$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft File: uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json) Hash identifier: UhO3ktSUY/xwahZg9w+2WpALW1m3LaKSu+sezKZTY20= Subject key identifier: DF:62:2B:36:D5:4B:CA:E8:AA:D0:D3:8D:B7:EA:E8:20:F9:BD:31:20 Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D Certificate issuer: /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft Manifest number: F0 Signing time: Fri 05 Sep 2025 05:44:01 +0000 Manifest this update: Fri 05 Sep 2025 05:44:01 +0000 Manifest next update: Fri 12 Sep 2025 05:44:01 +0000 Files and hashes: 1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: AJdii6dmTpzRrr9QbQ9174bIEGE1TuQ2IFZSaQZo7mQ=) 2: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: ziX6uRrjdN8XtvPVmk67ZGOFErPjsTpewvnUOr01Tm8=) 3: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: 3kGsoUmf1FpifCPtPS1E6u6lzuQTEBurC189TVcNMdw=) 4: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: XEN2blQh3Cs+gyEWpdkV0R6BegNBQ93goCybhrow5bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D Validity Not Before: Sep 5 05:44:01 2025 GMT Not After : Sep 12 05:44:01 2025 GMT Subject: CN=68ba78a1-99a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:55:9d:b1:2d:df:34:e4:90:8b:1d:00:9c: d8:31:c4:ef:c4:55:33:89:0c:e1:7b:d1:b4:6f:a8: 66:d6:51:88:62:75:c4:52:df:2a:11:2f:ec:61:5b: 1f:7a:dd:56:4b:dc:cc:69:9d:a0:ff:10:0a:76:47: dc:16:a2:16:6f:f8:34:8d:e5:a4:af:f1:38:44:44: 1d:92:69:de:02:d5:56:d3:fd:1b:0b:5f:8b:ce:ca: 49:19:de:91:e1:5f:cd:95:ae:72:8d:da:74:59:78: d3:0e:6e:58:1e:57:6f:f2:26:36:8f:4b:8f:4a:ab: 80:d2:b0:37:dc:5c:8c:40:24:32:ac:d6:72:2e:34: 7c:d5:59:31:63:e2:8a:af:bf:f3:51:c8:49:c1:1a: 94:a7:9d:a9:fb:b4:30:0a:a2:58:5c:21:1c:43:ba: 6b:62:fa:5d:ef:93:ab:4c:1b:25:9d:b0:77:8e:e9: 51:86:1b:cc:99:79:69:00:2e:d4:72:fa:d8:89:c7: f4:63:00:91:fe:0b:1f:eb:f2:aa:68:96:2b:b0:14: 63:20:85:1a:58:09:12:b0:52:36:a8:94:69:04:b3: 70:4a:37:06:d8:27:37:64:4e:af:aa:13:e5:b3:56: 3c:bb:62:56:87:68:4d:2e:30:0f:67:74:9f:2b:1b: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:62:2B:36:D5:4B:CA:E8:AA:D0:D3:8D:B7:EA:E8:20:F9:BD:31:20 X509v3 Authority Key Identifier: keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f5:ef:4b:19:a8:1f:8e:c4:4a:13:cb:eb:b2:b1:c2:02:35: ef:88:b2:ad:d8:c5:d7:54:6c:94:f8:6e:4f:56:03:ef:04:4d: f9:cf:a3:c1:ad:1e:dd:6d:ed:7b:3a:9e:c5:21:fd:4b:94:6f: 37:5c:ec:a0:7d:c6:a5:11:20:0a:d1:7f:4f:49:51:8c:74:40: 54:6e:ef:22:f6:01:af:36:94:65:be:43:f5:1d:43:64:ec:49: f1:9b:a9:40:b6:b6:71:90:35:d7:3f:c6:e3:c9:96:d6:da:72: 65:37:10:29:ea:c1:08:62:21:9b:0d:b9:8c:5e:ff:fb:5f:00: fc:40:0f:7e:3f:a5:7a:95:64:96:c9:6b:66:f8:8a:6d:90:97: 36:e1:cf:57:f7:79:70:b7:96:0f:73:d4:23:b4:f0:fc:64:f7: 45:b7:fc:7c:78:d2:2a:09:bb:6d:b0:86:97:d3:2c:88:eb:85: de:05:18:72:2f:0a:c6:f8:64:4d:e4:be:1b:67:e4:49:f8:44: df:57:29:b4:ab:6a:76:81:3d:28:54:53:05:94:dd:36:c9:5e: 0f:89:9f:07:3b:15:ce:f8:88:f1:0d:a1:33:63:b7:8a:61:6e: 26:c4:49:ba:17:b8:65:6e:e9:3a:ba:39:45:6d:36:29:9c:c6: 22:0d:be:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKEI4NEMyMzk2OUVENzlDMEUzMUMxM0MxNDUwMDEyRTIy NDZEM0Y5NEQwHhcNMjUwOTA1MDU0NDAxWhcNMjUwOTEyMDU0NDAxWjAYMRYwFAYD VQQDEw02OGJhNzhhMS05OWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjNVnbEt3zTkkIsdAJzYMcTvxFUziQzhe9G0b6hm1lGIYnXEUt8qES/sYVsf et1WS9zMaZ2g/xAKdkfcFqIWb/g0jeWkr/E4REQdkmneAtVW0/0bC1+LzspJGd6R 4V/Nla5yjdp0WXjTDm5YHldv8iY2j0uPSquA0rA33FyMQCQyrNZyLjR81VkxY+KK r7/zUchJwRqUp52p+7QwCqJYXCEcQ7prYvpd75OrTBslnbB3julRhhvMmXlpAC7U cvrYicf0YwCR/gsf6/KqaJYrsBRjIIUaWAkSsFI2qJRpBLNwSjcG2Cc3ZE6vqhPl s1Y8u2JWh2hNLjAPZ3SfKxvukwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9iKzbV S8roqtDTjbfq6CD5vTEgMB8GA1UdIwQYMBaAFLhMI5ae15wOMcE8FFABLiJG0/lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wMDUwMUZEMjIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5BNHh3VHdVVUFFdUlrYlQt VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VFd2pscDdYbkE0eHdUd1VVQUV1SWtiVC1VMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wMDUwMUZEMjIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5B NHh3VHdVVUFFdUlrYlQtVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA99e9LGagfjsRKE8vrsrHCAjXviLKt2MXXVGyU+G5PVgPvBE35z6PB rR7dbe17Op7FIf1LlG83XOygfcalESAK0X9PSVGMdEBUbu8i9gGvNpRlvkP1HUNk 7Enxm6lAtrZxkDXXP8bjyZbW2nJlNxAp6sEIYiGbDbmMXv/7XwD8QA9+P6V6lWSW yWtm+IptkJc24c9X93lwt5YPc9QjtPD8ZPdFt/x8eNIqCbttsIaX0yyI64XeBRhy LwrG+GRN5L4bZ+RJ+ETfVym0q2p2gT0oVFMFlN02yV4PiZ8HOxXO+IjxDaEzY7eK YW4mxEm6F7hlbuk6ujlFbTYpnMYiDb65 -----END CERTIFICATE-----Generated at Fri Sep 5 11:30:20 2025 by rpki-client