$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft File: UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json) Hash identifier: ilp5ky96xsBntYmtS+QPIDs7LkZ5HB+ZGbUhoxexLQE= Subject key identifier: CC:66:F0:76:51:01:79:09:3E:E0:78:BC:AB:14:AD:F1:70:65:ED:94 Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft Manifest number: 020E Signing time: Wed 17 Sep 2025 02:40:26 +0000 Manifest this update: Wed 17 Sep 2025 02:40:26 +0000 Manifest next update: Wed 24 Sep 2025 02:40:26 +0000 Files and hashes: 1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: b9OCZzJtDJfiBgLyy0IoaqrrDeuCprjdS+FkS/dJvgc=) 2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: h7PFINLKglbbD51solfuF7q/5uroEa7Bk3jUBzQnwh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE, serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Validity Not Before: Sep 17 02:40:26 2025 GMT Not After : Sep 24 02:40:26 2025 GMT Subject: CN=68ca1f9a-b8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:26:63:af:e7:89:a8:5c:61:1a:9f:26:f2: 82:ec:2e:98:d4:b3:f1:b0:f3:ae:10:03:ff:43:95: 6e:7f:88:d3:ce:be:c5:97:40:8f:69:7c:91:42:c5: 36:29:41:3f:a7:15:60:59:7d:a4:fe:ad:40:8b:47: 09:81:5b:21:f3:9e:d3:80:6a:a1:5e:9c:24:31:4f: 4c:ce:d1:3d:66:0e:41:ec:6b:67:fe:3e:19:3a:ee: 21:f4:41:aa:61:ff:16:ec:4b:89:58:9b:04:34:59: 09:7d:b8:8a:41:0a:ad:d8:f5:55:3e:f7:7c:84:e8: 23:b3:6e:60:84:68:be:e2:4f:5d:f2:26:a4:b0:9f: 52:b5:57:a7:b2:fa:eb:07:14:f5:b4:37:e0:d1:9f: db:f8:41:2d:e1:66:f8:bd:e3:fe:e6:8a:66:8c:0e: d7:ba:fb:68:33:1f:42:b2:e4:ff:2a:a0:a2:0d:e7: 04:97:17:43:6e:ac:22:a6:a5:86:bb:61:f6:aa:73: d7:96:d0:04:49:55:64:a4:63:5a:d3:39:f4:9d:bf: ce:e8:01:5c:cd:91:8b:1e:b9:69:bb:5e:48:91:0b: e3:21:a7:45:93:fe:5c:b7:41:d4:d3:cb:71:bc:71: ca:0f:00:71:a2:f2:54:35:cb:94:30:45:53:9c:14: d1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:66:F0:76:51:01:79:09:3E:E0:78:BC:AB:14:AD:F1:70:65:ED:94 X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:4e:c2:a5:cf:cb:17:6b:05:60:3d:91:1a:f4:ea:36:2c:9d: e1:74:3c:b1:f0:a0:9c:75:85:f2:d3:e7:5b:6b:94:49:c7:dc: 4c:85:70:78:1c:23:2e:9a:90:e7:a7:e2:d3:50:04:ea:da:c3: 4d:cc:29:45:10:eb:ac:b0:13:d8:60:11:f7:f9:fa:e2:94:8b: 14:c0:76:19:40:4c:b2:8c:65:68:94:69:45:3d:57:52:e1:97: 70:1d:31:12:c8:7b:6b:8d:32:98:0c:89:8f:f1:8b:3b:49:08: b5:33:2d:5c:80:16:3c:ca:fc:e7:87:8a:6d:d2:ba:48:ec:ab: 18:9e:01:45:a8:cf:ae:31:0e:92:e6:26:ec:62:60:47:84:a2: 82:22:db:bc:7a:a6:3d:1e:60:d4:c0:15:12:c9:d4:13:e9:39: 8a:c5:19:1d:d5:50:3a:79:5c:56:bb:7f:07:4d:64:40:db:94: 80:ae:ac:f0:e3:7f:2d:7e:73:1a:9f:8d:b0:b2:33:03:eb:57: 3b:f6:dd:39:38:f4:a1:62:d9:ab:02:de:ee:35:22:eb:55:d3: 1f:70:7f:4b:46:86:5e:58:b4:37:13:94:20:2c:57:b3:ce:cf: be:b6:01:19:a4:3a:3f:cb:89:eb:10:6e:a9:8b:fd:64:cb:dd: d9:01:ab:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjUwOTE3MDI0MDI2WhcNMjUwOTI0MDI0MDI2WjAYMRYwFAYD VQQDEw02OGNhMWY5YS1iOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoomY6/niahcYRqfJvKC7C6Y1LPxsPOuEAP/Q5Vuf4jTzr7Fl0CPaXyRQsU2 KUE/pxVgWX2k/q1Ai0cJgVsh857TgGqhXpwkMU9MztE9Zg5B7Gtn/j4ZOu4h9EGq Yf8W7EuJWJsENFkJfbiKQQqt2PVVPvd8hOgjs25ghGi+4k9d8iaksJ9StVensvrr BxT1tDfg0Z/b+EEt4Wb4veP+5opmjA7XuvtoMx9CsuT/KqCiDecElxdDbqwipqWG u2H2qnPXltAESVVkpGNa0zn0nb/O6AFczZGLHrlpu15IkQvjIadFk/5ct0HU08tx vHHKDwBxovJUNcuUMEVTnBTRxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxm8HZR AXkJPuB4vKsUrfFwZe2UMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlCRS82RkNGQjg2NjZCQjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZX UHJXTW42ZFpLaHZZQmJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRTsKlz8sXawVgPZEa9Oo2LJ3hdDyx8KCcdYXy0+dba5RJx9xMhXB4 HCMumpDnp+LTUATq2sNNzClFEOussBPYYBH3+frilIsUwHYZQEyyjGVolGlFPVdS 4ZdwHTESyHtrjTKYDImP8Ys7SQi1My1cgBY8yvznh4pt0rpI7KsYngFFqM+uMQ6S 5ibsYmBHhKKCItu8eqY9HmDUwBUSydQT6TmKxRkd1VA6eVxWu38HTWRA25SArqzw 438tfnMan42wsjMD61c79t05OPShYtmrAt7uNSLrVdMfcH9LRoZeWLQ3E5QgLFez zs++tgEZpDo/y4nrEG6pi/1ky93ZAauG -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:31 2025 by rpki-client