$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft File: UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json) Hash identifier: laxaRDfw/2thR2tG8xwI/ndjhqgQCGFgCi3Z4aBZxUg= Subject key identifier: 1C:6D:66:01:F6:06:4A:28:10:D0:C3:A6:2B:76:8B:6A:CA:1E:83:BD Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 Certificate issuer: /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Certificate serial: 0C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft Manifest number: 0C1E Signing time: Thu 18 Sep 2025 18:53:40 +0000 Manifest this update: Thu 18 Sep 2025 18:53:39 +0000 Manifest next update: Thu 25 Sep 2025 18:53:39 +0000 Files and hashes: 1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: DKFoT/gjfyVcyfEBLVF9im6gIjo8W4up5Ncmwcy+USM=) 2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: 44EICOrdULHxxmbJqfrzipdifGEHemkJ/PfPJGyHNtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3109 (0xc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Validity Not Before: Sep 18 18:53:39 2025 GMT Not After : Sep 25 18:53:39 2025 GMT Subject: CN=68cc5534-e817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:30:83:d5:0c:bc:8a:94:af:0c:fd:06:76: 8c:1e:7e:4c:37:12:ce:b8:71:0c:a2:0f:fd:55:19: e6:0e:35:b7:61:09:a1:0a:39:8b:74:f2:83:2b:00: 2e:3c:4f:52:38:f5:fe:f1:cb:53:72:09:4f:12:86: 26:fb:3b:91:8a:13:d0:eb:a7:38:0d:4e:e4:c1:20: bc:06:d0:e9:ed:d3:1e:62:c5:ac:11:e8:24:df:8c: 79:d4:6d:bd:fa:49:e6:51:60:4f:58:8a:e8:bf:50: 26:54:09:3a:5c:93:f0:3f:ac:e7:86:32:dc:43:b7: ca:78:c2:30:80:5f:c3:8d:d1:68:f2:f1:ba:4d:4f: ad:a3:37:bc:92:4b:18:bd:c1:29:63:f2:32:7d:78: bb:d6:32:58:a0:f9:55:56:1d:d0:f4:09:0b:e3:c1: d7:ff:b9:68:f4:8f:e8:2d:dd:80:e5:69:2f:15:c2: ec:46:2b:3e:71:e2:e1:05:b6:55:02:ef:cb:d4:35: fe:d4:a2:b1:4a:6b:78:87:dc:f2:a9:ff:d4:8a:ae: d4:f6:ff:64:cb:24:87:a7:39:df:a8:f8:90:eb:9d: 41:f8:31:03:d5:50:9f:4c:8b:31:5a:a3:c9:02:d8: dd:be:6a:3a:d6:9d:a5:c2:b8:12:41:7f:f6:de:85: 85:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6D:66:01:F6:06:4A:28:10:D0:C3:A6:2B:76:8B:6A:CA:1E:83:BD X509v3 Authority Key Identifier: keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:3a:c0:e0:c4:54:2c:5e:68:25:ed:db:39:2c:52:7a:41:58: a0:ce:22:a9:f4:a1:52:a2:74:98:0d:82:fc:9f:dd:d3:5e:95: da:fb:e4:3b:9d:32:2d:66:83:62:d1:de:16:d2:97:c9:aa:f8: 5b:3d:42:ec:04:41:ca:77:44:d0:d6:1c:ed:f4:5b:16:7a:3f: f3:eb:17:d9:be:b7:1d:65:af:cb:ca:ef:72:62:81:48:5d:4e: 14:81:d6:a3:67:a2:c2:2b:1e:bf:c5:02:bd:fa:42:64:3e:bb: f2:c5:87:0e:90:06:d8:9d:e7:0f:63:c5:78:19:6f:aa:be:26: ee:7d:4a:a4:c7:24:f9:f5:18:bb:09:18:11:57:18:00:00:68: 76:0f:00:fc:6c:bc:7c:e5:0d:20:be:9b:b5:2b:37:37:6c:c2: 35:fc:b0:d4:73:6f:6b:d0:45:26:ba:d4:1b:88:27:66:0a:c7: 98:d5:05:1f:3c:73:64:89:ee:f0:d0:36:f0:1b:a4:e0:eb:d7: ca:5e:a6:43:cd:33:bc:9c:c4:6d:d0:1e:f5:8b:0b:e5:14:03: fd:aa:7a:f9:af:cd:69:bd:d3:48:ff:c3:19:ed:c6:90:84:20: 28:79:80:08:cd:41:39:5d:f8:54:b5:b1:6c:a5:ec:b8:49:7a: 9b:61:90:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MDMxMTAvBgNVBAUTKDUwN0EwRUFGNDc1MUFDQjUyQzJDN0ZCRjk4MUQxMUJD RTgzNThCQTEwHhcNMjUwOTE4MTg1MzM5WhcNMjUwOTI1MTg1MzM5WjAYMRYwFAYD VQQDEw02OGNjNTUzNC1lODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWkwg9UMvIqUrwz9BnaMHn5MNxLOuHEMog/9VRnmDjW3YQmhCjmLdPKDKwAu PE9SOPX+8ctTcglPEoYm+zuRihPQ66c4DU7kwSC8BtDp7dMeYsWsEegk34x51G29 +knmUWBPWIrov1AmVAk6XJPwP6znhjLcQ7fKeMIwgF/DjdFo8vG6TU+toze8kksY vcEpY/IyfXi71jJYoPlVVh3Q9AkL48HX/7lo9I/oLd2A5WkvFcLsRis+ceLhBbZV Au/L1DX+1KKxSmt4h9zyqf/Uiq7U9v9kyySHpznfqPiQ651B+DED1VCfTIsxWqPJ Atjdvmo61p2lwrgSQX/23oWFFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxtZgH2 BkooENDDpit2i2rKHoO9MB8GA1UdIwQYMBaAFFB6Dq9HUay1LCx/v5gdEbzoNYuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgwMy9EODZBQkYwMDE3 NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJMVXNMSC1fbUIwUnZPZzFp NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIb09yMGRSckxVc0xILV9tQjBSdk9nMWk2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgwMy9EODZBQkYwMDE3NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJM VXNMSC1fbUIwUnZPZzFpNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2OsDgxFQsXmgl7ds5LFJ6QVigziKp9KFSonSYDYL8n93TXpXa++Q7 nTItZoNi0d4W0pfJqvhbPULsBEHKd0TQ1hzt9FsWej/z6xfZvrcdZa/Lyu9yYoFI XU4UgdajZ6LCKx6/xQK9+kJkPrvyxYcOkAbYnecPY8V4GW+qvibufUqkxyT59Ri7 CRgRVxgAAGh2DwD8bLx85Q0gvpu1Kzc3bMI1/LDUc29r0EUmutQbiCdmCseY1QUf PHNkie7w0DbwG6Tg69fKXqZDzTO8nMRt0B71iwvlFAP9qnr5r81pvdNI/8MZ7caQ hCAoeYAIzUE5XfhUtbFspey4SXqbYZC3 -----END CERTIFICATE-----Generated at Fri Sep 19 02:49:46 2025 by rpki-client