$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: IWjnC9D1CKNl9opHGce8R8Z12VYuOZ6NJ7EreEuzj+A= Subject key identifier: 8A:C1:04:2F:64:99:CD:1D:40:CB:A7:5C:55:5E:CA:9C:91:09:67:87 Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0A72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0A6C Signing time: Fri 08 Aug 2025 19:57:01 +0000 Manifest this update: Fri 08 Aug 2025 19:57:00 +0000 Manifest next update: Fri 15 Aug 2025 19:57:00 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: gZZeb2zdM8LTYzPmOGpOThzjU28i0UvLl15lxE5aYGk=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: nyOJoLIDGp7/wafl1yH4CbKrruUiB3iOpUkQ72n7ZjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2674 (0xa72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Aug 8 19:57:00 2025 GMT Not After : Aug 15 19:57:00 2025 GMT Subject: CN=6896568c-5b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:07:e3:c6:a3:a8:81:ac:5e:fa:da:06:47: 16:1c:73:3b:10:4d:fd:78:7c:83:6a:09:e1:39:63: 00:a0:e0:b5:a7:c4:55:e1:ff:83:74:0e:57:db:a8: 45:2e:09:70:c8:20:3b:94:43:87:c3:7f:ca:e7:4e: bf:4f:0b:77:78:d1:d2:24:0f:50:11:7a:27:90:23: 8a:8c:b0:20:67:1f:66:77:53:5f:ae:34:28:1b:6e: ec:f8:6c:44:01:5a:3a:f0:2f:74:ff:d4:03:7a:37: bc:1e:4a:aa:3c:ea:b4:99:48:45:94:39:61:7b:b6: 96:9e:47:76:26:f9:24:fc:98:e8:ee:66:f3:c2:53: 59:09:ea:01:56:c4:fd:b0:e3:c8:51:bf:5d:e2:7b: 11:d7:87:9e:6b:6d:7e:71:f0:ee:66:27:2f:ca:f9: 3e:55:01:8f:1a:94:ba:87:36:42:ee:68:f3:18:99: c5:1e:28:10:60:81:87:b4:8b:ee:fd:db:f9:ab:8d: 58:99:92:c1:61:b0:4c:e7:c8:13:dc:71:f3:be:b1: 68:5e:cc:93:e2:d4:1e:85:3b:c9:3e:ac:63:13:f1: 0c:72:74:52:91:d3:ee:e9:4a:7a:bc:f9:cb:b4:e9: 86:e3:8d:65:35:b1:57:37:24:5e:11:44:cf:d9:89: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C1:04:2F:64:99:CD:1D:40:CB:A7:5C:55:5E:CA:9C:91:09:67:87 X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:37:28:45:0f:90:e1:9f:c3:9f:fc:26:36:f1:a2:1b:be:a0: 27:27:e8:d4:af:52:aa:60:c6:5a:62:f3:c1:2a:9b:7b:24:1f: 3d:ed:1e:e0:84:c1:19:a0:b2:98:00:15:63:f0:e5:d1:45:be: 82:a0:ed:fd:c1:52:4d:38:5a:8e:d7:dd:7f:a5:15:70:11:94: 68:31:c0:a5:30:e8:b4:1d:54:20:96:4f:63:97:65:97:6f:bd: 39:68:5b:ab:0d:db:48:76:0a:5a:75:cd:bc:9f:52:9a:ab:bc: 85:47:a2:66:ee:eb:3b:18:74:50:39:a5:fc:5d:09:50:99:c8: bb:2c:2f:e9:c7:0c:60:5c:e8:e0:f8:1f:69:8f:4e:85:da:6d: 98:3f:84:84:63:54:89:b1:9a:6c:94:38:ea:6f:8a:c1:3a:1d: ff:cb:4d:83:a1:79:bb:ba:cf:f8:01:96:34:53:20:36:66:24: 89:48:13:19:c0:ca:0f:4c:04:d2:10:05:14:da:cc:11:42:3b: 78:68:34:67:67:05:42:5c:3b:19:4e:fe:7d:ed:ea:a5:9b:62: 8d:03:3d:2d:b0:24:9b:62:6a:42:06:ae:48:ff:6c:f0:37:ce: 5c:0c:66:a3:70:d4:33:1a:af:19:e0:f2:8a:e2:ef:43:7d:08: b7:35:96:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjUwODA4MTk1NzAwWhcNMjUwODE1MTk1NzAwWjAYMRYwFAYD VQQDEw02ODk2NTY4Yy01YjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjQH48ajqIGsXvraBkcWHHM7EE39eHyDagnhOWMAoOC1p8RV4f+DdA5X26hF LglwyCA7lEOHw3/K506/Twt3eNHSJA9QEXonkCOKjLAgZx9md1NfrjQoG27s+GxE AVo68C90/9QDeje8HkqqPOq0mUhFlDlhe7aWnkd2Jvkk/Jjo7mbzwlNZCeoBVsT9 sOPIUb9d4nsR14eea21+cfDuZicvyvk+VQGPGpS6hzZC7mjzGJnFHigQYIGHtIvu /dv5q41YmZLBYbBM58gT3HHzvrFoXsyT4tQehTvJPqxjE/EMcnRSkdPu6Up6vPnL tOmG441lNbFXNyReEUTP2YkpHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrBBC9k mc0dQMunXFVeypyRCWeHMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGNyhFD5Dhn8Of/CY28aIbvqAnJ+jUr1KqYMZaYvPBKpt7JB897R7g hMEZoLKYABVj8OXRRb6CoO39wVJNOFqO191/pRVwEZRoMcClMOi0HVQglk9jl2WX b705aFurDdtIdgpadc28n1Kaq7yFR6Jm7us7GHRQOaX8XQlQmci7LC/pxwxgXOjg +B9pj06F2m2YP4SEY1SJsZpslDjqb4rBOh3/y02DoXm7us/4AZY0UyA2ZiSJSBMZ wMoPTATSEAUU2swRQjt4aDRnZwVCXDsZTv597eqlm2KNAz0tsCSbYmpCBq5I/2zw N85cDGajcNQzGq8Z4PKK4u9DfQi3NZYj -----END CERTIFICATE-----Generated at Sat Aug 9 23:28:41 2025 by rpki-client