$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: lDEI1w0o5QVWvl8uHiNL5hkBRT0tl6GDQq6iE8wE3xU= Subject key identifier: EA:9F:E8:00:8A:2A:71:AE:52:13:93:43:E2:E6:AB:3F:03:D6:27:66 Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 08ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 08E1 Signing time: Sun 10 Aug 2025 20:25:05 +0000 Manifest this update: Sun 10 Aug 2025 20:25:05 +0000 Manifest next update: Sun 17 Aug 2025 20:25:05 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: //ji5tc+5WsAHZwnhwiPBFhpJgA8zwclODfU2ju8O3s=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2285 (0x8ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: Aug 10 20:25:05 2025 GMT Not After : Aug 17 20:25:05 2025 GMT Subject: CN=68990021-c08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1a:81:66:c9:cd:21:30:bd:e8:25:2b:4f:22: 89:74:ad:a0:e9:2c:83:95:3c:3f:03:d3:02:56:30: 55:b4:f4:99:f7:12:53:af:4b:e8:68:4a:04:f8:33: 50:62:41:a1:ed:39:be:90:50:89:87:e6:bf:37:f3: c7:98:03:20:02:65:da:4e:72:6b:57:a5:9f:c4:de: ca:68:2c:ba:90:ce:5c:59:f6:8f:b5:31:6b:da:06: a1:29:25:46:6e:77:df:ad:cc:3c:65:40:24:48:be: 2b:55:1c:33:22:fc:4d:0d:c4:bc:80:79:44:41:87: db:08:a9:c9:2a:98:22:01:7a:1f:11:79:89:86:c0: a5:37:b8:ab:3b:0b:05:a4:a0:b2:3d:5e:f4:64:b6: ec:69:82:0f:aa:a7:c0:63:ad:e9:16:21:a4:31:70: 63:0d:5c:2b:5c:bf:90:ab:a0:8e:a6:1a:24:18:ae: aa:04:0f:bd:cb:5e:8d:2b:70:38:71:0b:0c:16:e4: bf:ab:ff:3c:33:f0:6c:38:e8:f9:7c:7b:19:2b:84: 30:81:7e:58:66:e0:0a:86:08:ef:50:77:a7:19:5e: 9d:0e:10:7e:37:c1:ef:89:68:12:53:e5:73:b4:9c: d6:51:76:19:93:d0:60:13:aa:89:a5:59:a0:6c:b2: 87:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9F:E8:00:8A:2A:71:AE:52:13:93:43:E2:E6:AB:3F:03:D6:27:66 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f9:68:d6:1c:2f:6d:db:45:9f:f2:ca:b3:1d:81:09:05:f0: 42:46:af:43:85:2f:d2:c4:3b:d3:59:b9:61:fc:34:28:1d:05: ba:e1:c8:3c:42:fa:d7:61:72:65:61:63:e5:70:29:e6:76:fc: fa:b7:10:31:58:4c:70:89:1b:37:44:42:ed:42:78:55:db:36: 0b:f0:61:7d:0b:dc:a0:ad:26:c8:0b:ff:bc:77:f8:9c:cd:fc: ab:85:ab:dd:92:68:7e:3b:5d:4c:8a:83:28:a2:84:3d:62:cc: 57:5f:79:09:12:cd:de:4f:1a:ef:e5:fc:ee:1b:a6:72:d7:77: 96:fc:56:47:5f:8d:12:73:28:e7:80:e5:16:fe:3a:63:29:b7: b4:17:3a:11:80:eb:f9:07:11:c6:ec:cc:32:6c:27:5a:69:9c: 50:19:b1:14:e1:c9:7e:1d:a2:d1:b9:10:af:2a:33:25:73:c2: 35:13:76:1a:2f:97:d5:96:8e:9f:89:fb:61:85:28:0b:05:7b: d7:7f:f6:f3:b7:d6:e7:9c:05:3c:78:0c:5b:c2:9a:87:da:07: f9:ca:58:55:b5:72:8d:d9:69:16:7e:e9:37:aa:ec:cf:0a:aa: 75:ab:a5:85:26:74:30:27:7f:d4:21:f0:69:6d:33:b8:0b:5b: 15:3a:3d:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjUwODEwMjAyNTA1WhcNMjUwODE3MjAyNTA1WjAYMRYwFAYD VQQDEw02ODk5MDAyMS1jMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hqBZsnNITC96CUrTyKJdK2g6SyDlTw/A9MCVjBVtPSZ9xJTr0voaEoE+DNQ YkGh7Tm+kFCJh+a/N/PHmAMgAmXaTnJrV6WfxN7KaCy6kM5cWfaPtTFr2gahKSVG bnffrcw8ZUAkSL4rVRwzIvxNDcS8gHlEQYfbCKnJKpgiAXofEXmJhsClN7irOwsF pKCyPV70ZLbsaYIPqqfAY63pFiGkMXBjDVwrXL+Qq6COphokGK6qBA+9y16NK3A4 cQsMFuS/q/88M/BsOOj5fHsZK4QwgX5YZuAKhgjvUHenGV6dDhB+N8HviWgSU+Vz tJzWUXYZk9BgE6qJpVmgbLKHCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqf6ACK KnGuUhOTQ+Lmqz8D1idmMB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ+WjWHC9t20Wf8sqzHYEJBfBCRq9DhS/SxDvTWblh/DQoHQW64cg8 QvrXYXJlYWPlcCnmdvz6txAxWExwiRs3RELtQnhV2zYL8GF9C9ygrSbIC/+8d/ic zfyrhavdkmh+O11MioMoooQ9YsxXX3kJEs3eTxrv5fzuG6Zy13eW/FZHX40Scyjn gOUW/jpjKbe0FzoRgOv5BxHG7MwybCdaaZxQGbEU4cl+HaLRuRCvKjMlc8I1E3Ya L5fVlo6fifthhSgLBXvXf/bzt9bnnAU8eAxbwpqH2gf5ylhVtXKN2WkWfuk3quzP Cqp1q6WFJnQwJ3/UIfBpbTO4C1sVOj3q -----END CERTIFICATE-----Generated at Mon Aug 11 04:21:23 2025 by rpki-client