$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft File: UBJV6QF6Y3iSbTaute_xnEXWV04.mft (raw, json) Hash identifier: Q5inCpYHNu0cX7v1SBPuDUhS1M0xF2pXNsXH0pN8Edk= Subject key identifier: 92:2A:45:0C:67:D0:92:51:04:1D:A1:68:37:07:23:55:CE:F0:10:0F Authority key identifier: 50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E Certificate issuer: /CN=A916523A/serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft Manifest number: 1F Signing time: Sat 09 Aug 2025 08:26:00 +0000 Manifest this update: Sat 09 Aug 2025 08:25:59 +0000 Manifest next update: Sat 16 Aug 2025 08:25:59 +0000 Files and hashes: 1: UBJV6QF6Y3iSbTaute_xnEXWV04.crl (hash: fz+2QgIDpV1W9Mw8QSYW4ukTZYDRe5A+3yGMqexO86Y=) 2: 6654FB224CDE11F092AD8884C4F9AE02.roa (hash: liQT4xahQ5o7fJUAyQXDum5T6VsmCHKLCFUQqV7AJDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916523A, serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E Validity Not Before: Aug 9 08:25:59 2025 GMT Not After : Aug 16 08:25:59 2025 GMT Subject: CN=68970617-a89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:70:86:2e:e7:ce:42:88:00:4f:4e:99:05: d9:ad:19:e1:6b:6d:a8:66:9c:a3:bd:e5:bc:5d:76: 35:ed:f7:26:32:a9:a2:f7:c8:61:b0:52:80:9d:b3: ab:fb:3c:f6:cb:6e:2a:b4:8b:f8:c2:36:8e:7d:eb: 19:34:ce:99:ea:e7:3f:db:f7:1c:0f:08:d0:84:28: c8:bf:ae:08:59:4f:68:95:53:0a:f5:5a:a3:0d:96: 7a:e8:ef:1b:9a:26:1d:61:62:95:76:2b:4a:b6:65: d9:af:33:9b:5b:44:57:77:50:42:d5:cd:e9:3e:bd: 48:cc:36:49:66:ee:84:e8:fe:0a:c1:66:52:0d:fe: 03:35:73:68:1b:81:21:a8:80:ae:c9:ca:16:22:8c: 26:c3:93:04:b1:cd:48:68:ce:96:14:d8:19:0f:b9: 4b:3a:76:73:59:77:a0:bc:11:8b:66:f4:1a:1e:b9: 02:14:e9:fd:5c:c2:f8:e6:92:2d:4f:8e:36:8b:e9: 6b:99:82:54:71:79:22:87:1e:e1:31:26:eb:b3:1f: bb:14:3d:71:bd:9b:64:3d:1f:c2:0f:dc:69:07:9e: 65:56:2e:30:0a:a6:45:31:a6:3b:fe:00:59:dc:04: 28:39:cb:cf:5c:9a:7a:26:72:24:94:2a:7c:d4:16: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2A:45:0C:67:D0:92:51:04:1D:A1:68:37:07:23:55:CE:F0:10:0F X509v3 Authority Key Identifier: keyid:50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d6:0d:0f:dc:68:26:1d:0f:3a:b0:17:f0:91:87:ed:7f:25: c5:b7:83:52:2a:9e:4e:0b:44:21:f1:c1:87:5a:07:02:90:ee: 74:d8:e5:32:a5:05:c4:82:55:a9:82:ac:31:e4:cb:1d:09:ea: 19:f7:2b:2b:3e:82:2a:9a:8c:cb:86:3c:d4:24:40:e3:2b:70: 48:24:a1:5a:a3:f8:f5:d4:f4:a4:fe:f1:80:59:40:be:a6:d3: 1b:a1:48:b5:a0:5b:c0:33:8e:51:c6:0e:7b:80:4f:ac:c5:62: d0:2a:36:3d:6b:d6:5e:b1:af:07:35:99:6c:1b:51:0d:f5:ca: 56:9e:61:64:fd:0a:cb:09:d8:f9:58:1d:f4:a1:0a:a7:23:1e: b7:98:68:87:f8:55:d1:c1:d9:b5:48:df:b0:61:70:7d:7c:db: 92:08:11:c3:cb:4f:fc:e7:ac:5d:a8:a0:2e:e6:a8:b0:a6:49: 6f:4e:86:36:81:77:1a:57:9a:b6:ff:b0:3f:46:49:12:a9:bd: f3:3e:24:a2:2d:83:b9:b9:41:72:d0:7d:15:95:1d:0f:4f:a0: 4b:21:3b:32:b6:b1:0b:a5:08:32:d2:b9:12:cc:3f:b4:62:6f: 1f:c6:b9:79:64:d1:2e:1a:de:4c:47:11:30:de:0e:9d:f8:71: 5c:67:10:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTIzQTExMC8GA1UEBRMoNTAxMjU1RTkwMTdBNjM3ODkyNkQzNkFFQjVFRkYxOUM0 NUQ2NTc0RTAeFw0yNTA4MDkwODI1NTlaFw0yNTA4MTYwODI1NTlaMBgxFjAUBgNV BAMTDTY4OTcwNjE3LWE4OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHynCGLufOQogAT06ZBdmtGeFrbahmnKO95bxddjXt9yYyqaL3yGGwUoCds6v7 PPbLbiq0i/jCNo596xk0zpnq5z/b9xwPCNCEKMi/rghZT2iVUwr1WqMNlnro7xua Jh1hYpV2K0q2ZdmvM5tbRFd3UELVzek+vUjMNklm7oTo/grBZlIN/gM1c2gbgSGo gK7JyhYijCbDkwSxzUhozpYU2BkPuUs6dnNZd6C8EYtm9BoeuQIU6f1cwvjmki1P jjaL6WuZglRxeSKHHuExJuuzH7sUPXG9m2Q9H8IP3GkHnmVWLjAKpkUxpjv+AFnc BCg5y89cmnomciSUKnzUFiv/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkipFDGfQ klEEHaFoNwcjVc7wEA8wHwYDVR0jBBgwFoAUUBJV6QF6Y3iSbTaute/xnEXWV04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MjNBL0RFODJDQjQ4NENE RDExRjBCRkEwOEY4MEM0RjlBRTAyL1VCSlY2UUY2WTNpU2JUYXV0ZV94bkVYV1Yw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUJKVjZRRjZZM2lTYlRhdXRlX3huRVhXVjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 MjNBL0RFODJDQjQ4NENERDExRjBCRkEwOEY4MEM0RjlBRTAyL1VCSlY2UUY2WTNp U2JUYXV0ZV94bkVYV1YwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJTWDQ/caCYdDzqwF/CRh+1/JcW3g1Iqnk4LRCHxwYdaBwKQ7nTY5TKl BcSCVamCrDHkyx0J6hn3Kys+giqajMuGPNQkQOMrcEgkoVqj+PXU9KT+8YBZQL6m 0xuhSLWgW8AzjlHGDnuAT6zFYtAqNj1r1l6xrwc1mWwbUQ31ylaeYWT9CssJ2PlY HfShCqcjHreYaIf4VdHB2bVI37BhcH1825IIEcPLT/znrF2ooC7mqLCmSW9OhjaB dxpXmrb/sD9GSRKpvfM+JKItg7m5QXLQfRWVHQ9PoEshOzK2sQulCDLSuRLMP7Ri bx/GuXlk0S4a3kxHETDeDp34cVxnELA= -----END CERTIFICATE-----Generated at Sun Aug 10 05:41:40 2025 by rpki-client