$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: xCNjWupH3q1/oTYe9Bq8pWveYvm6KRIOFAbsKccyuSg= Subject key identifier: 49:0B:6E:3F:FA:C7:D6:FF:32:24:A7:01:EA:1A:1C:B8:79:7A:0F:54 Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 09AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 09A6 Signing time: Tue 12 Aug 2025 20:19:08 +0000 Manifest this update: Tue 12 Aug 2025 20:19:08 +0000 Manifest next update: Tue 19 Aug 2025 20:19:08 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: 9tFsIMswovh4mKI24aslZq2wrJCPwdHvYrh782cAP8Q=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: KzsEqYZi4RymBpkz6QVCB3ieArM+VhARkW/2ksmdU8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2476 (0x9ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Validity Not Before: Aug 12 20:19:08 2025 GMT Not After : Aug 19 20:19:08 2025 GMT Subject: CN=689ba1bc-5273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:05:8a:30:58:1b:11:e6:3c:45:66:a0:27: 73:7b:bf:19:01:b6:62:f3:ad:d0:e4:51:67:a6:bb: 49:51:11:8a:8d:c4:87:b6:36:dd:52:e1:42:e1:12: a6:e7:50:b2:b1:94:e4:0a:32:7a:23:65:9b:7d:8f: e8:06:5a:5e:10:a3:b7:eb:62:fe:d8:87:5f:2e:e9: 09:db:e4:26:b9:b6:5d:e0:ee:10:a8:51:85:d6:03: dd:4d:18:e0:57:38:4f:7b:31:06:d3:14:0b:99:0b: 26:f1:d0:a7:40:cd:fa:bd:4c:96:e4:cf:1a:4e:14: 94:15:2f:e4:4d:60:d9:9e:8d:ba:0e:40:df:fd:a8: f2:a2:5d:f6:58:27:9d:6f:f5:f8:1c:1a:09:71:dd: b7:7b:62:11:8e:62:70:34:9c:2c:f6:bc:81:46:34: 60:6f:14:79:a2:dc:1e:66:b2:11:6f:25:3b:f2:c3: dd:9f:47:bb:02:d8:6f:21:90:7e:30:85:3d:bb:eb: 5f:e5:7a:f4:14:11:e1:3a:0f:5a:91:29:e1:a8:b7: d0:05:49:90:12:a6:b5:e0:f2:41:b8:66:48:d6:10: ca:b9:63:ca:7d:ef:6f:b5:61:8a:2e:04:4e:b7:51: 09:4e:61:f8:35:55:fa:22:5f:76:f7:70:f7:92:6f: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0B:6E:3F:FA:C7:D6:FF:32:24:A7:01:EA:1A:1C:B8:79:7A:0F:54 X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:46:34:f5:d0:f2:77:63:ff:a9:51:d4:fe:60:a3:0e:81:d1: 24:c4:a1:a6:e3:d8:43:a0:99:22:e4:a1:d5:69:5a:44:08:36: aa:33:8c:f6:7b:b9:c2:63:a5:f4:54:5e:f1:3b:99:92:98:32: 63:e4:26:8e:f7:a3:20:60:25:2b:68:cd:43:09:c3:16:81:82: c6:83:f0:2d:aa:1f:53:ec:14:b1:eb:93:04:80:8d:2a:19:e8: 0f:fc:dc:0b:8c:8e:0e:50:93:b4:19:a0:f1:f1:84:7f:8d:02: 53:96:fd:56:56:ef:80:38:1e:44:82:0c:d0:c6:14:53:69:99: 6d:0f:93:80:de:47:89:06:d6:56:bd:cb:43:ae:54:60:ca:41: 36:fe:ae:27:66:f1:9c:f1:d3:68:17:61:6c:98:d0:1b:5b:b9: b2:c5:12:e3:b5:bc:bf:f6:a1:c2:ec:69:b5:ce:b5:c4:32:d0: 5b:8c:09:6c:4f:7e:eb:ef:5c:ab:9c:d4:ed:7a:94:53:58:42: d4:1d:54:da:f9:e0:19:9a:43:c7:12:90:ab:aa:e9:84:d2:2e: 16:c7:e2:ef:a7:20:14:17:df:cf:b9:3b:bc:bc:80:ad:ce:eb: 97:b8:f3:5c:ff:17:7a:dd:be:31:28:3e:41:5c:d6:33:1f:4b: 27:d6:75:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjUwODEyMjAxOTA4WhcNMjUwODE5MjAxOTA4WjAYMRYwFAYD VQQDEw02ODliYTFiYy01MjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0MFijBYGxHmPEVmoCdze78ZAbZi863Q5FFnprtJURGKjcSHtjbdUuFC4RKm 51CysZTkCjJ6I2WbfY/oBlpeEKO362L+2IdfLukJ2+QmubZd4O4QqFGF1gPdTRjg VzhPezEG0xQLmQsm8dCnQM36vUyW5M8aThSUFS/kTWDZno26DkDf/ajyol32WCed b/X4HBoJcd23e2IRjmJwNJws9ryBRjRgbxR5otweZrIRbyU78sPdn0e7AthvIZB+ MIU9u+tf5Xr0FBHhOg9akSnhqLfQBUmQEqa14PJBuGZI1hDKuWPKfe9vtWGKLgRO t1EJTmH4NVX6Il9293D3km96+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkLbj/6 x9b/MiSnAeoaHLh5eg9UMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcRjT10PJ3Y/+pUdT+YKMOgdEkxKGm49hDoJki5KHVaVpECDaqM4z2 e7nCY6X0VF7xO5mSmDJj5CaO96MgYCUraM1DCcMWgYLGg/Atqh9T7BSx65MEgI0q GegP/NwLjI4OUJO0GaDx8YR/jQJTlv1WVu+AOB5EggzQxhRTaZltD5OA3keJBtZW vctDrlRgykE2/q4nZvGc8dNoF2FsmNAbW7myxRLjtby/9qHC7Gm1zrXEMtBbjAls T37r71yrnNTtepRTWELUHVTa+eAZmkPHEpCrqumE0i4Wx+LvpyAUF9/PuTu8vICt zuuXuPNc/xd63b4xKD5BXNYzH0sn1nUo -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:16 2025 by rpki-client