$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json) Hash identifier: F26Ftovml2MntU2rDUhdn5/t+iyVR/dJ7cKXLsCGfeg= Subject key identifier: D0:4E:0C:12:E8:DF:12:BF:7A:77:79:6F:3B:5C:48:B3:A2:33:A8:84 Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 34E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft Manifest number: 3451 Signing time: Fri 18 Jul 2025 15:23:44 +0000 Manifest this update: Fri 18 Jul 2025 15:23:44 +0000 Manifest next update: Fri 25 Jul 2025 15:23:44 +0000 Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: 78lhDxJFo+Ns55bBhEiHTmClxUzrtymoA7hOrdXwREQ=) 2: E48E2E94017211EBA18CC269C4F9AE02.roa (hash: ICLuCqdPid1RG8G/uczcAZrYY/Vhg9vDB0Y4ZuWrsgg=) 3: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: esENVVA6EiNHoh8zYMrrGIlsPVgfxlInP1Q1Dqp1TX0=) 4: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: vlPdQwiOxGdbOdhmlbrhpezVJ256bDBMeryFLzti+9k=) 5: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: t0X2DtahA6cVGvL8LAxWIioK5JV3S/HBQuQOiXYnF58=) 6: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: osXWx1pbxHv+AmHj+bmzgWhkOOzEZkepu7gweinGAO4=) 7: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: pxP+7JsX1QXgZ6389EUW7Rq0A265BP9eId8bGB02ABI=) 8: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: hzE638zELYjKoWqOncVd2PWwcT0doUZBbmbjdlD3Egk=) 9: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: 3Qq37sSxACv5Ldn7kCrtNWP8w5ga3g9Ur/m7mESYzt4=) 10: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: 5OfOPHDKno3z0OXXcGhOFxPs0axjwDkS/h/HmudH3qQ=) 11: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: OqgL79PVwss/L9YJSqF29Xvq2wNOU6UYyi3JyoLgqms=) 12: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: V1fSCsWS5cdJM7voSc5ZTQaks8azUpLSc/ONX61tIJU=) 13: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: kXSKiPTBMMpV/v8BhM7mqRhZb0qkCrS5RGh8ixYaHOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Jul 18 15:23:44 2025 GMT Not After : Jul 25 15:23:44 2025 GMT Subject: CN=687a6700-fde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:55:94:9c:e0:5b:d4:e5:34:dc:d6:9c:24: 2f:45:6b:4f:12:7d:d6:e4:72:c7:1b:23:bb:6e:40: 14:cd:8f:35:34:c7:87:dd:dd:8f:4e:a0:3c:bd:e5: a2:a8:87:79:b4:cf:69:35:1a:1c:84:9f:71:4d:c2: 99:c4:f4:6b:75:24:63:30:ba:e8:72:b8:cc:25:25: 77:03:73:17:d7:38:34:8b:74:9a:59:7b:26:24:b6: 7d:81:a0:82:fb:1e:e8:55:f4:a7:4f:61:81:2c:33: d7:8c:6b:29:b0:de:be:55:e5:15:c1:75:bd:b2:2a: 32:a2:a3:b9:01:a8:96:57:5c:68:50:2b:ff:a9:e7: 05:4f:63:ce:41:43:6c:bb:4d:61:4f:c4:9e:78:cf: