$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft File: uIC429cILNkYtiF73qCXWEWR290.mft (raw, json) Hash identifier: tyacVFcVqwC1AF9FuOn09BcGGj4/TNP61mLE0Px/7DA= Subject key identifier: 8C:D0:52:ED:58:5C:72:B6:1D:38:5A:22:74:B0:27:22:E2:69:26:8A Authority key identifier: B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD Certificate issuer: /CN=A913EF9C/serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft Manifest number: 7A Signing time: Fri 05 Sep 2025 07:16:24 +0000 Manifest this update: Fri 05 Sep 2025 07:16:24 +0000 Manifest next update: Fri 12 Sep 2025 07:16:23 +0000 Files and hashes: 1: uIC429cILNkYtiF73qCXWEWR290.crl (hash: vkCR1LOHko7Sq1lmROMMkejsIRcgMoqe7xa36USq0GM=) 2: 08476846D3EC11EFBFE6E864C4F9AE02.roa (hash: rxJJmD5OYbq6xF7owInMRKSqMF5l2EY96R9IaFA9M1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF9C, serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD Validity Not Before: Sep 5 07:16:24 2025 GMT Not After : Sep 12 07:16:23 2025 GMT Subject: CN=68ba8e48-b160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:06:5b:19:c3:c8:c3:79:0b:c5:6b:0a:37: 41:01:b6:a3:17:06:fb:a3:66:30:ff:68:64:c1:c4: f9:eb:61:cb:63:c0:db:a6:11:ae:db:44:eb:2f:34: 9d:f0:f5:1f:c0:01:43:2e:22:20:b6:59:c7:f4:dd: 5c:95:7d:75:a2:57:08:42:8f:64:b1:9c:9b:29:eb: 22:eb:d0:c9:c8:36:0f:90:9a:a0:1b:51:99:2a:ca: 5c:49:7d:be:e0:d4:72:fb:d7:ba:ae:90:69:f9:a2: 42:5b:d7:22:17:75:a0:84:49:54:38:13:37:99:4a: 95:07:19:e0:04:d7:ee:fb:86:69:d2:cd:8e:2e:f5: aa:5a:92:43:7c:97:75:80:25:a8:93:6d:ff:fb:bc: 45:84:91:05:d3:e0:9e:e4:4d:5e:69:bb:d2:fa:3e: 70:a4:63:74:cd:25:c2:b5:4b:72:e4:88:03:df:82: df:d3:0e:a6:11:fb:10:5b:c4:d6:57:b6:ae:ec:03: df:89:a9:93:04:96:07:0e:08:62:ab:9f:45:3a:0e: 36:0c:3b:1f:c5:85:15:50:7f:13:8d:07:c2:f8:ed: f5:b5:8e:f0:c3:9d:a4:7f:9b:5b:1f:5f:82:72:ee: da:6d:70:ed:49:fa:48:19:65:74:56:f4:55:fb:67: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D0:52:ED:58:5C:72:B6:1D:38:5A:22:74:B0:27:22:E2:69:26:8A X509v3 Authority Key Identifier: keyid:B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fd:fb:92:dc:fe:81:8c:55:7c:e6:6d:a9:d5:ca:35:68:c5: 1e:33:cb:a9:1b:ad:de:c5:2c:f2:2d:50:d2:36:aa:3f:5a:8f: 4b:55:5c:e5:69:7d:82:d4:dd:cd:39:f1:3f:04:0c:fc:5f:bb: 89:bf:80:1b:fe:e7:cb:d4:1e:8f:81:8f:52:7b:15:bb:33:45: 67:4d:c6:bd:e2:15:00:8f:a8:5c:34:8f:6a:27:b8:da:03:35: 68:0e:a3:65:b7:11:4c:09:5e:65:fd:d9:53:13:f6:8d:b0:1e: 57:b7:3e:6c:92:18:9b:3b:60:8c:99:17:b6:1c:f5:44:2c:59: 7b:de:bd:9b:78:aa:bc:7e:a6:51:39:ab:96:4c:c4:02:65:d4: 2b:17:f8:92:3f:35:c2:95:9c:fd:26:fe:98:b5:94:c1:80:e9: 04:47:60:e9:f1:e3:d4:0d:b4:51:3b:f9:5b:1a:37:70:a3:c4: ce:4c:9d:67:ce:25:fe:2a:5f:4f:33:ec:28:92:d9:ae:2f:c4: 00:5e:5c:36:41:a3:eb:1e:e2:b7:5f:85:44:b5:14:16:0b:a9: 44:8c:08:7e:ba:99:65:fa:39:bb:c1:2a:b2:77:46:f2:ee:98: ba:38:91:eb:9e:4b:50:f8:62:cb:ce:2c:3e:1d:5d:f7:e1:45: 28:d0:d7:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RUY5QzExMC8GA1UEBRMoQjg4MEI4REJENzA4MkNEOTE4QjYyMTdCREVBMDk3NTg0 NTkxREJERDAeFw0yNTA5MDUwNzE2MjRaFw0yNTA5MTIwNzE2MjNaMBgxFjAUBgNV BAMTDTY4YmE4ZTQ4LWIxNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLiwZbGcPIw3kLxWsKN0EBtqMXBvujZjD/aGTBxPnrYctjwNumEa7bROsvNJ3w 9R/AAUMuIiC2Wcf03VyVfXWiVwhCj2SxnJsp6yLr0MnINg+QmqAbUZkqylxJfb7g 1HL717qukGn5okJb1yIXdaCESVQ4EzeZSpUHGeAE1+77hmnSzY4u9apakkN8l3WA JaiTbf/7vEWEkQXT4J7kTV5pu9L6PnCkY3TNJcK1S3LkiAPfgt/TDqYR+xBbxNZX tq7sA9+JqZMElgcOCGKrn0U6DjYMOx/FhRVQfxONB8L47fW1jvDDnaR/m1sfX4Jy 7tptcO1J+kgZZXRW9FX7Z8HPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjNBS7Vhc crYdOFoidLAnIuJpJoowHwYDVR0jBBgwFoAUuIC429cILNkYtiF73qCXWEWR290w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFRjlDL0M0RkVDMjg4RDNF QTExRUZBNjZDNDc2MEM0RjlBRTAyL3VJQzQyOWNJTE5rWXRpRjczcUNYV0VXUjI5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdUlDNDI5Y0lMTmtZdGlGNzNxQ1hXRVdSMjkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF RjlDL0M0RkVDMjg4RDNFQTExRUZBNjZDNDc2MEM0RjlBRTAyL3VJQzQyOWNJTE5r WXRpRjczcUNYV0VXUjI5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHr9+5Lc/oGMVXzmbanVyjVoxR4zy6kbrd7FLPItUNI2qj9aj0tVXOVp fYLU3c058T8EDPxfu4m/gBv+58vUHo+Bj1J7FbszRWdNxr3iFQCPqFw0j2onuNoD NWgOo2W3EUwJXmX92VMT9o2wHle3PmySGJs7YIyZF7Yc9UQsWXvevZt4qrx+plE5 q5ZMxAJl1CsX+JI/NcKVnP0m/pi1lMGA6QRHYOnx49QNtFE7+VsaN3CjxM5MnWfO Jf4qX08z7CiS2a4vxABeXDZBo+se4rdfhUS1FBYLqUSMCH66mWX6ObvBKrJ3RvLu mLo4keueS1D4YsvOLD4dXffhRSjQ198= -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:33 2025 by rpki-client