$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft File: uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json) Hash identifier: CQIGtEi4t2uxVAeGv+i5VxHcpx0LyvS9w1rVxBrrOV0= Subject key identifier: C7:F4:7B:97:AD:77:C8:44:C1:33:41:26:15:EE:89:57:98:58:65:FE Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7 Certificate issuer: /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft Manifest number: 3E Signing time: Sat 19 Jul 2025 07:47:20 +0000 Manifest this update: Sat 19 Jul 2025 07:47:19 +0000 Manifest next update: Sat 26 Jul 2025 07:47:19 +0000 Files and hashes: 1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: ie6+uD7pIxoY3JOvyVOPhDSJSOSB141cSDExL97+3DU=) 2: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: aySEvRngppKs/Lyekhtc0uzM27zK/l0cRA6UmOeIzlU=) 3: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: v1ibDjxmzIv2LQG97YVedEX5wevRpNJDRuNHyDfGpBg=) 4: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: JronbENc2C4chw8Lr5GoQXHOGuejfoIjiKRSNDdiR4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7 Validity Not Before: Jul 19 07:47:19 2025 GMT Not After : Jul 26 07:47:19 2025 GMT Subject: CN=687b4d87-05ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a6:6f:20:41:6a:30:07:14:72:cf:df:66:c6: 6f:5b:fb:66:1c:33:8f:5d:55:99:1e:95:a6:8b:0b: 93:ee:12:35:c2:e2:92:3f:05:cf:f7:58:1d:9f:2d: 1a:15:de:b4:dd:cc:fd:9b:0b:94:fc:6d:d6:6d:82: fa:b1:af:39:a3:29:16:29:98:69:57:b4:e2:e7:ad: c7:3f:db:3a:31:91:b8:60:e1:1a:3a:a3:09:87:66: 44:41:85:91:a9:5e:2c:24:58:a4:7d:39:2f:e2:3d: c3:8c:fc:a3:41:d1:e4:99:10:cc:7d:95:eb:3a:49: ee:23:b4:8e:78:3a:88:a5:c8:58:03:be:16:3e:69: 00:e6:64:cf:c3:e1:64:c3:a9:2d:bb:7f:5b:f2:90: d0:6f:cd:00:fb:32:08:f0:17:a0:b9:d4:d3:98:18: 14:67:cf:45:e6:1c:22:cc:ac:a7:ac:2f:7e:b7:cb: ec:5e:2e:fe:a1:62:d3:4c:56:cb:98:37:12:d5:19: d4:f4:ec:d0:d7:5f:06:39:61:15:d6:c8:2e:2a:e3: 09:82:f9:c3:f5:76:f9:fa:5c:d4:b9:19:64:55:2a: 63:de:67:4d:2d:e1:2b:24:46:b1:6c:f4:80:8b:52: b6:e3:6f:4b:5d:a6:34:64:88:2d:1d:a4:d1:e8:38: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F4:7B:97:AD:77:C8:44:C1:33:41:26:15:EE:89:57:98:58:65:FE X509v3 Authority Key Identifier: keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:20:b6:0e:a8:48:c7:61:dd:40:fe:37:38:00:cf:25:c1:07: e2:20:c9:72:a5:10:7f:2a:8b:b7:57:ba:6e:f7:11:cb:02:9e: 2d:9d:75:75:c0:dd:b8:7f:a9:5d:31:aa:ef:14:e7:c4:7e:ab: 5a:8c:c7:f3:cb:2f:4c:31:a0:58:29:2f:70:dd:50:52:13:8f: 76:d5:5f:97:93:d5:c0:47:6c:63:40:41:47:ff:0f:36:ec:20: 8f:19:d2:a7:d8:24:5d:f8:9f:fd:26:1d:fd:48:5a:86:a6:68: 86:a8:a1:6c:b2:58:f9:24:d5:5a:11:ec:ae:f9:95:6a:01:18: 7f:4d:be:a0:eb:93:58:13:45:6c:a9:e9:bb:ff:cd:50:a7:be: 29:d1:f9:6a:2e:09:ca:1b:37:10:cf:65:67:9e:5c:78:0c:dc: 67:5f:29:6b:36:58:a5:80:45:2a:36:11:05:84:c9:0b:1e:c1: b9:2c:59:46:7c:60:c0:03:6d:43:19:ca:8b:58:09:64:79:97: 3d:9e:24:f3:28:74:19:ec:af:98:d3:a2:ae:8c:65:2b:73:ba: df:6d:2a:4d:e8:d1:73:8e:62:ba:9a:c1:b7:60:c8:ae:c8:8a: da:58:ce:57:56:0a:27:48:c7:8d:04:ea:64:6e:cf:e1:e7:15: 9d:e9:8c:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTcyNTExMC8GA1UEBRMoQjg3RkFENjU0RUM0MjE3QzY1MDBEMEYwNkIxOUJFMzE5 RDNEQURGNzAeFw0yNTA3MTkwNzQ3MTlaFw0yNTA3MjYwNzQ3MTlaMBgxFjAUBgNV BAMTDTY4N2I0ZDg3LTA1Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+pm8gQWowBxRyz99mxm9b+2YcM49dVZkelaaLC5PuEjXC4pI/Bc/3WB2fLRoV 3rTdzP2bC5T8bdZtgvqxrzmjKRYpmGlXtOLnrcc/2zoxkbhg4Ro6owmHZkRBhZGp XiwkWKR9OS/iPcOM/KNB0eSZEMx9les6Se4jtI54OoilyFgDvhY+aQDmZM/D4WTD qS27f1vykNBvzQD7MgjwF6C51NOYGBRnz0XmHCLMrKesL363y+xeLv6hYtNMVsuY NxLVGdT07NDXXwY5YRXWyC4q4wmC+cP1dvn6XNS5GWRVKmPeZ00t4SskRrFs9ICL Urbjb0tdpjRkiC0dpNHoOHn9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx/R7l613 yETBM0EmFe6JV5hYZf4wHwYDVR0jBBgwFoAUuH+tZU7EIXxlANDwaxm+MZ09rfcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NzI1LzgwMUJDQUE2MDgz QTExRjA5RkYxRDA3NEM0RjlBRTAyL3VILXRaVTdFSVh4bEFORHdheG0tTVowOXJm Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvdUgtdFpVN0VJWHhsQU5Ed2F4bS1NWjA5cmZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 NzI1LzgwMUJDQUE2MDgzQTExRjA5RkYxRDA3NEM0RjlBRTAyL3VILXRaVTdFSVh4 bEFORHdheG0tTVowOXJmYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJAgtg6oSMdh3UD+NzgAzyXBB+IgyXKlEH8qi7dXum73EcsCni2ddXXA 3bh/qV0xqu8U58R+q1qMx/PLL0wxoFgpL3DdUFITj3bVX5eT1cBHbGNAQUf/Dzbs II8Z0qfYJF34n/0mHf1IWoamaIaooWyyWPkk1VoR7K75lWoBGH9NvqDrk1gTRWyp 6bv/zVCnvinR+WouCcobNxDPZWeeXHgM3GdfKWs2WKWARSo2EQWEyQsewbksWUZ8 YMADbUMZyotYCWR5lz2eJPModBnsr5jToq6MZStzut9tKk3o0XOOYrqawbdgyK7I itpYzldWCidIx40E6mRuz+HnFZ3pjGw= -----END CERTIFICATE-----Generated at Sun Jul 20 15:10:50 2025 by rpki-client