$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json) Hash identifier: 8E8nX0mSK4rHCIBzZi7x6ia/U8EqxhqGCD9/WjKhrmA= Subject key identifier: 55:9C:5F:A0:E2:B0:D0:58:ED:38:66:45:77:94:1A:97:EB:ED:D8:8B Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 357E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft Manifest number: 34EB Signing time: Thu 04 Sep 2025 15:24:06 +0000 Manifest this update: Thu 04 Sep 2025 15:24:05 +0000 Manifest next update: Thu 11 Sep 2025 15:24:05 +0000 Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: hxOvqg4FIBjSj83MFkQiWXAZGoItx7GqCpcKanEyNA0=) 2: E48E2E94017211EBA18CC269C4F9AE02.roa (hash: ICLuCqdPid1RG8G/uczcAZrYY/Vhg9vDB0Y4ZuWrsgg=) 3: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: esENVVA6EiNHoh8zYMrrGIlsPVgfxlInP1Q1Dqp1TX0=) 4: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: vlPdQwiOxGdbOdhmlbrhpezVJ256bDBMeryFLzti+9k=) 5: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: t0X2DtahA6cVGvL8LAxWIioK5JV3S/HBQuQOiXYnF58=) 6: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: osXWx1pbxHv+AmHj+bmzgWhkOOzEZkepu7gweinGAO4=) 7: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: pxP+7JsX1QXgZ6389EUW7Rq0A265BP9eId8bGB02ABI=) 8: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: hzE638zELYjKoWqOncVd2PWwcT0doUZBbmbjdlD3Egk=) 9: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: 3Qq37sSxACv5Ldn7kCrtNWP8w5ga3g9Ur/m7mESYzt4=) 10: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: 5OfOPHDKno3z0OXXcGhOFxPs0axjwDkS/h/HmudH3qQ=) 11: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: OqgL79PVwss/L9YJSqF29Xvq2wNOU6UYyi3JyoLgqms=) 12: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: V1fSCsWS5cdJM7voSc5ZTQaks8azUpLSc/ONX61tIJU=) 13: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: kXSKiPTBMMpV/v8BhM7mqRhZb0qkCrS5RGh8ixYaHOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13694 (0x357e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Sep 4 15:24:05 2025 GMT Not After : Sep 11 15:24:05 2025 GMT Subject: CN=68b9af15-8914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:93:21:6f:7e:dd:ae:eb:be:08:68:6e:b7: 39:71:75:d8:19:15:a8:69:56:5a:4c:da:18:27:0d: e5:53:a0:f0:85:88:60:e8:8a:ff:ec:e3:89:a9:fd: 90:73:73:8c:62:23:ef:15:30:c3:84:b9:70:c8:b3: 7c:54:2a:a9:ca:f6:3f:31:ef:f5:9c:dc:fa:eb:2e: 9a:5f:db:6c:a9:39:c1:63:d6:8a:49:bc:c6:6b:d9: ec:92:25:ef:0d:5c:fc:e3:a0:f5:93:8c:00:90:7a: 55:3c:e1:d0:28:97:ce:e8:02:c9:6a:e1:fd:0b:0b: 3f:4c:cb:b1:10:25:f0:ba:74:a8:0e:5d:21:fd:40: 68:76:4f:55:e2:65:e8:72:28:e2:72:b2:37:12:14: