$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft File: uWfS7oK3russVByppRA7Wgym5xI.mft (raw, json) Hash identifier: IACWtkeMsfxcj9VIlR8dKQd2ijtbozgbPuszv5JHcXM= Subject key identifier: 8C:E4:AE:24:A7:99:0A:F6:F6:24:25:11:AC:FD:11:31:38:5C:49:1C Authority key identifier: B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12 Certificate issuer: /CN=A9166E07/serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft Manifest number: 2C Signing time: Sat 19 Jul 2025 08:00:08 +0000 Manifest this update: Sat 19 Jul 2025 08:00:08 +0000 Manifest next update: Sat 26 Jul 2025 08:00:07 +0000 Files and hashes: 1: uWfS7oK3russVByppRA7Wgym5xI.crl (hash: v78F43rR4jFFRyrB6S1K4SXW0ckmE9do7Jx1Q3NwJC8=) 2: D7D79C92241A11F0A9D27045C4F9AE02.roa (hash: //G4AwnQA0nMb3DeflcQ+SQx5LkYQDI/08bvYQspQs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166E07, serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712 Validity Not Before: Jul 19 08:00:08 2025 GMT Not After : Jul 26 08:00:07 2025 GMT Subject: CN=687b5088-10f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:37:a5:d4:17:e2:6c:56:29:d8:d5:bf:2e: 67:b2:8b:8a:1e:11:a3:fb:05:3c:a7:88:5b:29:65: 06:44:79:96:43:20:96:85:ae:76:92:24:b9:4e:88: d2:61:e6:c3:2b:8d:bd:0f:f2:8d:38:01:bd:e6:35: e2:e1:9e:a9:d1:14:0a:b6:8c:eb:d1:97:cf:e6:c1: 5b:cf:61:83:11:48:54:4f:fd:ac:7d:ce:64:f7:82: 3d:62:dd:c1:be:77:8c:ab:14:69:fd:c1:41:34:bf: 1e:73:6e:50:24:2f:6e:51:ec:80:54:4a:3b:56:41: 7b:22:ec:58:77:83:c3:30:01:f3:b7:6d:11:ed:b5: e8:3b:71:0c:dc:db:48:ca:b4:31:0c:07:c3:d0:af: 0c:6b:b8:39:2f:56:0e:a4:0f:95:ef:2c:e3:d7:cc: c9:9a:29:a0:e3:a7:7b:8c:af:91:f5:7d:f5:9d:5a: 90:e0:71:bb:7a:68:d7:84:2f:67:7f:b3:c3:10:bf: 76:63:85:7b:55:3e:8a:d5:cb:10:7b:43:80:44:44: f1:69:b7:8c:39:e8:4c:a4:c7:cf:07:87:ef:c6:0d: f7:dd:68:a8:23:2c:08:b4:10:92:fd:e3:2a:6f:82: 1d:05:a2:eb:c3:62:48:e7:7b:38:0f:9c:57:98:43: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E4:AE:24:A7:99:0A:F6:F6:24:25:11:AC:FD:11:31:38:5C:49:1C X509v3 Authority Key Identifier: keyid:B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:41:6e:1a:d3:b3:5f:3f:af:a4:26:58:7d:3b:29:19:39:fe: a1:a7:98:c7:05:ff:ff:6e:c3:93:61:ee:5f:e4:7c:2c:a7:38: 5e:7b:55:02:ca:ef:1a:1b:85:9d:80:91:0f:94:8f:1a:76:69: d1:37:87:62:ff:71:d3:ef:9b:b8:79:9e:35:35:58:9d:7b:ea: b0:92:cd:d0:73:7c:27:09:65:ce:0f:91:53:c1:3c:5f:c8:55: a3:7a:c8:7f:4f:73:56:95:45:20:fc:25:13:f0:ab:96:12:7c: 1d:63:36:a0:a7:97:22:9b:47:ba:e4:ab:f3:97:bd:9d:a8:8b: 0d:ad:8d:f8:8a:39:75:bf:cd:da:49:f1:bc:60:70:42:cf:62: c9:c5:1e:39:57:4e:41:92:3c:8b:6c:16:e8:86:e0:1b:1d:31: 81:5b:3b:9e:a4:17:a9:68:33:e8:d0:4c:70:83:d5:c4:66:e6: 4d:75:dd:9a:ce:c1:01:23:2e:ac:4d:73:dc:ac:cc:2a:47:6e: 70:d3:67:94:bd:e5:2a:e7:2e:aa:49:77:b3:01:c3:ac:f1:20: f2:b5:ee:f8:b2:67:3e:59:1a:0b:e0:e2:eb:70:c5:78:a2:7c: ff:36:5e:d5:0b:21:b8:29:0e:6c:3e:f3:77:10:26:44:ef:87: 0f:da:e2:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkUwNzExMC8GA1UEBRMoQjk2N0QyRUU4MkI3QUVFQjJDNTQxQ0E5QTUxMDNCNUEw Q0E2RTcxMjAeFw0yNTA3MTkwODAwMDhaFw0yNTA3MjYwODAwMDdaMBgxFjAUBgNV BAMTDTY4N2I1MDg4LTEwZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwZTel1BfibFYp2NW/Lmeyi4oeEaP7BTyniFspZQZEeZZDIJaFrnaSJLlOiNJh 5sMrjb0P8o04Ab3mNeLhnqnRFAq2jOvRl8/mwVvPYYMRSFRP/ax9zmT3gj1i3cG+ d4yrFGn9wUE0vx5zblAkL25R7IBUSjtWQXsi7Fh3g8MwAfO3bRHtteg7cQzc20jK tDEMB8PQrwxruDkvVg6kD5XvLOPXzMmaKaDjp3uMr5H1ffWdWpDgcbt6aNeEL2d/ s8MQv3ZjhXtVPorVyxB7Q4BERPFpt4w56Eykx88Hh+/GDffdaKgjLAi0EJL94ypv gh0FouvDYkjnezgPnFeYQ/w3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjOSuJKeZ Cvb2JCURrP0RMThcSRwwHwYDVR0jBBgwFoAUuWfS7oK3russVByppRA7Wgym5xIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RTA3LzZCNTZEMUZBMjQx QTExRjA4RjA0QkU0NEM0RjlBRTAyL3VXZlM3b0szcnVzc1ZCeXBwUkE3V2d5bTV4 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdVdmUzdvSzNydXNzVkJ5cHBSQTdXZ3ltNXhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RTA3LzZCNTZEMUZBMjQxQTExRjA4RjA0QkU0NEM0RjlBRTAyL3VXZlM3b0szcnVz c1ZCeXBwUkE3V2d5bTV4SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGdBbhrTs18/r6QmWH07KRk5/qGnmMcF//9uw5Nh7l/kfCynOF57VQLK 7xobhZ2AkQ+Ujxp2adE3h2L/cdPvm7h5njU1WJ176rCSzdBzfCcJZc4PkVPBPF/I VaN6yH9Pc1aVRSD8JRPwq5YSfB1jNqCnlyKbR7rkq/OXvZ2oiw2tjfiKOXW/zdpJ 8bxgcELPYsnFHjlXTkGSPItsFuiG4BsdMYFbO56kF6loM+jQTHCD1cRm5k113ZrO wQEjLqxNc9yszCpHbnDTZ5S95SrnLqpJd7MBw6zxIPK17viyZz5ZGgvg4utwxXii fP82XtULIbgpDmw+83cQJkTvhw/a4p0= -----END CERTIFICATE-----Generated at Sun Jul 20 11:01:57 2025 by rpki-client