$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json) Hash identifier: xhp6CiF6CBAAqkmCplvCTa1jqXOL1I+se2Fj8Tyttws= Subject key identifier: E0:09:2E:8E:AB:D8:EA:D5:E9:03:A0:B5:C0:72:A9:88:8E:6C:61:2A Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Certificate serial: 0C67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft Manifest number: 0C57 Signing time: Sun 24 Aug 2025 18:32:00 +0000 Manifest this update: Sun 24 Aug 2025 18:31:59 +0000 Manifest next update: Sun 31 Aug 2025 18:31:59 +0000 Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: 5cb+iL2kXqWYtPkorYy2W9hpG07mJrsc78r2JOKU4P4=) 2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: /6OtFAV0fvfK8AYoQXUKAPYFcikHsFv3EvaxBMPOB2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3175 (0xc67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688 Validity Not Before: Aug 24 18:31:59 2025 GMT Not After : Aug 31 18:31:59 2025 GMT Subject: CN=68ab5aa0-2eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cb:a4:81:75:65:7e:92:d1:fa:85:2a:9f:60: 0b:ce:1e:f2:b3:c0:d6:6b:d8:81:62:16:15:9c:2d: e7:f8:03:c9:f8:cb:d0:23:4a:9a:75:2c:bf:98:00: eb:22:3d:c9:64:1c:9d:27:9c:c2:1f:04:ac:1d:ad: a9:c0:c7:7a:bb:6f:d7:c5:ac:df:69:df:7a:91:27: 24:57:f4:1d:4e:82:39:e9:6f:75:40:9b:0d:7c:52: 58:42:72:a0:68:03:eb:48:51:51:c9:3c:28:b9:55: 34:64:d1:22:25:22:c7:37:07:24:90:9c:7a:98:7f: 5a:42:76:34:4a:b9:62:f7:cd:16:30:20:1f:f3:fe: c0:75:01:d9:23:a9:fb:d6:c1:c7:f9:dd:9e:89:36: f8:0d:9c:9d:b4:fc:a8:73:79:bd:94:0f:3e:5a:7b: 88:1d:9d:e5:68:ca:c0:e4:9d:fa:39:9d:4e:b3:05: fa:9b:51:ae:e8:d6:c2:b4:37:20:51:aa:cf:3b:dc: 8b:df:61:2f:86:83:7a:b3:83:a6:26:a8:fc:82:37: d7:ea:cc:a6:23:2e:e0:02:43:c2:ef:32:28:e8:3b: 16:de:83:68:76:e9:2a:a9:53:b5:9d:d0:e3:bb:03: 58:58:90:02:86:52:8c:9b:8d:dd:00:2f:62:fa:a0: eb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:09:2E:8E:AB:D8:EA:D5:E9:03:A0:B5:C0:72:A9:88:8E:6C:61:2A X509v3 Authority Key Identifier: keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:54:e3:13:ac:1c:1a:1f:64:3b:76:9e:34:6b:fc:d3:fb:f9: bd:e2:bb:57:10:49:fc:6c:c3:c3:a3:e4:2e:fd:0b:2e:80:5c: 1d:af:bf:ee:18:86:c6:e4:a0:0c:96:f1:0c:60:51:78:52:3d: a7:f9:f7:1d:df:ab:14:54:40:fc:e4:ab:6e:63:ef:a6:9a:9e: ac:71:c1:49:c1:10:af:63:48:7e:02:df:05:42:b1:27:7c:af: 19:c4:20:08:e5:f7:36:4e:86:4f:d3:34:33:cd:10:3e:07:5e: 34:ea:9f:83:1c:40:4b:ba:32:d9:45:eb:76:bc:15:ad:cf:8a: 41:c7:df:e3:6f:c1:e4:75:6a:c2:ff:e1:ae:cb:45:fc:dd:d8: 12:e1:d3:be:14:04:6a:2c:f6:ec:88:36:15:d8:b0:7c:d6:47: 61:9b:18:b6:45:dc:8e:77:03:1f:14:1c:c3:d7:f9:f3:d6:73: cb:09:a2:68:f7:51:8d:24:99:3c:ac:54:48:e4:9f:86:36:73: 78:70:d2:c0:e3:af:dc:1b:f8:43:22:ac:b8:a4:d8:48:81:3d: 18:79:6e:28:c0:ce:c4:58:21:e5:8b:af:06:fb:af:a2:8a:0f: a8:cb:7c:42:12:7c:a4:e4:7c:d4:db:2f:91:81:15:3a:71:77: 9e:9a:b7:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NDAxMTAvBgNVBAUTKEZBRTYyMDFDNjY2MzkyMzQwQkVFMTM4RUQ0MTc5OUJB ODZEQUE2ODgwHhcNMjUwODI0MTgzMTU5WhcNMjUwODMxMTgzMTU5WjAYMRYwFAYD VQQDEw02OGFiNWFhMC0yZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sukgXVlfpLR+oUqn2ALzh7ys8DWa9iBYhYVnC3n+APJ+MvQI0qadSy/mADr Ij3JZBydJ5zCHwSsHa2pwMd6u2/Xxazfad96kSckV/QdToI56W91QJsNfFJYQnKg aAPrSFFRyTwouVU0ZNEiJSLHNwckkJx6mH9aQnY0Srli980WMCAf8/7AdQHZI6n7 1sHH+d2eiTb4DZydtPyoc3m9lA8+WnuIHZ3laMrA5J36OZ1OswX6m1Gu6NbCtDcg UarPO9yL32EvhoN6s4OmJqj8gjfX6symIy7gAkPC7zIo6DsW3oNodukqqVO1ndDj uwNYWJAChlKMm43dAC9i+qDrqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAJLo6r 2OrV6QOgtcByqYiObGEqMB8GA1UdIwQYMBaAFPrmIBxmY5I0C+4TjtQXmbqG2qaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg0MC82MTc3MzMyQTBC ODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtqUUw3aE9PMUJlWnVvYmFw b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11WWdIR1pqa2pRTDdoT08xQmVadW9iYXBvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg0MC82MTc3MzMyQTBCODIxMUVBODA0MTE1NEJDNEY5QUUwMi8tdVlnSEdaamtq UUw3aE9PMUJlWnVvYmFwb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGVOMTrBwaH2Q7dp40a/zT+/m94rtXEEn8bMPDo+Qu/QsugFwdr7/u GIbG5KAMlvEMYFF4Uj2n+fcd36sUVED85KtuY++mmp6sccFJwRCvY0h+At8FQrEn fK8ZxCAI5fc2ToZP0zQzzRA+B1406p+DHEBLujLZRet2vBWtz4pBx9/jb8HkdWrC /+Guy0X83dgS4dO+FARqLPbsiDYV2LB81kdhmxi2RdyOdwMfFBzD1/nz1nPLCaJo 91GNJJk8rFRI5J+GNnN4cNLA46/cG/hDIqy4pNhIgT0YeW4owM7EWCHli68G+6+i ig+oy3xCEnyk5HzU2y+RgRU6cXeemreH -----END CERTIFICATE-----Generated at Sun Aug 24 21:56:21 2025 by rpki-client