$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft File: uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json) Hash identifier: WFnx8s3OTleFedujQgLie9Pwz4wnxohqAFM/tpFveVs= Subject key identifier: FD:B5:11:50:08:18:14:B0:10:A7:75:4C:63:C9:01:78:B7:40:3B:D4 Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2 Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft Manifest number: 41 Signing time: Sat 09 Aug 2025 07:58:15 +0000 Manifest this update: Sat 09 Aug 2025 07:58:15 +0000 Manifest next update: Sat 16 Aug 2025 07:58:14 +0000 Files and hashes: 1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: 8l0dgqyXVjUIqcm2dToHSSdhhoHyD4nPRCFL6ZaCebs=) 2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: BmMWgtMQ3PCdQlZ5TlrzvWUUVUt35N0MZwh0nPjZPiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2 Validity Not Before: Aug 9 07:58:15 2025 GMT Not After : Aug 16 07:58:14 2025 GMT Subject: CN=6896ff97-9be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4a:b6:7e:b5:79:b6:7f:5f:c5:f9:12:93:68: 8e:c9:ea:3c:6a:2b:fa:bd:4c:de:44:39:43:94:f5: 52:42:53:40:d1:f2:59:88:c1:8c:3d:6c:10:ab:1b: af:1a:df:29:aa:bd:b3:8c:df:6c:40:0f:09:69:38: f6:bf:7c:ea:7e:38:c8:53:e2:d1:58:10:9f:f1:9d: 46:2a:7b:d7:9e:f3:d0:d2:22:3c:34:8f:3a:bb:24: de:0e:20:75:63:9c:2d:d6:aa:f3:01:49:1e:6e:ab: fc:35:70:3e:22:2c:66:57:52:7b:07:05:fc:c2:92: e0:bc:18:a8:13:5d:e1:7d:c5:bb:6a:00:53:b5:9a: 4d:47:fc:39:92:00:58:99:07:50:37:e9:be:09:d0: 9a:b4:80:14:8a:38:c5:ce:a8:1e:1d:4c:0b:18:b1: b1:ef:d4:92:86:45:19:95:72:fe:60:c3:dd:e4:7a: ef:2a:80:80:d9:8b:44:32:69:4b:2a:e2:47:64:83: 83:ef:da:09:a0:0a:8a:13:82:cd:e7:6e:de:89:40: 68:fb:7e:0c:2e:cf:a5:16:4d:4d:25:34:fa:97:fe: 8b:55:4d:0b:af:75:7e:31:7e:f2:9d:46:9b:69:90: d6:88:1b:8a:d1:b1:57:16:5d:ba:f3:85:a4:1c:f0: f3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B5:11:50:08:18:14:B0:10:A7:75:4C:63:C9:01:78:B7:40:3B:D4 X509v3 Authority Key Identifier: keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:2f:46:8a:b9:de:32:c6:39:b8:78:98:f7:ba:68:ac:cd:17: 0c:df:a7:a3:ae:f2:83:34:52:6b:df:7e:00:2c:15:a5:25:18: dd:55:f6:46:98:65:8f:ce:d3:e2:40:1a:d7:34:fe:a1:83:38: 6d:1d:30:2d:da:45:95:36:e6:97:15:c8:98:8d:86:5f:26:5c: f9:cb:05:be:78:e7:de:71:a3:cf:a5:a0:cb:46:62:c4:f2:ea: fb:97:e5:5f:59:f3:70:a3:32:6e:3e:84:f9:d7:ff:71:d7:f5: 33:96:11:99:8d:5d:8f:fb:f8:f3:fd:c9:c6:d1:fa:12:e0:1b: fa:30:bc:95:c6:85:3e:31:af:10:19:4a:78:7c:15:f1:06:1d: 11:c6:97:41:4e:e9:4c:8d:5f:57:58:ff:83:4f:75:f9:f9:e3: f8:28:ed:65:cd:f3:a1:2a:8d:e3:95:19:b4:f1:c1:b1:e4:1b: 57:bb:84:1c:48:b3:0a:2a:d0:26:d0:78:4a:a4:18:8e:05:31: ff:ff:f8:90:f5:57:d8:ea:c5:b2:2d:34:17:aa:e9:77:96:56: ac:d1:6c:e9:2f:4e:0e:45:72:1f:20:9b:b1:b4:7b:8f:10:99: 87:58:52:be:a8:dc:e8:59:0d:a8:65:28:59:06:01:56:d1:ed: 74:59:ae:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTAyMzExMC8GA1UEBRMoQjlDRDU3RTJGRjRGNThCQjk1OUE5NTQxQTMxQ0ZERjY2 OTc2MThCMjAeFw0yNTA4MDkwNzU4MTVaFw0yNTA4MTYwNzU4MTRaMBgxFjAUBgNV BAMTDTY4OTZmZjk3LTliZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2SrZ+tXm2f1/F+RKTaI7J6jxqK/q9TN5EOUOU9VJCU0DR8lmIwYw9bBCrG68a 3ymqvbOM32xADwlpOPa/fOp+OMhT4tFYEJ/xnUYqe9ee89DSIjw0jzq7JN4OIHVj nC3WqvMBSR5uq/w1cD4iLGZXUnsHBfzCkuC8GKgTXeF9xbtqAFO1mk1H/DmSAFiZ B1A36b4J0Jq0gBSKOMXOqB4dTAsYsbHv1JKGRRmVcv5gw93keu8qgIDZi0QyaUsq 4kdkg4Pv2gmgCooTgs3nbt6JQGj7fgwuz6UWTU0lNPqX/otVTQuvdX4xfvKdRptp kNaIG4rRsVcWXbrzhaQc8POvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/bURUAgY FLAQp3VMY8kBeLdAO9QwHwYDVR0jBBgwFoAUuc1X4v9PWLuVmpVBoxz99ml2GLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMDIzL0E2NTRGRUYwMTEx QzExRjBCMTVBRjk3MEM0RjlBRTAyL3VjMVg0djlQV0x1Vm1wVkJveHo5OW1sMkdM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWMxWDR2OVBXTHVWbXBWQm94ejk5bWwyR0xJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MDIzL0E2NTRGRUYwMTExQzExRjBCMTVBRjk3MEM0RjlBRTAyL3VjMVg0djlQV0x1 Vm1wVkJveHo5OW1sMkdMSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALYvRoq53jLGObh4mPe6aKzNFwzfp6Ou8oM0UmvffgAsFaUlGN1V9kaY ZY/O0+JAGtc0/qGDOG0dMC3aRZU25pcVyJiNhl8mXPnLBb54595xo8+loMtGYsTy 6vuX5V9Z83CjMm4+hPnX/3HX9TOWEZmNXY/7+PP9ycbR+hLgG/owvJXGhT4xrxAZ Snh8FfEGHRHGl0FO6UyNX1dY/4NPdfn54/go7WXN86EqjeOVGbTxwbHkG1e7hBxI swoq0CbQeEqkGI4FMf//+JD1V9jqxbItNBeq6XeWVqzRbOkvTg5Fch8gm7G0e48Q mYdYUr6o3OhZDahlKFkGAVbR7XRZrk8= -----END CERTIFICATE-----Generated at Sun Aug 10 13:54:09 2025 by rpki-client