$ rpki-client -vvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft File: UKsTEAVD9kbAxVN13vhQXRTzZrg.mft (raw, json) Hash identifier: DX8qaRpjQydf2EB2Ix47CLmKOyw+/IuPc9peH5F5v6M= Subject key identifier: 20:D4:A6:9E:E6:46:A2:09:AC:F8:A2:4E:FA:B3:41:B8:31:EE:4D:CF Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8 Certificate issuer: /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8 Certificate serial: 0B63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft Manifest number: 0B5D Signing time: Sun 24 Aug 2025 19:05:31 +0000 Manifest this update: Sun 24 Aug 2025 19:05:31 +0000 Manifest next update: Sun 31 Aug 2025 19:05:31 +0000 Files and hashes: 1: UKsTEAVD9kbAxVN13vhQXRTzZrg.crl (hash: rMhC3o5s9KGj6Ud1GXyN3SHyayIvLDK/pRwsdvItH0Q=) 2: 74D2ABEE39F811EAA4343534C4F9AE02.roa (hash: WNF8DvI+W4AUYThET4ebOd4+s48ZJAgIRPErXZ/X2b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2915 (0xb63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911270F, serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8 Validity Not Before: Aug 24 19:05:31 2025 GMT Not After : Aug 31 19:05:31 2025 GMT Subject: CN=68ab627b-86f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:fb:6d:7d:16:4f:eb:a9:be:9b:65:62:44: 1f:48:ac:29:53:b0:b3:f9:68:32:0a:bd:31:35:0e: 1f:26:8a:89:20:a8:78:43:c9:10:dd:de:08:eb:0e: fd:74:ad:cc:e0:87:9a:46:04:55:78:98:06:17:85: 69:34:4e:b4:fb:55:a7:38:3f:2c:44:2e:f1:ae:61: d9:a2:fa:73:ca:b9:c9:8f:5b:6d:25:4f:ef:a5:de: 79:16:72:bc:18:40:70:12:bf:cf:25:90:9a:17:bd: c6:dc:6b:ba:e5:04:fa:11:1b:b6:65:46:28:a4:a7: 23:89:c4:f2:d8:e3:b3:01:02:e7:88:e1:18:35:59: 78:f3:0e:d4:ea:59:53:87:83:cc:f3:6c:c1:0a:c0: 15:7b:c6:bf:82:55:62:1c:49:7b:09:a2:a7:e0:80: 32:00:ee:64:c7:f8:2a:44:3d:f1:6b:3b:3d:50:2e: dd:46:66:f7:6c:0a:6d:71:d8:a2:f2:b2:77:08:83: 9c:4b:2b:f4:7e:2a:33:c1:fd:78:ee:43:f3:8d:d0: 7a:c6:97:67:0d:e8:6b:b4:3e:e1:25:3d:2b:9b:97: 86:e7:47:c5:2e:3d:18:74:c6:1a:52:34:71:25:a3: d4:e4:27:02:bf:0f:53:da:1f:57:59:aa:be:0d:ce: 09:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D4:A6:9E:E6:46:A2:09:AC:F8:A2:4E:FA:B3:41:B8:31:EE:4D:CF X509v3 Authority Key Identifier: keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:55:01:af:45:e2:00:b1:b1:ca:a7:48:46:28:ef:3e:ea:ad: 8a:d7:b4:f5:cd:a0:97:95:55:28:15:4f:96:a7:f3:f2:ce:f5: 4b:c3:30:34:bb:77:7c:0f:2e:fa:26:f9:d2:a4:f7:25:05:fc: 4f:85:53:b0:8e:14:81:57:5d:ae:ba:70:e0:c9:67:95:ef:f1: 9b:7d:87:b3:c5:b7:77:68:83:20:b6:13:f9:db:93:5e:5e:6d: f6:0a:4f:fb:e2:4b:f0:41:95:8e:f9:f9:c1:64:ce:97:b0:ff: 4a:c1:84:e8:41:02:51:20:02:f4:db:08:fa:f5:e2:4c:b7:bb: ee:56:f3:ec:d2:23:4c:a4:8e:08:e8:93:81:3a:f5:19:80:0e: 0d:78:1f:b3:7c:16:cc:4c:c9:ad:52:28:bb:f7:b5:22:23:48: 5b:6e:ea:33:23:4a:2c:5e:06:b8:89:db:0e:02:77:c9:8c:82: 08:38:8d:a5:86:cc:fd:57:81:f0:4d:2f:9b:0e:8b:64:1e:c5: ac:e0:48:99:1a:e0:84:fe:0e:4e:ed:4d:d8:51:d9:3d:f9:c1: cb:4b:af:a2:0f:ea:63:2f:58:77:6d:35:d4:66:d2:29:09:00: 70:da:21:64:6d:40:78:9e:95:47:9f:71:83:12:f1:89:28:04: 4c:23:57:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MEYxMTAvBgNVBAUTKDUwQUIxMzEwMDU0M0Y2NDZDMEM1NTM3NURFRjg1MDVE MTRGMzY2QjgwHhcNMjUwODI0MTkwNTMxWhcNMjUwODMxMTkwNTMxWjAYMRYwFAYD VQQDEw02OGFiNjI3Yi04NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYz7bX0WT+upvptlYkQfSKwpU7Cz+WgyCr0xNQ4fJoqJIKh4Q8kQ3d4I6w79 dK3M4IeaRgRVeJgGF4VpNE60+1WnOD8sRC7xrmHZovpzyrnJj1ttJU/vpd55FnK8 GEBwEr/PJZCaF73G3Gu65QT6ERu2ZUYopKcjicTy2OOzAQLniOEYNVl48w7U6llT h4PM82zBCsAVe8a/glViHEl7CaKn4IAyAO5kx/gqRD3xazs9UC7dRmb3bAptcdii 8rJ3CIOcSyv0fiozwf147kPzjdB6xpdnDehrtD7hJT0rm5eG50fFLj0YdMYaUjRx JaPU5CcCvw9T2h9XWaq+Dc4J2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDUpp7m RqIJrPiiTvqzQbgx7k3PMB8GA1UdIwQYMBaAFFCrExAFQ/ZGwMVTdd74UF0U82a4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwRi8wNUQ4MkVFMDM5 RjcxMUVBOTY3RUJBMkVDNEY5QUUwMi9VS3NURUFWRDlrYkF4Vk4xM3ZoUVhSVHpa cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLc1RFQVZEOWtiQXhWTjEzdmhRWFJUelpyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjcwRi8wNUQ4MkVFMDM5RjcxMUVBOTY3RUJBMkVDNEY5QUUwMi9VS3NURUFWRDlr YkF4Vk4xM3ZoUVhSVHpacmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARVQGvReIAsbHKp0hGKO8+6q2K17T1zaCXlVUoFU+Wp/PyzvVLwzA0 u3d8Dy76JvnSpPclBfxPhVOwjhSBV12uunDgyWeV7/GbfYezxbd3aIMgthP525Ne Xm32Ck/74kvwQZWO+fnBZM6XsP9KwYToQQJRIAL02wj69eJMt7vuVvPs0iNMpI4I 6JOBOvUZgA4NeB+zfBbMTMmtUii797UiI0hbbuozI0osXga4idsOAnfJjIIIOI2l hsz9V4HwTS+bDotkHsWs4EiZGuCE/g5O7U3YUdk9+cHLS6+iD+pjL1h3bTXUZtIp CQBw2iFkbUB4npVHn3GDEvGJKARMI1cE -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:55 2025 by rpki-client