$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft File: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json) Hash identifier: Fcn9yUZcSNpkyAhY5IS1DneMiuMQ2NPPV2axNTFLZK8= Subject key identifier: A9:77:0E:84:96:D7:EB:48:6E:C9:D8:12:F9:32:78:9F:D7:BE:17:6A Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft Manifest number: 0255 Signing time: Mon 21 Jul 2025 02:07:16 +0000 Manifest this update: Mon 21 Jul 2025 02:07:16 +0000 Manifest next update: Mon 28 Jul 2025 02:07:16 +0000 Files and hashes: 1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: k4xdiiaISnCJk+sy6F/qE1yfMWBaGDSpu0LAFxkzAkI=) 2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: J01BFnUaU0xtnZuM7Va9qQmT/vUQNXlVHCchEwi5LNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Validity Not Before: Jul 21 02:07:16 2025 GMT Not After : Jul 28 02:07:16 2025 GMT Subject: CN=687da0d4-fc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:a5:7d:44:0f:fd:07:8d:7c:2a:07:00:5b: 40:38:ff:a6:dd:8e:ea:89:e0:54:9e:67:6f:b3:b4: a1:86:7d:2c:a6:f8:c2:21:6e:75:f3:4d:28:9d:56: 70:b9:0e:a3:06:58:ac:8c:dc:a2:71:66:da:a0:96: 0f:bd:92:de:7d:dd:ff:b8:a0:cf:a7:71:30:54:88: f1:d5:ae:70:f1:87:76:5a:6e:bc:34:f3:0c:17:56: d1:55:02:1d:1e:7c:13:9f:28:05:7b:62:fe:d9:6f: 7c:9d:10:7e:9c:79:ce:21:d2:8a:60:6d:75:20:71: db:2a:d4:c7:71:80:3f:32:bc:a6:0a:43:63:6a:49: 33:f0:6f:10:58:24:86:ca:15:9e:34:9d:48:ed:ec: 71:18:be:56:cc:33:76:14:51:4e:25:c6:2d:ee:41: 77:8c:8f:4f:d8:8c:2c:7a:6e:24:e0:87:13:59:ed: a7:06:4d:83:b1:e3:78:d0:2c:92:bf:40:21:8a:57: 1f:44:ef:9b:c9:a0:90:46:f4:20:68:d2:cd:cf:18: 13:98:ab:16:69:34:70:ec:a7:50:43:62:ba:4f:6a: 3e:44:e6:98:56:0c:2f:8e:ad:35:fa:34:18:ce:80: ad:70:c0:93:b1:af:90:34:98:b0:12:df:c7:c4:b2: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:77:0E:84:96:D7:EB:48:6E:C9:D8:12:F9:32:78:9F:D7:BE:17:6A X509v3 Authority Key Identifier: keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:22:3c:81:e0:6f:a3:0d:53:af:64:61:d2:26:72:a4:a2:c1: b8:d2:06:73:65:e9:91:4c:e4:38:72:6e:9e:41:b2:e9:ca:46: 99:f2:d1:57:56:6d:54:36:78:0f:04:9d:8b:3a:a1:89:8b:94: f3:32:4a:83:4c:f4:00:11:95:a5:3b:72:66:82:43:87:63:66: df:e5:e6:ef:6b:a4:a4:73:4b:30:71:14:3a:0b:75:09:c7:56: 66:22:d4:24:9d:9b:d5:38:fe:8a:ee:2d:9a:54:6f:8f:41:bb: ed:44:85:7e:29:c6:d4:b0:ec:6d:98:6a:32:5d:40:fb:b5:3a: 37:41:27:0c:a4:76:bb:93:2e:5a:f3:1f:ef:6b:32:9a:00:45: a7:c3:cb:06:ac:a4:aa:39:bc:7b:c0:83:92:be:2b:89:4c:80: 35:4d:b2:6a:11:54:6d:ac:dd:34:e4:a5:d0:3b:66:62:94:2b: b2:20:9a:a4:f8:6d:d7:c7:3e:5a:01:84:fb:0a:ee:88:03:9b: fe:a9:c9:9e:e3:14:a7:f2:a9:8a:44:2f:54:38:48:20:f1:53: 56:46:29:7c:b1:af:62:0b:3c:f3:55:db:89:50:e7:00:1f:94: dc:86:6d:7e:8a:5e:f9:c1:50:3d:3a:fe:55:3d:17:34:6b:ad: 4b:4f:91:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEN0QxMTAvBgNVBAUTKDUyMjJBMTYxOURGRkYwNENCMDk3QkI1MTZBMDc0Q0NE MURBRkZDNzgwHhcNMjUwNzIxMDIwNzE2WhcNMjUwNzI4MDIwNzE2WjAYMRYwFAYD VQQDEw02ODdkYTBkNC1mYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuValfUQP/QeNfCoHAFtAOP+m3Y7qieBUnmdvs7Shhn0spvjCIW51800onVZw uQ6jBlisjNyicWbaoJYPvZLefd3/uKDPp3EwVIjx1a5w8Yd2Wm68NPMMF1bRVQId HnwTnygFe2L+2W98nRB+nHnOIdKKYG11IHHbKtTHcYA/MrymCkNjakkz8G8QWCSG yhWeNJ1I7exxGL5WzDN2FFFOJcYt7kF3jI9P2Iwsem4k4IcTWe2nBk2DseN40CyS v0AhilcfRO+byaCQRvQgaNLNzxgTmKsWaTRw7KdQQ2K6T2o+ROaYVgwvjq01+jQY zoCtcMCTsa+QNJiwEt/HxLIdXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKl3DoSW 1+tIbsnYEvkyeJ/XvhdqMB8GA1UdIwQYMBaAFFIioWGd//BMsJe7UWoHTM0dr/x4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ3RC9BMzM5NjMwRTI3 NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhFeXdsN3RSYWdkTXpSMnZf SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VpS2hZWjNfOEV5d2w3dFJhZ2RNelIydl9IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkQ3RC9BMzM5NjMwRTI3NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhF eXdsN3RSYWdkTXpSMnZfSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQIjyB4G+jDVOvZGHSJnKkosG40gZzZemRTOQ4cm6eQbLpykaZ8tFX Vm1UNngPBJ2LOqGJi5TzMkqDTPQAEZWlO3JmgkOHY2bf5ebva6Skc0swcRQ6C3UJ x1ZmItQknZvVOP6K7i2aVG+PQbvtRIV+KcbUsOxtmGoyXUD7tTo3QScMpHa7ky5a 8x/vazKaAEWnw8sGrKSqObx7wIOSviuJTIA1TbJqEVRtrN005KXQO2ZilCuyIJqk +G3Xxz5aAYT7Cu6IA5v+qcme4xSn8qmKRC9UOEgg8VNWRil8sa9iCzzzVduJUOcA H5Tchm1+il75wVA9Ov5VPRc0a61LT5E9 -----END CERTIFICATE-----Generated at Mon Jul 21 18:21:12 2025 by rpki-client