$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft File: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json) Hash identifier: 0sogDEWXhanFbUYLsKNGQgXOg/1TkFwxdeO2cH3MkI4= Subject key identifier: 9A:D8:EF:58:00:4F:A0:2E:CD:9D:20:03:73:BD:9F:31:1C:F4:69:FA Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 Certificate issuer: /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft Manifest number: 01D1 Signing time: Thu 07 Aug 2025 03:16:44 +0000 Manifest this update: Thu 07 Aug 2025 03:16:43 +0000 Manifest next update: Thu 14 Aug 2025 03:16:43 +0000 Files and hashes: 1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: x3y17Mg4Qidy51Eu6bbxGsGuXVb+ai0XHyCQ65EG6+k=) 2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: ztxAi6NVLvlOVRaY5LiA8lZVY+4GBUWq8sHQO2NcSn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Validity Not Before: Aug 7 03:16:43 2025 GMT Not After : Aug 14 03:16:43 2025 GMT Subject: CN=68941a9c-bbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8b:98:f0:f8:79:c6:1f:82:45:a5:4d:e1:cd: 52:f6:1d:44:d9:42:c3:4e:43:de:23:82:d4:99:96: a0:db:56:07:fc:f9:59:44:8a:4a:39:7d:5f:34:04: 60:00:90:fa:b2:83:1e:b3:c3:87:83:16:11:03:ee: fd:9f:a7:30:82:08:38:92:6c:1f:4f:02:d4:76:5a: c0:b0:ab:46:0f:27:fa:a6:b3:f3:ce:c9:46:fd:dd: 99:1f:1e:f8:74:3d:3e:51:0e:e6:63:f1:32:fb:57: 3d:84:20:bd:cb:e8:0a:d9:d2:86:a7:ea:6e:06:41: e9:86:1f:0c:0d:67:b2:07:75:7b:17:28:3e:7d:ef: e8:8d:c9:2f:23:3a:1c:fe:04:9d:6f:e7:45:01:f9: 36:61:e8:ed:31:47:90:89:c1:63:99:f2:58:a8:9c: 0b:b4:4b:06:8a:66:62:15:64:0d:f9:43:16:cb:5c: 54:fe:62:fd:ed:9d:5e:53:62:99:c2:04:2f:32:bb: b5:e6:be:88:d1:8e:79:64:65:75:9f:b7:c9:d1:64: 40:fd:11:f8:de:e7:cc:aa:4f:22:53:d0:c8:33:81: ce:4a:3b:66:07:19:6b:35:5c:28:61:f9:1a:14:0e: 26:dd:3e:03:2f:37:85:bc:cb:cc:b5:cf:52:8b:e8: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D8:EF:58:00:4F:A0:2E:CD:9D:20:03:73:BD:9F:31:1C:F4:69:FA X509v3 Authority Key Identifier: keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a5:a0:58:f4:b4:6b:d4:20:b0:12:fe:0a:44:28:24:f8:58: 66:68:a9:8e:5b:9e:8d:46:5a:5e:e4:da:82:d0:b6:ef:a8:c3: 7c:e9:bf:0a:57:60:a7:72:e4:a6:8f:42:a0:b5:22:58:72:a9: 52:44:0b:73:62:57:04:35:c6:27:59:00:88:56:dc:95:b6:34: 35:cd:ac:1b:41:de:ea:a8:c3:02:6b:a4:f6:c9:5d:72:02:ab: 42:aa:67:62:06:6c:16:ae:0a:f3:78:cd:cd:15:2d:53:1f:f1: fb:04:da:f7:3b:c6:27:b3:8f:10:b5:5c:24:07:40:30:ae:27: 12:a9:3d:9b:e3:e5:ea:7f:aa:4b:0a:db:27:f7:58:5e:68:f8: f5:e3:a3:e8:f4:0f:0d:6b:80:42:c0:33:72:d2:17:c0:18:37: 7a:0d:40:19:62:7e:1e:ef:37:79:c4:4f:d8:04:2d:a9:2b:e6: 8f:7c:99:25:18:be:29:1f:67:4f:d5:2d:2b:a8:c1:f1:32:28: ab:f3:1e:92:07:55:7a:95:33:33:db:94:78:f3:9d:0c:50:32: 5c:3d:88:d7:a9:11:48:1c:5e:8c:f3:22:de:15:04:47:4e:37: 91:9a:cf:a3:38:c6:c1:d6:d5:c6:c7:d5:41:5b:f6:03:dc:d5: 1d:45:07:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMjIxMTAvBgNVBAUTKEJCNEZBRTg1NTQwQTVBRDlGOTNDQjQ4MkM0NUM5NTc2 RjUyQTNCRjQwHhcNMjUwODA3MDMxNjQzWhcNMjUwODE0MDMxNjQzWjAYMRYwFAYD VQQDEw02ODk0MWE5Yy1iYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64uY8Ph5xh+CRaVN4c1S9h1E2ULDTkPeI4LUmZag21YH/PlZRIpKOX1fNARg AJD6soMes8OHgxYRA+79n6cwggg4kmwfTwLUdlrAsKtGDyf6prPzzslG/d2ZHx74 dD0+UQ7mY/Ey+1c9hCC9y+gK2dKGp+puBkHphh8MDWeyB3V7Fyg+fe/ojckvIzoc /gSdb+dFAfk2YejtMUeQicFjmfJYqJwLtEsGimZiFWQN+UMWy1xU/mL97Z1eU2KZ wgQvMru15r6I0Y55ZGV1n7fJ0WRA/RH43ufMqk8iU9DIM4HOSjtmBxlrNVwoYfka FA4m3T4DLzeFvMvMtc9Si+gn9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrY71gA T6AuzZ0gA3O9nzEc9Gn6MB8GA1UdIwQYMBaAFLtProVUClrZ+Ty0gsRclXb1Kjv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEyMi8wRkQ0RUY0RUFF RUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0bjVQTFNDeEZ5VmR2VXFP X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UwLXVoVlFLV3RuNVBMU0N4RnlWZHZVcU9fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEyMi8wRkQ0RUY0RUFFRUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0 bjVQTFNDeEZ5VmR2VXFPX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOpaBY9LRr1CCwEv4KRCgk+FhmaKmOW56NRlpe5NqC0LbvqMN86b8K V2CncuSmj0KgtSJYcqlSRAtzYlcENcYnWQCIVtyVtjQ1zawbQd7qqMMCa6T2yV1y AqtCqmdiBmwWrgrzeM3NFS1TH/H7BNr3O8Yns48QtVwkB0AwricSqT2b4+Xqf6pL Ctsn91heaPj146Po9A8Na4BCwDNy0hfAGDd6DUAZYn4e7zd5xE/YBC2pK+aPfJkl GL4pH2dP1S0rqMHxMiir8x6SB1V6lTMz25R4850MUDJcPYjXqRFIHF6M8yLeFQRH TjeRms+jOMbB1tXGx9VBW/YD3NUdRQfo -----END CERTIFICATE-----Generated at Sat Aug 9 01:19:56 2025 by rpki-client