$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft File: uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json) Hash identifier: GFPejHQYbEuMCKGPK1UeK8qitJ8HQ7KsLEH3y45nPNs= Subject key identifier: 72:F7:D6:E6:88:B9:AF:10:A3:CB:5B:B0:DF:3C:F2:5E:EA:DC:35:2B Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Certificate serial: 0816 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft Manifest number: 07F8 Signing time: Fri 18 Jul 2025 21:15:39 +0000 Manifest this update: Fri 18 Jul 2025 21:15:39 +0000 Manifest next update: Fri 25 Jul 2025 21:15:39 +0000 Files and hashes: 1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: 5reY2KvxGuh++NmwPp3SMbJVUoG8Pq69h/8BdmmeFxE=) 2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: RcdkSPfjnAmz3uVP4FBhLTQ0GFBSdezmu4kQPa/+yaY=) 3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: A1w8tHzqGX+jD/ISNBe9aPcQuL2J3HJQzhH/YAzCdq0=) 4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XTLM9Il3d4SVArTDp/CLgDo1h6RlBLONdep9WAa5H5I=) 5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: cXIuMnEWUiuT4kupzUNHJo4zj/W45Qb9cwkr7yvw0vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Validity Not Before: Jul 18 21:15:39 2025 GMT Not After : Jul 25 21:15:39 2025 GMT Subject: CN=687ab97b-6142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:e9:8c:2d:0f:5b:3e:55:fb:24:3b:4c:ca: a5:0b:d3:18:20:36:84:7b:b0:03:16:ce:68:b4:67: 5b:8d:76:4d:86:e8:a2:cf:ee:92:7f:5a:55:05:dc: 87:b3:a0:62:40:f9:cd:23:4e:cf:e6:8f:37:42:84: 9a:8f:5a:f5:a9:c0:fa:f3:70:b2:9d:5a:52:c4:9f: fa:d7:78:e2:43:be:7e:06:5f:91:f0:59:49:47:62: 05:ab:34:d2:a6:56:e3:45:4d:01:1a:8d:32:73:91: 21:cf:f1:52:d0:9a:77:70:01:19:fb:05:38:24:8b: 3a:a0:b0:74:70:a5:4b:19:79:9d:c2:5c:a8:f8:cd: 75:2d:06:10:cd:07:4c:aa:e5:56:e3:b6:10:e2:de: c5:1b:28:99:05:d5:dd:de:a0:d8:04:66:a4:94:de: c1:bf:88:21:89:df:27:ae:0a:2b:21:3a:5e:6f:81: 30:f3:4c:f5:8e:81:01:63:6a:29:2f:e2:4f:e5:47: 16:45:62:69:a9:5f:bf:ff:5c:e8:4b:05:a4:4c:e4: 7c:3c:8b:d6:8e:a9:34:c9:37:49:65:ca:02:f8:a8: af:4d:cc:50:c8:f5:7a:b3:3e:5c:75:db:ae:0d:db: 4f:8b:47:06:ab:0e:28:a4:79:be:87:bc:a1:2d:17: 36:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F7:D6:E6:88:B9:AF:10:A3:CB:5B:B0:DF:3C:F2:5E:EA:DC:35:2B X509v3 Authority Key Identifier: keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:70:a6:77:7b:c5:13:06:39:d1:7a:d3:17:5f:33:65:58:3d: 64:21:df:d3:34:9a:e5:a6:1a:32:cc:23:d8:5e:37:a2:41:b6: 61:37:24:84:1f:2d:6c:b9:f9:e6:7f:7e:bc:d8:a6:a1:d9:1a: 13:97:c4:11:5f:2a:66:2b:01:09:3f:6b:26:a6:2c:66:a4:c8: 42:b3:25:46:f9:f5:83:a2:7f:cd:98:1c:24:e7:a4:9c:a1:85: 98:c3:77:71:22:c1:0f:e2:99:1e:4d:2b:54:52:e9:70:18:7e: a8:55:7c:4d:c6:c1:10:a7:ec:c4:8c:4b:79:60:f6:05:16:2f: 1c:42:76:29:ee:f0:27:c9:b4:d5:6e:f7:d4:cc:87:87:92:ec: f2:45:8e:61:fa:a2:35:87:29:c3:ff:1b:f2:47:04:89:4f:47: 84:0d:4a:db:91:de:8e:0f:07:aa:81:a5:2b:cf:12:e2:8a:e3: 15:34:84:12:09:b5:f3:cb:e2:b5:ed:26:5b:b7:66:ed:4c:03: 2f:7b:2d:cb:db:d2:f5:93:42:34:68:a5:ad:ef:01:bb:d6:dd: 6a:7a:f7:6e:84:f2:f9:ae:e3:13:43:ee:58:16:f2:3d:20:64: 13:d0:de:2d:8e:68:29:b1:ba:84:6e:90:d5:05:c7:2c:38:e9: 3a:a8:90:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2 QzNBMEUxQzkwHhcNMjUwNzE4MjExNTM5WhcNMjUwNzI1MjExNTM5WjAYMRYwFAYD VQQDEw02ODdhYjk3Yi02MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrnpjC0PWz5V+yQ7TMqlC9MYIDaEe7ADFs5otGdbjXZNhuiiz+6Sf1pVBdyH s6BiQPnNI07P5o83QoSaj1r1qcD683CynVpSxJ/613jiQ75+Bl+R8FlJR2IFqzTS plbjRU0BGo0yc5Ehz/FS0Jp3cAEZ+wU4JIs6oLB0cKVLGXmdwlyo+M11LQYQzQdM quVW47YQ4t7FGyiZBdXd3qDYBGaklN7Bv4ghid8nrgorITpeb4Ew80z1joEBY2op L+JP5UcWRWJpqV+//1zoSwWkTOR8PIvWjqk0yTdJZcoC+KivTcxQyPV6sz5cdduu DdtPi0cGqw4opHm+h7yhLRc2yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL31uaI ua8Qo8tbsN888l7q3DUrMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTgzQi83OTJEMTQ4QUYyODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEpp NFVjMzJUN2o1dk5zT2c0Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlcKZ3e8UTBjnRetMXXzNlWD1kId/TNJrlphoyzCPYXjeiQbZhNySE Hy1sufnmf3682Kah2RoTl8QRXypmKwEJP2smpixmpMhCsyVG+fWDon/NmBwk56Sc oYWYw3dxIsEP4pkeTStUUulwGH6oVXxNxsEQp+zEjEt5YPYFFi8cQnYp7vAnybTV bvfUzIeHkuzyRY5h+qI1hynD/xvyRwSJT0eEDUrbkd6ODweqgaUrzxLiiuMVNIQS CbXzy+K17SZbt2btTAMvey3L29L1k0I0aKWt7wG71t1qevduhPL5ruMTQ+5YFvI9 IGQT0N4tjmgpsbqEbpDVBccsOOk6qJDg -----END CERTIFICATE-----Generated at Sun Jul 20 10:41:30 2025 by rpki-client