$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json) Hash identifier: yjTehMkjZKPQzq7JlEyVzVOi9V0+xplzOB0peJ66Nac= Subject key identifier: 01:B8:D9:6D:4F:39:C2:CC:89:A5:55:DF:FA:5B:E5:C1:D2:B9:B3:B8 Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 08E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft Manifest number: 194E Signing time: Fri 18 Jul 2025 17:30:30 +0000 Manifest this update: Fri 18 Jul 2025 17:30:30 +0000 Manifest next update: Fri 25 Jul 2025 17:30:30 +0000 Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: PwhyogqCtyDnzNjPAeNDcWZr2wAtTgDwostVCHSU4xI=) 2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: mtUL6kpWcJ0s0WYAq9l26D9HLDGvLgZ5GCmZqFRcyjs=) 3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: F8NUI5IF7FjRVcKD/tqhJ5Q4QNzh0QGai7XMrRHjkus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2279 (0x8e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Jul 18 17:30:30 2025 GMT Not After : Jul 25 17:30:30 2025 GMT Subject: CN=687a84b6-8afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b1:e8:7d:1e:05:55:6a:eb:31:23:d9:b8:98: 41:fc:68:f6:af:25:1f:9b:dc:ac:da:b8:e8:18:9d: 5f:fe:dd:19:59:06:f6:ba:c2:bb:06:3b:cc:d1:5d: b4:e0:33:9d:4d:a0:eb:42:6a:2f:ad:54:16:86:39: ef:11:f0:a0:e6:c2:e2:77:48:b5:6c:77:96:51:45: 26:31:1d:ec:25:c9:97:7b:f7:44:31:35:13:e0:70: 80:bf:16:d3:2e:d2:6d:fc:d0:e6:38:67:aa:12:af: ac:7a:eb:d0:58:98:75:e6:8e:cb:1c:63:b2:d5:5e: a8:fd:b4:16:04:12:db:64:95:e6:35:d0:1c:b0:80: 51:07:9c:17:7f:0a:72:86:17:a2:8d:20:6b:ef:95: e5:a5:6f:55:83:fa:0a:56:54:6b:08:be:74:3a:68: 88:d1:61:f2:1f:41:16:e4:fb:d2:ee:f8:52:79:27: 6f:fe:d8:0d:f1:25:08:fb:43:c7:3e:59:be:0b:fb: dc:06:72:f1:1a:b9:b5:87:ab:34:69:99:c9:ad:0f: 2a:bb:1b:5b:ca:a8:1f:e4:77:cd:f3:05:fa:f3:7e: 2c:bc:0d:0b:71:0e:d4:c5:c2:85:30:42:8e:0b:6b: 95:d7:4a:43:95:b8:72:de:bd:86:cc:99:23:cb:98: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B8:D9:6D:4F:39:C2:CC:89:A5:55:DF:FA:5B:E5:C1:D2:B9:B3:B8 X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:69:5d:b0:2e:de:b8:d4:d6:fc:22:a0:86:f3:f1:e8:1a:a3: 37:ff:97:f3:4d:f6:1e:8f:46:43:5a:f3:29:3e:f5:84:02:5d: 60:6b:fb:3d:4a:8c:73:52:0d:03:45:d1:2b:43:23:0a:37:0b: 17:b9:e2:72:82:44:3c:32:28:b7:c7:b3:5e:11:55:af:e1:c7: 0c:0e:32:02:3d:dd:d9:b4:2a:f0:ab:2a:2b:aa:3c:26:f3:44: e1:25:db:8b:da:b1:3f:ff:30:a0:2a:f0:49:36:a7:d0:3a:19: 0d:0f:3e:2c:81:a1:f8:39:82:40:c4:d4:5e:cc:7f:97:bc:a0: da:58:79:82:3d:ec:db:03:a8:c5:10:df:15:0b:29:fe:b6:a5: f9:4d:af:a9:36:5e:c0:6d:44:85:61:f6:f9:5e:3c:ea:3a:82: 4c:57:2b:dc:c8:b9:b9:58:e7:34:4a:f8:5b:54:28:2a:f7:02: 62:95:61:92:35:b6:bd:20:22:74:3d:93:47:bf:5f:90:10:6e: 1b:d1:25:b0:b2:6c:99:0d:07:f1:d3:ce:6b:03:24:98:4b:0b: 89:ae:a6:36:63:81:1c:fc:c4:97:96:ff:69:10:ee:78:79:59: d7:75:4f:93:5f:96:c8:f6:03:46:b1:8f:1a:8f:a1:6b:0f:9a: c3:00:a4:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjUwNzE4MTczMDMwWhcNMjUwNzI1MTczMDMwWjAYMRYwFAYD VQQDEw02ODdhODRiNi04YWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bHofR4FVWrrMSPZuJhB/Gj2ryUfm9ys2rjoGJ1f/t0ZWQb2usK7BjvM0V20 4DOdTaDrQmovrVQWhjnvEfCg5sLid0i1bHeWUUUmMR3sJcmXe/dEMTUT4HCAvxbT LtJt/NDmOGeqEq+seuvQWJh15o7LHGOy1V6o/bQWBBLbZJXmNdAcsIBRB5wXfwpy hheijSBr75XlpW9Vg/oKVlRrCL50OmiI0WHyH0EW5PvS7vhSeSdv/tgN8SUI+0PH Plm+C/vcBnLxGrm1h6s0aZnJrQ8quxtbyqgf5HfN8wX6834svA0LcQ7UxcKFMEKO C2uV10pDlbhy3r2GzJkjy5gTeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAG42W1P OcLMiaVV3/pb5cHSubO4MB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa NF96Y01uUDAwWTAtTUVYY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4aV2wLt641Nb8IqCG8/HoGqM3/5fzTfYej0ZDWvMpPvWEAl1ga/s9 SoxzUg0DRdErQyMKNwsXueJygkQ8Mii3x7NeEVWv4ccMDjICPd3ZtCrwqyorqjwm 80ThJduL2rE//zCgKvBJNqfQOhkNDz4sgaH4OYJAxNRezH+XvKDaWHmCPezbA6jF EN8VCyn+tqX5Ta+pNl7AbUSFYfb5XjzqOoJMVyvcyLm5WOc0SvhbVCgq9wJilWGS Nba9ICJ0PZNHv1+QEG4b0SWwsmyZDQfx085rAySYSwuJrqY2Y4Ec/MSXlv9pEO54 eVnXdU+TX5bI9gNGsY8aj6FrD5rDAKSM -----END CERTIFICATE-----Generated at Sun Jul 20 10:53:45 2025 by rpki-client