$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json) Hash identifier: DDyMGhU3dwFSQjCFtBI7KV/v4EDYwhAW7Lh4Ff61GM8= Subject key identifier: E0:C5:82:BB:5D:32:20:BB:34:2A:32:24:D4:3A:A6:B4:DC:63:37:9C Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft Manifest number: 07E9 Signing time: Fri 18 Jul 2025 21:17:00 +0000 Manifest this update: Fri 18 Jul 2025 21:17:00 +0000 Manifest next update: Fri 25 Jul 2025 21:17:00 +0000 Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: Qh6NPPRxuHbUyFUYy8/1bCMeweixcTqSbnDadiSRk/0=) 2: 709F917AF74111EF98C99938C4F9AE02.roa (hash: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU=) 3: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: G5UBtJsfZQZ4SV+yPTNK/ejUFIGmrip9sZG7FP0b4Cg=) 4: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: ux6FaGhfWyv2H1NDOSXEk7LrVXGwR7MCaj2E49kXMHg=) 5: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: 2qfdADfdo36JxITYdf4pd34OcKO4BbP5IH9WNGohmvk=) 6: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Validity Not Before: Jul 18 21:17:00 2025 GMT Not After : Jul 25 21:17:00 2025 GMT Subject: CN=687ab9cc-993a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6c:c2:70:fa:a8:ac:e9:92:8a:79:30:40:42: 89:69:6e:cf:2a:00:17:b5:ee:cf:cd:7d:d6:d1:ca: c9:33:2a:fb:28:06:33:bd:8a:08:d6:f0:1b:b6:61: 1c:53:9c:11:30:9f:2a:39:9f:21:8d:3b:b1:b6:3a: e5:3d:69:4d:6e:20:d3:2f:0f:51:26:71:09:6f:5d: b2:24:a6:6a:97:37:a5:cd:09:9f:42:46:36:dc:a5: 4b:57:2c:68:c5:85:32:e0:d2:37:e9:d8:a1:be:16: 24:22:c6:15:0f:2c:61:f9:39:f4:8a:39:77:92:8c: 74:1a:34:e7:58:42:73:e8:a5:71:6c:e1:41:bf:4a: 26:2f:38:44:10:60:7b:92:d9:8f:87:92:ef:61:6c: bb:e2:fb:08:88:6c:d8:53:db:72:f4:76:b7:72:eb: 89:2b:21:55:1c:ea:31:be:7a:7f:3f:c1:27:bd:51: 2d:0d:fd:d5:fd:a7:aa:a0:ef:26:d8:43:2d:05:c3: df:38:e7:00:2a:b8:bd:21:f0:54:eb:29:b3:f9:fc: 98:c3:f9:16:d8:44:f3:5b:2c:b7:e7:ca:08:bd:40: 5d:c4:58:5d:19:f7:bb:6d:fa:bf:00:c7:71:43:c4: 59:33:d0:6c:1b:ce:c5:cd:20:87:52:92:24:a6:d0: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C5:82:BB:5D:32:20:BB:34:2A:32:24:D4:3A:A6:B4:DC:63:37:9C X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a7:8e:f8:cf:46:35:41:b7:13:d3:86:fa:33:ab:18:03:d9: e9:2e:28:ad:48:7f:34:36:45:c4:78:00:df:cc:6e:a0:05:6d: 7c:31:0f:fa:0b:7a:d5:f8:cb:ef:47:3b:eb:1f:6e:fe:33:9c: 0d:c3:0c:e9:2c:d9:34:5c:03:d0:f6:5f:57:78:c8:5a:49:fe: 09:9c:36:e2:27:d8:34:c8:ed:32:95:d4:53:8a:0f:a2:0d:0f: 68:75:9e:49:78:c9:61:c1:d4:ef:28:bf:d8:fa:ef:7f:c2:86: 50:b5:12:38:05:6f:51:76:e2:2f:4c:d4:d2:b2:e8:e4:de:79: bf:57:36:d0:94:aa:e4:02:d7:6d:fa:42:f2:d8:ef:4f:3c:c2: e9:7f:dc:f6:4c:98:e2:46:88:d4:00:c3:47:b7:55:89:a4:20: e3:04:dd:76:d1:0b:3c:1c:d7:bf:13:16:c0:dd:3b:8e:05:71: 86:53:23:53:8c:b0:05:1c:17:bc:0c:43:3b:66:33:fe:85:ea: 43:7f:55:d9:34:58:6c:6e:d1:bc:a4:f3:71:16:63:1b:5d:0e: 4a:d6:ec:93:27:95:ad:41:84:32:66:0a:46:67:6e:ce:d3:47: f9:f5:f5:17:32:6a:37:db:e0:b2:f5:3e:5a:df:b4:66:a0:5f: 44:12:9d:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjUwNzE4MjExNzAwWhcNMjUwNzI1MjExNzAwWjAYMRYwFAYD VQQDEw02ODdhYjljYy05OTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGzCcPqorOmSinkwQEKJaW7PKgAXte7PzX3W0crJMyr7KAYzvYoI1vAbtmEc U5wRMJ8qOZ8hjTuxtjrlPWlNbiDTLw9RJnEJb12yJKZqlzelzQmfQkY23KVLVyxo xYUy4NI36dihvhYkIsYVDyxh+Tn0ijl3kox0GjTnWEJz6KVxbOFBv0omLzhEEGB7 ktmPh5LvYWy74vsIiGzYU9ty9Ha3cuuJKyFVHOoxvnp/P8EnvVEtDf3V/aeqoO8m 2EMtBcPfOOcAKri9IfBU6ymz+fyYw/kW2ETzWyy358oIvUBdxFhdGfe7bfq/AMdx Q8RZM9BsG87FzSCHUpIkptD1ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODFgrtd MiC7NCoyJNQ6prTcYzecMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NURFNS9FM0VENjVEOEY0QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENy clZvNW5KMzFfcGxpcHQ2UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKp474z0Y1QbcT04b6M6sYA9npLiitSH80NkXEeADfzG6gBW18MQ/6 C3rV+MvvRzvrH27+M5wNwwzpLNk0XAPQ9l9XeMhaSf4JnDbiJ9g0yO0yldRTig+i DQ9odZ5JeMlhwdTvKL/Y+u9/woZQtRI4BW9RduIvTNTSsujk3nm/VzbQlKrkAtdt +kLy2O9PPMLpf9z2TJjiRojUAMNHt1WJpCDjBN120Qs8HNe/ExbA3TuOBXGGUyNT jLAFHBe8DEM7ZjP+hepDf1XZNFhsbtG8pPNxFmMbXQ5K1uyTJ5WtQYQyZgpGZ27O 00f59fUXMmo32+Cy9T5a37RmoF9EEp3v -----END CERTIFICATE-----Generated at Sun Jul 20 12:08:08 2025 by rpki-client