$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft File: Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft (raw, json) Hash identifier: rn8M3gXuAk/rMC+LVnVT4h54IV1EJOtJNmTNaM5ZiyE= Subject key identifier: 29:8B:5C:0A:A2:E8:CF:43:A5:E3:1C:32:9B:9F:5C:46:03:CE:EB:1E Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E Certificate issuer: /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft Manifest number: 01F7 Signing time: Sat 09 Aug 2025 02:55:41 +0000 Manifest this update: Sat 09 Aug 2025 02:55:41 +0000 Manifest next update: Sat 16 Aug 2025 02:55:41 +0000 Files and hashes: 1: Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl (hash: oRRG0scAMw4rUZPXT+74m45dPUfmKakyoDmNLZ333LE=) 2: 2F38972E672B11EEBA84E00CC4F9AE02.roa (hash: F2m4EZaWhb+L+raUozQ7KqaAu1awnSWg4wSyn9tXN5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CDC4, serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Validity Not Before: Aug 9 02:55:41 2025 GMT Not After : Aug 16 02:55:41 2025 GMT Subject: CN=6896b8ad-ed75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e1:8c:35:5f:e1:0f:89:df:46:3b:f2:39:61: 7e:13:b4:73:77:9d:72:f9:c4:81:1c:78:c1:54:66: 4d:0f:c8:86:a4:83:19:67:27:c2:13:be:58:b8:08: bd:3f:f6:2f:a7:ed:7a:8a:94:96:0a:83:e3:9c:f7: 7c:d2:a1:2b:33:bd:a3:50:c7:70:da:84:e3:a5:11: 73:ec:1e:1c:54:71:45:8c:71:f3:21:6d:de:01:87: db:5a:7f:af:c3:86:6a:7b:6b:9f:9e:b4:22:89:bb: a3:5a:2c:2b:cd:1b:ad:97:f7:bc:9e:1d:5d:28:ad: 90:dd:f0:f6:76:f4:e6:b3:44:e0:67:45:ee:24:e9: 74:64:24:1f:73:a3:ba:c7:c2:47:e7:06:31:8f:55: c6:2f:7a:75:22:0f:28:09:cc:f4:0d:ee:00:f8:d5: 12:26:8a:a1:bc:30:e9:1d:bd:cc:d4:58:87:aa:e6: bd:22:42:e4:45:44:b3:26:ee:1a:0e:80:4d:8e:70: 0c:6c:77:b2:f8:4c:a0:20:c5:f3:e0:8d:c5:82:3b: 62:be:28:38:e8:1d:4b:f5:72:92:ec:a2:56:95:fc: 89:e7:94:ac:b9:61:3f:a0:58:33:ee:0e:67:03:bb: 85:17:35:e6:06:fb:bc:bf:cf:c2:99:00:b6:89:83: 1a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8B:5C:0A:A2:E8:CF:43:A5:E3:1C:32:9B:9F:5C:46:03:CE:EB:1E X509v3 Authority Key Identifier: keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:74:10:e7:ac:b9:1a:6f:e2:90:e7:8e:42:a5:f5:ff:3e:e9: 7b:06:cc:df:53:0c:14:7f:ac:4b:30:b2:ce:31:a8:8b:86:49: ed:f9:78:68:02:dd:7f:35:91:69:0b:26:84:99:3a:5d:13:7c: 4e:1f:82:da:9f:00:15:17:a3:5a:01:24:64:99:ec:4a:d4:b1: cb:ce:04:e9:01:37:21:9e:d5:25:17:f1:cd:55:07:05:a8:3a: b2:4a:11:d9:25:2d:f1:04:d5:94:7c:cc:87:c3:c6:ca:64:4d: 09:6e:f1:c9:a9:de:72:a7:1f:20:53:37:39:9c:53:4c:0e:9a: ba:e8:a1:1c:3a:ab:15:0b:4c:22:ca:29:66:72:a7:36:0a:26: 7b:67:5c:aa:ba:5a:a0:92:f7:1c:5c:ca:26:61:46:ea:bb:d6: 0c:f8:cc:01:cb:43:21:7e:cc:91:d2:b6:ff:bb:bb:b9:63:d3: 2d:03:50:e5:38:10:8a:d2:44:47:d5:d7:7d:af:7d:31:e2:6f: 5d:19:4b:9b:85:10:b5:19:3a:83:9e:68:cb:c2:d1:83:b4:c5: 36:56:cf:1f:19:22:8f:d6:d5:a4:ea:a1:2b:34:0c:11:81:6e: 9a:be:8b:26:5a:dd:d9:d7:8d:d8:a8:6b:78:fa:c9:ca:7f:a9: 84:22:2c:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NEQzQxMTAvBgNVBAUTKDUyOEY2RUNFMDgyQkVCM0REMEE2NkQ5MTQ3M0ZDQzY1 NjlDRDVGNEUwHhcNMjUwODA5MDI1NTQxWhcNMjUwODE2MDI1NTQxWjAYMRYwFAYD VQQDEw02ODk2YjhhZC1lZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouGMNV/hD4nfRjvyOWF+E7Rzd51y+cSBHHjBVGZND8iGpIMZZyfCE75YuAi9 P/Yvp+16ipSWCoPjnPd80qErM72jUMdw2oTjpRFz7B4cVHFFjHHzIW3eAYfbWn+v w4Zqe2ufnrQiibujWiwrzRutl/e8nh1dKK2Q3fD2dvTms0TgZ0XuJOl0ZCQfc6O6 x8JH5wYxj1XGL3p1Ig8oCcz0De4A+NUSJoqhvDDpHb3M1FiHqua9IkLkRUSzJu4a DoBNjnAMbHey+EygIMXz4I3Fgjtivig46B1L9XKS7KJWlfyJ55SsuWE/oFgz7g5n A7uFFzXmBvu8v8/CmQC2iYMa2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmLXAqi 6M9DpeMcMpufXEYDzuseMB8GA1UdIwQYMBaAFFKPbs4IK+s90KZtkUc/zGVpzV9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0RDNC9GODQ4NUY2Njgw Q0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6M1FwbTJSUnpfTVpXbk5Y MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvOXV6Z2dyNnozUXBtMlJSel9NWlduTlgwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0RDNC9GODQ4NUY2NjgwQ0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6 M1FwbTJSUnpfTVpXbk5YMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtdBDnrLkab+KQ545CpfX/Pul7BszfUwwUf6xLMLLOMaiLhknt+Xho At1/NZFpCyaEmTpdE3xOH4LanwAVF6NaASRkmexK1LHLzgTpATchntUlF/HNVQcF qDqyShHZJS3xBNWUfMyHw8bKZE0JbvHJqd5ypx8gUzc5nFNMDpq66KEcOqsVC0wi yilmcqc2CiZ7Z1yqulqgkvccXMomYUbqu9YM+MwBy0MhfsyR0rb/u7u5Y9MtA1Dl OBCK0kRH1dd9r30x4m9dGUubhRC1GTqDnmjLwtGDtMU2Vs8fGSKP1tWk6qErNAwR gW6avosmWt3Z143YqGt4+snKf6mEIiyn -----END CERTIFICATE-----Generated at Sat Aug 9 22:50:25 2025 by rpki-client