$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json) Hash identifier: Ne1OmH1ARos9tI5c8OutedFUrHMu+NpILhG0ck1v/gQ= Subject key identifier: 23:C9:BC:21:2F:79:48:60:72:27:16:EB:64:B4:8A:E8:53:17:45:6F Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Certificate serial: 0C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft Manifest number: 0C50 Signing time: Sun 10 Aug 2025 18:34:40 +0000 Manifest this update: Sun 10 Aug 2025 18:34:40 +0000 Manifest next update: Sun 17 Aug 2025 18:34:40 +0000 Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: uwcp3hSOj+bAgRnaK7u4sbwV30GS4XBiQy1WTVmnaHc=) 2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: /6OtFAV0fvfK8AYoQXUKAPYFcikHsFv3EvaxBMPOB2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Validity Not Before: Aug 10 18:34:40 2025 GMT Not After : Aug 17 18:34:40 2025 GMT Subject: CN=6898e640-13c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d3:9a:13:ac:8b:dc:2f:0b:27:3a:10:32:d9: 87:78:ee:c7:9f:f3:c2:0b:ab:42:7d:5b:a7:36:be: 0e:ec:07:d8:a5:3f:a6:8a:f9:2e:80:9b:76:f9:54: da:11:ff:bc:dc:6a:4f:93:53:17:8c:19:dc:30:e7: 2f:e8:af:d2:fb:77:98:a4:6a:47:76:b9:7f:2b:2e: 88:21:dd:d7:e9:1d:b0:03:e9:6e:d8:04:df:d4:62: ce:6d:c2:48:eb:02:b8:64:5f:e9:93:af:8d:4a:81: 33:0e:c6:18:38:50:66:6f:22:7b:06:5e:aa:8c:5b: 05:f9:5c:cd:1f:03:e4:63:80:68:35:2e:e5:21:4e: a5:55:8d:72:fd:cd:3f:63:b1:26:c1:39:7a:6a:f1: aa:46:14:dd:eb:e5:c7:9a:87:de:7d:79:87:4e:48: 15:de:e8:80:0a:0f:94:f3:cf:0e:d7:ac:6a:c2:03: 7f:05:b4:86:2f:7e:eb:ec:1c:20:18:ce:8f:bf:17: 32:19:2c:7b:9f:ef:5c:44:29:a1:96:a0:01:7b:ab: bf:26:60:9c:cb:57:e0:5a:d2:39:39:a9:02:63:ba: aa:c9:e1:4a:cb:13:9b:47:ee:f7:59:56:66:0b:72: 01:3c:5a:96:f5:0e:9a:47:64:47:24:49:e8:58:b1: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C9:BC:21:2F:79:48:60:72:27:16:EB:64:B4:8A:E8:53:17:45:6F X509v3 Authority Key Identifier: keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:01:4c:71:7d:00:c3:fd:3a:89:98:50:3c:4c:86:28:17:3d: 47:7b:03:f0:ec:33:87:72:dc:d0:d0:9b:7b:72:3a:9b:30:76: 45:9a:bb:f8:64:3d:cb:e3:df:a9:94:cb:14:22:8a:8b:a6:58: 5f:92:ce:59:61:ae:94:d9:09:66:59:8e:96:2d:be:82:9a:b8: a9:11:be:b5:1c:e3:cb:1e:36:46:20:71:db:e9:6f:5b:5b:0b: b8:b0:bc:05:af:63:22:3e:82:34:e9:f7:b1:7d:f9:02:4c:d8: 96:ac:aa:62:ed:73:6d:00:d2:54:06:ad:b7:ab:a4:69:9a:a8: 46:af:79:27:05:6b:b3:f5:b7:83:19:15:98:c2:7d:c1:d3:51: f2:ba:aa:c8:cf:28:59:ea:58:7e:a4:b3:65:1e:03:06:3c:55: bc:2d:9d:70:e8:fc:e6:5d:ca:ec:7e:be:35:69:90:4e:c3:33: 74:e2:5f:11:4c:f3:25:55:8f:0e:b5:53:14:8e:6e:a6:cf:f9: c2:ad:53:2d:2d:e2:aa:93:80:e7:84:5f:43:af:19:48:0c:84: 70:b2:56:e5:26:0d:40:ed:09:9d:a1:bf:32:a2:4f:8e:a8:3b: 92:13:8d:89:b7:ab:ae:e2:69:dc:8f:70:4f:45:fb:6a:dd:e6: 48:be:c3:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NDAxMTAvBgNVBAUTKEZBRTYyMDFDNjY2MzkyMzQwQkVFMTM4RUQ0MTc5OUJB ODZEQUE2ODgwHhcNMjUwODEwMTgzNDQwWhcNMjUwODE3MTgzNDQwWjAYMRYwFAYD VQQDEw02ODk4ZTY0MC0xM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NOaE6yL3C8LJzoQMtmHeO7Hn/PCC6tCfVunNr4O7AfYpT+mivkugJt2+VTa Ef+83GpPk1MXjBncMOcv6K/S+3eYpGpHdrl/Ky6IId3X6R2wA+lu2ATf1GLObcJI 6wK4ZF/pk6+NSoEzDsYYOFBmbyJ7Bl6qjFsF+VzNHwPkY4BoNS7lIU6lVY1y/c0/ Y7EmwTl6avGqRhTd6+XHmofefXmHTkgV3uiACg+U888O16xqwgN/BbSGL37r7Bwg GM6PvxcyGSx7n+9cRCmhlqABe6u/JmCcy1fgWtI5OakCY7qqyeFKyxObR+73WVZm C3IBPFqW9Q6aR2RHJEnoWLHSPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPJvCEv eUhgcicW62S0iuhTF0VvMB8GA1UdIwQYMBaAFPrmIBxmY5I0C+4TjtQXmbqG2qaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg0MC82MTc3MzMyQTBC ODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtqUUw3aE9PMUJlWnVvYmFw b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11WWdIR1pqa2pRTDdoT08xQmVadW9iYXBvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg0MC82MTc3MzMyQTBCODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtq UUw3aE9PMUJlWnVvYmFwb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIAUxxfQDD/TqJmFA8TIYoFz1HewPw7DOHctzQ0Jt7cjqbMHZFmrv4 ZD3L49+plMsUIoqLplhfks5ZYa6U2QlmWY6WLb6CmripEb61HOPLHjZGIHHb6W9b Wwu4sLwFr2MiPoI06fexffkCTNiWrKpi7XNtANJUBq23q6RpmqhGr3knBWuz9beD GRWYwn3B01HyuqrIzyhZ6lh+pLNlHgMGPFW8LZ1w6PzmXcrsfr41aZBOwzN04l8R TPMlVY8OtVMUjm6mz/nCrVMtLeKqk4DnhF9DrxlIDIRwslblJg1A7Qmdob8yok+O qDuSE42Jt6uu4mncj3BPRftq3eZIvsMP -----END CERTIFICATE-----Generated at Mon Aug 11 04:23:27 2025 by rpki-client