$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json) Hash identifier: utusoBkTLcL8SovnUN7hJh4m6WcjFVzG1Ujkvr36rKg= Subject key identifier: 7D:97:DD:77:5F:76:EB:3B:78:08:58:F1:6F:7D:73:4E:6A:E7:31:6D Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Certificate serial: 30C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft Manifest number: 30B2 Signing time: Wed 08 Oct 2025 15:26:51 +0000 Manifest this update: Wed 08 Oct 2025 15:26:49 +0000 Manifest next update: Wed 15 Oct 2025 15:26:49 +0000 Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: I3ZodnfnidcX5K4TP3HSeilpaDKQ2gaJFG4+U4V9tbI=) 2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ZrmmPRVPNdXmVUqASzwRt7WIJ8A+6EE3tmK84hv8/3g=) 3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: inEKK4l1A/n9MCoAdqgbUu3ySJUn1ofzfsmCuXBMLoQ=) 4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: b3tJCOFhrOxNwX+xrXj/RF8CaJdbbK6dUe5Fw9N8cng=) 5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: pqhARhh64EGCd2MgnNHnrxWDNycvjlNc8wDHcPRwifg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 15:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12484 (0x30c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Validity Not Before: Oct 8 15:26:49 2025 GMT Not After : Oct 15 15:26:49 2025 GMT Subject: CN=68e682ba-ecdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:64:1d:1a:d5:35:0b:08:ee:56:dc:d9:8d: 36:bc:2e:1b:14:ba:e7:a5:e6:d5:84:4d:4a:fb:aa: 78:99:ac:22:b0:04:0b:85:08:3b:3b:57:a6:49:c7: 79:bf:d0:9e:08:b4:3b:33:84:12:d5:ee:24:a4:78: 0d:9f:b6:8b:a7:a2:17:bc:5e:ff:f4:4b:d4:90:6d: a0:29:1e:f3:d6:16:da:45:89:af:9e:8d:4f:51:fd: 21:75:78:8d:22:23:ff:da:2c:e4:65:23:c0:95:4b: be:12:02:4d:00:77:4d:df:f9:3d:11:73:ab:c9:49: b4:b2:c4:f6:8f:4a:d5:e7:06:02:6a:10:e0:f3:36: b0:95:4b:4d:b0:c7:29:ee:b3:75:99:cc:57:15:53: 5b:da:4e:b6:14:29:f5:0c:8c:12:a7:ce:30:42:53: b7:67:50:6f:e6:a7:e1:24:83:97:28:c4:3d:75:d6: 98:fa:c7:92:1c:f7:79:e4:64:c1:c6:6b:a4:f3:94: fd:86:59:e2:69:c3:ba:83:d3:8c:c1:60:9c:d8:e4: ca:e1:1b:85:35:0a:82:f0:69:13:39:5e:92:b9:9e: bd:09:ca:96:19:a3:56:c4:e0:50:a7:ee:c3:95:a2: 92:95:1d:f5:e7:19:d1:d0:78:ee:49:49:bb:d5:fc: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:97:DD:77:5F:76:EB:3B:78:08:58:F1:6F:7D:73:4E:6A:E7:31:6D X509v3 Authority Key Identifier: keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:32:5f:9f:22:9e:3c:1a:5c:f8:ea:12:b1:8a:2c:2a:ba:9f: 77:93:45:d5:4a:16:48:02:93:c7:a3:56:11:ee:4f:b0:2d:ae: 88:7d:73:27:1c:03:a5:52:7e:bb:ae:26:f9:43:e4:c5:57:9e: c5:b2:06:99:3d:ad:a3:90:35:f2:c2:8b:64:1a:34:0f:ed:27: 33:2c:d1:99:53:aa:a4:ee:d4:32:34:14:93:2d:a4:f8:e7:bf: 9f:e4:74:69:dd:e0:7c:ec:3d:ca:1f:79:da:83:83:5d:b6:60: 68:b7:b6:23:10:00:52:47:bd:ee:cb:7f:e1:d7:3c:1a:a7:33: 58:db:07:a9:e4:d2:5e:5a:14:e7:9d:50:0d:7c:70:e9:02:c6: 0d:cb:75:55:14:d2:6d:4d:a1:e2:8f:5d:80:e2:af:c9:03:f2: ce:44:a1:2c:c1:35:bd:69:bb:53:50:b4:a6:e7:86:d2:74:dd: 15:a6:dc:32:13:3d:31:eb:91:eb:49:be:d2:14:1e:07:2b:b8: 9f:15:d4:9f:d3:d7:11:9f:53:54:ee:af:ca:3b:d1:03:f7:63: 15:47:61:10:cd:3f:49:5c:ba:f0:b7:a6:33:be:03:a6:2e:ff: f2:a2:e2:1d:8b:23:de:be:c9:dc:41:ca:fd:84:f6:cd:47:3d: 61:10:e5:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1 QjMxMkMwNkYwHhcNMjUxMDA4MTUyNjQ5WhcNMjUxMDE1MTUyNjQ5WjAYMRYwFAYD VQQDEw02OGU2ODJiYS1lY2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNBkHRrVNQsI7lbc2Y02vC4bFLrnpebVhE1K+6p4mawisAQLhQg7O1emScd5 v9CeCLQ7M4QS1e4kpHgNn7aLp6IXvF7/9EvUkG2gKR7z1hbaRYmvno1PUf0hdXiN IiP/2izkZSPAlUu+EgJNAHdN3/k9EXOryUm0ssT2j0rV5wYCahDg8zawlUtNsMcp 7rN1mcxXFVNb2k62FCn1DIwSp84wQlO3Z1Bv5qfhJIOXKMQ9ddaY+seSHPd55GTB xmuk85T9hlniacO6g9OMwWCc2OTK4RuFNQqC8GkTOV6SuZ69CcqWGaNWxOBQp+7D laKSlR315xnR0HjuSUm71fwf7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2X3Xdf dus7eAhY8W99c05q5zFtMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF dG9vUndpMm44NlpiTVN3RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLMl+fIp48Glz46hKxiiwqup93k0XVShZIApPHo1YR7k+wLa6IfXMn HAOlUn67rib5Q+TFV57FsgaZPa2jkDXywotkGjQP7SczLNGZU6qk7tQyNBSTLaT4 57+f5HRp3eB87D3KH3nag4NdtmBot7YjEABSR73uy3/h1zwapzNY2wep5NJeWhTn nVANfHDpAsYNy3VVFNJtTaHij12A4q/JA/LORKEswTW9abtTULSm54bSdN0Vptwy Ez0x65HrSb7SFB4HK7ifFdSf09cRn1NU7q/KO9ED92MVR2EQzT9JXLrwt6YzvgOm Lv/youIdiyPevsncQcr9hPbNRz1hEOW0 -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:37 2025 by rpki-client