$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json) Hash identifier: Lla+/9VLy9Qtmzfpd2JoBnUCZ3HY4hOystJFcvbL1VM= Subject key identifier: C9:17:F5:E7:5E:0B:02:00:E1:15:E7:59:48:E6:CE:17:76:0D:4A:2E Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft Manifest number: 0168 Signing time: Sun 03 Aug 2025 04:13:57 +0000 Manifest this update: Sun 03 Aug 2025 04:13:57 +0000 Manifest next update: Sun 10 Aug 2025 04:13:57 +0000 Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: NA9gB+yRhQa2qXT/2b5XF7pgwgeahrRr7KT7/haCGvc=) 2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: 3T/MseZ6JXWgLESYBTBgDLBC7fpGasfK+B1pI77N9vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Validity Not Before: Aug 3 04:13:57 2025 GMT Not After : Aug 10 04:13:57 2025 GMT Subject: CN=688ee205-c83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:90:34:8e:b2:c4:2e:85:3c:00:d7:50:cd: f1:5d:b5:8f:8a:f2:2c:22:b7:de:76:91:65:0e:3c: 17:dc:83:70:1c:ae:02:87:a7:9c:1d:e6:ec:97:4c: f6:22:04:58:59:15:d8:ca:ca:5f:13:28:83:e1:16: e5:fc:dd:eb:c5:da:19:9a:91:c4:25:20:3f:a9:e3: 0b:1f:0a:b3:cc:9d:05:ba:b6:13:65:d7:9d:85:dc: 4e:9b:b6:10:9f:ca:0c:5e:d0:06:a0:43:82:c4:d1: 2a:c4:fa:83:bd:2e:99:c7:77:b9:29:29:55:ce:ab: 4f:66:21:58:7c:00:0b:4d:e7:8d:3e:1c:dd:96:c6: 84:61:3d:24:ff:53:c8:ff:e0:ff:d1:78:2e:ef:f8: d0:1a:e8:28:dc:59:63:39:d2:83:81:26:03:9f:fc: 86:2f:92:9f:76:93:e6:d5:63:0c:84:f7:cd:50:2f: af:1a:c9:17:9c:7d:09:23:11:cf:50:a3:b2:ce:ff: 3e:80:f2:20:ea:d9:9f:09:74:d4:7d:33:61:de:d4: 61:82:69:e7:1b:d8:5c:13:37:c3:8b:88:13:26:71: cf:03:16:93:f2:d0:d7:a6:f5:8d:20:a2:d4:3d:67: 57:e8:3e:c0:cc:34:9d:8e:f9:53:5f:0f:0a:43:0d: 79:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:17:F5:E7:5E:0B:02:00:E1:15:E7:59:48:E6:CE:17:76:0D:4A:2E X509v3 Authority Key Identifier: keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ca:85:6e:a2:0c:54:12:88:b9:68:ee:65:50:99:e1:82:04: 4e:f4:ba:ed:7c:a3:e5:b9:65:23:b9:13:ea:dd:2f:aa:0d:0f: d7:91:71:33:78:da:da:5e:cf:cc:4f:cd:e7:e0:85:d9:91:d0: 8d:ec:97:dd:3a:4c:48:76:4c:b6:21:e7:89:25:d5:e9:1a:57: 53:10:16:14:59:29:f7:1f:bc:b4:21:c4:3d:c7:0c:6c:b4:dc: 2d:51:18:1a:37:71:41:ab:dc:38:01:d3:83:2b:c7:0d:8d:18: e5:3a:3c:f6:97:12:00:e7:a8:2b:9f:49:61:51:f1:27:18:7e: 4e:30:02:ea:07:60:4e:dc:40:0e:f5:7f:43:aa:47:92:5e:8d: c7:d7:32:6f:7c:4d:98:54:71:df:60:63:d7:eb:cf:78:eb:61: d8:4d:07:9d:2c:67:85:a4:c3:21:32:3c:3f:56:18:53:d5:76: 9f:a7:5c:55:dc:27:de:c8:f8:01:db:39:3f:7a:86:0f:09:5f: 6c:79:63:16:71:66:96:da:66:d7:fe:d5:cb:b3:17:cd:01:3f: 1c:d9:ce:b2:0e:7a:67:8f:e1:81:78:79:1f:aa:f1:17:f7:a7: ef:1a:76:b0:93:18:29:f8:00:22:a5:9f:5f:36:8c:e1:c6:56: be:24:6a:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCQ0MxMTAvBgNVBAUTKEZENDVDQzU0MDNDNjRDRkIyMzBBQTdERUVEMTBCQzY4 MjI4RDc0NzMwHhcNMjUwODAzMDQxMzU3WhcNMjUwODEwMDQxMzU3WjAYMRYwFAYD VQQDEw02ODhlZTIwNS1jODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVuQNI6yxC6FPADXUM3xXbWPivIsIrfedpFlDjwX3INwHK4Ch6ecHebsl0z2 IgRYWRXYyspfEyiD4Rbl/N3rxdoZmpHEJSA/qeMLHwqzzJ0FurYTZdedhdxOm7YQ n8oMXtAGoEOCxNEqxPqDvS6Zx3e5KSlVzqtPZiFYfAALTeeNPhzdlsaEYT0k/1PI /+D/0Xgu7/jQGugo3FljOdKDgSYDn/yGL5KfdpPm1WMMhPfNUC+vGskXnH0JIxHP UKOyzv8+gPIg6tmfCXTUfTNh3tRhgmnnG9hcEzfDi4gTJnHPAxaT8tDXpvWNIKLU PWdX6D7AzDSdjvlTXw8KQw152wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkX9ede CwIA4RXnWUjmzhd2DUouMB8GA1UdIwQYMBaAFP1FzFQDxkz7Iwqn3u0QvGgijXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkJDQy85MDRFNTBGMDQ4 RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQc2pDcWZlN1JDOGFDS05k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VWE1WQVBHVFBzakNxZmU3UkM4YUNLTmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkJDQy85MDRFNTBGMDQ4RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQ c2pDcWZlN1JDOGFDS05kSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdyoVuogxUEoi5aO5lUJnhggRO9LrtfKPluWUjuRPq3S+qDQ/XkXEz eNraXs/MT83n4IXZkdCN7JfdOkxIdky2IeeJJdXpGldTEBYUWSn3H7y0IcQ9xwxs tNwtURgaN3FBq9w4AdODK8cNjRjlOjz2lxIA56grn0lhUfEnGH5OMALqB2BO3EAO 9X9DqkeSXo3H1zJvfE2YVHHfYGPX689462HYTQedLGeFpMMhMjw/VhhT1Xafp1xV 3CfeyPgB2zk/eoYPCV9seWMWcWaW2mbX/tXLsxfNAT8c2c6yDnpnj+GBeHkfqvEX 96fvGnawkxgp+AAipZ9fNozhxla+JGrB -----END CERTIFICATE-----Generated at Mon Aug 4 11:13:06 2025 by rpki-client