$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft File: uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json) Hash identifier: g15cKXFRzwivCzGFVhrO7nR7FFVYCs0HzdxMURIzl/k= Subject key identifier: 64:B7:50:43:6D:D9:60:8F:D8:B7:B7:13:3C:78:3C:5C:C8:0C:8B:8E Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft Manifest number: 0649 Signing time: Sun 20 Jul 2025 22:47:29 +0000 Manifest this update: Sun 20 Jul 2025 22:47:28 +0000 Manifest next update: Sun 27 Jul 2025 22:47:28 +0000 Files and hashes: 1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: AuHLa5nLaCWuLmhM3F9Ghsr0Z7RwCn8Ve505AIgb2VE=) 2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: Y2zv5qoN2STM8iOeHa24FYyQDvrtP06yfpXTjv2gJRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Validity Not Before: Jul 20 22:47:28 2025 GMT Not After : Jul 27 22:47:28 2025 GMT Subject: CN=687d7200-b8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:67:91:48:2c:5b:1e:e2:6e:82:0e:b1:32:d4: d6:ae:81:c5:7f:7c:8c:65:5a:7f:6a:34:a9:ec:bf: f3:c9:cf:c6:42:3b:8f:01:e4:4b:68:8d:0a:a1:b1: 67:79:95:52:dd:af:a9:7f:3b:64:50:dc:22:0e:a2: 82:ae:e2:0c:d5:ac:97:f4:38:c1:8b:2e:e5:ae:7a: 3d:da:26:94:e8:03:dd:87:a4:15:8a:46:69:08:0d: 57:a6:53:1d:77:6a:95:7d:b2:8e:ac:99:b7:8c:ab: 1d:e8:5e:82:02:cd:63:b0:88:cc:57:53:a7:4b:5d: c4:ba:74:0d:c2:db:d6:47:5b:b5:18:ec:2a:d2:7a: cf:96:69:d2:44:2f:e7:4e:c3:33:98:eb:7d:b6:42: 40:f0:b6:10:98:b3:5d:38:8a:04:2c:c5:cb:58:72: c2:14:ec:51:9b:82:82:c7:18:2a:1d:b3:b9:d0:71: 80:d1:36:1d:55:14:94:6c:c4:ee:3e:d5:4b:8d:49: 5d:8d:b8:d8:46:5a:e2:7f:fe:f0:62:73:df:ee:49: c1:67:c3:b9:b2:58:64:48:4a:55:66:1b:1c:ab:c0: 52:19:6b:b3:11:db:19:ed:d9:1e:f3:71:c0:f3:0b: 80:be:a8:35:d9:f0:64:5f:74:82:b3:87:fc:11:66: 26:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B7:50:43:6D:D9:60:8F:D8:B7:B7:13:3C:78:3C:5C:C8:0C:8B:8E X509v3 Authority Key Identifier: keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:b4:38:b0:89:26:59:4a:fd:17:46:89:8c:0b:21:b7:a5:07: 82:7b:f6:26:11:11:e0:5c:ad:2a:da:03:c5:bf:0f:af:63:38: 2b:9c:a3:7d:70:ea:2d:6e:fa:ef:e6:99:19:88:78:0f:7d:1b: fb:c0:85:28:7e:bd:0f:6d:b0:d0:da:d3:36:81:c8:95:11:9b: f2:19:90:0b:cc:28:8d:f1:27:75:9a:78:24:5e:7f:0b:e1:17: 5f:30:17:7c:c2:4e:d7:98:77:95:3a:35:77:98:e3:c0:e0:70: 7b:e5:7c:24:72:b6:c8:7c:7a:7c:74:4d:35:80:55:86:6b:2e: 35:01:26:08:0f:f1:4c:52:40:81:69:bf:61:d2:f1:36:d6:20: 05:a9:a7:53:a8:93:27:ca:88:7b:af:f8:8b:ef:bd:fb:f5:3e: 52:33:da:64:f5:7c:69:87:5f:6a:b5:86:4a:2b:a0:ef:17:a0: fc:ce:8d:3d:a6:f2:45:fa:0c:6e:cd:a9:d8:0d:43:f5:14:6a: d7:b4:a5:1a:8f:7c:70:f7:ab:71:de:e6:48:d5:81:75:ea:0b: fa:c2:3b:0e:d8:c8:fa:6f:b7:d6:d7:32:f5:27:4f:8c:15:5e: d6:9d:42:36:bf:66:51:8c:53:10:a8:c5:ed:32:e1:13:ed:8f: 7e:97:57:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy NkEwMjE3RTYwHhcNMjUwNzIwMjI0NzI4WhcNMjUwNzI3MjI0NzI4WjAYMRYwFAYD VQQDEw02ODdkNzIwMC1iOGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GeRSCxbHuJugg6xMtTWroHFf3yMZVp/ajSp7L/zyc/GQjuPAeRLaI0KobFn eZVS3a+pfztkUNwiDqKCruIM1ayX9DjBiy7lrno92iaU6APdh6QVikZpCA1XplMd d2qVfbKOrJm3jKsd6F6CAs1jsIjMV1OnS13EunQNwtvWR1u1GOwq0nrPlmnSRC/n TsMzmOt9tkJA8LYQmLNdOIoELMXLWHLCFOxRm4KCxxgqHbO50HGA0TYdVRSUbMTu PtVLjUldjbjYRlrif/7wYnPf7knBZ8O5slhkSEpVZhscq8BSGWuzEdsZ7dke83HA 8wuAvqg12fBkX3SCs4f8EWYmFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGS3UENt 2WCP2Le3Ezx4PFzIDIuOMB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2 OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDcyRC85OEJBNDZCNDk2OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5X dzNhRjhLdmpTdTRtb0NGLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3tDiwiSZZSv0XRomMCyG3pQeCe/YmERHgXK0q2gPFvw+vYzgrnKN9 cOotbvrv5pkZiHgPfRv7wIUofr0PbbDQ2tM2gciVEZvyGZALzCiN8Sd1mngkXn8L 4RdfMBd8wk7XmHeVOjV3mOPA4HB75XwkcrbIfHp8dE01gFWGay41ASYID/FMUkCB ab9h0vE21iAFqadTqJMnyoh7r/iL77379T5SM9pk9Xxph19qtYZKK6DvF6D8zo09 pvJF+gxuzanYDUP1FGrXtKUaj3xw96tx3uZI1YF16gv6wjsO2Mj6b7fW1zL1J0+M FV7WnUI2v2ZRjFMQqMXtMuET7Y9+l1fh -----END CERTIFICATE-----Generated at Tue Jul 22 12:13:21 2025 by rpki-client