$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: gemOg5mIQ8U/LZB4F9hWH1JvGnvTxCxkIjJBHHvQtNY= Subject key identifier: 1D:0D:B1:F9:57:96:D4:7F:7A:7F:6E:51:3C:EA:1F:49:A1:9F:89:65 Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0BC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0BC2 Signing time: Fri 18 Jul 2025 19:05:00 +0000 Manifest this update: Fri 18 Jul 2025 19:04:59 +0000 Manifest next update: Fri 25 Jul 2025 19:04:59 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: coWMaxdaLOa+cRlzlDFfk9+zoVEaEnoAE/F7I9jjyv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3010 (0xbc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: Jul 18 19:04:59 2025 GMT Not After : Jul 25 19:04:59 2025 GMT Subject: CN=687a9adc-7307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1e:c1:0c:9d:2d:54:78:ba:70:68:fb:75:15: bd:12:a8:92:55:36:20:da:dd:7e:e8:ee:69:20:16: 59:0d:83:69:70:a6:c8:ab:43:f9:ce:ac:ad:44:49: f1:4e:64:8f:da:47:39:ca:57:5c:1a:17:5b:0f:1f: cc:dc:8a:c0:47:da:0c:85:83:14:07:e4:89:65:7c: d0:7b:9f:13:d3:9b:7a:f2:4c:8b:a5:eb:f9:b4:12: 53:2a:96:97:0b:b6:c1:dc:9f:cc:3b:58:86:fd:7b: 6d:cf:05:5a:ce:ce:ff:e6:04:b8:83:d3:83:da:3f: a7:f1:6b:65:5d:98:b1:f8:61:a6:35:31:65:b7:23: 89:b9:13:c1:14:0f:35:4c:6f:8d:4a:6c:0a:a5:36: 3a:7f:1a:93:64:f1:13:e8:68:a3:86:db:65:8d:40: bd:bc:a6:39:0e:a7:fa:b3:db:45:9d:87:a0:f7:ce: 9e:2b:3e:33:6c:fa:2f:f9:18:e3:85:05:45:3b:3e: 03:6c:bc:63:55:60:8a:e9:db:17:88:bb:d8:9f:62: 85:01:4b:a0:d4:f2:e1:e0:ca:21:f5:5b:c8:36:65: 63:68:60:9d:cc:7d:22:11:ef:11:11:a3:9e:8a:e5: 93:ad:02:30:e0:28:ed:d9:c3:c3:7e:28:92:8b:f9: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0D:B1:F9:57:96:D4:7F:7A:7F:6E:51:3C:EA:1F:49:A1:9F:89:65 X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ab:32:82:0a:17:20:9e:c4:8c:23:d8:93:ba:de:7f:fd:d4: c1:ad:7f:a5:9e:f9:0d:af:8a:ae:61:ae:bc:dc:49:36:b0:70: 83:e0:d2:0e:4c:12:cc:fd:a6:07:80:f1:2a:0c:6a:27:92:3c: b4:0e:52:87:bf:97:bc:d6:0c:e9:d4:b3:54:ad:bb:f8:36:bf: 2a:44:12:f6:30:e5:c8:7d:89:77:bb:96:3c:83:74:14:98:14: a5:d1:73:c0:41:ce:f0:3c:af:33:0b:4e:8e:01:d9:8b:30:4b: 62:94:a0:c3:2f:91:be:c3:31:ef:d7:9d:04:e5:c1:aa:b4:33: 66:3a:2b:12:1a:cb:c4:90:13:7e:88:55:8c:b7:3b:c8:7c:f1: 2c:87:73:da:64:c7:14:5e:80:ba:cf:08:ed:4d:59:4b:2c:fc: d5:d6:4f:43:52:51:e8:71:25:4c:0d:82:66:9a:48:98:02:6f: 01:64:19:79:57:ca:ed:da:9e:e9:71:be:5a:17:a3:b5:19:c3: ef:0e:64:5d:eb:28:51:d4:90:16:0f:9a:a7:9c:3c:4a:00:25: 3d:81:ed:7f:05:b4:c7:14:ad:dd:41:45:06:7e:f1:90:0a:b6: 34:1e:03:16:86:c7:7d:7f:03:54:a4:b8:33:f0:4d:df:34:a0: a9:f7:e4:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjUwNzE4MTkwNDU5WhcNMjUwNzI1MTkwNDU5WjAYMRYwFAYD VQQDEw02ODdhOWFkYy03MzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApx7BDJ0tVHi6cGj7dRW9EqiSVTYg2t1+6O5pIBZZDYNpcKbIq0P5zqytREnx TmSP2kc5yldcGhdbDx/M3IrAR9oMhYMUB+SJZXzQe58T05t68kyLpev5tBJTKpaX C7bB3J/MO1iG/XttzwVazs7/5gS4g9OD2j+n8WtlXZix+GGmNTFltyOJuRPBFA81 TG+NSmwKpTY6fxqTZPET6GijhttljUC9vKY5Dqf6s9tFnYeg986eKz4zbPov+Rjj hQVFOz4DbLxjVWCK6dsXiLvYn2KFAUug1PLh4Moh9VvINmVjaGCdzH0iEe8REaOe iuWTrQIw4Cjt2cPDfiiSi/lOqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0NsflX ltR/en9uUTzqH0mhn4llMB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChqzKCChcgnsSMI9iTut5//dTBrX+lnvkNr4quYa683Ek2sHCD4NIO TBLM/aYHgPEqDGonkjy0DlKHv5e81gzp1LNUrbv4Nr8qRBL2MOXIfYl3u5Y8g3QU mBSl0XPAQc7wPK8zC06OAdmLMEtilKDDL5G+wzHv150E5cGqtDNmOisSGsvEkBN+ iFWMtzvIfPEsh3PaZMcUXoC6zwjtTVlLLPzV1k9DUlHocSVMDYJmmkiYAm8BZBl5 V8rt2p7pcb5aF6O1GcPvDmRd6yhR1JAWD5qnnDxKACU9ge1/BbTHFK3dQUUGfvGQ CrY0HgMWhsd9fwNUpLgz8E3fNKCp9+Q7 -----END CERTIFICATE-----Generated at Sun Jul 20 03:48:52 2025 by rpki-client