$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft File: U-fOlDUz-NPAVknylGgqJvgU8V8.mft (raw, json) Hash identifier: W4aHdf85jygsWhSfi6eJoyfkBH8EsLGZL1MtHOi84yg= Subject key identifier: 3D:08:29:E8:D1:59:B9:E4:4D:BC:87:D4:73:2D:F8:F8:96:4F:A9:B7 Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F Certificate issuer: /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft Manifest number: AF Signing time: Mon 11 Aug 2025 06:19:50 +0000 Manifest this update: Mon 11 Aug 2025 06:19:50 +0000 Manifest next update: Mon 18 Aug 2025 06:19:50 +0000 Files and hashes: 1: U-fOlDUz-NPAVknylGgqJvgU8V8.crl (hash: HhdcevBq1lNOS7RfFzR/u73hoCShb4/b6Uc1lymHgfw=) 2: BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa (hash: 3YeMlkcKDR/G7e8HpdLpzhvB3RsMdGgeM4Qv8rsxSYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391, serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F Validity Not Before: Aug 11 06:19:50 2025 GMT Not After : Aug 18 06:19:50 2025 GMT Subject: CN=68998b86-1806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:e4:84:1c:c7:4e:18:4d:87:ff:b4:2e:62: 35:35:45:36:d7:12:d1:4e:cf:ff:f8:de:68:2a:8b: 2f:36:db:41:97:c3:cd:37:d6:c9:d6:6a:64:69:56: ad:55:c2:c7:97:6b:06:86:8f:22:4e:ae:22:f4:0a: 6b:49:18:71:94:6a:c0:ce:1e:86:5c:39:13:23:25: 28:1e:65:19:35:6d:91:4e:a8:6c:be:60:56:3d:8e: b4:2b:6a:ff:84:93:83:a8:e0:7c:62:78:06:cc:c7: ef:c7:b0:6a:d4:ad:46:1c:2a:60:4f:b4:51:3e:b8: 2b:7b:24:c2:7b:5e:eb:7b:bb:96:5c:a0:94:e4:b6: 01:13:85:5c:70:20:71:e0:59:f1:97:37:c1:f5:e5: df:b7:7d:93:66:1e:37:c9:5d:36:a3:e8:88:fd:56: b6:6d:a4:3d:15:9b:79:94:0c:32:b6:1b:54:63:73: cd:ef:b6:6e:b4:2b:7b:54:3a:7b:ed:8d:f7:44:85: 35:f8:ad:05:a2:8e:2a:68:2e:3c:d0:19:f8:ba:de: e3:34:fe:69:4d:ce:7a:cc:6e:95:1c:b1:48:5d:0c: 62:be:e8:40:9b:a3:94:20:a1:b3:52:6d:15:dd:9c: 56:68:57:2b:28:d1:57:67:53:14:74:05:7e:9f:c9: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:08:29:E8:D1:59:B9:E4:4D:BC:87:D4:73:2D:F8:F8:96:4F:A9:B7 X509v3 Authority Key Identifier: keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cd:65:62:af:a6:b9:f2:75:70:f7:f9:8f:ec:d8:32:fa:3f: f1:60:98:f0:50:18:b5:4e:57:65:6d:94:55:38:df:3f:3f:a1: 16:00:15:82:b6:2b:4e:96:c7:3d:31:8c:07:8c:5b:ba:b2:65: 6c:ad:3d:3b:49:5d:7b:e4:e4:f3:a0:86:73:15:c2:52:3c:27: dd:5b:a0:0b:e6:6f:79:bc:cb:aa:fa:9b:2f:8c:f3:11:f5:ce: 9d:5c:56:ce:89:10:2b:88:34:8a:19:16:7b:f3:40:e0:ac:39: 4e:f5:c8:b4:11:35:e7:09:f8:55:fd:62:ed:49:57:f7:7b:76: eb:8d:a2:b0:3d:61:a6:f6:27:1e:7b:38:c5:85:af:a5:7a:ee: 20:a0:03:ef:bc:5f:09:56:51:fb:d9:68:36:b4:17:32:67:25: ba:fe:e1:00:fc:0c:b9:00:d8:65:a8:bc:4e:62:6d:79:8f:21: 0e:d0:91:e6:97:13:87:c2:96:b0:86:b2:7f:9e:6a:7f:df:df: e8:b3:42:b3:fd:55:66:f3:a6:37:f0:50:ae:30:34:25:b3:93: 5c:13:cc:ed:88:fa:18:26:71:fe:dc:f5:3f:5a:ff:11:d0:bd: d3:6f:4a:6a:bc:fb:fd:a6:85:01:26:11:28:a2:46:61:bc:58: 60:62:99:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzOTExMTAvBgNVBAUTKDUzRTdDRTk0MzUzM0Y4RDNDMDU2NDlGMjk0NjgyQTI2 RjgxNEYxNUYwHhcNMjUwODExMDYxOTUwWhcNMjUwODE4MDYxOTUwWjAYMRYwFAYD VQQDEw02ODk5OGI4Ni0xODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpHkhBzHThhNh/+0LmI1NUU21xLRTs//+N5oKosvNttBl8PNN9bJ1mpkaVat VcLHl2sGho8iTq4i9AprSRhxlGrAzh6GXDkTIyUoHmUZNW2RTqhsvmBWPY60K2r/ hJODqOB8YngGzMfvx7Bq1K1GHCpgT7RRPrgreyTCe17re7uWXKCU5LYBE4VccCBx 4FnxlzfB9eXft32TZh43yV02o+iI/Va2baQ9FZt5lAwythtUY3PN77ZutCt7VDp7 7Y33RIU1+K0Foo4qaC480Bn4ut7jNP5pTc56zG6VHLFIXQxivuhAm6OUIKGzUm0V 3ZxWaFcrKNFXZ1MUdAV+n8kPUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0IKejR WbnkTbyH1HMt+PiWT6m3MB8GA1UdIwQYMBaAFFPnzpQ1M/jTwFZJ8pRoKib4FPFf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS8wMTlGRjE0RTcw QUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9VLWZPbERVei1OUEFWa255bEdncUp2Z1U4 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtZk9sRFV6LU5QQVZrbnlsR2dxSnZnVThWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDM5MS8wMTlGRjE0RTcwQUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9VLWZPbERVei1O UEFWa255bEdncUp2Z1U4VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOzWVir6a58nVw9/mP7Ngy+j/xYJjwUBi1TldlbZRVON8/P6EWABWC titOlsc9MYwHjFu6smVsrT07SV175OTzoIZzFcJSPCfdW6AL5m95vMuq+psvjPMR 9c6dXFbOiRAriDSKGRZ780DgrDlO9ci0ETXnCfhV/WLtSVf3e3brjaKwPWGm9ice ezjFha+leu4goAPvvF8JVlH72Wg2tBcyZyW6/uEA/Ay5ANhlqLxOYm15jyEO0JHm lxOHwpawhrJ/nmp/39/os0Kz/VVm86Y38FCuMDQls5NcE8ztiPoYJnH+3PU/Wv8R 0L3Tb0pqvPv9poUBJhEookZhvFhgYpnp -----END CERTIFICATE-----Generated at Tue Aug 12 14:46:03 2025 by rpki-client