: 47:ba:9d:68:f3:fc:b7:ff:00:5e:26:9f:c3:29:4c:d2:c1:a4: 64:43:8a:76:f7:eb:27:51:21:2a:27:e1:87:ce:5e:55:76:69: 18:0c:f1:3a:71:fb:a4:13:bd:f0:ad:88:5e:cf:16:47:8e:32: 66:81:12:4e:5e:53:37:c1:37:17:84:7b:49:97:87:1c:f9:99: 13:59:1e:7b:08:f4:d7:23:b2:8a:c4:20:47:90:64:27:02:33: 2c:cc:79:63:46:d1:78:98:31:29:a6:df:3f:83:18:93:55:fc: a5:d4:48:09:0d:d4:90:ca:e8:85:d2:56:14:62:71:a5:08:d5: 90:7e:da:65:60:1a:d3:90:6a:8f:8f:b8:33:05:60:2b:e0:74: 74:36:92:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlBOTAxMTAvBgNVBAUTKDUxODkyQkU1QjBCNEFCQzYwMjU0NDVGNDAzOUZDNzk1 RDhCQTU4RTIwHhcNMjUwODA5MDYwMTE5WhcNMjUwODE2MDYwMTE5WjAYMRYwFAYD VQQDEw02ODk2ZTQyZi1iYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZixZBE0N30mFIMFuHeMDeJoQ7KW5jBU0Ibo6nk9UUDSCXKULbDZ0m6oUg9X 32eGN83EkiBt5YDl4VhzbJsMAxlwf9I/qaJxXoJOAwQSuciRFGE3Pafa63BSAfki DZS2zKPQtwChmHooUgetJZdlY9i7mlRW4610kzVeat2mybJnE0myJILVku6zXZOg 0HL9XMJ3EYrOhycCLTl7tu9upDSGAE3x8OcGCZv4tQ5UbuxPl7/Z48J0nLhiRwsL YnXOUUGXQ8d1iBcaeM6vcxPT2qYvXk7vSNtR0OiGxROZY4w56nrhIfwLqGJbSOjZ xe354wdjr6Y5NDx5yLXQ1ZIQnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPolqL2O B5eeKXe604dNptKOt8uWMB8GA1UdIwQYMBaAFFGJK+WwtKvGAlRF9AOfx5XYulji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUE5MC8xRkU4NEVEMjMz NzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4WUNWRVgwQTVfSGxkaTZX T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VZa3I1YkMwcThZQ1ZFWDBBNV9IbGRpNldPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUE5MC8xRkU4NEVEMjMzNzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4 WUNWRVgwQTVfSGxkaTZXT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR0wePLafkK/K3V0BKXecVFuNSjIuaVdf57t7Y6EzGB6W8biROQln+ 1xnOSQw9MuGZhAVZXKZ0RTwSbe82nLLYMuRBAqoA9ExodZFoOQJ6R+FjSJvjvJ+H SdHjEhNWB3zErFE/5QcKfEvi1UVHup1o8/y3/wBeJp/DKUzSwaRkQ4p29+snUSEq J+GHzl5VdmkYDPE6cfukE73wrYhezxZHjjJmgRJOXlM3wTcXhHtJl4cc+ZkTWR57 CPTXI7KKxCBHkGQnAjMszHljRtF4mDEppt8/gxiTVfyl1EgJDdSQyuiF0lYUYnGl CNWQftplYBrTkGqPj7gzBWAr4HR0NpIh -----END CERTIFICATE-----Generated at Sun Aug 10 04:54:15 2025 by rpki-client