$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: dib46r3/NHu4BoOozFWoY9a9WYwRzEEWKCd/An2VWsc= Subject key identifier: 60:87:8E:CA:4B:A9:7E:23:FB:D2:71:61:08:3E:95:12:F1:41:D9:A4 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: 012E Signing time: Sat 09 Aug 2025 05:03:27 +0000 Manifest this update: Sat 09 Aug 2025 05:03:26 +0000 Manifest next update: Sat 16 Aug 2025 05:03:26 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: 0RZLyiPEsIjKS0JZTqR24hSKVYmJLIKEWrIygWCM7fs=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: PrkTvOXkxIIDm1NyNDWg8hQLP2IiT8tO2SVVH/dIBvI=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: s22fNuehfcR8cdi3cFR8Z1yPLk8LwMQLolDpdzgZgc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Aug 9 05:03:26 2025 GMT Not After : Aug 16 05:03:26 2025 GMT Subject: CN=6896d69e-0438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:2e:67:4d:9b:e3:b8:c1:93:98:6f:21:61: 8b:88:ef:d2:f4:1d:30:42:d2:22:b6:8d:d3:bb:66: 09:dd:ae:76:dc:eb:79:3f:f6:5d:1a:81:1e:e5:b2: e2:4a:31:a7:ca:5c:c2:7c:21:f1:a8:32:7b:ac:72: bc:cf:ee:3a:db:28:52:56:21:86:84:59:cc:1f:90: f7:2e:9b:2d:c7:f9:3b:30:68:3e:9c:41:6a:0c:14: 0f:78:1d:9a:9f:d9:d2:91:dc:c8:50:7b:ff:62:2e: eb:c4:fd:fb:e4:5d:f2:e7:fe:cf:88:b6:8a:82:6f: f1:38:09:b6:84:1c:6c:9e:a8:1e:23:f3:43:f3:3d: 83:06:8d:98:02:76:3d:a5:f3:15:db:4e:a9:8a:0a: 74:08:a1:b5:56:f4:f7:03:25:65:e0:49:b7:14:22: 35:1c:cd:75:6a:36:f4:a5:6d:d2:2e:12:be:53:f2: 26:d2:ca:bf:36:fc:c6:98:43:65:3d:4b:1b:71:b3: ba:5b:13:8c:8f:1f:55:ec:74:2a:7b:6d:96:c8:10: 58:3c:b7:63:9b:07:cb:c1:35:2d:7b:c4:46:f9:ff: 25:f1:75:72:fd:0e:9e:6e:ec:da:66:ae:c2:36:4d: c5:f5:b6:f7:24:67:8e:50:f0:30:da:a1:7a:1b:69: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:87:8E:CA:4B:A9:7E:23:FB:D2:71:61:08:3E:95:12:F1:41:D9:A4 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f7:de:f9:95:f8:64:ae:23:57:63:96:83:a5:67:82:da:a2: eb:98:65:71:dd:e6:e6:1c:4f:ef:0f:a7:e7:d4:5e:38:ae:2c: 1a:6f:c4:60:f5:6f:b1:5c:3c:d2:ab:da:b2:be:20:80:96:c6: a9:71:6e:7f:cd:3b:f9:e7:93:0c:fb:68:86:9f:60:3d:f9:33: f8:4c:d3:c1:a2:1e:58:ba:7a:ab:bf:e6:c8:17:95:db:b4:33: 49:f6:23:11:39:ac:e3:df:3c:27:38:44:80:c7:e9:6e:c7:04: 6a:15:b1:05:ed:7c:7a:2e:e2:f9:61:b3:31:3b:ee:08:90:c0: 19:82:63:7c:79:bc:27:f3:4b:27:f2:e0:1b:1f:4d:ff:c4:3b: 32:fc:a7:05:25:6f:1a:6e:66:63:b2:84:91:76:d6:2e:4b:42: dd:b2:e3:6c:47:fc:a9:ba:02:86:93:6e:25:19:3d:81:19:a6: c3:b0:14:56:eb:88:e7:26:91:5a:57:82:ec:3a:03:06:14:79: 50:36:56:56:a1:ba:ea:49:35:b9:53:c9:32:11:de:3a:db:2d: e5:88:96:9a:08:56:b6:c8:10:85:54:b8:94:84:6e:5d:48:4b: 5f:d9:20:5b:30:af:cd:86:f0:05:6b:ad:7f:b8:21:06:a4:4f: 02:34:9d:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjUwODA5MDUwMzI2WhcNMjUwODE2MDUwMzI2WjAYMRYwFAYD VQQDEw02ODk2ZDY5ZS0wNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XUuZ02b47jBk5hvIWGLiO/S9B0wQtIito3Tu2YJ3a523Ot5P/ZdGoEe5bLi SjGnylzCfCHxqDJ7rHK8z+462yhSViGGhFnMH5D3Lpstx/k7MGg+nEFqDBQPeB2a n9nSkdzIUHv/Yi7rxP375F3y5/7PiLaKgm/xOAm2hBxsnqgeI/ND8z2DBo2YAnY9 pfMV206pigp0CKG1VvT3AyVl4Em3FCI1HM11ajb0pW3SLhK+U/Im0sq/NvzGmENl PUsbcbO6WxOMjx9V7HQqe22WyBBYPLdjmwfLwTUte8RG+f8l8XVy/Q6ebuzaZq7C Nk3F9bb3JGeOUPAw2qF6G2kYywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCHjspL qX4j+9JxYQg+lRLxQdmkMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh9975lfhkriNXY5aDpWeC2qLrmGVx3ebmHE/vD6fn1F44riwab8Rg 9W+xXDzSq9qyviCAlsapcW5/zTv555MM+2iGn2A9+TP4TNPBoh5Yunqrv+bIF5Xb tDNJ9iMROazj3zwnOESAx+luxwRqFbEF7Xx6LuL5YbMxO+4IkMAZgmN8ebwn80sn 8uAbH03/xDsy/KcFJW8abmZjsoSRdtYuS0LdsuNsR/ypugKGk24lGT2BGabDsBRW 64jnJpFaV4LsOgMGFHlQNlZWobrqSTW5U8kyEd462y3liJaaCFa2yBCFVLiUhG5d SEtf2SBbMK/NhvAFa61/uCEGpE8CNJ0a -----END CERTIFICATE-----Generated at Sat Aug 9 15:06:32 2025 by rpki-client