$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft File: Uaqsf29Y90cHLIfsL0h47xy49M4.mft (raw, json) Hash identifier: mdcJPRNifXzhg+T3acCWk2XSR9WsAnJ9Mc8owrNEYNI= Subject key identifier: B7:C9:46:43:70:33:0A:E6:53:AC:0E:E2:14:29:DC:54:E8:87:50:CA Authority key identifier: 51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE Certificate issuer: /CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE Certificate serial: 1251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft Manifest number: 123D Signing time: Wed 20 Aug 2025 17:13:23 +0000 Manifest this update: Wed 20 Aug 2025 17:13:22 +0000 Manifest next update: Wed 27 Aug 2025 17:13:22 +0000 Files and hashes: 1: Uaqsf29Y90cHLIfsL0h47xy49M4.crl (hash: rVPnq03bLS8qUyJ0NyDmvHe8/6pfyQO5dEEep0wwaMM=) 2: AA47599A985F11EEBA5D186DC4F9AE02.roa (hash: abD2sJSusd+EergprKNOfnX9AY5e5SRUlXGm1ps4L/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4689 (0x1251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE Validity Not Before: Aug 20 17:13:22 2025 GMT Not After : Aug 27 17:13:22 2025 GMT Subject: CN=68a60232-c903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c6:15:cb:18:8c:ac:70:c3:a7:42:fe:7a:54: f4:74:98:be:99:83:ab:c2:6c:25:e3:03:17:34:3c: 9e:f6:56:4a:3a:be:e2:53:a7:ef:78:c9:44:49:54: 5c:56:3d:07:b4:d5:ed:5b:97:c6:ec:cd:06:b9:b9: 96:7c:69:1d:79:d3:ff:ca:0b:38:90:ab:fc:f6:72: a2:38:f8:5f:eb:84:82:1a:5f:a7:07:46:b0:87:bc: e7:b1:01:ea:9a:dd:66:50:26:6b:19:3f:9e:22:fe: 9d:0a:e5:40:6b:ee:77:fe:1c:54:c7:38:05:04:5f: a2:5f:a1:11:7f:12:0f:84:61:cf:32:af:77:96:00: 78:57:14:1d:ff:39:05:9b:db:d7:e7:b5:15:2f:45: ac:67:71:aa:6e:fd:10:b8:2f:8b:f2:c8:0a:c7:a3: ab:12:41:31:8b:80:ee:51:dd:ee:fd:08:68:0e:fe: 6a:83:09:7c:36:7b:cc:ab:e0:d4:e5:82:54:25:c4: 99:dd:24:f7:c5:34:b4:ff:50:12:90:e9:42:0f:bf: 8c:f2:52:a0:2b:10:f9:7a:5e:c5:5f:9a:7a:02:02: 9d:71:86:a9:42:c4:94:13:74:d1:ee:c4:7a:1c:87: 17:c2:29:a3:53:36:09:0b:2c:a9:9f:63:cf:1b:91: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C9:46:43:70:33:0A:E6:53:AC:0E:E2:14:29:DC:54:E8:87:50:CA X509v3 Authority Key Identifier: keyid:51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:90:ff:4c:b8:4f:8f:77:8e:4b:71:bd:0c:e1:c4:8c:b3:4e: a8:52:2e:0c:01:f6:04:b8:17:d8:18:1c:04:69:f7:48:d2:0a: c3:a8:6b:bb:dd:a5:42:f5:42:3e:71:c1:20:f4:b2:2f:4e:dc: d5:b1:d9:02:d5:27:9e:45:fb:19:05:c3:f0:eb:d0:c0:58:2b: 10:4b:1b:3f:3e:cf:08:38:30:fe:d7:b3:dc:08:9f:f4:75:b3: c5:9a:e2:3c:17:5b:a7:9e:96:b9:dd:cb:08:2b:c6:d4:07:47: cc:b0:be:5c:05:39:79:82:c0:80:f3:46:98:33:11:ff:8a:d1: a2:db:d8:b0:aa:bc:1a:25:82:75:ea:bd:ab:ec:1f:36:76:a7: 09:0c:e6:0b:e4:9a:69:fe:2f:28:ab:ff:f7:94:83:9c:c2:af: ef:4f:16:1e:39:49:f1:17:51:a9:c1:6a:47:57:6b:41:ff:7b: 39:b2:d2:87:67:7c:29:b1:45:d0:26:63:e5:53:93:2d:71:70: 55:47:da:11:e7:78:38:1d:da:8f:60:1f:da:39:13:c5:4b:85: eb:71:7a:5b:b3:e5:6b:3e:b8:cf:6f:c1:4d:73:94:d5:12:7b: 3b:ee:15:e7:f5:65:dc:6d:a2:eb:e7:8f:74:54:ee:67:e6:f1: 09:df:46:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICElEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDUxQUFBQzdGNkY1OEY3NDcwNzJDODdFQzJGNDg3OEVG MUNCOEY0Q0UwHhcNMjUwODIwMTcxMzIyWhcNMjUwODI3MTcxMzIyWjAYMRYwFAYD VQQDEw02OGE2MDIzMi1jOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6MYVyxiMrHDDp0L+elT0dJi+mYOrwmwl4wMXNDye9lZKOr7iU6fveMlESVRc Vj0HtNXtW5fG7M0GubmWfGkdedP/ygs4kKv89nKiOPhf64SCGl+nB0awh7znsQHq mt1mUCZrGT+eIv6dCuVAa+53/hxUxzgFBF+iX6ERfxIPhGHPMq93lgB4VxQd/zkF m9vX57UVL0WsZ3Gqbv0QuC+L8sgKx6OrEkExi4DuUd3u/QhoDv5qgwl8NnvMq+DU 5YJUJcSZ3ST3xTS0/1ASkOlCD7+M8lKgKxD5el7FX5p6AgKdcYapQsSUE3TR7sR6 HIcXwimjUzYJCyypn2PPG5GLsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfJRkNw MwrmU6wO4hQp3FToh1DKMB8GA1UdIwQYMBaAFFGqrH9vWPdHByyH7C9IeO8cuPTO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9GODU4MzQ0RUUz NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9VYXFzZjI5WTkwY0hMSWZzTDBoNDd4eTQ5 TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhcXNmMjlZOTBjSExJZnNMMGg0N3h5NDlNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkNERi9GODU4MzQ0RUUzNkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9VYXFzZjI5WTkw Y0hMSWZzTDBoNDd4eTQ5TTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJkP9MuE+Pd45Lcb0M4cSMs06oUi4MAfYEuBfYGBwEafdI0grDqGu7 3aVC9UI+ccEg9LIvTtzVsdkC1SeeRfsZBcPw69DAWCsQSxs/Ps8IODD+17PcCJ/0 dbPFmuI8F1unnpa53csIK8bUB0fMsL5cBTl5gsCA80aYMxH/itGi29iwqrwaJYJ1 6r2r7B82dqcJDOYL5Jpp/i8oq//3lIOcwq/vTxYeOUnxF1GpwWpHV2tB/3s5stKH Z3wpsUXQJmPlU5MtcXBVR9oR53g4HdqPYB/aORPFS4XrcXpbs+VrPrjPb8FNc5TV Ens77hXn9WXcbaLr5490VO5n5vEJ30ZF -----END CERTIFICATE-----Generated at Thu Aug 21 14:01:30 2025 by rpki-client