$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft File: uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json) Hash identifier: 6kwsea/nsa5xvzWzxOECiBeNyComY97xCEDPhVaMIgo= Subject key identifier: 5E:F9:C9:EA:E9:CC:95:ED:4E:10:DD:72:58:B7:AC:E0:A0:CD:EC:65 Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft Manifest number: 0653 Signing time: Fri 08 Aug 2025 23:01:07 +0000 Manifest this update: Fri 08 Aug 2025 23:01:07 +0000 Manifest next update: Fri 15 Aug 2025 23:01:07 +0000 Files and hashes: 1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: 1P9nk9t1XvmgqFmI8nlCRP+a3ucei8WCvxKGB/dQ7lI=) 2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: Y2zv5qoN2STM8iOeHa24FYyQDvrtP06yfpXTjv2gJRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Validity Not Before: Aug 8 23:01:07 2025 GMT Not After : Aug 15 23:01:07 2025 GMT Subject: CN=689681b3-2359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bb:54:c5:6f:0f:f6:84:3b:62:0d:38:5b:60: 08:ea:70:c9:0e:1f:b6:a5:e3:f4:97:6f:a5:bd:91: 0b:6a:3b:56:cb:2b:4b:75:cc:ba:8a:56:36:c0:3e: be:5a:5c:0f:4c:a1:6a:73:8c:f3:6f:dd:de:98:cb: 2e:ca:3e:e1:9a:bf:ff:51:97:f7:63:99:3e:da:38: 62:4f:24:2b:45:76:f7:a7:d3:1e:2f:71:e1:f6:ce: 2f:82:23:7e:50:44:8c:6e:91:b7:7a:76:7b:b3:2e: 34:b3:8b:a8:e2:fe:7e:7b:01:15:66:5e:64:70:6e: 7e:db:06:32:1d:bf:6d:a9:df:fc:da:05:c7:67:8e: be:96:99:22:a3:a6:da:b6:46:43:77:53:a9:47:4b: 6c:c0:e1:be:a5:39:86:df:f6:11:77:ed:48:71:1a: 16:7c:3c:0f:51:c4:2b:c5:e5:1e:83:5e:43:2f:f8: 77:c8:ca:f5:ec:52:c5:da:76:a6:ed:27:8b:51:b0: 54:da:4d:3c:25:ad:f8:47:e2:ce:bc:32:51:ca:32: 4c:39:78:2c:bd:9d:5e:e5:a9:94:3d:3c:b8:8d:04: 32:e4:6a:6b:9e:61:6f:e0:2d:1f:d8:33:ff:d8:25: ba:e8:c0:07:8a:2b:48:6a:66:37:37:dc:56:c3:5f: d1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F9:C9:EA:E9:CC:95:ED:4E:10:DD:72:58:B7:AC:E0:A0:CD:EC:65 X509v3 Authority Key Identifier: keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8e:85:64:3e:47:61:87:8d:27:3c:35:ab:b7:21:dd:54:bf: a8:17:f5:40:8d:06:64:28:02:78:5b:f0:e9:36:21:90:f9:5c: f2:20:fd:46:bc:e8:ef:46:89:ea:d9:8d:2f:c5:33:65:e3:56: 60:e4:30:e4:5a:37:d7:a5:b0:1d:02:6a:1d:15:89:ba:3a:70: c1:56:30:78:3c:53:e1:9b:3f:cf:6c:c2:d1:81:b1:cb:90:40: 78:2a:05:e6:82:02:97:a0:a5:39:65:f0:70:dd:f9:c2:f0:dd: 82:65:46:97:b4:81:cb:e3:68:23:50:eb:88:ee:a5:e5:9f:d7: 1a:9a:aa:c9:18:ac:46:6c:e3:00:5d:18:39:fa:ad:3e:b2:5b: 3b:2b:bb:b8:e1:9c:d1:e4:ca:9a:b3:18:b5:8d:5d:52:f8:e2: a5:fb:1c:64:2f:69:20:9c:1f:9a:1a:2a:f8:4b:f4:f1:31:ee: a6:99:c6:f2:f2:44:07:b3:6a:7e:3d:59:cf:13:d3:2f:ec:23: 3a:63:5e:11:1b:37:bc:1c:bd:7a:9d:f9:f1:1b:2e:05:6e:2e: 21:a4:0a:4a:88:9b:bd:82:df:09:d6:4b:60:bd:2d:bf:fa:1f: 37:13:ef:5e:a2:a0:c3:e6:88:cb:f0:7a:6f:e4:e5:50:fa:fa: a9:c6:d8:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy NkEwMjE3RTYwHhcNMjUwODA4MjMwMTA3WhcNMjUwODE1MjMwMTA3WjAYMRYwFAYD VQQDEw02ODk2ODFiMy0yMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rtUxW8P9oQ7Yg04W2AI6nDJDh+2peP0l2+lvZELajtWyytLdcy6ilY2wD6+ WlwPTKFqc4zzb93emMsuyj7hmr//UZf3Y5k+2jhiTyQrRXb3p9MeL3Hh9s4vgiN+ UESMbpG3enZ7sy40s4uo4v5+ewEVZl5kcG5+2wYyHb9tqd/82gXHZ46+lpkio6ba tkZDd1OpR0tswOG+pTmG3/YRd+1IcRoWfDwPUcQrxeUeg15DL/h3yMr17FLF2nam 7SeLUbBU2k08Ja34R+LOvDJRyjJMOXgsvZ1e5amUPTy4jQQy5GprnmFv4C0f2DP/ 2CW66MAHiitIamY3N9xWw1/RywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF75yerp zJXtThDdcli3rOCgzexlMB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2 OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDcyRC85OEJBNDZCNDk2OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5X dzNhRjhLdmpTdTRtb0NGLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+joVkPkdhh40nPDWrtyHdVL+oF/VAjQZkKAJ4W/DpNiGQ+VzyIP1G vOjvRonq2Y0vxTNl41Zg5DDkWjfXpbAdAmodFYm6OnDBVjB4PFPhmz/PbMLRgbHL kEB4KgXmggKXoKU5ZfBw3fnC8N2CZUaXtIHL42gjUOuI7qXln9camqrJGKxGbOMA XRg5+q0+sls7K7u44ZzR5Mqasxi1jV1S+OKl+xxkL2kgnB+aGir4S/TxMe6mmcby 8kQHs2p+PVnPE9Mv7CM6Y14RGze8HL16nfnxGy4Fbi4hpApKiJu9gt8J1ktgvS2/ +h83E+9eoqDD5ojL8Hpv5OVQ+vqpxtjZ -----END CERTIFICATE-----Generated at Sun Aug 10 04:29:16 2025 by rpki-client