$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: tALV170WeoxrFs5j2E5+zPzqKoUHVZFmIUF7oiFreKs= Subject key identifier: 91:85:FC:5E:D2:C8:05:82:9B:91:82:7A:39:92:BB:E8:D4:1A:F8:E8 Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0A67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0A61 Signing time: Fri 18 Jul 2025 19:53:40 +0000 Manifest this update: Fri 18 Jul 2025 19:53:40 +0000 Manifest next update: Fri 25 Jul 2025 19:53:40 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: KKoxFm5Iex3ZTZe6oNouqD3uhvY1kRF6SooTWxExlA4=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: nyOJoLIDGp7/wafl1yH4CbKrruUiB3iOpUkQ72n7ZjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2663 (0xa67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Jul 18 19:53:40 2025 GMT Not After : Jul 25 19:53:40 2025 GMT Subject: CN=687aa644-e811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:00:66:18:e0:52:da:59:89:1f:b5:a9:b8:f1: 05:73:59:97:8c:63:7e:a1:fc:7e:d2:b1:62:4a:f8: 01:57:97:fe:da:17:05:5a:8a:d6:fc:d6:95:ea:bb: a2:63:cb:e2:c9:7d:fb:77:84:db:db:8d:95:63:37: 25:5a:15:83:a2:dc:53:91:85:1b:56:3d:3c:c7:b1: d5:70:8e:47:81:35:8f:bc:02:f8:d3:6a:d8:8f:62: 64:1c:79:d0:4d:46:cf:15:61:3b:cb:79:ff:67:dd: b2:33:b3:05:23:34:5e:c5:7a:88:09:9d:df:82:82: 57:9f:fa:39:bf:3b:2a:bb:47:bb:d6:59:90:90:0c: be:a9:40:3b:3a:e5:bf:d6:b0:71:84:be:b0:88:00: 97:8f:a8:e1:4e:d3:b3:da:e7:fe:36:12:19:f1:ff: ba:30:b1:18:69:b7:1b:f2:be:ae:1b:c0:22:79:dd: 86:64:c0:09:26:10:55:47:22:d8:6c:bd:40:ba:82: 35:c7:06:f2:ad:f6:bd:19:9e:93:7a:b4:d5:ea:fc: cf:61:60:50:97:fa:d9:f4:6e:21:89:c7:5a:6c:de: f5:e8:3b:26:2b:d4:b7:14:cc:55:1d:32:5f:bd:86: 14:c6:2b:e2:09:62:99:fd:ac:6d:58:4c:d4:54:ad: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:85:FC:5E:D2:C8:05:82:9B:91:82:7A:39:92:BB:E8:D4:1A:F8:E8 X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b0:da:d8:f0:2d:5d:1e:c5:4b:1c:dc:8a:07:10:58:cd:c3: c3:34:73:8f:25:04:51:fd:23:03:05:ef:30:5f:d8:7a:f4:b6: b0:9b:9a:c9:3a:54:13:5f:50:ed:97:df:ca:1e:57:49:58:ed: 7a:a1:54:24:a8:a6:7e:2d:31:55:c6:04:b9:66:47:8b:d9:fb: 58:23:bd:22:08:22:a5:0c:6d:d6:03:64:9a:13:c5:27:0d:7b: 03:39:ae:19:b9:47:c8:63:50:3d:ce:20:b3:9e:25:00:db:cb: 5b:e8:c6:f9:50:87:2a:47:7d:a1:d1:43:bb:ea:ee:8a:35:4e: 8d:92:20:16:09:10:f4:be:fb:bc:17:3b:fe:00:fb:01:31:92: d4:34:9b:33:bd:a1:da:2a:6f:31:d4:80:cb:fb:75:16:9f:0a: b7:31:c1:3a:e3:5f:82:60:89:a5:48:cf:96:29:9c:c9:ac:6e: 20:a6:3b:8c:35:d8:01:f5:15:9a:68:75:51:98:8f:59:52:35: 90:3d:93:90:8e:7d:ef:f8:c0:f1:3d:68:69:83:a5:c7:9e:2f: 24:c7:1a:27:11:0b:91:f4:4a:98:97:a8:fb:16:81:5e:4f:91: cd:61:84:ec:fe:02:bd:66:6d:39:94:c7:e5:f1:1d:55:13:43: 6d:7c:45:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjUwNzE4MTk1MzQwWhcNMjUwNzI1MTk1MzQwWjAYMRYwFAYD VQQDEw02ODdhYTY0NC1lODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyABmGOBS2lmJH7WpuPEFc1mXjGN+ofx+0rFiSvgBV5f+2hcFWorW/NaV6rui Y8viyX37d4Tb242VYzclWhWDotxTkYUbVj08x7HVcI5HgTWPvAL402rYj2JkHHnQ TUbPFWE7y3n/Z92yM7MFIzRexXqICZ3fgoJXn/o5vzsqu0e71lmQkAy+qUA7OuW/ 1rBxhL6wiACXj6jhTtOz2uf+NhIZ8f+6MLEYabcb8r6uG8Aied2GZMAJJhBVRyLY bL1AuoI1xwbyrfa9GZ6TerTV6vzPYWBQl/rZ9G4hicdabN716DsmK9S3FMxVHTJf vYYUxiviCWKZ/axtWEzUVK3t3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGF/F7S yAWCm5GCejmSu+jUGvjoMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAksNrY8C1dHsVLHNyKBxBYzcPDNHOPJQRR/SMDBe8wX9h69Lawm5rJ OlQTX1Dtl9/KHldJWO16oVQkqKZ+LTFVxgS5ZkeL2ftYI70iCCKlDG3WA2SaE8Un DXsDOa4ZuUfIY1A9ziCzniUA28tb6Mb5UIcqR32h0UO76u6KNU6NkiAWCRD0vvu8 Fzv+APsBMZLUNJszvaHaKm8x1IDL+3UWnwq3McE641+CYImlSM+WKZzJrG4gpjuM NdgB9RWaaHVRmI9ZUjWQPZOQjn3v+MDxPWhpg6XHni8kxxonEQuR9EqYl6j7FoFe T5HNYYTs/gK9Zm05lMfl8R1VE0NtfEVy -----END CERTIFICATE-----Generated at Sun Jul 20 15:07:10 2025 by rpki-client