$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft File: UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json) Hash identifier: sAIUlBBNcHLr0HCsLNoOHKhnrV9gTJpxHzWd6SBC5bk= Subject key identifier: 9C:88:A8:4F:AE:C4:2D:D4:86:6E:15:E3:40:2D:D4:06:FB:75:3A:12 Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft Manifest number: 7A Signing time: Wed 03 Sep 2025 07:23:45 +0000 Manifest this update: Wed 03 Sep 2025 07:23:45 +0000 Manifest next update: Wed 10 Sep 2025 07:23:45 +0000 Files and hashes: 1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: axN8O+0ujTyINNFqu2gY6qCQx8uSQ17eqoYIBt158Jo=) 2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: nvtKwWFEZOMd88gDjqvdFcOF+TJpXNSXEguvJEtlOSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2 Validity Not Before: Sep 3 07:23:45 2025 GMT Not After : Sep 10 07:23:45 2025 GMT Subject: CN=68b7ed01-c8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:93:1e:02:c9:3e:76:6c:1c:37:12:f4:5b: 55:5d:1a:67:9f:40:27:9c:dd:34:78:3a:61:08:c1: 3c:06:0f:5d:a8:ee:b9:11:13:de:5d:ef:05:70:9d: b5:7e:85:ea:b7:8c:d4:16:6d:bc:fc:f3:80:76:26: bf:dd:27:3d:8e:55:88:3c:b5:9d:03:ab:66:13:ac: 18:3b:96:f5:d7:63:c4:5d:41:d3:dc:82:ad:5f:fd: 4a:27:73:37:b6:04:4b:d2:0a:57:77:29:f6:6b:29: 2b:33:fe:03:80:7f:f3:d7:24:97:cb:5e:ff:27:ba: e7:e3:67:a6:d1:37:73:98:1a:1b:35:8a:db:66:98: 0c:a3:fa:ce:b7:15:32:30:67:78:3a:20:63:32:6d: aa:e6:88:17:40:72:55:e7:8d:71:87:4b:ac:4f:ad: 2f:2b:b4:4d:36:6c:76:f3:3e:30:e7:84:8d:98:5a: 3d:02:b5:fd:54:2d:ff:df:e2:5f:bb:c9:38:c5:49: bb:c4:41:1a:f0:65:1b:94:77:d2:9a:14:96:c4:16: ce:34:97:c9:91:60:31:d1:8a:8f:7b:2c:fc:cf:60: 69:46:27:48:e1:d0:e8:c4:28:4a:14:41:38:01:aa: 7d:09:ae:22:89:4e:72:d8:84:12:e7:22:51:4a:4a: c9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:88:A8:4F:AE:C4:2D:D4:86:6E:15:E3:40:2D:D4:06:FB:75:3A:12 X509v3 Authority Key Identifier: keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:5b:7c:0c:fb:bd:ef:5c:21:f7:5f:90:72:b1:cf:36:39:2a: 8c:0f:8a:70:10:33:7d:9a:d4:2e:ce:ce:b4:cc:9b:2c:9d:74: 60:ff:d9:06:f3:90:80:2a:8d:20:e7:a4:b8:0e:d1:41:21:73: 1d:6a:bd:c9:8a:75:38:92:b9:ef:bb:fe:8d:5b:66:1a:1a:31: 12:40:78:67:9d:82:76:cf:99:78:18:3e:36:32:97:2e:2e:60: 0c:e2:eb:03:c3:95:c2:bc:69:1a:1e:d4:de:86:da:4c:73:f6: ad:8e:7e:02:a0:c2:3d:97:f9:55:ed:e2:f9:19:9b:48:eb:17: ff:e0:54:47:8b:d2:8e:19:c0:fe:42:87:c4:64:38:00:9c:91: 4e:a5:bd:27:22:45:81:e9:f2:87:56:55:5e:ab:da:1b:ee:7f: 35:84:59:24:41:75:f1:26:a6:df:93:71:c4:8d:d4:d7:dc:92: 3e:2f:a7:ad:af:83:bc:9a:3b:3a:c0:32:ec:db:b8:3e:c2:fb: d4:bb:be:e3:da:bd:d5:21:3f:00:7d:df:18:d5:52:69:15:9e: 22:1c:30:27:d3:36:7b:11:37:e8:91:1c:df:56:1e:4d:a8:63: f4:2f:91:bc:56:67:14:4f:8a:67:af:47:bc:16:7c:9b:8c:b7: 4c:15:61:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkQ4RTExMC8GA1UEBRMoNTA2MTk0NzEwMEJDQjMzMjg5RTI2QTBCREZFQ0UyQzVG QjlFMDlEMjAeFw0yNTA5MDMwNzIzNDVaFw0yNTA5MTAwNzIzNDVaMBgxFjAUBgNV BAMTDTY4YjdlZDAxLWM4YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfgJMeAsk+dmwcNxL0W1VdGmefQCec3TR4OmEIwTwGD12o7rkRE95d7wVwnbV+ heq3jNQWbbz884B2Jr/dJz2OVYg8tZ0Dq2YTrBg7lvXXY8RdQdPcgq1f/Uoncze2 BEvSCld3KfZrKSsz/gOAf/PXJJfLXv8nuufjZ6bRN3OYGhs1ittmmAyj+s63FTIw Z3g6IGMybarmiBdAclXnjXGHS6xPrS8rtE02bHbzPjDnhI2YWj0Ctf1ULf/f4l+7 yTjFSbvEQRrwZRuUd9KaFJbEFs40l8mRYDHRio97LPzPYGlGJ0jh0OjEKEoUQTgB qn0JriKJTnLYhBLnIlFKSsmpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnIioT67E LdSGbhXjQC3UBvt1OhIwHwYDVR0jBBgwFoAUUGGUcQC8szKJ4moL3+zixfueCdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCRDhFLzNBRjU3RkRBQ0U4 ODExRUY4N0MwNzExN0M0RjlBRTAyL1VHR1VjUUM4c3pLSjRtb0wzLXppeGZ1ZUNk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUdHVWNRQzhzektKNG1vTDMteml4ZnVlQ2RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC RDhFLzNBRjU3RkRBQ0U4ODExRUY4N0MwNzExN0M0RjlBRTAyL1VHR1VjUUM4c3pL SjRtb0wzLXppeGZ1ZUNkSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADlbfAz7ve9cIfdfkHKxzzY5KowPinAQM32a1C7OzrTMmyyddGD/2Qbz kIAqjSDnpLgO0UEhcx1qvcmKdTiSue+7/o1bZhoaMRJAeGedgnbPmXgYPjYyly4u YAzi6wPDlcK8aRoe1N6G2kxz9q2OfgKgwj2X+VXt4vkZm0jrF//gVEeL0o4ZwP5C h8RkOACckU6lvSciRYHp8odWVV6r2hvufzWEWSRBdfEmpt+TccSN1Nfckj4vp62v g7yaOzrAMuzbuD7C+9S7vuPavdUhPwB93xjVUmkVniIcMCfTNnsRN+iRHN9WHk2o Y/QvkbxWZxRPimevR7wWfJuMt0wVYfE= -----END CERTIFICATE-----Generated at Thu Sep 4 13:59:05 2025 by rpki-client