$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft File: UBJV6QF6Y3iSbTaute_xnEXWV04.mft (raw, json) Hash identifier: X/YgnDVvXxLKncFSXc+1ZPVsPZbMwPCzM2zs6CrqloE= Subject key identifier: FD:EF:9A:A2:2E:55:CC:61:EC:88:26:17:69:35:0C:BC:05:7E:10:B3 Authority key identifier: 50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E Certificate issuer: /CN=A916523A/serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft Manifest number: 25 Signing time: Thu 21 Aug 2025 08:03:46 +0000 Manifest this update: Thu 21 Aug 2025 08:03:46 +0000 Manifest next update: Thu 28 Aug 2025 08:03:46 +0000 Files and hashes: 1: UBJV6QF6Y3iSbTaute_xnEXWV04.crl (hash: +IyrwwglFHM8Va3sA7JmKtNlnUnwFDdCTY/HHTpsJ5k=) 2: 6654FB224CDE11F092AD8884C4F9AE02.roa (hash: liQT4xahQ5o7fJUAyQXDum5T6VsmCHKLCFUQqV7AJDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916523A, serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E Validity Not Before: Aug 21 08:03:46 2025 GMT Not After : Aug 28 08:03:46 2025 GMT Subject: CN=68a6d2e2-3905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:0f:46:00:6c:45:26:be:b8:cd:b1:47:92: 0d:81:5d:c3:e3:d2:2d:2e:cd:f9:e8:e4:27:4b:2c: 2f:15:bf:b8:ff:51:64:94:fe:3b:6a:d0:f9:9f:fc: de:ae:db:13:8e:82:fb:ca:89:7e:11:88:68:4b:fb: 14:04:a9:62:31:89:ad:99:18:a6:44:45:db:f5:f2: 0d:7e:2b:fc:3d:28:00:d4:ef:7c:82:59:60:26:46: 77:8b:aa:a3:de:70:90:56:97:42:80:e2:f2:74:a5: a6:51:df:06:1c:2f:a2:3f:b6:18:02:ce:d4:f6:68: 9b:1b:4a:e3:e3:89:9e:a2:56:e2:3f:d5:cf:60:a3: ad:c7:69:5d:97:db:44:3b:d9:bc:e5:29:02:d2:81: 9e:bf:64:ca:e0:63:ab:c2:3c:80:14:bb:21:98:63: d5:79:e9:44:62:8e:62:f3:a9:20:4e:38:e7:a6:ca: 3e:11:43:10:2e:73:28:3b:15:08:61:d2:e3:26:65: 00:d0:c6:95:01:0b:cd:24:cf:e9:55:50:d4:fb:74: 86:f7:a3:5e:3c:6b:1a:f3:71:35:ef:3a:bb:58:bc: 33:24:38:22:f0:50:36:eb:27:3e:77:b4:49:57:7f: 09:6f:73:4e:88:1a:9e:81:b5:68:5f:06:7a:28:81: d3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EF:9A:A2:2E:55:CC:61:EC:88:26:17:69:35:0C:BC:05:7E:10:B3 X509v3 Authority Key Identifier: keyid:50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fa:18:af:fb:02:51:f7:e1:4c:f8:28:ba:77:b3:bb:79:f3: 0a:6c:95:42:7b:48:c4:b8:f4:3b:47:91:0c:34:e4:68:f5:ef: 8e:3a:0c:12:63:23:5d:6a:69:76:84:95:6d:82:7d:2d:eb:29: 63:c9:a6:a1:22:2e:2e:79:fc:57:a3:48:9b:76:c4:2f:ed:ad: 73:bf:67:23:82:14:8f:ff:47:9b:86:2a:43:28:41:31:50:fd: 76:f1:b8:bf:8e:a9:56:33:b5:41:41:91:40:69:3a:3d:87:80: 1c:fb:b3:f9:9c:87:70:31:b6:be:35:99:1c:dc:30:03:e7:32: 5a:52:8c:2e:2c:39:fd:36:5f:85:7e:21:ff:5c:9e:fe:6d:1c: a1:c1:78:76:de:dd:19:85:f5:72:3a:8b:af:51:ff:5e:6e:19: cb:d5:ee:bd:df:7b:d8:f5:fa:93:83:9e:63:c6:c5:bd:f4:c9: 25:8d:2c:05:86:d7:25:99:9f:11:5b:e9:75:23:f1:3a:97:95: 31:77:84:4e:29:a0:f6:4d:06:9c:61:d6:df:13:14:d0:08:41: 01:dc:a9:c3:f0:1a:fe:a8:14:2d:6e:c9:f9:fb:1b:4a:78:e1: a0:34:50:a6:fa:a4:69:e8:c0:6a:d9:2a:ae:e6:d1:eb:b2:6a: ee:96:e0:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTIzQTExMC8GA1UEBRMoNTAxMjU1RTkwMTdBNjM3ODkyNkQzNkFFQjVFRkYxOUM0 NUQ2NTc0RTAeFw0yNTA4MjEwODAzNDZaFw0yNTA4MjgwODAzNDZaMBgxFjAUBgNV BAMTDTY4YTZkMmUyLTM5MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDg3Q9GAGxFJr64zbFHkg2BXcPj0i0uzfno5CdLLC8Vv7j/UWSU/jtq0Pmf/N6u 2xOOgvvKiX4RiGhL+xQEqWIxia2ZGKZERdv18g1+K/w9KADU73yCWWAmRneLqqPe cJBWl0KA4vJ0paZR3wYcL6I/thgCztT2aJsbSuPjiZ6iVuI/1c9go63HaV2X20Q7 2bzlKQLSgZ6/ZMrgY6vCPIAUuyGYY9V56URijmLzqSBOOOemyj4RQxAucyg7FQhh 0uMmZQDQxpUBC80kz+lVUNT7dIb3o148axrzcTXvOrtYvDMkOCLwUDbrJz53tElX fwlvc06IGp6BtWhfBnoogdNxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/e+aoi5V zGHsiCYXaTUMvAV+ELMwHwYDVR0jBBgwFoAUUBJV6QF6Y3iSbTaute/xnEXWV04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MjNBL0RFODJDQjQ4NENE RDExRjBCRkEwOEY4MEM0RjlBRTAyL1VCSlY2UUY2WTNpU2JUYXV0ZV94bkVYV1Yw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUJKVjZRRjZZM2lTYlRhdXRlX3huRVhXVjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 MjNBL0RFODJDQjQ4NENERDExRjBCRkEwOEY4MEM0RjlBRTAyL1VCSlY2UUY2WTNp U2JUYXV0ZV94bkVYV1YwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFr6GK/7AlH34Uz4KLp3s7t58wpslUJ7SMS49DtHkQw05Gj17446DBJj I11qaXaElW2CfS3rKWPJpqEiLi55/FejSJt2xC/trXO/ZyOCFI//R5uGKkMoQTFQ /XbxuL+OqVYztUFBkUBpOj2HgBz7s/mch3Axtr41mRzcMAPnMlpSjC4sOf02X4V+ If9cnv5tHKHBeHbe3RmF9XI6i69R/15uGcvV7r3fe9j1+pODnmPGxb30ySWNLAWG 1yWZnxFb6XUj8TqXlTF3hE4poPZNBpxh1t8TFNAIQQHcqcPwGv6oFC1uyfn7G0p4 4aA0UKb6pGnowGrZKq7m0euyau6W4PU= -----END CERTIFICATE-----Generated at Sat Aug 23 03:26:53 2025 by rpki-client