$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json) Hash identifier: 03wLk8K7HJ0r2QTfP4uM2zdzJHjsmhhX6fNx0EO1zVk= Subject key identifier: C5:29:FB:B1:74:D7:78:A3:69:2C:3E:6B:B7:CD:12:CC:ED:35:02:09 Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft Manifest number: 0221 Signing time: Mon 21 Jul 2025 02:15:46 +0000 Manifest this update: Mon 21 Jul 2025 02:15:45 +0000 Manifest next update: Mon 28 Jul 2025 02:15:45 +0000 Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: uCqBvpZ4mDGEg8HJs0R0zk//BBaHaLACmJAcUgllA/s=) 2: 58CA2F840D3E11F08AA20980C4F9AE02.roa (hash: o3WxnMuTVoZ5sDv98g86AWu9+ZVPEihcJKRFXeclwGE=) 3: ABBB590C0D3E11F081E68E80C4F9AE02.roa (hash: 21Xud0yuR+X8V9kV1r27e1DSMw9xVQDdRdNBmOLAKOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: Jul 21 02:15:45 2025 GMT Not After : Jul 28 02:15:45 2025 GMT Subject: CN=687da2d1-b691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:9f:14:68:e3:82:f6:ba:32:d1:45:db:e4: d5:c0:a2:7f:d6:d2:05:48:74:23:74:0e:f1:d7:da: 8e:0c:b5:c3:b0:55:2f:47:1c:98:e7:a9:43:9e:61: 61:a2:66:e9:3e:64:ca:79:99:f6:dc:45:f9:06:71: 2c:71:b9:85:d3:91:7e:74:1b:2e:f9:58:d4:76:50: 0d:d8:73:07:58:fb:2d:2a:aa:32:6b:a4:cd:09:33: 81:e2:48:f1:91:ca:82:cb:3d:3a:36:67:5f:70:71: c8:85:84:ec:02:9c:a0:19:3e:af:d4:f2:ee:56:05: f8:30:ce:d1:cd:f2:01:c3:39:d9:77:ef:4b:25:ab: 75:42:5c:21:8a:3c:c6:62:02:c9:40:0f:86:16:9a: fe:70:d0:d7:f1:1e:7a:bc:07:70:f9:23:80:c6:d7: 40:64:8a:11:1d:9c:9d:c6:a9:14:6f:49:02:9b:74: 53:83:df:d1:25:1f:71:ff:25:2a:04:17:d5:81:72: 68:1a:df:17:b8:b2:09:08:ec:0b:4d:07:a9:66:86: 0e:d6:a2:a7:8c:10:d5:d0:3c:1d:16:3f:a4:23:61: 78:6a:98:a9:15:8c:ab:52:5c:fb:51:21:4d:a5:0e: 3b:26:d6:f9:89:34:79:00:12:b5:1d:83:2c:17:10: 42:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:29:FB:B1:74:D7:78:A3:69:2C:3E:6B:B7:CD:12:CC:ED:35:02:09 X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:3b:f0:01:91:ed:ac:c2:f8:95:1c:52:d0:bc:cc:27:c5:40: 1c:ca:3c:bd:0b:3a:c0:9e:49:70:93:04:d4:b7:9f:78:92:b8: d0:ac:7d:59:b9:8d:53:7a:64:1f:3f:70:e6:23:71:09:81:81: c2:d6:4b:f0:6e:95:2f:22:09:c7:6b:6a:54:d6:2c:58:92:54: e0:ce:10:18:0e:c3:61:75:51:00:e2:d4:bd:e5:78:98:c3:26: 58:ee:de:5c:ec:63:57:82:4e:2e:cf:4b:a8:7a:2f:44:15:d1: 7c:4a:34:cb:36:ae:33:3b:2e:06:0e:a4:80:b8:e4:53:66:34: aa:11:f3:76:0c:7a:b8:df:72:46:5d:d7:75:24:9e:fd:51:64: 51:65:53:de:c8:0a:4e:cf:08:fb:a5:50:35:bd:de:55:18:3d: 69:c1:4b:7e:8f:fb:a3:8f:45:a2:4c:f6:28:84:c9:5c:d9:10: 13:a9:d7:a4:18:5e:49:5e:e0:16:57:8d:0a:d2:d3:d9:7a:38: af:8a:0c:d6:f6:87:ff:7f:c6:06:fa:35:8c:b5:9b:d5:f0:7e: 86:de:65:37:aa:f5:34:dc:a3:ef:1f:5b:91:eb:61:dd:af:23: 8b:c4:5d:f3:6f:5e:1a:6e:90:93:97:bc:d1:e5:a8:66:0f:69: eb:5b:cb:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjUwNzIxMDIxNTQ1WhcNMjUwNzI4MDIxNTQ1WjAYMRYwFAYD VQQDEw02ODdkYTJkMS1iNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6OfFGjjgva6MtFF2+TVwKJ/1tIFSHQjdA7x19qODLXDsFUvRxyY56lDnmFh ombpPmTKeZn23EX5BnEscbmF05F+dBsu+VjUdlAN2HMHWPstKqoya6TNCTOB4kjx kcqCyz06NmdfcHHIhYTsApygGT6v1PLuVgX4MM7RzfIBwznZd+9LJat1QlwhijzG YgLJQA+GFpr+cNDX8R56vAdw+SOAxtdAZIoRHZydxqkUb0kCm3RTg9/RJR9x/yUq BBfVgXJoGt8XuLIJCOwLTQepZoYO1qKnjBDV0DwdFj+kI2F4apipFYyrUlz7USFN pQ47Jtb5iTR5ABK1HYMsFxBCQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUp+7F0 13ijaSw+a7fNEsztNQIJMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkFENi9ENjRGNEU5QzNBRjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6 LUY2cjNRcXRhQlVqbFM1bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYO/ABke2swviVHFLQvMwnxUAcyjy9CzrAnklwkwTUt594krjQrH1Z uY1TemQfP3DmI3EJgYHC1kvwbpUvIgnHa2pU1ixYklTgzhAYDsNhdVEA4tS95XiY wyZY7t5c7GNXgk4uz0uoei9EFdF8SjTLNq4zOy4GDqSAuORTZjSqEfN2DHq433JG Xdd1JJ79UWRRZVPeyApOzwj7pVA1vd5VGD1pwUt+j/ujj0WiTPYohMlc2RATqdek GF5JXuAWV40K0tPZejivigzW9of/f8YG+jWMtZvV8H6G3mU3qvU03KPvH1uR62Hd ryOLxF3zb14abpCTl7zR5ahmD2nrW8tQ -----END CERTIFICATE-----Generated at Mon Jul 21 05:50:30 2025 by rpki-client