e0:1d:47:e8:4e:cc:81:cc:86:d7:23:cb:55:9a:79: 99:31:2a:47:32:ee:05:40:3d:82:05:d3:5c:29:4e: 10:99:0d:8a:65:73:4d:01:6f:62:a8:3f:6c:84:14: 9a:a2:db:ab:f2:a8:14:61:a5:e7:8f:b5:55:c4:3a: ea:ac:54:f3:7d:cd:a9:1a:b9:6a:35:1c:4b:d5:59: 3c:6d:7f:80:c1:55:d5:28:b6:49:2f:12:e1:93:4e: 02:c1:49:d7:23:7d:42:dc:c0:fb:c9:92:9c:c7:7c: 23:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4E:0C:12:E8:DF:12:BF:7A:77:79:6F:3B:5C:48:B3:A2:33:A8:84 X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ab:e0:a8:b5:2b:c6:a7:07:81:cb:58:32:1a:0c:07:0d:ba: da:d2:28:39:c3:3e:c1:f6:b7:45:af:b0:2d:bb:e2:f0:58:66: 11:c9:a9:c7:17:fc:56:92:2c:93:0d:ae:7b:19:52:59:47:cc: cd:bb:f9:31:3e:60:82:0c:89:93:08:28:84:e8:c7:8b:0b:78: 03:a4:30:a3:9a:c8:28:5b:b9:d2:d5:b3:50:3d:60:20:b9:d9: d4:d0:1d:20:c6:05:af:a3:cd:0b:eb:cb:ad:ba:de:74:84:88: a4:0f:61:26:1d:d0:6c:0f:2c:1c:6e:00:94:3e:69:e4:48:2f: cc:c8:73:f8:61:f5:17:37:b5:39:8c:1b:c2:c4:2c:f0:b3:81: 94:f1:74:8b:88:9a:12:17:75:d0:93:7e:81:2f:48:d3:d2:6b: 95:c4:bc:c1:67:18:dd:14:4f:6d:8b:d1:46:e2:cf:18:16:2d: 4f:b8:ed:da:0e:bd:c3:9e:60:f4:3d:0a:2e:d7:62:2c:64:35: 3e:2c:87:43:97:99:72:25:df:01:7b:8b:4c:3c:e3:b3:71:d5: c6:2d:d5:d0:77:d7:ee:f2:21:1d:9b:fb:f2:34:3d:c3:52:35: 71:6a:2c:cf:70:bd:d3:a1:77:fc:32:5b:77:b0:24:f9:c1:17: 56:88:18:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjUwNzE4MTUyMzQ0WhcNMjUwNzI1MTUyMzQ0WjAYMRYwFAYD VQQDEw02ODdhNjcwMC1mZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSNVlJzgW9TlNNzWnCQvRWtPEn3W5HLHGyO7bkAUzY81NMeH3d2PTqA8veWi qId5tM9pNRochJ9xTcKZxPRrdSRjMLrocrjMJSV3A3MX1zg0i3SaWXsmJLZ9gaCC +x7oVfSnT2GBLDPXjGspsN6+VeUVwXW9sioyoqO5AaiWV1xoUCv/qecFT2POQUNs u01hT8SeeM/gHUfoTsyBzIbXI8tVmnmZMSpHMu4FQD2CBdNcKU4QmQ2KZXNNAW9i qD9shBSaotur8qgUYaXnj7VVxDrqrFTzfc2pGrlqNRxL1Vk8bX+AwVXVKLZJLxLh k04CwUnXI31C3MD7yZKcx3wjdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBODBLo 3xK/end5bztcSLOiM6iEMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkM3QS80QzUyOEY3ODQ1MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3 M2MxUndEbjRQM3Q2UjZYd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQq+CotSvGpweBy1gyGgwHDbra0ig5wz7B9rdFr7Atu+LwWGYRyanH F/xWkiyTDa57GVJZR8zNu/kxPmCCDImTCCiE6MeLC3gDpDCjmsgoW7nS1bNQPWAg udnU0B0gxgWvo80L68utut50hIikD2EmHdBsDywcbgCUPmnkSC/MyHP4YfUXN7U5 jBvCxCzws4GU8XSLiJoSF3XQk36BL0jT0muVxLzBZxjdFE9ti9FG4s8YFi1PuO3a Dr3DnmD0PQou12IsZDU+LIdDl5lyJd8Be4tMPOOzcdXGLdXQd9fu8iEdm/vyND3D UjVxaizPcL3ToXf8Mlt3sCT5wRdWiBgs -----END CERTIFICATE-----Generated at Sun Jul 20 02:39:26 2025 by rpki-client