$ rpki-client -vvf rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft File: uIPha7zTcVtWFzExa6Gw70BTwS4.mft (raw, json) Hash identifier: FrFdPKj9SW8OLvR2aqIj1iaTn4A36rX+8LKc/QpDD4s= Subject key identifier: 0B:76:B8:04:EE:F1:FB:C1:4F:B2:38:58:76:4F:AF:A6:82:77:8F:B8 Authority key identifier: B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E Certificate issuer: /CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Certificate serial: 1866 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft Manifest number: 185B Signing time: Sun 20 Jul 2025 16:32:12 +0000 Manifest this update: Sun 20 Jul 2025 16:32:12 +0000 Manifest next update: Sun 27 Jul 2025 16:32:12 +0000 Files and hashes: 1: uIPha7zTcVtWFzExa6Gw70BTwS4.crl (hash: jkZ6zT9IhrP4HBkDp0qNrXZ2az6CP56RpC0QpTfgjJU=) 2: 3482BB06AB3E11E7B15D1874C4F9AE02.roa (hash: f/iGCTTWKgyC6GDNoG48hLtnpOGko6TY6XeoD7uohtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6246 (0x1866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B05F, serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Validity Not Before: Jul 20 16:32:12 2025 GMT Not After : Jul 27 16:32:12 2025 GMT Subject: CN=687d1a0c-dbc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:fb:a9:6b:3f:76:23:96:eb:21:97:b3:4e: 4b:98:8f:73:64:7d:51:c9:bc:a8:f2:e0:78:82:b8: 89:40:50:b8:a5:3a:0e:2c:bb:b3:15:0c:37:fd:73: 81:f5:8b:52:c8:78:f0:44:ff:8e:74:56:31:ff:c2: 4e:75:d8:3e:13:4a:44:c3:00:5b:15:66:35:31:e2: 4d:a2:db:ef:01:0a:f5:61:37:09:67:06:8e:5c:ca: c5:83:fc:c0:76:2c:de:96:69:94:27:b5:bd:88:a9: 4d:25:58:ac:0c:ca:47:73:d3:84:77:69:54:ec:ba: ed:1b:bc:7e:23:5d:b3:be:5c:c1:83:fb:7d:29:00: 77:22:36:1d:d3:20:da:59:9e:2d:d0:4d:49:0e:99: 5e:33:b2:e3:eb:c4:5e:75:32:31:32:49:b2:de:a8: 13:9f:23:06:59:e2:8d:3a:ab:d9:d0:fc:a6:6a:da: a4:3c:c3:4a:f8:12:b4:74:47:49:60:04:67:26:28: c0:13:6f:73:e6:a6:0e:9b:0d:eb:53:4c:28:fa:20: 16:1a:2c:f7:ce:76:cb:3a:b6:c5:69:c2:25:39:55: 83:95:5d:c5:de:ed:59:77:4d:39:8e:d1:48:1d:02: 7f:80:7b:8b:64:b5:05:ca:dd:5e:fb:d6:d9:e0:b5: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:76:B8:04:EE:F1:FB:C1:4F:B2:38:58:76:4F:AF:A6:82:77:8F:B8 X509v3 Authority Key Identifier: keyid:B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d9:a0:57:12:dd:6e:a4:10:c5:f5:8e:0d:af:66:91:9a:d6: 46:d8:e2:3d:6e:5e:5b:61:dc:91:09:75:be:4c:20:97:0f:9f: ea:22:c2:db:a8:37:5f:c0:b5:bb:b3:d3:23:59:c8:d4:59:9e: af:9c:09:8e:ef:3e:82:f1:c5:83:9f:dc:c9:b1:17:a2:6c:ff: a6:6d:09:c6:30:8a:a7:0c:4b:35:35:5f:d1:27:c4:6d:9d:d5: ca:5d:ef:d4:41:75:89:e0:8f:d8:4d:9d:6c:31:6b:6a:3b:fd: 98:72:70:71:d8:d0:2d:f6:71:95:fe:53:37:7b:65:97:88:6d: 4c:48:64:e9:ea:41:26:ed:62:e0:7a:a0:4b:68:30:8d:be:b6: ae:cf:d1:f2:9b:8b:8a:1f:b3:90:5e:24:b6:97:75:2b:e2:10: ea:21:86:67:b1:3b:2a:01:a1:72:ea:2b:08:77:c8:88:65:9a: 6f:db:81:51:7c:de:1d:61:b3:08:0c:bb:d7:78:2f:60:73:82: 64:58:f9:2e:b9:5d:9f:93:08:69:4b:c1:01:69:d8:0d:09:b2: db:a3:f0:ce:c9:31:53:80:6c:9d:4c:74:73:19:31:ba:64:54: 0b:c3:40:70:d9:0a:32:82:41:68:ce:c4:2e:25:5b:07:53:00: 02:06:61:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwNUYxMTAvBgNVBAUTKEI4ODNFMTZCQkNEMzcxNUI1NjE3MzEzMTZCQTFCMEVG NDA1M0MxMkUwHhcNMjUwNzIwMTYzMjEyWhcNMjUwNzI3MTYzMjEyWjAYMRYwFAYD VQQDEw02ODdkMWEwYy1kYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEz7qWs/diOW6yGXs05LmI9zZH1Rybyo8uB4griJQFC4pToOLLuzFQw3/XOB 9YtSyHjwRP+OdFYx/8JOddg+E0pEwwBbFWY1MeJNotvvAQr1YTcJZwaOXMrFg/zA dizelmmUJ7W9iKlNJVisDMpHc9OEd2lU7LrtG7x+I12zvlzBg/t9KQB3IjYd0yDa WZ4t0E1JDpleM7Lj68RedTIxMkmy3qgTnyMGWeKNOqvZ0PymatqkPMNK+BK0dEdJ YARnJijAE29z5qYOmw3rU0wo+iAWGiz3znbLOrbFacIlOVWDlV3F3u1Zd005jtFI HQJ/gHuLZLUFyt1e+9bZ4LXvpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAt2uATu 8fvBT7I4WHZPr6aCd4+4MB8GA1UdIwQYMBaAFLiD4Wu803FbVhcxMWuhsO9AU8Eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA1Ri8zMzUxMjA0MEFC M0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNWdFdGekV4YTZHdzcwQlR3 UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJUGhhN3pUY1Z0V0Z6RXhhNkd3NzBCVHdTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA1Ri8zMzUxMjA0MEFCM0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNW dFdGekV4YTZHdzcwQlR3UzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR2aBXEt1upBDF9Y4Nr2aRmtZG2OI9bl5bYdyRCXW+TCCXD5/qIsLb qDdfwLW7s9MjWcjUWZ6vnAmO7z6C8cWDn9zJsReibP+mbQnGMIqnDEs1NV/RJ8Rt ndXKXe/UQXWJ4I/YTZ1sMWtqO/2YcnBx2NAt9nGV/lM3e2WXiG1MSGTp6kEm7WLg eqBLaDCNvrauz9Hym4uKH7OQXiS2l3Ur4hDqIYZnsTsqAaFy6isId8iIZZpv24FR fN4dYbMIDLvXeC9gc4JkWPkuuV2fkwhpS8EBadgNCbLbo/DOyTFTgGydTHRzGTG6 ZFQLw0Bw2QoygkFozsQuJVsHUwACBmFZ -----END CERTIFICATE-----Generated at Mon Jul 21 09:08:30 2025 by rpki-client