$ rpki-client -vvf rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft File: uCqc9vnMgDxqa3BmLYB-xR2C290.mft (raw, json) Hash identifier: R+5JMfSH1RevQy0IWOyS4lu0lHaACkYhUShZPBV6DHc= Subject key identifier: 71:A3:8F:15:47:FA:A3:7A:64:31:D6:35:47:50:03:4F:33:50:42:D3 Authority key identifier: B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD Certificate issuer: /CN=A911F92A/serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft Manifest number: 0A Signing time: Wed 17 Sep 2025 08:51:19 +0000 Manifest this update: Wed 17 Sep 2025 08:51:19 +0000 Manifest next update: Wed 24 Sep 2025 08:51:19 +0000 Files and hashes: 1: uCqc9vnMgDxqa3BmLYB-xR2C290.crl (hash: z23C4ilm7Nr2OnkouVj6cow6Zt/xNfsoPMSlKsgTiAI=) 2: B3DED21C86C911F0BAF28043C4F9AE02.roa (hash: CocTAGyUcSYA6MVP0olvSXDiZcQTc7S0RwIMK0ei44s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F92A, serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD Validity Not Before: Sep 17 08:51:19 2025 GMT Not After : Sep 24 08:51:19 2025 GMT Subject: CN=68ca7687-ae3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:b4:18:4b:4b:ff:d4:f5:35:7f:44:19:2c: 75:46:d7:46:be:3e:91:85:f6:ca:ab:a0:d4:54:ec: bb:05:34:f7:44:69:81:a2:a1:0e:9a:57:e8:bd:64: f6:4e:0f:a5:88:15:18:c7:cc:50:c7:92:e3:4d:3e: 9c:69:2d:dc:57:9f:d5:5c:d5:cf:35:79:c4:65:2d: 75:bf:22:a1:38:f6:17:b1:88:46:97:05:51:ab:8b: 9b:e7:40:01:d5:81:d5:74:cf:b0:ec:f0:86:2a:02: 30:64:b4:f8:92:ed:e8:23:c3:b4:9b:99:f5:80:7a: 1b:a3:00:50:44:a1:c9:0e:2f:07:b6:e5:21:28:20: 7c:72:ac:25:af:3f:85:fb:85:be:78:db:e4:4d:df: 96:5b:a6:38:cc:a5:b7:64:92:de:5c:8c:ee:fe:da: d5:8a:6b:b9:63:fe:71:86:dd:e3:73:72:6c:15:c9: ae:f0:ed:73:44:71:0a:ca:e2:db:15:9e:c5:bd:a1: ec:b1:e1:26:21:c2:4e:17:f1:b5:a7:d7:58:39:6b: a3:fb:14:51:df:c1:3b:a9:3d:9d:7e:e6:9f:d8:fe: b1:e4:1d:b2:2b:a7:5d:9b:d2:51:b0:81:ca:f5:48: f0:9c:6d:72:43:2a:9b:8f:5e:77:ed:55:06:f5:2b: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A3:8F:15:47:FA:A3:7A:64:31:D6:35:47:50:03:4F:33:50:42:D3 X509v3 Authority Key Identifier: keyid:B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:85:bf:13:f1:8d:8c:bc:81:52:9b:e4:5c:a2:68:4b:1f:21: 6a:c0:0d:48:33:15:01:7a:e5:e0:19:22:2c:ec:f8:4e:be:80: 81:4a:b8:89:bc:d8:7e:88:83:61:f8:73:62:bf:a3:12:54:8b: 9c:66:e8:5f:b2:a6:c6:2f:76:61:dc:4f:1a:27:25:65:4c:18: 29:47:c3:ae:d9:83:44:4f:7e:48:f5:35:2e:9a:9a:53:ff:cb: f8:76:aa:3e:c5:df:b7:d9:ff:f6:68:7f:a5:b4:32:32:11:09: 5b:3d:d3:89:b3:01:35:11:37:36:99:03:8f:73:24:4d:10:77: d5:be:5b:bc:16:dc:e4:c5:c6:ef:8e:5d:a4:b5:35:f5:a9:6e: e1:14:fd:93:25:1d:99:0b:b7:d0:8a:d7:99:ba:a9:3d:2d:a9: 05:d8:96:db:ea:aa:4a:e8:16:ca:2e:67:0b:e7:c1:28:78:d8: 1b:ec:40:78:da:5d:96:05:29:36:c8:5c:38:3f:d8:9c:8c:f7: 8a:c7:5b:36:74:a9:2e:0c:5d:a6:54:75:76:df:b9:21:fe:0e: 73:54:ee:ab:90:13:5f:e8:18:07:d0:dd:ca:a8:11:35:1a:d8: c3:83:83:47:53:82:f9:d7:4c:86:01:40:3b:d9:08:18:b6:0f: 12:da:c5:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjkyQTExMC8GA1UEBRMoQjgyQTlDRjZGOUNDODAzQzZBNkI3MDY2MkQ4MDdFQzUx RDgyREJERDAeFw0yNTA5MTcwODUxMTlaFw0yNTA5MjQwODUxMTlaMBgxFjAUBgNV BAMTDTY4Y2E3Njg3LWFlM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrHrQYS0v/1PU1f0QZLHVG10a+PpGF9sqroNRU7LsFNPdEaYGioQ6aV+i9ZPZO D6WIFRjHzFDHkuNNPpxpLdxXn9Vc1c81ecRlLXW/IqE49hexiEaXBVGri5vnQAHV gdV0z7Ds8IYqAjBktPiS7egjw7SbmfWAehujAFBEockOLwe25SEoIHxyrCWvP4X7 hb542+RN35ZbpjjMpbdkkt5cjO7+2tWKa7lj/nGG3eNzcmwVya7w7XNEcQrK4tsV nsW9oeyx4SYhwk4X8bWn11g5a6P7FFHfwTupPZ1+5p/Y/rHkHbIrp12b0lGwgcr1 SPCcbXJDKpuPXnftVQb1Kx05AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcaOPFUf6 o3pkMdY1R1ADTzNQQtMwHwYDVR0jBBgwFoAUuCqc9vnMgDxqa3BmLYB+xR2C290w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGOTJBLzI2NjAzNzgyODZD OTExRjA4NzJGOUQyRkM0RjlBRTAyL3VDcWM5dm5NZ0R4cWEzQm1MWUIteFIyQzI5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdUNxYzl2bk1nRHhxYTNCbUxZQi14UjJDMjkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG OTJBLzI2NjAzNzgyODZDOTExRjA4NzJGOUQyRkM0RjlBRTAyL3VDcWM5dm5NZ0R4 cWEzQm1MWUIteFIyQzI5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAaFvxPxjYy8gVKb5FyiaEsfIWrADUgzFQF65eAZIizs+E6+gIFKuIm8 2H6Ig2H4c2K/oxJUi5xm6F+ypsYvdmHcTxonJWVMGClHw67Zg0RPfkj1NS6amlP/ y/h2qj7F37fZ//Zof6W0MjIRCVs904mzATURNzaZA49zJE0Qd9W+W7wW3OTFxu+O XaS1NfWpbuEU/ZMlHZkLt9CK15m6qT0tqQXYltvqqkroFsouZwvnwSh42BvsQHja XZYFKTbIXDg/2JyM94rHWzZ0qS4MXaZUdXbfuSH+DnNU7quQE1/oGAfQ3cqoETUa 2MODg0dTgvnXTIYBQDvZCBi2DxLaxXI= -----END CERTIFICATE-----Generated at Fri Sep 19 05:31:49 2025 by rpki-client