$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft File: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft (raw, json) Hash identifier: nKVBgyOH6Q5fwnmVysgKQHgBDq0pyklxIadIYAVt2Ao= Subject key identifier: CE:61:D4:20:4C:84:41:87:D8:39:0E:66:54:03:1F:17:46:75:F0:F4 Authority key identifier: 53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE Certificate issuer: /CN=A913DC32/serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft Manifest number: 46 Signing time: Mon 21 Jul 2025 07:37:30 +0000 Manifest this update: Mon 21 Jul 2025 07:37:29 +0000 Manifest next update: Mon 28 Jul 2025 07:37:29 +0000 Files and hashes: 1: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl (hash: LMFOIf0nZ9G7xIRU/9qNx0jws7EirorK3CmV/hiFhjQ=) 2: 455B2534FD0811EF85ADED79C4F9AE02.roa (hash: EqPvfZWybFxDEzuqUOMumy7hGqKdVROQozF26OVvW/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC32, serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE Validity Not Before: Jul 21 07:37:29 2025 GMT Not After : Jul 28 07:37:29 2025 GMT Subject: CN=687dee39-748f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:af:30:65:18:4e:ba:b0:42:f7:43:aa:f1:03: 1b:f4:aa:f7:fc:be:01:b3:f3:f8:b0:03:cc:0b:dc: cd:29:87:d7:8c:3a:9b:cd:20:b1:88:c8:c5:34:88: 97:0c:83:80:20:30:bc:4e:df:47:ea:01:09:7e:44: 31:06:0d:6e:cf:b2:73:c6:ce:93:bf:0e:54:94:72: 0f:2e:b8:a1:59:c3:44:cc:9d:b3:96:68:de:b0:ef: 87:7e:78:66:77:5c:7f:8b:84:1d:86:64:78:56:75: 58:37:9a:6c:5f:6f:9f:21:5b:38:58:17:fa:6b:b0: 38:cc:20:8f:87:f3:b4:2c:33:1d:f0:d9:3c:65:eb: 6d:9a:31:84:87:71:cd:6b:e2:17:bb:31:f3:ea:a0: 97:9f:a3:ea:6a:37:ac:e6:c4:9a:12:36:0d:ba:9c: 24:8c:97:cf:d6:55:2c:ff:4f:15:71:99:4d:b2:9a: ed:c6:98:c4:a6:bb:d6:b4:da:da:e1:28:aa:a0:fa: 97:b8:82:df:8c:a2:57:7f:3c:39:c9:8a:bb:43:d1: dc:e9:21:be:87:3a:b7:b5:fe:d6:25:66:f9:39:fa: 4a:4c:28:1c:d2:98:8a:14:e3:7e:76:fa:f9:cc:9b: 0a:f9:72:f2:95:d3:2f:b0:cf:86:71:55:d5:aa:29: 65:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:61:D4:20:4C:84:41:87:D8:39:0E:66:54:03:1F:17:46:75:F0:F4 X509v3 Authority Key Identifier: keyid:53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a2:c9:46:22:c6:96:d3:5c:64:0f:cc:9d:fc:ad:a4:9d:16: bc:ea:3a:4a:20:d8:19:68:fe:00:76:a1:99:50:36:eb:07:fe: 11:20:09:99:c1:cd:c2:e1:50:a8:44:6b:16:ae:9c:95:e9:5e: 67:37:38:40:a3:81:02:56:f2:8c:a7:e8:a2:e6:54:56:b2:d9: 30:8e:e4:31:42:89:03:7b:79:d9:ba:7c:1f:bd:db:a3:fe:14: 63:51:03:46:0b:bd:ec:f3:16:7c:82:63:c9:f5:ba:08:c9:4e: a9:8a:92:1e:3e:d1:8b:f0:47:04:e0:9d:f1:a4:57:30:ee:c2: cc:9a:f1:98:09:cb:12:5b:3b:c8:f5:1c:a0:93:f5:6b:71:a0: b0:ac:59:46:af:e9:93:18:c5:97:73:1e:1d:9e:2f:79:e5:1d: f3:bb:e7:cc:74:da:9c:00:c9:e3:2b:2a:7a:04:ac:0b:5b:3f: 68:3c:2f:27:1c:93:19:4f:be:6f:36:96:91:9d:85:3d:b0:aa: 82:a7:20:5e:f6:09:3a:a1:30:e5:ca:15:0a:f0:ca:25:b3:92: 7d:0e:ff:5c:af:3c:91:69:71:10:82:1c:3e:ba:1a:96:5c:ef: c8:0d:37:64:dd:ee:be:94:90:d3:b7:60:ce:7d:ff:9d:39:b7: 9c:82:5a:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REMzMjExMC8GA1UEBRMoNTMwRkNEMjk5RTc3NUI4QUNCMjc1MkEwM0FGQUE3RDE4 MUU1MDBFRTAeFw0yNTA3MjEwNzM3MjlaFw0yNTA3MjgwNzM3MjlaMBgxFjAUBgNV BAMTDTY4N2RlZTM5LTc0OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhrzBlGE66sEL3Q6rxAxv0qvf8vgGz8/iwA8wL3M0ph9eMOpvNILGIyMU0iJcM g4AgMLxO30fqAQl+RDEGDW7PsnPGzpO/DlSUcg8uuKFZw0TMnbOWaN6w74d+eGZ3 XH+LhB2GZHhWdVg3mmxfb58hWzhYF/prsDjMII+H87QsMx3w2Txl622aMYSHcc1r 4he7MfPqoJefo+pqN6zmxJoSNg26nCSMl8/WVSz/TxVxmU2ymu3GmMSmu9a02trh KKqg+pe4gt+Mold/PDnJirtD0dzpIb6HOre1/tYlZvk5+kpMKBzSmIoU4352+vnM mwr5cvKV0y+wz4ZxVdWqKWWZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzmHUIEyE QYfYOQ5mVAMfF0Z18PQwHwYDVR0jBBgwFoAUUw/NKZ53W4rLJ1KgOvqn0YHlAO4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQzMyLzg0MEExNkIwRkNG RDExRUZBREI4NjExNUM0RjlBRTAyL1V3X05LWjUzVzRyTEoxS2dPdnFuMFlIbEFP NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXdfTktaNTNXNHJMSjFLZ092cW4wWUhsQU80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE QzMyLzg0MEExNkIwRkNGRDExRUZBREI4NjExNUM0RjlBRTAyL1V3X05LWjUzVzRy TEoxS2dPdnFuMFlIbEFPNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ2iyUYixpbTXGQPzJ38raSdFrzqOkog2Blo/gB2oZlQNusH/hEgCZnB zcLhUKhEaxaunJXpXmc3OECjgQJW8oyn6KLmVFay2TCO5DFCiQN7edm6fB+926P+ FGNRA0YLvezzFnyCY8n1ugjJTqmKkh4+0YvwRwTgnfGkVzDuwsya8ZgJyxJbO8j1 HKCT9WtxoLCsWUav6ZMYxZdzHh2eL3nlHfO758x02pwAyeMrKnoErAtbP2g8Lycc kxlPvm82lpGdhT2wqoKnIF72CTqhMOXKFQrwyiWzkn0O/1yvPJFpcRCCHD66GpZc 78gNN2Td7r6UkNO3YM59/505t5yCWtk= -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:53 2025 by rpki-client