$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft File: uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft (raw, json) Hash identifier: SEZaq0Vgr3ot5LBwaSIEzCQ/Axo0z65RNhW53pQcW24= Subject key identifier: D3:66:33:F4:DB:C8:94:27:8B:31:F4:E3:53:2D:4B:38:6E:78:12:AF Authority key identifier: BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44 Certificate issuer: /CN=A9154388/serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft Manifest number: A7 Signing time: Fri 05 Sep 2025 06:37:49 +0000 Manifest this update: Fri 05 Sep 2025 06:37:48 +0000 Manifest next update: Fri 12 Sep 2025 06:37:48 +0000 Files and hashes: 1: uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl (hash: ERjPe3GVIiJNrA9ljF4poP8aXR26VS1UOFxH1mtgndo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154388, serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044 Validity Not Before: Sep 5 06:37:48 2025 GMT Not After : Sep 12 06:37:48 2025 GMT Subject: CN=68ba853d-d400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:0e:f6:d3:56:b5:1a:e5:fa:d8:53:26:63: a1:6f:48:fd:d8:7f:60:f6:2e:46:08:d5:54:3a:4a: cd:fa:5c:46:a8:de:08:57:fe:98:6b:0a:a2:9f:9f: cd:05:49:e1:ba:40:54:ef:8b:d4:32:fd:6f:3d:9e: 94:ee:fb:fe:2a:97:04:30:d7:a7:bf:ef:83:7d:01: a8:46:a1:e4:da:fd:9c:ed:a2:6f:a8:99:ce:7c:67: 6f:3a:7c:51:b4:06:ac:a8:f2:55:7a:6a:dd:55:48: 99:5a:8d:a7:1b:77:60:88:04:fe:49:17:b1:64:bb: f6:16:d7:24:cf:ca:71:87:9a:ee:19:24:8f:70:21: 5d:f9:c2:80:aa:dd:51:26:4a:20:c7:40:80:56:b5: 10:d0:66:1c:4f:7b:13:cb:25:1e:fb:09:53:9e:2f: f9:95:40:d6:d8:44:ea:db:72:6b:a5:1b:eb:ea:5f: 7e:dc:3f:d6:37:15:9c:ca:3b:c4:9d:b4:9f:08:e7: 3a:96:2a:b4:21:5f:20:47:da:6c:81:bc:51:17:3e: 0d:41:f4:25:63:2a:cd:3d:0f:61:e7:98:41:5e:82: 70:c2:1b:76:c6:46:bc:05:f5:cd:18:c0:87:6d:a3: 9d:2a:ec:cd:21:5d:50:2c:00:ed:5b:2a:1f:6b:55: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:66:33:F4:DB:C8:94:27:8B:31:F4:E3:53:2D:4B:38:6E:78:12:AF X509v3 Authority Key Identifier: keyid:BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:af:d9:2c:cc:be:b5:dd:21:3d:85:15:ce:ef:98:15:4c:97: d0:10:b0:a0:36:db:38:3f:60:7a:96:eb:8e:7b:56:53:9b:10: e9:90:4e:c8:e6:4c:ba:df:65:d0:16:67:f2:b6:99:03:0a:ea: 7a:de:e5:0f:2f:cc:8a:0e:38:a0:82:85:3f:48:b4:9c:d0:3e: 06:4d:d6:32:03:39:22:2f:c3:78:ef:ca:2f:25:a7:1c:ff:00: 49:71:22:38:8b:47:e8:59:28:4f:ed:35:54:41:da:9a:2d:99: 8e:c2:c1:7f:7a:e8:78:23:ea:85:bf:29:2c:b0:29:9e:a8:3a: 64:9b:58:f3:2a:01:6f:4e:48:95:bc:58:00:73:d4:63:f2:5b: bf:93:18:8f:b1:fa:b3:2d:23:fb:c4:ed:cf:ba:61:65:84:50: e6:2e:cc:2e:7c:f9:06:32:e3:93:77:07:e6:ea:df:d4:bb:f1: 6d:ae:47:86:7e:9d:ef:37:43:40:2f:ce:9e:4f:4d:03:c0:a9: c9:d4:c5:82:38:99:9a:50:e7:30:61:4d:cf:94:b5:41:43:aa: b4:1e:da:b1:85:a0:74:54:67:13:c3:c5:29:03:b7:2b:18:3b: a5:b0:03:09:8d:54:ae:b5:0c:57:34:bd:67:97:12:e7:8c:68: 9b:47:73:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzODgxMTAvBgNVBAUTKEJCMkEwRjQ5MzIxRTA4MEIyMjcwQkQwQzhEOUI4RDRC NzkzQjEwNDQwHhcNMjUwOTA1MDYzNzQ4WhcNMjUwOTEyMDYzNzQ4WjAYMRYwFAYD VQQDEw02OGJhODUzZC1kNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYMO9tNWtRrl+thTJmOhb0j92H9g9i5GCNVUOkrN+lxGqN4IV/6Yawqin5/N BUnhukBU74vUMv1vPZ6U7vv+KpcEMNenv++DfQGoRqHk2v2c7aJvqJnOfGdvOnxR tAasqPJVemrdVUiZWo2nG3dgiAT+SRexZLv2Ftckz8pxh5ruGSSPcCFd+cKAqt1R Jkogx0CAVrUQ0GYcT3sTyyUe+wlTni/5lUDW2ETq23JrpRvr6l9+3D/WNxWcyjvE nbSfCOc6liq0IV8gR9psgbxRFz4NQfQlYyrNPQ9h55hBXoJwwht2xka8BfXNGMCH baOdKuzNIV1QLADtWyofa1UGrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNmM/Tb yJQnizH041MtSzhueBKvMB8GA1UdIwQYMBaAFLsqD0kyHggLInC9DI2bjUt5OxBE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM4OC8zODQ1N0NGNjhD MzcxMUVGODA5MDFDMkVDNEY5QUUwMi91eW9QU1RJZUNBc2ljTDBNalp1TlMzazdF RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3V5b1BTVEllQ0FzaWNMME1qWnVOUzNrN0VFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM4OC8zODQ1N0NGNjhDMzcxMUVGODA5MDFDMkVDNEY5QUUwMi91eW9QU1RJZUNB c2ljTDBNalp1TlMzazdFRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkr9kszL613SE9hRXO75gVTJfQELCgNts4P2B6luuOe1ZTmxDpkE7I 5ky632XQFmfytpkDCup63uUPL8yKDjiggoU/SLSc0D4GTdYyAzkiL8N478ovJacc /wBJcSI4i0foWShP7TVUQdqaLZmOwsF/euh4I+qFvykssCmeqDpkm1jzKgFvTkiV vFgAc9Rj8lu/kxiPsfqzLSP7xO3PumFlhFDmLswufPkGMuOTdwfm6t/Uu/FtrkeG fp3vN0NAL86eT00DwKnJ1MWCOJmaUOcwYU3PlLVBQ6q0HtqxhaB0VGcTw8UpA7cr GDulsAMJjVSutQxXNL1nlxLnjGibR3Ni -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:11 2025 by rpki-client