a0:12:51:f5:9d:e9:ce:24:d6:d9:87:26:08:5c:3e: d9:fe:b6:be:9c:79:06:9e:ba:e2:b4:cd:e6:26:1c: e6:2f:df:76:e3:c4:ab:0a:5c:c5:49:97:35:48:bd: b2:57:82:52:a6:0c:5a:a5:e1:99:6c:a4:37:6b:97: c1:11:f0:5a:53:b7:77:46:0c:b1:29:8b:5b:74:9a: 28:07:ad:79:8e:09:cc:62:06:47:27:c2:2b:c0:d8: d5:81:e6:bd:68:6d:ed:61:db:57:e2:e6:29:a5:33: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9C:5F:A0:E2:B0:D0:58:ED:38:66:45:77:94:1A:97:EB:ED:D8:8B X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:99:20:3b:e9:9b:76:6e:ba:d1:a6:b9:e1:e8:38:fe:7b:b5: 0a:a1:2a:67:1d:af:f3:11:5a:c8:5f:b4:8b:b7:8c:af:28:79: 3d:76:6b:1e:68:ef:3f:c7:4e:c6:45:7b:3e:4b:f0:b3:d7:32: 79:2d:c3:d2:1f:72:33:ab:9d:7a:9c:48:5f:bf:73:af:43:1c: 70:01:9b:2b:58:60:cf:bd:16:9b:0f:4f:0d:b1:c2:6b:c3:d2: 33:ee:1d:a2:ae:cd:82:c6:1d:2b:b7:92:a7:d6:8e:e5:40:32: 4b:70:59:2e:9b:83:f5:2c:bb:69:22:0c:3a:f1:7a:cb:99:52: 3b:0f:46:40:9f:ad:d8:b3:a9:ad:48:e7:01:04:8d:e6:95:7e: 1e:a5:7c:a7:0b:02:28:e0:02:55:b1:1d:35:a2:56:58:e6:fa: f4:c6:3e:f0:29:9c:86:fb:09:e7:03:6d:e0:f6:a0:63:d1:1d: b5:77:0e:0f:bb:7d:d5:13:d4:0e:9a:27:e4:65:66:02:45:f7: 1e:28:55:a4:5d:09:05:9a:ff:d1:a9:e6:dd:ee:63:5c:17:d4: 50:4b:13:10:65:8f:b5:6d:41:a6:5a:dd:68:79:48:a1:b0:29: 88:95:05:c7:7c:8f:e8:8f:4a:35:05:c6:60:28:cd:19:0f:17: 94:97:bd:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjUwOTA0MTUyNDA1WhcNMjUwOTExMTUyNDA1WjAYMRYwFAYD VQQDEw02OGI5YWYxNS04OTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxquTIW9+3a7rvghobrc5cXXYGRWoaVZaTNoYJw3lU6DwhYhg6Ir/7OOJqf2Q c3OMYiPvFTDDhLlwyLN8VCqpyvY/Me/1nNz66y6aX9tsqTnBY9aKSbzGa9nskiXv DVz846D1k4wAkHpVPOHQKJfO6ALJauH9Cws/TMuxECXwunSoDl0h/UBodk9V4mXo cijicrI3EhSgElH1nenOJNbZhyYIXD7Z/ra+nHkGnrritM3mJhzmL99248SrClzF SZc1SL2yV4JSpgxapeGZbKQ3a5fBEfBaU7d3RgyxKYtbdJooB615jgnMYgZHJ8Ir wNjVgea9aG3tYdtX4uYppTN6vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWcX6Di sNBY7ThmRXeUGpfr7diLMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkM3QS80QzUyOEY3ODQ1MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3 M2MxUndEbjRQM3Q2UjZYd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxmSA76Zt2brrRprnh6Dj+e7UKoSpnHa/zEVrIX7SLt4yvKHk9dmse aO8/x07GRXs+S/Cz1zJ5LcPSH3Izq516nEhfv3OvQxxwAZsrWGDPvRabD08NscJr w9Iz7h2irs2Cxh0rt5Kn1o7lQDJLcFkum4P1LLtpIgw68XrLmVI7D0ZAn63Ys6mt SOcBBI3mlX4epXynCwIo4AJVsR01olZY5vr0xj7wKZyG+wnnA23g9qBj0R21dw4P u33VE9QOmifkZWYCRfceKFWkXQkFmv/Rqebd7mNcF9RQSxMQZY+1bUGmWt1oeUih sCmIlQXHfI/oj0o1BcZgKM0ZDxeUl73C -----END CERTIFICATE-----Generated at Sat Sep 6 16:04:57 2025 by rpki-client