$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft File: UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json) Hash identifier: XFw4A6bv4O6AK+wYL8YShU6Lz1Yv/DQjEqmlhtQDEmw= Subject key identifier: 6A:45:B6:0B:0E:24:30:91:36:29:60:9C:CA:80:1A:61:84:10:D4:9F Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 Certificate issuer: /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Certificate serial: 0C06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft Manifest number: 0BFF Signing time: Sun 20 Jul 2025 18:50:02 +0000 Manifest this update: Sun 20 Jul 2025 18:50:01 +0000 Manifest next update: Sun 27 Jul 2025 18:50:01 +0000 Files and hashes: 1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: xo9U/nMsA8dZQf7iup9XGR/0koe9a80DZqNbkIKYT04=) 2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: 44EICOrdULHxxmbJqfrzipdifGEHemkJ/PfPJGyHNtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3078 (0xc06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Validity Not Before: Jul 20 18:50:01 2025 GMT Not After : Jul 27 18:50:01 2025 GMT Subject: CN=687d3a5a-dd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:83:3c:ce:ca:5e:65:5e:9c:4d:91:b9:10: b9:fe:e7:d4:31:77:69:8d:83:5c:18:65:92:7e:af: c1:e9:47:0b:a4:ea:17:71:55:3a:1c:7f:86:a6:d4: aa:6e:29:62:f2:9f:2b:0d:be:85:d3:2c:62:37:af: 55:05:22:6a:32:e4:a4:44:4a:14:35:32:fe:90:e5: 8e:e4:ba:66:74:3a:d8:cc:fb:16:78:2c:16:a4:f8: d7:49:e0:ba:e0:c0:01:25:12:59:7d:7c:52:51:6d: dd:b4:cb:80:76:2f:d4:af:ca:40:8e:ec:2e:ce:b7: 77:3d:90:da:d1:2f:d5:64:79:b2:0b:95:bf:64:15: 33:7f:e1:7a:31:d2:90:ef:88:5f:c9:ae:f5:25:d7: 5c:a6:a1:0a:7f:3c:9b:15:0d:7c:50:87:14:2f:a3: 29:fe:06:24:01:f8:92:c5:94:2b:ca:13:d7:5b:22: f8:51:e4:12:d8:d5:a5:91:d2:b0:1f:f2:65:6f:34: 8f:58:ca:56:08:4d:98:25:dc:4f:19:c2:34:ea:91: 59:9b:e5:cf:14:8d:2d:65:08:d5:9b:af:46:a9:81: c2:1a:c2:68:03:ce:b3:5f:c4:44:20:90:b3:9c:40: 2d:49:a4:46:d0:93:2b:4c:0d:b3:d5:af:0b:3b:f1: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:45:B6:0B:0E:24:30:91:36:29:60:9C:CA:80:1A:61:84:10:D4:9F X509v3 Authority Key Identifier: keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:b4:6a:09:2f:8d:d1:3f:85:e3:a0:60:dc:dd:67:00:87:dd: d9:c9:4c:d6:5a:fb:ad:ba:10:9c:37:99:22:3f:30:21:6b:4d: 04:d3:a3:70:51:49:1d:4b:9d:61:00:cb:12:a2:67:b2:0b:04: a2:b0:97:01:81:9b:f6:db:b8:9c:f1:c8:32:56:39:a4:ec:76: 13:d9:dd:83:cc:27:81:93:de:67:e6:62:d0:03:ea:7e:f6:ee: 97:ea:aa:d4:6e:8f:94:eb:9a:4c:fc:ce:d1:a1:fe:bc:9e:32: 0c:0b:81:a1:d0:91:70:0b:01:f5:a8:35:02:31:bd:b7:83:d8: 8a:40:46:07:ec:0d:51:8b:0b:fb:8a:84:29:9e:6f:92:61:1b: a6:b7:7c:8b:43:9d:09:10:b4:6f:2d:e1:62:5c:e2:b3:de:5f: 85:b4:fe:ab:fb:01:ba:97:f8:f9:10:0b:64:0d:f8:2e:8e:16: de:09:3c:d9:c9:83:b8:7f:4d:72:88:1e:2b:63:13:82:55:da: 52:53:5f:8c:4b:bd:a2:da:86:1c:0a:78:a7:53:3c:66:27:e7: 68:49:55:72:3a:6b:ac:9a:cd:15:dc:4f:19:fb:a1:d9:f0:2d: 17:ec:21:b7:00:82:a4:da:2a:3d:94:b9:0a:99:16:47:1f:83: d3:eb:1a:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MDMxMTAvBgNVBAUTKDUwN0EwRUFGNDc1MUFDQjUyQzJDN0ZCRjk4MUQxMUJD RTgzNThCQTEwHhcNMjUwNzIwMTg1MDAxWhcNMjUwNzI3MTg1MDAxWjAYMRYwFAYD VQQDEw02ODdkM2E1YS1kZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmg6DPM7KXmVenE2RuRC5/ufUMXdpjYNcGGWSfq/B6UcLpOoXcVU6HH+GptSq bili8p8rDb6F0yxiN69VBSJqMuSkREoUNTL+kOWO5LpmdDrYzPsWeCwWpPjXSeC6 4MABJRJZfXxSUW3dtMuAdi/Ur8pAjuwuzrd3PZDa0S/VZHmyC5W/ZBUzf+F6MdKQ 74hfya71JddcpqEKfzybFQ18UIcUL6Mp/gYkAfiSxZQryhPXWyL4UeQS2NWlkdKw H/JlbzSPWMpWCE2YJdxPGcI06pFZm+XPFI0tZQjVm69GqYHCGsJoA86zX8REIJCz nEAtSaRG0JMrTA2z1a8LO/F/1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpFtgsO JDCRNilgnMqAGmGEENSfMB8GA1UdIwQYMBaAFFB6Dq9HUay1LCx/v5gdEbzoNYuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgwMy9EODZBQkYwMDE3 NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJMVXNMSC1fbUIwUnZPZzFp NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIb09yMGRSckxVc0xILV9tQjBSdk9nMWk2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgwMy9EODZBQkYwMDE3NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJM VXNMSC1fbUIwUnZPZzFpNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2tGoJL43RP4XjoGDc3WcAh93ZyUzWWvutuhCcN5kiPzAha00E06Nw UUkdS51hAMsSomeyCwSisJcBgZv227ic8cgyVjmk7HYT2d2DzCeBk95n5mLQA+p+ 9u6X6qrUbo+U65pM/M7Rof68njIMC4Gh0JFwCwH1qDUCMb23g9iKQEYH7A1Riwv7 ioQpnm+SYRumt3yLQ50JELRvLeFiXOKz3l+FtP6r+wG6l/j5EAtkDfgujhbeCTzZ yYO4f01yiB4rYxOCVdpSU1+MS72i2oYcCninUzxmJ+doSVVyOmusms0V3E8Z+6HZ 8C0X7CG3AIKk2io9lLkKmRZHH4PT6xoL -----END CERTIFICATE-----Generated at Tue Jul 22 05:10:59 2025 by rpki-client