$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft File: UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json) Hash identifier: GDat8Xg0Retbuwg8wBJcUoLa4VP2Lr5nNaomwuUiPXw= Subject key identifier: 6D:1A:C7:FE:B7:D6:71:73:58:6E:F1:90:9A:0B:F2:E9:9F:12:EF:D9 Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB Certificate issuer: /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Certificate serial: 0C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft Manifest number: 0C24 Signing time: Sun 10 Aug 2025 18:41:24 +0000 Manifest this update: Sun 10 Aug 2025 18:41:23 +0000 Manifest next update: Sun 17 Aug 2025 18:41:23 +0000 Files and hashes: 1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: d1GuQACyMYAnRnCK0B5dsJZb8C6qihsxeTOJi40+x3Y=) 2: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: xH17spaHhMO4029wjNj4ZW6FqoA9g6CON6QQbD7o3j0=) 3: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: J+JzfdPnvnmB6Ay3Ml+qeWmcjb1XIfVxnUqGVNUN7Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Validity Not Before: Aug 10 18:41:23 2025 GMT Not After : Aug 17 18:41:23 2025 GMT Subject: CN=6898e7d4-55bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ba:e7:5f:4c:ef:62:2b:30:be:fe:8c:9f:f5: 8b:c5:cb:fe:7e:de:9e:51:22:b1:96:7c:f8:d3:77: 65:c3:19:39:45:d7:df:56:24:72:54:04:80:a4:7d: af:f9:db:02:38:e9:81:a4:7c:c0:29:89:ff:c3:68: 03:a9:d5:93:57:7a:87:b3:9f:05:82:dc:b8:96:e6: c5:d2:b6:2b:56:d4:03:6c:cf:6f:ee:da:d7:fc:6d: b1:e9:e2:8d:db:3e:4a:aa:7c:a2:f5:6e:15:ce:04: 1b:14:72:03:f7:bf:c2:3d:fd:cc:6c:5c:f1:15:49: f3:d2:96:24:85:70:3b:39:ed:6a:33:a4:1a:34:c5: dc:c3:b4:a8:5c:2a:8c:d5:58:33:0c:de:ce:9a:1d: 6f:38:3d:f1:dc:5f:68:ad:4a:e9:1a:88:30:a9:ad: e3:d5:80:88:5d:f9:a4:0a:20:bf:cf:7b:19:75:32: 3f:43:a0:4f:bc:b3:a7:c6:ec:23:59:16:da:0c:10: 7c:d9:b9:7e:7b:76:db:04:92:37:5a:38:58:eb:60: e2:6d:e5:f1:18:72:9b:37:42:75:12:7b:a1:81:8c: 02:e8:2c:e5:bb:1c:bc:ad:0d:c8:ab:11:f4:d3:64: 01:3e:52:1b:c6:83:6b:5b:20:10:15:38:2d:16:e6: fe:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1A:C7:FE:B7:D6:71:73:58:6E:F1:90:9A:0B:F2:E9:9F:12:EF:D9 X509v3 Authority Key Identifier: keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:40:16:a2:01:f2:30:f6:7e:9f:c3:2c:c1:92:14:e5:82:33: d9:21:22:a9:02:62:e9:c0:d6:6f:37:ea:40:c8:dc:38:f0:b5: 6d:06:b0:21:c2:ae:41:5e:d6:85:9d:97:e3:d5:f8:56:73:1f: 70:ec:54:0f:f2:7c:16:a9:22:18:3c:70:0d:45:00:65:74:a0: 99:85:bd:50:4b:a4:de:6c:e3:7c:d2:b6:26:7b:52:ef:29:76: 10:1d:54:f0:17:cb:99:c6:97:12:41:44:d4:06:df:0d:b5:7f: bb:e9:c6:b1:51:88:a3:63:7f:a9:51:b2:e9:2f:e6:04:13:30: ad:2c:bd:3c:e0:ca:aa:ec:a3:0f:5e:18:2b:31:50:66:a0:9a: 45:fa:cb:7a:73:23:13:eb:4d:ec:cb:37:3c:3b:bc:a6:76:90: f1:68:07:bd:a8:9f:ca:a2:65:18:7e:9a:dc:2b:a4:bf:f2:49: 0b:88:5f:e8:8c:5b:89:b3:79:43:70:54:e9:6b:83:d4:7c:50: e5:ec:56:62:db:2a:c4:53:cc:88:07:8c:8a:dd:37:09:83:62: 17:23:f5:c1:d9:ee:15:33:30:ec:1f:50:93:17:06:03:af:0e: 4d:10:ac:aa:25:9e:03:1e:b6:70:cf:f0:fd:11:50:c7:28:37: 7e:f9:a0:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyQjMxMTAvBgNVBAUTKDUyODY4QjA5MDFGNTVCNDA3OEI5MUE3MzQ1MUNBNkQy MjMxMkM4QUIwHhcNMjUwODEwMTg0MTIzWhcNMjUwODE3MTg0MTIzWjAYMRYwFAYD VQQDEw02ODk4ZTdkNC01NWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rrnX0zvYiswvv6Mn/WLxcv+ft6eUSKxlnz403dlwxk5RdffViRyVASApH2v +dsCOOmBpHzAKYn/w2gDqdWTV3qHs58Fgty4lubF0rYrVtQDbM9v7trX/G2x6eKN 2z5Kqnyi9W4VzgQbFHID97/CPf3MbFzxFUnz0pYkhXA7Oe1qM6QaNMXcw7SoXCqM 1VgzDN7Omh1vOD3x3F9orUrpGogwqa3j1YCIXfmkCiC/z3sZdTI/Q6BPvLOnxuwj WRbaDBB82bl+e3bbBJI3WjhY62DibeXxGHKbN0J1EnuhgYwC6Czluxy8rQ3IqxH0 02QBPlIbxoNrWyAQFTgtFub+/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0ax/63 1nFzWG7xkJoL8umfEu/ZMB8GA1UdIwQYMBaAFFKGiwkB9VtAeLkac0UcptIjEsir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTJCMy8yMEU2N0REODEy RjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcwQjR1UnB6UlJ5bTBpTVN5 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvYUxDUUgxVzBCNHVScHpSUnltMGlNU3lLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTJCMy8yMEU2N0REODEyRjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcw QjR1UnB6UlJ5bTBpTVN5S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoQBaiAfIw9n6fwyzBkhTlgjPZISKpAmLpwNZvN+pAyNw48LVtBrAh wq5BXtaFnZfj1fhWcx9w7FQP8nwWqSIYPHANRQBldKCZhb1QS6TebON80rYme1Lv KXYQHVTwF8uZxpcSQUTUBt8NtX+76caxUYijY3+pUbLpL+YEEzCtLL084Mqq7KMP XhgrMVBmoJpF+st6cyMT603syzc8O7ymdpDxaAe9qJ/KomUYfprcK6S/8kkLiF/o jFuJs3lDcFTpa4PUfFDl7FZi2yrEU8yIB4yK3TcJg2IXI/XB2e4VMzDsH1CTFwYD rw5NEKyqJZ4DHrZwz/D9EVDHKDd++aBY -----END CERTIFICATE-----Generated at Mon Aug 11 07:31:49 2025 by rpki-client