$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft File: UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json) Hash identifier: gIFUOuhKH03hrPgXgn+ETLjHLzmkiKOZEhOHUPs28AI= Subject key identifier: 12:11:B0:0B:48:F1:5F:52:2A:A8:49:28:4F:FC:49:77:94:AD:5F:A1 Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft Manifest number: 01FA Signing time: Sat 09 Aug 2025 02:45:49 +0000 Manifest this update: Sat 09 Aug 2025 02:45:48 +0000 Manifest next update: Sat 16 Aug 2025 02:45:48 +0000 Files and hashes: 1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: CBolIbfDXA27J2QIT01n1dIzVNSXMNufkr8BZXUC+TY=) 2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: h7PFINLKglbbD51solfuF7q/5uroEa7Bk3jUBzQnwh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE, serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Validity Not Before: Aug 9 02:45:48 2025 GMT Not After : Aug 16 02:45:48 2025 GMT Subject: CN=6896b65c-22bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:5f:49:ce:d2:7c:e5:92:34:50:77:75:d6: 9a:35:ef:22:4e:53:d3:5f:fe:20:21:22:20:6b:51: e0:78:2e:6a:56:22:09:13:30:54:94:88:fc:e0:17: 33:26:6b:cc:d0:95:10:a5:ac:40:3d:8e:7e:10:ab: 49:5d:4e:0e:6f:7b:7a:f3:03:51:b2:33:ba:03:93: f6:26:7a:66:f7:f8:a6:e5:7f:26:ea:60:5f:58:fc: d7:c3:98:91:0b:c9:56:79:bf:41:e4:96:98:01:6c: 06:96:ca:3c:15:66:4e:e0:29:3a:18:8d:20:a1:15: 68:68:06:e9:2f:31:3a:0a:65:16:6e:48:bf:9c:ab: 4e:aa:c2:f6:32:4d:96:9b:61:41:05:b4:9d:c0:2e: 6f:01:3d:77:f9:b3:2c:94:46:74:08:d8:82:ca:fa: 7d:02:1c:45:bb:9f:97:39:48:ef:05:84:e4:22:73: db:51:79:57:4b:b8:77:90:86:3e:4f:86:82:46:56: 8c:2c:09:41:49:70:cc:74:16:92:3a:2a:2d:75:41: e0:4f:36:88:87:90:22:96:08:8d:b0:58:39:de:ed: 1c:e4:6b:99:3f:5b:d5:8d:31:d5:4a:db:3b:8b:50: 8d:8f:4d:16:e6:40:70:d8:d5:18:38:3e:45:4d:2f: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:11:B0:0B:48:F1:5F:52:2A:A8:49:28:4F:FC:49:77:94:AD:5F:A1 X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:7f:91:8d:e7:5d:5a:0c:bf:90:22:6f:b0:1b:e6:e3:eb:88: ad:d7:ee:f7:79:0b:35:14:00:01:f3:96:ba:0b:d3:94:e2:b1: ee:a4:9a:11:5d:d3:c6:de:8e:52:08:bb:d1:d3:83:06:cd:52: 38:fb:e8:8a:29:6b:d4:74:32:ac:c2:1f:d0:55:aa:07:53:b1: eb:e2:ca:5b:76:83:68:42:3e:4b:d8:0a:05:15:9f:64:bb:f5: 40:34:5f:e3:0f:57:79:a2:bf:c7:16:12:62:6c:0c:72:bd:34: 46:5e:8c:c8:28:99:91:ae:51:4b:fe:ed:8b:d3:6b:56:92:1d: dd:f1:9e:42:53:4b:a6:51:5c:6a:9b:3f:34:37:bf:be:07:3c: 5b:fa:58:e5:9b:20:6b:51:b9:7a:51:a0:df:55:90:aa:66:ae: 35:87:e8:79:58:2d:20:c9:85:cd:79:d0:06:bb:b7:25:f0:4d: 3d:5f:7c:f0:b7:37:91:7f:c0:a0:35:a5:75:5b:15:c1:af:6e: ab:7b:c6:93:32:8f:3a:73:7b:6e:bd:54:f2:84:6e:c9:bb:16: 6f:79:59:e6:30:1c:bb:a4:5f:04:84:95:35:5a:16:28:ef:e6: 8e:0b:9e:c5:4c:d3:b7:e8:0e:be:65:e0:98:4d:21:90:d5:58: db:bd:cc:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjUwODA5MDI0NTQ4WhcNMjUwODE2MDI0NTQ4WjAYMRYwFAYD VQQDEw02ODk2YjY1Yy0yMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuBfSc7SfOWSNFB3ddaaNe8iTlPTX/4gISIga1HgeC5qViIJEzBUlIj84Bcz JmvM0JUQpaxAPY5+EKtJXU4Ob3t68wNRsjO6A5P2Jnpm9/im5X8m6mBfWPzXw5iR C8lWeb9B5JaYAWwGlso8FWZO4Ck6GI0goRVoaAbpLzE6CmUWbki/nKtOqsL2Mk2W m2FBBbSdwC5vAT13+bMslEZ0CNiCyvp9AhxFu5+XOUjvBYTkInPbUXlXS7h3kIY+ T4aCRlaMLAlBSXDMdBaSOiotdUHgTzaIh5AilgiNsFg53u0c5GuZP1vVjTHVSts7 i1CNj00W5kBw2NUYOD5FTS923wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIRsAtI 8V9SKqhJKE/8SXeUrV+hMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlCRS82RkNGQjg2NjZCQjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZX UHJXTW42ZFpLaHZZQmJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhf5GN511aDL+QIm+wG+bj64it1+73eQs1FAAB85a6C9OU4rHupJoR XdPG3o5SCLvR04MGzVI4++iKKWvUdDKswh/QVaoHU7Hr4spbdoNoQj5L2AoFFZ9k u/VANF/jD1d5or/HFhJibAxyvTRGXozIKJmRrlFL/u2L02tWkh3d8Z5CU0umUVxq mz80N7++Bzxb+ljlmyBrUbl6UaDfVZCqZq41h+h5WC0gyYXNedAGu7cl8E09X3zw tzeRf8CgNaV1WxXBr26re8aTMo86c3tuvVTyhG7JuxZveVnmMBy7pF8EhJU1WhYo 7+aOC57FTNO36A6+ZeCYTSGQ1Vjbvcyb -----END CERTIFICATE-----Generated at Sun Aug 10 16:12:23 2025 by rpki-client