$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json) Hash identifier: MaKK+XBo1mujKqyqIA1d8Pgaq3j8oR4g+oFC/pHcy1E= Subject key identifier: A6:BF:A2:05:82:0C:85:47:16:2D:9A:99:89:82:F1:13:7D:3C:D3:C1 Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft Manifest number: 0240 Signing time: Tue 09 Sep 2025 01:57:46 +0000 Manifest this update: Tue 09 Sep 2025 01:57:46 +0000 Manifest next update: Tue 16 Sep 2025 01:57:46 +0000 Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: ZRtifuF0G+gTXUhZP5ACj80vKItQq2Sz+hbU1ISYlHQ=) 2: B288EC9C870811F0A371DD81C4F9AE02.roa (hash: cVthiOIDdLWiZzDyUtVlwdbqz40uE9Bzt6WIOO6ykNM=) 3: 35CBA9EC70D311F08BF5B035C4F9AE02.roa (hash: 6GCQQu7D+v15FcvMPj4zlPGTd0KwDANgs9qpWDNZhN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: Sep 9 01:57:46 2025 GMT Not After : Sep 16 01:57:46 2025 GMT Subject: CN=68bf899a-54eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:8c:62:32:f9:49:98:7f:6d:a8:93:64:99: 7c:5e:61:aa:74:a2:69:f1:48:bc:fc:61:09:27:a1: 5e:ff:86:c8:8f:58:36:9c:9f:8c:9c:53:6a:d5:08: 15:b4:b1:75:c0:48:04:a3:bd:05:45:2a:53:ae:d5: f7:13:32:ab:e1:2b:75:08:a1:f0:cc:29:0c:d1:87: ee:29:f6:5d:17:c9:46:7b:67:75:4b:d8:ba:7f:ec: 9e:8c:de:bb:69:24:0a:54:18:a4:83:9a:a8:4e:09: 19:02:8e:83:7f:9d:42:d4:5b:ca:fa:9f:69:6d:31: b7:e8:85:d3:67:dd:c0:86:87:88:ef:02:87:a5:4a: 7b:94:30:ce:ef:da:b8:b7:fc:6b:16:2f:db:11:64: 1f:45:ad:ae:47:90:eb:cd:cc:24:bc:dd:61:2d:93: 72:de:6c:69:08:69:70:a1:f3:6c:e9:97:31:f3:cc: b7:03:6d:e2:d2:83:bc:ff:83:a6:a0:d0:af:3b:93: 34:55:09:15:2f:35:eb:6d:74:69:92:7e:22:d0:f1: 0a:3b:2b:12:42:f6:9e:ae:c2:75:9d:6b:49:4a:e5: 59:06:af:59:2d:57:4b:b3:38:84:db:16:23:0b:15: 89:1c:a3:1a:3d:7f:f2:40:79:c5:7f:0a:2f:48:7c: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BF:A2:05:82:0C:85:47:16:2D:9A:99:89:82:F1:13:7D:3C:D3:C1 X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:60:1e:6d:1f:ad:3d:ac:c0:55:ec:8a:fc:39:c0:90:7d:ed: cb:77:c0:bf:de:92:a7:fa:e7:fd:d0:40:46:e6:16:73:68:5a: a8:d6:a3:a9:47:89:d5:d9:f1:4d:da:f6:8e:5a:4c:4f:c9:1c: 27:cc:ab:a6:f4:2c:f9:aa:7c:36:81:8f:e4:5c:8b:da:3a:3c: f4:f7:31:43:1a:e6:3e:47:45:dc:c6:ed:63:85:b4:7e:50:f2: 14:2c:5e:85:7d:01:40:dc:30:23:03:7f:a1:ac:5b:3d:66:ee: b7:9e:45:a8:ba:4c:2e:01:df:00:c1:25:a8:ce:b9:c1:ba:09: b6:3a:e8:86:90:d4:ca:28:39:db:95:e2:26:2a:65:2e:a7:28: 3c:3f:d7:7b:0e:dc:e5:94:bd:ef:23:90:35:ef:78:e1:f3:d1: 10:f8:7d:09:ca:88:36:94:2c:21:66:f3:8f:cd:1c:60:ce:8f: 46:45:b3:b9:e5:bd:0d:84:b5:d8:08:72:02:54:60:36:cd:0d: ce:de:f0:b9:c2:41:45:fd:e8:e8:56:49:3b:e8:e1:70:ff:4c: 61:b0:31:36:88:2f:1c:1c:81:f1:88:9d:9e:11:e0:77:c2:71: f4:9b:9f:ad:ab:0e:34:69:5e:13:4c:18:72:be:82:9c:31:21: dc:01:bc:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjUwOTA5MDE1NzQ2WhcNMjUwOTE2MDE1NzQ2WjAYMRYwFAYD VQQDEw02OGJmODk5YS01NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr86MYjL5SZh/baiTZJl8XmGqdKJp8Ui8/GEJJ6Fe/4bIj1g2nJ+MnFNq1QgV tLF1wEgEo70FRSpTrtX3EzKr4St1CKHwzCkM0YfuKfZdF8lGe2d1S9i6f+yejN67 aSQKVBikg5qoTgkZAo6Df51C1FvK+p9pbTG36IXTZ93AhoeI7wKHpUp7lDDO79q4 t/xrFi/bEWQfRa2uR5DrzcwkvN1hLZNy3mxpCGlwofNs6Zcx88y3A23i0oO8/4Om oNCvO5M0VQkVLzXrbXRpkn4i0PEKOysSQvaersJ1nWtJSuVZBq9ZLVdLsziE2xYj CxWJHKMaPX/yQHnFfwovSHwlTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKa/ogWC DIVHFi2amYmC8RN9PNPBMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkFENi9ENjRGNEU5QzNBRjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6 LUY2cjNRcXRhQlVqbFM1bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNYB5tH609rMBV7Ir8OcCQfe3Ld8C/3pKn+uf90EBG5hZzaFqo1qOp R4nV2fFN2vaOWkxPyRwnzKum9Cz5qnw2gY/kXIvaOjz09zFDGuY+R0Xcxu1jhbR+ UPIULF6FfQFA3DAjA3+hrFs9Zu63nkWoukwuAd8AwSWozrnBugm2OuiGkNTKKDnb leImKmUupyg8P9d7DtzllL3vI5A173jh89EQ+H0Jyog2lCwhZvOPzRxgzo9GRbO5 5b0NhLXYCHICVGA2zQ3O3vC5wkFF/ejoVkk76OFw/0xhsDE2iC8cHIHxiJ2eEeB3 wnH0m5+tqw40aV4TTBhyvoKcMSHcAbwE -----END CERTIFICATE-----Generated at Tue Sep 9 17:07:34 2025 by rpki-client