$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json) Hash identifier: uz6YkY9gLO7aIKOvwpbzVcy3jlc8q+VLASFzPv1ZmGU= Subject key identifier: 29:96:56:6C:47:98:C8:2C:24:DD:3C:98:79:2F:28:C4:08:F6:70:95 Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft Manifest number: 0380 Signing time: Mon 11 Aug 2025 01:06:14 +0000 Manifest this update: Mon 11 Aug 2025 01:06:13 +0000 Manifest next update: Mon 18 Aug 2025 01:06:13 +0000 Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: FW8cJ39WYV3pjr4AAlWbHq7HTkWOwF6nVmHC0XRmj1U=) 2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: TYw7pVipg0tBF5NEai8ggwulJFGrtpH064BJjOwSImo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 01:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: Aug 11 01:06:13 2025 GMT Not After : Aug 18 01:06:13 2025 GMT Subject: CN=68994206-fa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1c:aa:4d:37:fb:ce:89:94:87:7f:3e:88:2d: 3e:89:65:8f:13:00:d5:93:92:b4:e4:03:21:c0:0d: 83:83:c2:f0:4d:e9:cc:db:06:98:a7:c9:d9:0c:73: f0:12:09:94:ea:00:e9:6a:f0:48:1e:8c:43:94:2c: 41:0b:8c:26:7d:d4:a7:a0:65:c0:0f:2f:88:63:08: 47:1a:07:b4:ec:0f:f4:42:a6:81:41:75:6d:ec:f3: 63:2b:7e:b8:95:48:1d:cb:32:8e:1d:9c:bb:47:79: e0:9b:2c:aa:24:3a:39:ff:70:1b:27:31:fa:ef:d5: 02:74:34:01:6f:8c:e5:8c:15:f1:af:bc:f5:07:6f: cf:84:56:c1:12:d2:71:82:f2:4e:55:a0:b3:cb:00: 2f:73:e8:e1:fe:3b:37:81:d5:15:0b:7b:4a:e2:c2: 2d:a5:a8:ce:d3:27:14:cf:ba:c3:e5:41:1e:5b:e6: 63:65:dd:5b:a0:0b:5b:49:7f:d6:66:ec:db:26:7a: 22:e7:f2:10:df:ae:15:7d:b8:2a:c5:01:38:ae:ae: 99:98:02:03:43:7f:40:fd:8e:79:74:1f:f2:14:b1: bd:1a:27:25:a1:a1:cd:61:ce:28:e8:58:a1:81:70: 82:bc:2a:56:71:ad:0e:89:bf:c7:b0:ed:88:c1:9c: 50:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:96:56:6C:47:98:C8:2C:24:DD:3C:98:79:2F:28:C4:08:F6:70:95 X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:32:29:2a:d4:53:5e:74:9a:ed:d1:c4:f1:87:a0:d7:f6:61: f0:9a:21:52:03:98:f7:c0:ef:55:a7:e5:25:87:f3:c8:74:c9: a0:91:d8:69:38:b9:66:a9:6a:6c:ac:a2:37:de:04:b0:de:76: 29:0b:f0:ef:97:b2:1b:a5:52:8e:b2:af:b0:ef:39:eb:02:12: dc:12:76:ba:ea:70:55:df:df:04:fb:64:52:2c:7a:24:0b:92: 2f:86:c8:97:bc:60:f7:b6:5c:1c:ae:6b:95:b3:d8:c2:ff:56: 7d:a3:ac:ff:52:ba:70:37:38:64:92:18:51:0d:10:46:ac:58: 52:d3:6a:6d:75:93:12:09:73:22:98:42:11:77:ce:53:71:c3: 96:53:4d:8e:e0:fe:39:78:83:63:dc:0e:f6:c2:8c:3f:ac:6a: 6a:90:95:dd:10:13:6b:3c:88:fb:e6:5d:3b:5a:d4:aa:4a:75: b2:d8:ed:6c:5a:f6:03:44:f7:6f:a7:c6:3c:bb:8c:5b:c1:72: 7c:96:0b:c4:f5:df:c9:2a:8f:9f:04:e9:02:2c:00:b6:16:e7: 5c:ac:e1:63:18:de:5b:e9:a5:a5:07:32:bb:9b:99:9a:25:35: dc:ff:76:a1:60:cc:ca:98:be:92:af:1a:53:b3:45:85:5a:8c: 05:7e:5b:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjUwODExMDEwNjEzWhcNMjUwODE4MDEwNjEzWjAYMRYwFAYD VQQDEw02ODk5NDIwNi1mYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xyqTTf7zomUh38+iC0+iWWPEwDVk5K05AMhwA2Dg8LwTenM2waYp8nZDHPw EgmU6gDpavBIHoxDlCxBC4wmfdSnoGXADy+IYwhHGge07A/0QqaBQXVt7PNjK364 lUgdyzKOHZy7R3ngmyyqJDo5/3AbJzH679UCdDQBb4zljBXxr7z1B2/PhFbBEtJx gvJOVaCzywAvc+jh/js3gdUVC3tK4sItpajO0ycUz7rD5UEeW+ZjZd1boAtbSX/W ZuzbJnoi5/IQ364VfbgqxQE4rq6ZmAIDQ39A/Y55dB/yFLG9GicloaHNYc4o6Fih gXCCvCpWca0Oib/HsO2IwZxQ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmWVmxH mMgsJN08mHkvKMQI9nCVMB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRBNC84QUQ0OUY3RUJBRTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5o bmExRy1MWUowMFJQdG83VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/Mikq1FNedJrt0cTxh6DX9mHwmiFSA5j3wO9Vp+Ulh/PIdMmgkdhp OLlmqWpsrKI33gSw3nYpC/Dvl7IbpVKOsq+w7znrAhLcEna66nBV398E+2RSLHok C5IvhsiXvGD3tlwcrmuVs9jC/1Z9o6z/UrpwNzhkkhhRDRBGrFhS02ptdZMSCXMi mEIRd85TccOWU02O4P45eINj3A72wow/rGpqkJXdEBNrPIj75l07WtSqSnWy2O1s WvYDRPdvp8Y8u4xbwXJ8lgvE9d/JKo+fBOkCLAC2FudcrOFjGN5b6aWlBzK7m5ma JTXc/3ahYMzKmL6SrxpTs0WFWowFflst -----END CERTIFICATE-----Generated at Tue Aug 12 22:46:13 2025 by rpki-client