$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json) Hash identifier: dpPrWXH5Uli4pBLu0XF4cjnB5vvNEUTN7q5DNVf45p4= Subject key identifier: 0F:CE:65:2A:64:83:7C:68:3D:CA:4A:7B:06:E6:56:7F:30:3D:16:42 Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft Manifest number: CB Signing time: Fri 05 Sep 2025 06:06:46 +0000 Manifest this update: Fri 05 Sep 2025 06:06:45 +0000 Manifest next update: Fri 12 Sep 2025 06:06:45 +0000 Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: Ot5x4sUbbRPZbJ72YrmkE4axYNCL5MXA4ive33BgPYg=) 2: 27995372566911EF9D53B517C4F9AE02.roa (hash: a77iAc4lVu+0oRkHBvhrQbh2JlrG7+YjIwHwoF/sfB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Validity Not Before: Sep 5 06:06:45 2025 GMT Not After : Sep 12 06:06:45 2025 GMT Subject: CN=68ba7df5-02a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:a6:70:db:6d:0e:80:d8:97:62:a0:61:83: ef:35:57:ad:e1:68:06:12:6b:ca:69:78:06:63:3f: a9:aa:cd:1b:ed:78:8b:a2:c4:5e:ce:58:10:20:1e: 70:9e:fc:ec:3e:9e:41:46:f6:eb:7d:a0:60:f3:1c: ae:a0:a8:a6:3d:bd:ec:ef:f4:50:c9:60:91:43:6e: 05:b3:e4:6c:f1:cf:e7:c0:65:6e:bc:bd:96:a3:38: 18:03:46:13:b2:71:95:4d:f8:28:01:a9:18:82:95: 81:42:3b:94:ea:88:67:07:ed:e1:f8:9e:90:b7:e2: 09:28:70:33:e4:97:17:aa:83:af:f9:9c:20:00:62: 80:62:79:12:50:75:3a:c8:ab:b3:2f:8f:84:8d:bc: a0:1a:b0:e3:3c:10:d2:15:10:5a:ef:89:ea:f9:55: 25:40:1f:d5:9b:ab:b6:6b:d3:2e:db:da:74:f3:9e: e9:b3:f1:82:dd:44:18:ac:f0:bc:10:a3:f9:14:75: 91:37:57:b8:10:6a:42:bf:ff:f5:84:4d:5d:08:1b: b4:01:5d:3d:80:4a:62:a9:c6:14:f6:5d:16:0f:d3: 8f:d2:b4:9f:aa:ee:9f:dd:0b:9f:d5:0d:a1:e7:07: 03:22:1b:dc:4b:08:30:33:80:a3:32:3c:db:79:86: 78:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CE:65:2A:64:83:7C:68:3D:CA:4A:7B:06:E6:56:7F:30:3D:16:42 X509v3 Authority Key Identifier: keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:50:ba:63:09:08:61:12:dc:71:49:0e:6f:e1:54:2c:5b:c3: a6:71:09:8e:02:81:37:6b:c1:73:1b:c6:f8:d5:f8:c0:96:4f: 1a:53:c5:b0:3e:db:57:e1:f4:b0:41:f4:f9:a6:0b:e9:3c:11: 54:00:01:06:89:2f:a5:e6:20:fb:c9:1e:a7:47:8b:f3:ba:12: ee:be:7a:c9:77:97:9d:4a:2e:a0:8e:8d:f4:78:f3:a5:9f:84: 40:1c:71:b2:50:83:c7:80:47:c0:44:41:45:e9:9a:b5:fa:91: 8e:79:bb:55:ff:31:56:3b:3d:f6:2e:67:cb:33:4e:11:a9:3c: 16:b7:9f:de:e8:29:49:5c:17:55:f1:b5:fa:d3:36:b8:0a:da: 8f:af:0f:c2:05:cc:6c:68:24:5d:47:9d:5a:44:2d:37:72:64: 12:70:a8:93:9d:f1:af:6e:32:f6:c0:8b:f9:f2:11:e7:31:92: cf:f2:67:62:eb:25:83:b1:d5:2b:f7:d8:bc:aa:db:fd:46:7d: c6:5f:76:46:e2:ba:91:6d:9a:82:27:b8:61:30:48:e7:86:16: ba:46:c3:9b:9c:d9:7f:24:56:8f:16:63:5a:4e:9f:28:85:c0: 8d:cd:19:74:d7:d1:30:cd:de:77:be:4f:32:4b:1f:c0:88:82: 83:6c:a0:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKEI5MUEyNENGMDQ3MTExMTdDOEMzQkEyNjRBMzMzOTVE QTc3RjkxQjQwHhcNMjUwOTA1MDYwNjQ1WhcNMjUwOTEyMDYwNjQ1WjAYMRYwFAYD VQQDEw02OGJhN2RmNS0wMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5emcNttDoDYl2KgYYPvNVet4WgGEmvKaXgGYz+pqs0b7XiLosRezlgQIB5w nvzsPp5BRvbrfaBg8xyuoKimPb3s7/RQyWCRQ24Fs+Rs8c/nwGVuvL2WozgYA0YT snGVTfgoAakYgpWBQjuU6ohnB+3h+J6Qt+IJKHAz5JcXqoOv+ZwgAGKAYnkSUHU6 yKuzL4+EjbygGrDjPBDSFRBa74nq+VUlQB/Vm6u2a9Mu29p0857ps/GC3UQYrPC8 EKP5FHWRN1e4EGpCv//1hE1dCBu0AV09gEpiqcYU9l0WD9OP0rSfqu6f3Quf1Q2h 5wcDIhvcSwgwM4CjMjzbeYZ4jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/OZSpk g3xoPcpKewbmVn8wPRZCMB8GA1UdIwQYMBaAFLkaJM8EcREXyMO6JkozOV2nf5G0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9CODY1QjM3RTU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVSZkl3N29tU2pNNVhhZF9r YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2tiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9CODY1QjM3RTU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVS Zkl3N29tU2pNNVhhZF9rYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlULpjCQhhEtxxSQ5v4VQsW8OmcQmOAoE3a8FzG8b41fjAlk8aU8Ww PttX4fSwQfT5pgvpPBFUAAEGiS+l5iD7yR6nR4vzuhLuvnrJd5edSi6gjo30ePOl n4RAHHGyUIPHgEfAREFF6Zq1+pGOebtV/zFWOz32LmfLM04RqTwWt5/e6ClJXBdV 8bX60za4CtqPrw/CBcxsaCRdR51aRC03cmQScKiTnfGvbjL2wIv58hHnMZLP8mdi 6yWDsdUr99i8qtv9Rn3GX3ZG4rqRbZqCJ7hhMEjnhha6RsObnNl/JFaPFmNaTp8o hcCNzRl019Ewzd53vk8ySx/AiIKDbKBe -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:09 2025 by rpki-client