$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: r+RVFRcwpb43WmMDVbx0i5kP6sh91MPGPWzIu9W8kto= Subject key identifier: 15:92:E7:F6:32:22:C1:6E:00:1A:03:F6:7D:CE:72:11:C2:39:F6:3A Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0BE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0BE2 Signing time: Thu 18 Sep 2025 19:03:12 +0000 Manifest this update: Thu 18 Sep 2025 19:03:11 +0000 Manifest next update: Thu 25 Sep 2025 19:03:11 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: G+y5zU+3Rj+P+65w6dqSfGsqyrpqwBbXgidASEOgk9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: Sep 18 19:03:11 2025 GMT Not After : Sep 25 19:03:11 2025 GMT Subject: CN=68cc576f-a418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d0:96:6b:06:ad:2a:15:6e:40:5e:31:c5:38: 60:39:4d:48:a4:80:21:cc:ad:07:de:df:7f:0d:53: 49:dd:b7:1b:35:b0:a7:70:2b:ac:76:7b:85:d4:ef: 3d:9b:b9:18:6e:5c:a0:92:7e:f4:99:ff:90:90:ee: 71:4a:d8:11:bf:ef:f3:e5:f4:e1:12:76:72:66:60: 07:03:92:bc:d6:63:f5:11:ef:c9:d2:03:e5:fa:d0: 93:d9:3d:41:07:30:7f:e7:59:a3:85:f9:61:f9:bd: 98:c2:17:82:53:36:2d:4a:52:05:6d:0e:7e:59:44: aa:3a:a1:1e:db:7b:dc:1e:e2:1a:46:15:e9:fb:15: 0a:c1:79:33:e6:3d:bd:51:e6:c0:62:af:1c:81:23: f2:1a:f5:9e:06:98:ce:1f:89:64:63:49:ae:23:fa: 61:5f:7a:78:a0:5e:d2:ec:59:a3:81:b8:e3:cd:a8: 04:85:6e:76:fe:87:54:8b:5f:ff:c6:2f:ca:6a:2a: 97:f9:26:58:63:5d:7d:2c:a6:7b:f6:cc:be:33:80: c8:3d:2e:5f:0a:70:ab:fe:11:17:dd:10:07:51:6e: c1:4f:ba:34:fc:05:b6:a0:39:f4:c5:06:1b:a6:14: 69:fc:5e:46:fa:ac:2e:a1:46:b5:fa:0c:68:9d:58: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:92:E7:F6:32:22:C1:6E:00:1A:03:F6:7D:CE:72:11:C2:39:F6:3A X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:60:50:e7:19:b6:02:c8:56:68:13:66:9b:ae:6a:2c:fd:61: 55:07:95:95:49:90:d3:88:25:6a:79:53:94:06:ba:c2:52:39: a7:43:64:9b:19:07:ab:99:ec:0a:a6:93:7c:27:a9:1b:ab:7f: 0c:48:f1:e4:19:54:cb:41:ef:73:d6:16:5e:7c:87:06:0c:b1: 27:9d:de:62:0b:f9:3e:97:99:39:1e:79:58:42:cb:e0:c9:7e: a2:6b:da:a4:3b:b7:67:8a:82:1c:ff:61:15:c5:f9:bb:8a:b7: 63:98:43:a6:ab:05:c8:1f:8f:8f:8c:ca:9a:19:d4:97:9c:49: 7e:63:fa:c5:59:5e:2e:2b:56:fe:4f:9a:54:64:ae:ae:33:70: da:17:53:2f:f4:5d:ea:75:ba:bb:75:bf:05:1c:d2:1b:b0:49: 39:34:b2:b2:11:ac:cc:d5:c7:04:52:00:b4:f2:7f:7d:24:19: 06:45:5c:82:e1:fa:1a:e7:32:1a:72:85:d1:ba:7c:ad:87:c8: b9:3e:c6:77:e1:73:af:b7:67:34:ba:c0:dd:f9:a5:8b:49:c7: a5:9c:aa:82:9f:60:d3:47:17:5b:47:68:e2:2a:a6:f7:c8:84: 5b:71:61:a4:10:e5:f5:1c:65:f7:fa:99:ec:77:3e:49:43:5d: e8:8f:e9:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjUwOTE4MTkwMzExWhcNMjUwOTI1MTkwMzExWjAYMRYwFAYD VQQDEw02OGNjNTc2Zi1hNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NCWawatKhVuQF4xxThgOU1IpIAhzK0H3t9/DVNJ3bcbNbCncCusdnuF1O89 m7kYblygkn70mf+QkO5xStgRv+/z5fThEnZyZmAHA5K81mP1Ee/J0gPl+tCT2T1B BzB/51mjhflh+b2YwheCUzYtSlIFbQ5+WUSqOqEe23vcHuIaRhXp+xUKwXkz5j29 UebAYq8cgSPyGvWeBpjOH4lkY0muI/phX3p4oF7S7FmjgbjjzagEhW52/odUi1// xi/KaiqX+SZYY119LKZ79sy+M4DIPS5fCnCr/hEX3RAHUW7BT7o0/AW2oDn0xQYb phRp/F5G+qwuoUa1+gxonViLTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWS5/Yy IsFuABoD9n3OchHCOfY6MB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFYFDnGbYCyFZoE2abrmos/WFVB5WVSZDTiCVqeVOUBrrCUjmnQ2Sb GQermewKppN8J6kbq38MSPHkGVTLQe9z1hZefIcGDLEnnd5iC/k+l5k5HnlYQsvg yX6ia9qkO7dnioIc/2EVxfm7irdjmEOmqwXIH4+PjMqaGdSXnEl+Y/rFWV4uK1b+ T5pUZK6uM3DaF1Mv9F3qdbq7db8FHNIbsEk5NLKyEazM1ccEUgC08n99JBkGRVyC 4foa5zIacoXRunyth8i5PsZ34XOvt2c0usDd+aWLScelnKqCn2DTRxdbR2jiKqb3 yIRbcWGkEOX1HGX3+pnsdz5JQ13oj+k1 -----END CERTIFICATE-----Generated at Fri Sep 19 05:27:51 2025 by rpki-client