$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft File: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft (raw, json) Hash identifier: yrpNBDuKwg1PWxg61ldy74g5JCjHYv9tGAGDQHpRpuo= Subject key identifier: 49:59:88:DE:AC:5E:47:B6:1E:CF:D8:DD:B9:1A:F0:54:9B:81:B3:38 Authority key identifier: 53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE Certificate issuer: /CN=A913DC32/serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft Manifest number: 60 Signing time: Tue 09 Sep 2025 07:15:32 +0000 Manifest this update: Tue 09 Sep 2025 07:15:31 +0000 Manifest next update: Tue 16 Sep 2025 07:15:31 +0000 Files and hashes: 1: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl (hash: ATTUNmdFl+/ta0uxL7OfM/4jipprdBEuqb/yk/ZSiiY=) 2: 455B2534FD0811EF85ADED79C4F9AE02.roa (hash: EqPvfZWybFxDEzuqUOMumy7hGqKdVROQozF26OVvW/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC32, serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE Validity Not Before: Sep 9 07:15:31 2025 GMT Not After : Sep 16 07:15:31 2025 GMT Subject: CN=68bfd414-b7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:42:cb:f7:7b:d1:bf:4e:1a:8c:07:88:ff: b8:dc:7a:0b:00:c7:22:da:c7:83:b0:72:d7:26:f4: a6:de:d9:37:5e:49:ba:34:9a:3e:ce:de:5a:61:f5: 84:aa:be:6f:e4:a9:57:f3:94:d6:68:74:5e:7b:99: 41:63:91:77:88:74:02:24:6d:41:b5:f9:66:1a:c1: 30:41:44:6b:b8:e6:83:75:d3:a8:29:16:67:d3:6d: fa:84:a2:ba:8b:d7:f7:43:b1:98:56:b1:16:ad:44: 13:51:9e:bf:4f:b3:2d:a5:5a:7e:82:45:ea:d9:57: 91:52:66:a0:2a:62:c2:aa:96:19:ea:47:9e:71:32: 5f:5e:b8:66:8d:da:df:f5:cd:1e:24:2a:dc:82:ec: dd:50:ee:4a:c4:dc:c8:72:cc:b2:f1:77:46:d5:59: 53:0b:f5:05:53:41:b9:c9:63:b2:a8:8c:8f:05:b0: b6:92:7c:f4:aa:c8:90:3d:97:93:7f:b3:e9:6e:28: 65:f5:f9:37:83:54:98:38:2e:e1:7e:34:7c:42:1a: db:5e:56:d0:0c:f3:6e:e7:3c:a6:97:94:d2:95:76: 39:9b:0c:fd:af:ef:4d:fc:c6:20:79:d5:91:55:f2: 19:7e:c8:49:b8:df:cb:1f:ef:0a:67:83:5e:c2:76: d4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:59:88:DE:AC:5E:47:B6:1E:CF:D8:DD:B9:1A:F0:54:9B:81:B3:38 X509v3 Authority Key Identifier: keyid:53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8d:1b:a8:7c:d9:a6:cd:6d:12:ea:c5:f2:68:98:ea:fa:1e: 97:00:64:be:d5:62:e0:40:6a:18:89:3e:9d:27:d5:bf:60:4c: d3:6f:84:a5:67:15:9f:14:d0:4e:86:ce:8b:ec:7c:de:9c:72: 04:50:95:98:93:02:70:6a:1f:dd:f4:75:bb:9c:c1:d2:99:b3: d8:e8:e9:8e:96:93:83:71:7d:9a:45:6d:88:85:fc:e2:a7:48: 41:aa:67:8e:d3:07:cc:a8:3f:c9:7e:ef:3d:00:61:79:7a:6a: 92:79:ba:9c:a1:4b:1c:0c:40:af:ba:61:d8:ff:b2:79:11:44: 11:ee:12:c4:d0:46:78:67:7c:bc:41:ee:f6:48:ce:4b:11:cf: d5:f3:8a:06:82:47:48:54:37:3d:76:1b:b8:1e:30:29:91:b9: 32:64:f5:b5:7c:25:3b:42:a8:47:3c:dd:5f:51:d3:4d:a4:60: 5c:0e:1e:e9:e6:fd:0a:2f:e1:20:e7:6c:59:b6:03:1c:1b:b7: ef:5b:42:81:5f:40:aa:ea:c7:84:f3:4f:b9:e5:e2:bc:03:8a: 2a:e2:3d:88:67:3d:75:b7:d4:8b:e8:56:ff:29:3c:27:15:c1: 59:89:ed:f8:b7:ed:20:f7:1e:0e:3e:31:93:0c:69:1c:2d:58: cb:a1:0e:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REMzMjExMC8GA1UEBRMoNTMwRkNEMjk5RTc3NUI4QUNCMjc1MkEwM0FGQUE3RDE4 MUU1MDBFRTAeFw0yNTA5MDkwNzE1MzFaFw0yNTA5MTYwNzE1MzFaMBgxFjAUBgNV BAMTDTY4YmZkNDE0LWI3ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIVULL93vRv04ajAeI/7jcegsAxyLax4Owctcm9Kbe2TdeSbo0mj7O3lph9YSq vm/kqVfzlNZodF57mUFjkXeIdAIkbUG1+WYawTBBRGu45oN106gpFmfTbfqEorqL 1/dDsZhWsRatRBNRnr9Psy2lWn6CRerZV5FSZqAqYsKqlhnqR55xMl9euGaN2t/1 zR4kKtyC7N1Q7krE3MhyzLLxd0bVWVML9QVTQbnJY7KojI8FsLaSfPSqyJA9l5N/ s+luKGX1+TeDVJg4LuF+NHxCGtteVtAM827nPKaXlNKVdjmbDP2v7038xiB51ZFV 8hl+yEm438sf7wpng17CdtRfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSVmI3qxe R7Yez9jduRrwVJuBszgwHwYDVR0jBBgwFoAUUw/NKZ53W4rLJ1KgOvqn0YHlAO4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQzMyLzg0MEExNkIwRkNG RDExRUZBREI4NjExNUM0RjlBRTAyL1V3X05LWjUzVzRyTEoxS2dPdnFuMFlIbEFP NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXdfTktaNTNXNHJMSjFLZ092cW4wWUhsQU80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE QzMyLzg0MEExNkIwRkNGRDExRUZBREI4NjExNUM0RjlBRTAyL1V3X05LWjUzVzRy TEoxS2dPdnFuMFlIbEFPNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC2NG6h82abNbRLqxfJomOr6HpcAZL7VYuBAahiJPp0n1b9gTNNvhKVn FZ8U0E6GzovsfN6ccgRQlZiTAnBqH930dbucwdKZs9jo6Y6Wk4NxfZpFbYiF/OKn SEGqZ47TB8yoP8l+7z0AYXl6apJ5upyhSxwMQK+6Ydj/snkRRBHuEsTQRnhnfLxB 7vZIzksRz9XzigaCR0hUNz12G7geMCmRuTJk9bV8JTtCqEc83V9R002kYFwOHunm /Qov4SDnbFm2Axwbt+9bQoFfQKrqx4TzT7nl4rwDiiriPYhnPXW31IvoVv8pPCcV wVmJ7fi37SD3Hg4+MZMMaRwtWMuhDnA= -----END CERTIFICATE-----Generated at Tue Sep 9 13:19:47 2025 by rpki-client