$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft File: uHMcMIhjyygE4HbVjowHFZtOXxk.mft (raw, json) Hash identifier: BrftqdSid/MwnaHZHOXxBKu1ed9pwFyI4junWYx2JKo= Subject key identifier: 70:38:3B:D4:31:3F:76:35:1B:09:79:D1:DB:C0:4E:2A:A8:56:4E:CE Authority key identifier: B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19 Certificate issuer: /CN=A9164663/serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19 Certificate serial: 0829 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft Manifest number: 1A5F Signing time: Sun 20 Jul 2025 17:08:48 +0000 Manifest this update: Sun 20 Jul 2025 17:08:48 +0000 Manifest next update: Sun 27 Jul 2025 17:08:48 +0000 Files and hashes: 1: uHMcMIhjyygE4HbVjowHFZtOXxk.crl (hash: VoiEeEX88D0WSO3zzqG5eOpuhGobSGzfzHR2oU9SneU=) 2: 3D626CDC065111F0BFE43624C4F9AE02.roa (hash: PyysKZ+hZFXrRWA3LPUfHO46XtpZrkwg+n+8mnDBEZE=) 3: 7BB2BC009FFA11ECA13C2839C4F9AE02.roa (hash: K7jgwtFrPBKypxv1Ln8vBllbtClVCUlvOXHISxYGRB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089 (0x829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663, serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19 Validity Not Before: Jul 20 17:08:48 2025 GMT Not After : Jul 27 17:08:48 2025 GMT Subject: CN=687d22a0-0bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e3:89:98:76:1d:90:cd:3b:1f:be:76:0f:5f: de:2c:56:ba:f8:c5:03:7e:6f:d3:96:85:40:3e:cc: b0:49:13:02:4e:bf:8c:ed:21:ba:28:a4:1e:59:43: 46:f5:36:5b:0f:74:48:13:3e:c9:b0:01:0a:9f:10: c1:83:00:a5:2c:ea:db:ac:1a:0d:68:8b:53:17:6d: 7b:0f:5a:0a:d3:a1:69:82:6e:ab:81:5a:04:0b:b2: 59:c7:e0:1c:83:a6:f9:37:58:b4:9b:f1:f2:bf:9d: b3:b7:75:ad:e0:fd:6b:3d:d0:fe:68:0c:2d:4d:11: 9f:34:be:c2:d0:a1:c6:74:05:43:13:70:bb:c4:a1: ac:e2:48:ee:bc:83:64:61:9e:9c:e0:75:97:8e:6e: ef:14:0c:8b:81:6c:ea:7e:09:f8:e4:fa:b6:e5:87: 84:50:bf:fe:e0:3d:72:71:02:55:2f:2d:e3:d8:68: dd:97:6a:dc:2b:56:44:f6:e2:25:52:3b:d3:57:48: 6c:74:72:45:37:8b:9c:1e:82:b5:fe:96:79:74:0d: 49:e0:66:d7:17:6d:56:70:08:da:46:d8:ea:42:73: 59:30:1b:6f:7b:bd:7d:c8:66:82:14:49:27:c9:45: 55:1a:7e:79:83:ab:b6:fc:1d:75:76:1b:4c:2f:ea: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:38:3B:D4:31:3F:76:35:1B:09:79:D1:DB:C0:4E:2A:A8:56:4E:CE X509v3 Authority Key Identifier: keyid:B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e6:98:f8:07:52:a4:b0:ec:aa:de:43:75:68:95:2a:25:ab: 96:a6:a3:2b:eb:f5:7a:c9:d3:08:a0:d6:e5:9c:85:e6:d8:71: ce:4c:df:80:47:23:e8:92:81:11:1c:c8:3c:eb:7f:0b:23:4d: 7a:34:64:a5:7a:58:60:e5:7b:69:50:c9:2d:3e:96:fd:16:fa: d0:f3:84:36:20:48:42:53:35:d8:f2:a8:d6:04:a1:b0:3a:48: 8d:67:61:1b:91:74:f5:18:68:ea:ed:fe:22:8b:22:d5:ed:ff: 56:70:1b:a4:28:6f:7b:e6:5c:2f:3e:f7:8b:cc:07:ca:9f:22: ce:09:58:a0:c0:10:d8:87:6e:2a:5f:93:e7:04:04:03:dc:55: bf:2c:8c:f8:9d:80:9e:94:d4:b7:f7:a7:c0:56:93:d2:2c:64: a2:af:29:b9:34:be:41:e5:b1:c4:95:4b:19:13:4c:59:7b:85: f1:b7:0c:39:17:2f:18:a3:a4:a5:ff:20:c6:e4:44:f9:10:34: 2d:a8:2e:6d:05:50:02:07:44:7a:60:8c:90:19:d4:dc:30:46: 1b:f7:14:15:bf:f0:50:34:18:e1:36:5b:4f:c2:6f:61:fe:7b: a7:6e:62:e1:61:dc:75:5b:96:71:f8:72:a8:26:29:0e:66:cb: 25:3d:84:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKEI4NzMxQzMwODg2M0NCMjgwNEUwNzZENThFOEMwNzE1 OUI0RTVGMTkwHhcNMjUwNzIwMTcwODQ4WhcNMjUwNzI3MTcwODQ4WjAYMRYwFAYD VQQDEw02ODdkMjJhMC0wYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeOJmHYdkM07H752D1/eLFa6+MUDfm/TloVAPsywSRMCTr+M7SG6KKQeWUNG 9TZbD3RIEz7JsAEKnxDBgwClLOrbrBoNaItTF217D1oK06Fpgm6rgVoEC7JZx+Ac g6b5N1i0m/Hyv52zt3Wt4P1rPdD+aAwtTRGfNL7C0KHGdAVDE3C7xKGs4kjuvINk YZ6c4HWXjm7vFAyLgWzqfgn45Pq25YeEUL/+4D1ycQJVLy3j2Gjdl2rcK1ZE9uIl UjvTV0hsdHJFN4ucHoK1/pZ5dA1J4GbXF21WcAjaRtjqQnNZMBtve719yGaCFEkn yUVVGn55g6u2/B11dhtML+qbLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHA4O9Qx P3Y1Gwl50dvATiqoVk7OMB8GA1UdIwQYMBaAFLhzHDCIY8soBOB21Y6MBxWbTl8Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi91SE1jTUloanl5Z0U0SGJWam93SEZadE9Y eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VITWNNSWhqeXlnRTRIYlZqb3dIRlp0T1h4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi91SE1jTUloanl5 Z0U0SGJWam93SEZadE9YeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG5pj4B1KksOyq3kN1aJUqJauWpqMr6/V6ydMIoNblnIXm2HHOTN+A RyPokoERHMg8638LI016NGSlelhg5XtpUMktPpb9FvrQ84Q2IEhCUzXY8qjWBKGw OkiNZ2EbkXT1GGjq7f4iiyLV7f9WcBukKG975lwvPveLzAfKnyLOCVigwBDYh24q X5PnBAQD3FW/LIz4nYCelNS396fAVpPSLGSirym5NL5B5bHElUsZE0xZe4Xxtww5 Fy8Yo6Sl/yDG5ET5EDQtqC5tBVACB0R6YIyQGdTcMEYb9xQVv/BQNBjhNltPwm9h /nunbmLhYdx1W5Zx+HKoJikOZsslPYRf -----END CERTIFICATE-----Generated at Mon Jul 21 07:19:31 2025 by rpki-client