$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json) Hash identifier: hKdGlWgcUCwZArzF0FR/DfDGuHf147aeBvyuICCC7pg= Subject key identifier: 79:B0:F8:4C:9F:75:BA:0A:37:37:D3:02:E0:7C:F3:94:4C:DF:B7:8C Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Certificate serial: 0AD8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft Manifest number: 0AD2 Signing time: Sun 10 Aug 2025 19:28:48 +0000 Manifest this update: Sun 10 Aug 2025 19:28:48 +0000 Manifest next update: Sun 17 Aug 2025 19:28:48 +0000 Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: BltTWBWQ3ThspdiaiV8RWt7muYo5b66lpA7XPWprfLU=) 2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: 1RC1hvOn8M5X9ccmY3hdnJuLljVCrrYvq7AQQg0ulGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2776 (0xad8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Validity Not Before: Aug 10 19:28:48 2025 GMT Not After : Aug 17 19:28:48 2025 GMT Subject: CN=6898f2f0-9ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:aa:23:6a:24:e6:92:69:cc:8e:7a:be:fa: ad:70:e2:35:57:20:d5:98:71:cc:60:6d:b2:4b:6a: ba:fd:eb:68:8f:dc:d7:a8:25:a2:9f:8a:23:95:70: 15:18:7d:af:8a:e7:e0:55:1f:3a:4e:c1:a9:bc:9c: 42:73:7d:57:8e:35:3d:5f:26:2e:17:fc:12:2d:db: 61:c3:83:1d:31:61:10:02:22:98:1d:46:66:76:a6: d7:d9:2c:d6:e1:80:0d:d5:cf:bd:37:e8:44:29:f3: 4d:2f:82:0e:e5:27:82:d7:f0:8a:4c:79:4e:f0:5e: ee:d3:4d:48:d8:99:22:b2:4d:33:29:16:4a:da:e4: 05:5d:78:4c:59:71:42:b1:5e:81:9b:03:ed:40:2e: 90:c0:ba:ba:99:28:03:2c:bc:28:01:51:c6:4c:91: 49:22:38:75:a1:e8:41:b0:00:fb:c9:a7:9e:3e:b8: 5e:55:53:9c:ae:56:5b:7f:79:95:41:c7:da:a5:64: 65:ed:fc:b7:b5:c3:92:c0:ea:0a:89:ed:54:28:e0: 68:80:ec:fb:1b:d7:d2:17:08:5b:ca:f1:33:34:58: 00:83:a6:9b:65:b5:0e:e4:01:b5:8a:6e:3f:85:11: 59:c7:f2:b6:64:b6:ad:31:06:ef:ce:0c:21:00:3d: 49:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B0:F8:4C:9F:75:BA:0A:37:37:D3:02:E0:7C:F3:94:4C:DF:B7:8C X509v3 Authority Key Identifier: keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e3:ab:04:dc:92:7b:22:58:de:43:85:25:22:44:6b:23:9e: 8f:e1:43:bb:80:5e:22:b1:ee:ef:3c:39:c3:0b:1b:8a:9a:fb: 09:88:41:46:39:9b:e1:4d:9e:3b:b6:ce:92:14:89:55:74:7d: fc:3d:9f:05:d4:ab:fc:c3:91:9b:d0:d2:22:fa:ef:f3:48:5c: 61:c0:a9:1a:d6:59:f4:88:f0:32:83:7a:bb:fa:b8:3e:6f:62: e1:99:9e:30:95:5f:87:a6:90:f2:e2:45:9b:be:25:75:4d:d9: 4f:e8:4e:cb:cb:2b:4e:5d:ce:a8:8a:96:ae:f9:ec:2b:9b:e0: a4:d7:d7:41:37:ea:51:af:e0:e3:a2:cc:a2:a7:fa:fe:7a:15: 9a:9b:ac:f6:b7:cd:37:eb:a4:e7:b1:04:20:6a:cc:0b:b3:bc: 13:ef:76:4c:a7:73:91:17:57:c7:f9:f9:1c:fd:70:8f:25:c8: cc:cc:89:7b:29:d2:23:aa:ea:88:0c:46:84:e0:6f:34:5f:7f: 7f:7d:ea:f6:45:b3:cf:9a:31:5a:b1:e2:ad:da:1e:1d:ab:11: 54:97:b6:e4:2f:13:b5:32:e3:54:f1:2b:d7:da:41:72:a8:5f: ac:16:9f:c6:18:b0:80:4c:8e:6a:52:1b:75:66:c5:3d:bf:7c: 8f:ab:da:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKEJBNEEzRTM0REQ5QUFEMDAyRDQ5MUQxM0M1Qzg4Q0U1 Q0RDOTkzQUEwHhcNMjUwODEwMTkyODQ4WhcNMjUwODE3MTkyODQ4WjAYMRYwFAYD VQQDEw02ODk4ZjJmMC05Y2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkGqI2ok5pJpzI56vvqtcOI1VyDVmHHMYG2yS2q6/etoj9zXqCWin4ojlXAV GH2viufgVR86TsGpvJxCc31XjjU9XyYuF/wSLdthw4MdMWEQAiKYHUZmdqbX2SzW 4YAN1c+9N+hEKfNNL4IO5SeC1/CKTHlO8F7u001I2Jkisk0zKRZK2uQFXXhMWXFC sV6BmwPtQC6QwLq6mSgDLLwoAVHGTJFJIjh1oehBsAD7yaeePrheVVOcrlZbf3mV QcfapWRl7fy3tcOSwOoKie1UKOBogOz7G9fSFwhbyvEzNFgAg6abZbUO5AG1im4/ hRFZx/K2ZLatMQbvzgwhAD1J5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmw+Eyf dboKNzfTAuB885RM37eMMB8GA1UdIwQYMBaAFLpKPjTdmq0ALUkdE8XIjOXNyZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8zMzdGQkE0NDU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJRQXRTUjBUeGNpTTVjM0pr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3Vrby1OTjJhclFBdFNSMFR4Y2lNNWMzSms2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8zMzdGQkE0NDU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJR QXRTUjBUeGNpTTVjM0prNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo46sE3JJ7IljeQ4UlIkRrI56P4UO7gF4ise7vPDnDCxuKmvsJiEFG OZvhTZ47ts6SFIlVdH38PZ8F1Kv8w5Gb0NIi+u/zSFxhwKka1ln0iPAyg3q7+rg+ b2LhmZ4wlV+HppDy4kWbviV1TdlP6E7LyytOXc6oipau+ewrm+Ck19dBN+pRr+Dj osyip/r+ehWam6z2t80366TnsQQgaswLs7wT73ZMp3ORF1fH+fkc/XCPJcjMzIl7 KdIjquqIDEaE4G80X39/fer2RbPPmjFaseKt2h4dqxFUl7bkLxO1MuNU8SvX2kFy qF+sFp/GGLCATI5qUht1ZsU9v3yPq9pN -----END CERTIFICATE-----Generated at Mon Aug 11 14:47:00 2025 by rpki-client