$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft File: Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft (raw, json) Hash identifier: VSHtRz2t+yJ27f8RdhlVA4esIwx7uOpdWXWiOfD4ncI= Subject key identifier: 50:E9:91:4F:9D:EB:C8:FF:06:93:AD:A5:54:0B:41:4B:B9:A3:C1:85 Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 Certificate issuer: /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft Manifest number: 0669 Signing time: Fri 08 Aug 2025 22:57:25 +0000 Manifest this update: Fri 08 Aug 2025 22:57:25 +0000 Manifest next update: Fri 15 Aug 2025 22:57:25 +0000 Files and hashes: 1: Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl (hash: 7vjhuS5HfKRUR7BVsjRGm0N3Qd6cvLStrjk55+/HHIo=) 2: 59018DEE340611ED9C72786AC4F9AE02.roa (hash: rP6Pu7EfL4ZTfd4hkNZXRMND1x04kCFhfmQKKfFcDnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Validity Not Before: Aug 8 22:57:25 2025 GMT Not After : Aug 15 22:57:25 2025 GMT Subject: CN=689680d5-8d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:56:1e:2b:98:64:e1:7c:63:1f:22:8e:ce:2a: 86:c0:5a:6e:34:44:c5:de:07:2c:7a:38:5e:be:5c: c9:c6:0d:d7:ec:5e:dd:fd:02:5e:dc:c9:42:f4:14: fa:3a:c6:7a:8b:98:8f:6e:0a:b7:8b:1e:00:a3:32: 5d:98:aa:f7:e2:3b:45:9e:2a:4b:d9:8a:a6:23:b9: 32:9c:53:b5:b6:d2:1a:a9:95:9f:66:91:80:e6:99: 44:fc:75:d6:d0:8d:d2:59:00:c2:a9:e4:7e:54:d8: 22:83:de:d7:a0:bb:65:04:6b:b6:1d:0c:7a:14:8a: 8c:53:4d:47:fa:00:9f:cd:6b:13:20:18:4e:87:f8: 84:6d:f0:a0:2d:69:57:f6:9c:36:7d:9b:e7:de:30: 18:1c:b1:22:94:84:59:4e:59:8d:1b:a6:fe:19:57: ea:8e:cb:78:b6:7c:78:e6:0d:63:94:44:1e:bb:2a: 87:8b:8a:24:f3:8e:fa:b3:27:dc:36:e8:a5:94:5f: a3:6b:bb:d2:a6:91:23:44:d4:a4:ee:47:8d:63:a3: b6:51:b8:62:d9:65:36:8e:93:d4:32:7e:ac:28:ba: 67:aa:76:e9:0d:6b:5e:07:25:12:52:e3:a3:f6:c6: bf:60:e0:be:4f:64:b7:39:cf:8a:e6:15:7f:75:e2: 57:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E9:91:4F:9D:EB:C8:FF:06:93:AD:A5:54:0B:41:4B:B9:A3:C1:85 X509v3 Authority Key Identifier: keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ab:61:93:b6:ef:ef:80:aa:4b:d0:9c:89:e4:c7:41:95:03: c5:b2:a8:87:9d:d8:64:29:5f:42:ed:4f:63:57:e7:11:93:3b: 2d:c5:8d:c1:e7:cb:49:1f:6f:3e:6d:21:8e:32:55:ca:7a:90: 69:6a:d2:8e:e1:a7:c9:7b:b0:d6:7d:ab:37:11:4d:3b:e9:5b: 61:45:53:ba:ae:fa:67:3f:d0:2a:fd:25:d0:ed:11:f0:25:db: d3:80:50:6e:60:57:e5:51:24:9f:6d:12:2a:82:21:48:6d:be: 69:3b:db:c0:49:00:3a:f9:f6:d7:d0:d4:37:27:70:87:19:53: 84:75:05:0d:8e:d0:8d:60:58:24:bc:37:b7:f9:24:f1:91:c7: 4c:9a:a9:4f:7a:36:1d:37:6a:2b:b8:61:38:3d:1e:ad:1b:07: cd:ff:74:5f:e5:ce:d1:17:63:b2:4c:bd:d8:0d:87:68:67:25: 14:d8:f7:6e:c6:6b:4a:bf:ef:53:a5:4b:7b:dd:cd:72:6c:78: f5:af:e3:99:bd:7b:f6:72:45:23:47:fb:6f:31:90:0e:c2:2b: ec:6e:1e:44:41:f3:df:e1:c3:cf:32:04:da:8c:a5:ea:71:71: 72:d9:3d:58:92:eb:71:6e:76:4d:98:53:b9:17:7f:89:a2:fd: 97:68:34:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCMzMxMTAvBgNVBAUTKDUxQUVCQTIzRkI3NDVBNTUzQTVFNDk5NkRGMUM4MTcz NDczRjE3OTgwHhcNMjUwODA4MjI1NzI1WhcNMjUwODE1MjI1NzI1WjAYMRYwFAYD VQQDEw02ODk2ODBkNS04ZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVYeK5hk4XxjHyKOziqGwFpuNETF3gcsejhevlzJxg3X7F7d/QJe3MlC9BT6 OsZ6i5iPbgq3ix4AozJdmKr34jtFnipL2YqmI7kynFO1ttIaqZWfZpGA5plE/HXW 0I3SWQDCqeR+VNgig97XoLtlBGu2HQx6FIqMU01H+gCfzWsTIBhOh/iEbfCgLWlX 9pw2fZvn3jAYHLEilIRZTlmNG6b+GVfqjst4tnx45g1jlEQeuyqHi4ok8476syfc NuillF+ja7vSppEjRNSk7keNY6O2Ubhi2WU2jpPUMn6sKLpnqnbpDWteByUSUuOj 9sa/YOC+T2S3Oc+K5hV/deJXQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDpkU+d 68j/BpOtpVQLQUu5o8GFMB8GA1UdIwQYMBaAFFGuuiP7dFpVOl5Jlt8cgXNHPxeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9DRDM1REIxQTkx MjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFdsVTZYa21XM3h5QmMwY19G NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhNjZJX3QwV2xVNlhrbVczeHlCYzBjX0Y1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0IzMy9DRDM1REIxQTkxMjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFds VTZYa21XM3h5QmMwY19GNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcq2GTtu/vgKpL0JyJ5MdBlQPFsqiHndhkKV9C7U9jV+cRkzstxY3B 58tJH28+bSGOMlXKepBpatKO4afJe7DWfas3EU076VthRVO6rvpnP9Aq/SXQ7RHw JdvTgFBuYFflUSSfbRIqgiFIbb5pO9vASQA6+fbX0NQ3J3CHGVOEdQUNjtCNYFgk vDe3+STxkcdMmqlPejYdN2oruGE4PR6tGwfN/3Rf5c7RF2OyTL3YDYdoZyUU2Pdu xmtKv+9TpUt73c1ybHj1r+OZvXv2ckUjR/tvMZAOwivsbh5EQfPf4cPPMgTajKXq cXFy2T1YkutxbnZNmFO5F3+Jov2XaDTQ -----END CERTIFICATE-----Generated at Sun Aug 10 21:18:55 2025 by rpki-client