$ rpki-client -vvf rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft File: uD4K6Pgr-gYejEvHvnPpuANUDWM.mft (raw, json) Hash identifier: AqazDmTT+ShFW65174RC6a1VNXnC/tJeKNeVluJRPVw= Subject key identifier: C3:31:1E:66:2D:4B:58:BC:64:6C:69:29:68:4E:DC:1A:47:2D:DF:EB Authority key identifier: B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63 Certificate issuer: /CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63 Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft Manifest number: 033A Signing time: Mon 21 Jul 2025 01:21:11 +0000 Manifest this update: Mon 21 Jul 2025 01:21:11 +0000 Manifest next update: Mon 28 Jul 2025 01:21:11 +0000 Files and hashes: 1: uD4K6Pgr-gYejEvHvnPpuANUDWM.crl (hash: /tPpDu5xU/4V9R9IyHYgkIOIyrTg09IS8d/kNV9xiyk=) 2: 2EBCD6C6CCF311EC86719729C4F9AE02.roa (hash: erIavO1BEA6yuxW1Ddxiq0YuolkG7uHYxff0nzGvNyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180386, serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63 Validity Not Before: Jul 21 01:21:11 2025 GMT Not After : Jul 28 01:21:11 2025 GMT Subject: CN=687d9607-2d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:03:07:e5:70:e9:13:63:5a:e7:b9:1c:cc: b0:b6:94:7c:5e:f3:ab:1c:9a:03:4c:e3:4c:f5:fd: 90:85:7b:24:23:16:14:ec:de:fb:44:12:9b:bf:16: 4e:70:24:e4:61:b9:c7:58:af:80:e1:8b:d5:ed:16: c5:62:93:db:0b:61:01:c3:ac:8a:f3:46:66:67:32: 47:ef:5c:63:f9:38:e6:8f:77:e3:c1:ff:84:10:e2: 49:2b:47:88:f8:87:29:04:a5:d5:1e:97:0c:77:b7: b4:b6:60:eb:31:39:80:9c:a6:c5:fe:30:37:02:64: 6e:b3:ba:c0:69:0f:49:bd:e1:51:92:fe:06:c0:b0: bb:68:f6:37:9c:22:77:fd:df:b9:b4:5d:5b:28:a6: 8b:a6:a0:f3:1f:90:1f:ab:b6:7c:a3:e2:22:b1:11: 31:08:36:09:f7:87:ea:21:fe:23:35:05:fa:9f:64: 4a:33:a4:de:14:41:49:3d:80:36:56:27:6f:74:d7: 2a:51:fe:81:b6:df:2d:11:5f:2c:81:a2:44:a0:bf: e9:2d:ec:aa:83:fe:78:bc:4a:5d:6d:46:c1:85:d2: 23:ad:f9:a9:f0:45:84:53:cb:bd:66:36:cf:86:30: 8e:37:0a:62:b0:9e:d4:aa:b1:eb:34:1d:86:28:f6: 7f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:31:1E:66:2D:4B:58:BC:64:6C:69:29:68:4E:DC:1A:47:2D:DF:EB X509v3 Authority Key Identifier: keyid:B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:29:a8:d6:9a:28:af:6d:95:47:82:3c:e9:a0:9e:9c:b2:41: b9:ab:e4:9f:e5:5a:93:e6:15:66:85:5b:f9:ab:b1:45:38:3a: 69:15:1f:1e:b3:0b:da:0a:0e:64:23:1a:24:10:4a:fa:1c:ec: 62:85:3b:b5:b1:3b:8e:75:8e:08:71:26:54:9c:f1:b4:99:68: e4:1b:ef:e5:07:02:04:be:3d:5d:f3:b8:57:87:5e:bd:71:34: 5e:7d:87:51:00:e6:55:3c:17:cb:ac:94:cf:8e:eb:ce:a4:7b: 9c:2f:ec:69:8b:77:a4:41:c7:35:2d:bc:38:24:7f:93:85:48: 81:ef:b9:85:ce:77:ee:ac:9c:b7:a5:d1:84:b9:ea:f7:d4:cf: 5d:e2:8a:4d:d3:f4:5a:a0:f1:b0:9e:b2:77:30:59:1a:4f:22: 2b:c1:67:0e:6f:37:81:f9:49:0d:d4:21:b9:0e:40:ee:01:34: a3:fa:be:c2:73:f4:10:22:b3:a0:2d:a8:90:27:f4:b3:bd:49: 18:58:53:ca:3a:30:8f:5a:69:58:d2:19:cc:e0:a6:88:a2:a5: 5a:c6:b9:f7:c2:68:3d:5a:7b:4a:e9:c8:d1:b4:b2:71:39:b5: d5:6f:f7:76:fb:a8:7d:69:9d:0a:6a:8a:d2:fc:d1:d9:57:50: 5a:d3:ce:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzODYxMTAvBgNVBAUTKEI4M0UwQUU4RjgyQkZBMDYxRThDNEJDN0JFNzNFOUI4 MDM1NDBENjMwHhcNMjUwNzIxMDEyMTExWhcNMjUwNzI4MDEyMTExWjAYMRYwFAYD VQQDEw02ODdkOTYwNy0yZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8IDB+Vw6RNjWue5HMywtpR8XvOrHJoDTONM9f2QhXskIxYU7N77RBKbvxZO cCTkYbnHWK+A4YvV7RbFYpPbC2EBw6yK80ZmZzJH71xj+Tjmj3fjwf+EEOJJK0eI +IcpBKXVHpcMd7e0tmDrMTmAnKbF/jA3AmRus7rAaQ9JveFRkv4GwLC7aPY3nCJ3 /d+5tF1bKKaLpqDzH5Afq7Z8o+IisRExCDYJ94fqIf4jNQX6n2RKM6TeFEFJPYA2 VidvdNcqUf6Btt8tEV8sgaJEoL/pLeyqg/54vEpdbUbBhdIjrfmp8EWEU8u9ZjbP hjCONwpisJ7UqrHrNB2GKPZ/IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMxHmYt S1i8ZGxpKWhO3BpHLd/rMB8GA1UdIwQYMBaAFLg+Cuj4K/oGHoxLx75z6bgDVA1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDM4Ni8wNkY4NDA4Q0ND RjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1nWWVqRXZIdm5QcHVBTlVE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VENEs2UGdyLWdZZWpFdkh2blBwdUFOVURXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDM4Ni8wNkY4NDA4Q0NDRjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1n WWVqRXZIdm5QcHVBTlVEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZKajWmiivbZVHgjzpoJ6cskG5q+Sf5VqT5hVmhVv5q7FFODppFR8e swvaCg5kIxokEEr6HOxihTu1sTuOdY4IcSZUnPG0mWjkG+/lBwIEvj1d87hXh169 cTRefYdRAOZVPBfLrJTPjuvOpHucL+xpi3ekQcc1Lbw4JH+ThUiB77mFznfurJy3 pdGEuer31M9d4opN0/RaoPGwnrJ3MFkaTyIrwWcObzeB+UkN1CG5DkDuATSj+r7C c/QQIrOgLaiQJ/SzvUkYWFPKOjCPWmlY0hnM4KaIoqVaxrn3wmg9WntK6cjRtLJx ObXVb/d2+6h9aZ0KaorS/NHZV1Ba085k -----END CERTIFICATE-----Generated at Mon Jul 21 07:11:00 2025 by rpki-client