$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft File: UzfctqkbQdUhGkTCFqljq6zH4rA.mft (raw, json) Hash identifier: eTY64LSmYlGfTBcLpKizikmUIotYw6TqgeyO/3WPuuo= Subject key identifier: F8:AD:37:29:0D:B8:65:8A:56:51:73:7C:BB:6A:E0:D3:65:FC:EC:87 Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 Certificate issuer: /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Certificate serial: 34C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft Manifest number: 34B6 Signing time: Fri 08 Aug 2025 14:47:07 +0000 Manifest this update: Fri 08 Aug 2025 14:47:07 +0000 Manifest next update: Fri 15 Aug 2025 14:47:07 +0000 Files and hashes: 1: UzfctqkbQdUhGkTCFqljq6zH4rA.crl (hash: 05B7qUnPW32KhRIFreKQM8ajxRPi98irbQjZVJoYaSQ=) 2: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (hash: dOS+EBN8T4gv4pfAW5HZ87ld30CEjTabsXZtn+f9BiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13504 (0x34c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Validity Not Before: Aug 8 14:47:07 2025 GMT Not After : Aug 15 14:47:07 2025 GMT Subject: CN=68960deb-a98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:af:c3:39:17:d1:d1:5c:88:f4:40:a6:a2: e1:ab:bc:2f:cb:5d:9f:c0:3d:96:9a:02:f2:96:91: ca:3e:ac:65:75:dd:5d:7c:be:c5:39:c9:9d:82:3a: d1:a6:f9:8f:6f:9c:dd:3e:f4:6c:e1:34:8b:d7:94: 19:9f:65:19:a4:0c:a6:7b:19:56:9d:f9:2f:5b:b4: 22:4d:b2:85:00:3e:61:40:6c:df:ba:d9:97:f1:02: d4:a3:b8:48:ff:13:1f:e9:17:ed:f8:97:f4:6e:2e: 6a:b1:86:ac:c6:06:61:29:65:34:8e:5a:6f:33:ac: 04:e2:ce:38:3c:b9:dc:e3:11:c5:92:67:09:48:e2: fb:be:fb:6d:d2:9e:c5:ae:fb:3b:a5:9c:ee:42:dc: bc:86:a8:20:ee:17:f1:9c:63:5f:e2:ef:6b:e7:c1: 13:f2:fe:f9:90:ba:a6:d6:63:8f:0e:3e:cd:ad:2b: 9c:b1:08:e3:50:98:2b:74:72:5a:ac:f6:7f:02:4e: 26:d2:ad:a2:b2:d8:2f:26:ac:1e:48:38:e8:12:5d: 51:04:20:7f:9b:de:fb:3b:be:07:c8:61:57:4a:61: 8b:8c:52:0b:b5:25:cd:fa:88:6e:6b:80:83:c0:27: 27:27:1b:a5:ae:8a:5b:88:f9:cf:c9:0f:4c:5f:3f: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AD:37:29:0D:B8:65:8A:56:51:73:7C:BB:6A:E0:D3:65:FC:EC:87 X509v3 Authority Key Identifier: keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:64:e2:11:56:4e:dc:e8:32:8d:e5:b3:bd:0c:36:24:58:d8: 99:7c:3e:65:3c:e3:b0:a4:82:66:bb:9c:6f:f4:30:ec:d6:30: 8e:25:6a:8c:fd:34:ec:e5:08:6d:46:1b:bd:4b:77:e5:50:11: f9:1a:48:bc:21:f6:a6:cd:0c:80:63:53:99:b6:ec:e7:39:e4: af:c3:15:11:b8:bb:c0:22:62:37:c2:11:6a:5d:de:83:8e:05: 02:62:ac:c7:33:68:70:69:d4:e4:e1:c7:15:0b:60:42:ed:8c: 4e:17:25:d0:dc:49:67:c1:20:15:43:b6:e0:66:ed:63:fa:55: 50:8a:6d:3f:b6:ee:d5:65:90:d2:96:a1:7f:5e:84:fd:f4:30: 64:f8:60:bc:56:d2:ec:b8:56:a6:fc:40:74:9c:8d:dd:a1:b0: dc:f8:a3:fa:f0:d7:de:b9:9f:d9:64:a2:99:5b:6f:f4:b2:44: 8b:9f:29:ac:49:d0:54:0f:f0:e3:cb:34:95:db:a3:7e:14:59: e0:1a:9d:40:c9:28:49:61:e8:b1:6e:e7:31:60:3a:d1:09:6f: 83:6c:d1:73:3d:f6:68:0b:1e:5e:06:7d:ef:58:23:ad:9d:bb: 21:45:cf:de:f9:e4:19:bd:8e:2c:68:90:71:c1:42:d7:e3:0d: 1b:72:50:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkMxMTAvBgNVBAUTKDUzMzdEQ0I2QTkxQjQxRDUyMTFBNDRDMjE2QTk2M0FC QUNDN0UyQjAwHhcNMjUwODA4MTQ0NzA3WhcNMjUwODE1MTQ0NzA3WjAYMRYwFAYD VQQDEw02ODk2MGRlYi1hOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMWvwzkX0dFciPRApqLhq7wvy12fwD2WmgLylpHKPqxldd1dfL7FOcmdgjrR pvmPb5zdPvRs4TSL15QZn2UZpAymexlWnfkvW7QiTbKFAD5hQGzfutmX8QLUo7hI /xMf6Rft+Jf0bi5qsYasxgZhKWU0jlpvM6wE4s44PLnc4xHFkmcJSOL7vvtt0p7F rvs7pZzuQty8hqgg7hfxnGNf4u9r58ET8v75kLqm1mOPDj7NrSucsQjjUJgrdHJa rPZ/Ak4m0q2istgvJqweSDjoEl1RBCB/m977O74HyGFXSmGLjFILtSXN+ohua4CD wCcnJxulropbiPnPyQ9MXz/NgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPitNykN uGWKVlFzfLtq4NNl/OyHMB8GA1UdIwQYMBaAFFM33LapG0HVIRpEwhapY6usx+Kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCQy8zNzMwODM4MDFE OTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFkVWhHa1RDRnFsanE2ekg0 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6ZmN0cWtiUWRVaEdrVENGcWxqcTZ6SDRyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCQy8zNzMwODM4MDFEOTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFk VWhHa1RDRnFsanE2ekg0ckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANZOIRVk7c6DKN5bO9DDYkWNiZfD5lPOOwpIJmu5xv9DDs1jCOJWqM /TTs5QhtRhu9S3flUBH5Gki8IfamzQyAY1OZtuznOeSvwxURuLvAImI3whFqXd6D jgUCYqzHM2hwadTk4ccVC2BC7YxOFyXQ3ElnwSAVQ7bgZu1j+lVQim0/tu7VZZDS lqF/XoT99DBk+GC8VtLsuFam/EB0nI3dobDc+KP68NfeuZ/ZZKKZW2/0skSLnyms SdBUD/DjyzSV26N+FFngGp1AyShJYeixbucxYDrRCW+DbNFzPfZoCx5eBn3vWCOt nbshRc/e+eQZvY4saJBxwULX4w0bclDV -----END CERTIFICATE-----Generated at Sun Aug 10 05:47:00 2025 by rpki-client