$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: ACWBQ4k19z3Zf2H8p3b0omaUzzYy84gUROpnPTSo8PY= Subject key identifier: C0:05:6E:7F:70:E5:2E:C7:60:9C:51:6F:7B:28:54:8E:BA:0D:C5:CC Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 1942 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 1942 Signing time: Sun 20 Jul 2025 16:26:43 +0000 Manifest this update: Sun 20 Jul 2025 16:26:43 +0000 Manifest next update: Sun 27 Jul 2025 16:26:43 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: sZpLdKyQ+Zmyete32+lBhakw9M8VBCUtF+cYt0z/UkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6466 (0x1942) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Validity Not Before: Jul 20 16:26:43 2025 GMT Not After : Jul 27 16:26:43 2025 GMT Subject: CN=687d18c3-cd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:f9:86:94:f0:5a:7f:1f:8c:7c:49:e2:aa: 81:02:32:c4:b0:5d:e3:39:4b:67:ba:2a:dc:b5:cf: f4:a6:c1:5f:10:5b:3b:b2:88:b4:bd:61:91:d1:d8: 1b:72:a9:ac:eb:25:c8:84:46:3a:09:d1:91:01:21: cb:fd:63:ea:14:86:0e:5b:05:2f:5c:f4:c2:df:4c: b4:55:e1:07:9b:92:00:bd:34:e5:08:16:50:9a:53: e7:ff:25:a9:36:95:aa:9e:1b:b6:e3:13:f5:1c:cc: f1:80:59:35:98:e2:27:71:c9:8b:17:0b:cb:5a:c3: 59:4a:f0:ff:49:60:c1:62:31:24:4e:e9:ee:d8:b5: 3a:23:f7:d0:bd:a3:eb:ca:dd:67:f3:dd:86:6e:28: 50:78:55:b8:a9:5e:13:26:f1:c0:05:b4:56:6e:17: bf:ee:22:89:06:5b:ab:55:d6:f1:8d:94:a1:28:ec: c1:61:24:19:2e:9e:36:0b:03:a5:80:8e:88:68:08: 43:85:ce:f4:03:ab:26:71:cb:5f:b5:7e:e0:7b:dc: 78:20:23:b6:23:c3:e5:a0:a2:aa:16:bc:78:18:1c: 75:12:5a:fb:91:1d:55:8c:b8:97:d5:72:40:0b:c2: fd:c5:31:6c:44:76:46:de:e7:f1:21:2c:be:35:a0: 1b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:05:6E:7F:70:E5:2E:C7:60:9C:51:6F:7B:28:54:8E:BA:0D:C5:CC X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:52:28:16:62:1f:26:1d:0a:a2:4e:c6:06:cb:b3:87:f9:8c: c5:b2:1a:80:3c:ff:68:be:66:06:f7:c9:0c:22:92:f1:b3:b3: 3d:96:08:75:9a:58:ca:95:33:cd:df:48:25:4b:db:51:c8:4d: b0:b6:6c:d2:3b:ae:42:07:95:04:df:68:25:cf:19:f3:72:3d: 0c:be:96:cb:08:65:34:82:f8:eb:1b:3b:1e:69:25:90:fd:61: d5:cc:e5:e6:3b:70:a0:1e:b2:02:3a:92:d7:59:f1:83:a8:d4: 91:51:f9:ec:41:5d:4a:ab:55:b3:84:0e:b2:c5:20:cd:83:22: f6:f7:89:3a:57:54:0e:48:be:f5:be:b7:ee:18:7f:a8:b5:33: c3:61:35:d7:fc:40:c6:58:0d:f6:c1:30:e4:8e:ef:86:5c:f3: 6a:5d:02:fc:95:b3:19:e2:9b:f2:05:94:07:8d:20:53:69:ae: 4b:ad:ed:24:f7:17:91:d7:ef:a3:ee:30:56:23:33:6f:98:09: 6d:eb:6e:f4:24:3b:7a:09:83:cb:cc:55:95:48:0c:ad:32:31: ee:fb:36:22:fa:7e:f4:e9:bc:f9:54:67:c9:16:ec:88:bd:5e: e7:ff:90:07:7c:96:54:f8:c2:0c:42:99:40:be:55:22:10:83: f7:a7:b5:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjUwNzIwMTYyNjQzWhcNMjUwNzI3MTYyNjQzWjAYMRYwFAYD VQQDEw02ODdkMThjMy1jZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAui75hpTwWn8fjHxJ4qqBAjLEsF3jOUtnuirctc/0psFfEFs7soi0vWGR0dgb cqms6yXIhEY6CdGRASHL/WPqFIYOWwUvXPTC30y0VeEHm5IAvTTlCBZQmlPn/yWp NpWqnhu24xP1HMzxgFk1mOInccmLFwvLWsNZSvD/SWDBYjEkTunu2LU6I/fQvaPr yt1n892GbihQeFW4qV4TJvHABbRWbhe/7iKJBlurVdbxjZShKOzBYSQZLp42CwOl gI6IaAhDhc70A6smcctftX7ge9x4ICO2I8PloKKqFrx4GBx1Elr7kR1VjLiX1XJA C8L9xTFsRHZG3ufxISy+NaAbyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAFbn9w 5S7HYJxRb3soVI66DcXMMB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuUigWYh8mHQqiTsYGy7OH+YzFshqAPP9ovmYG98kMIpLxs7M9lgh1 mljKlTPN30glS9tRyE2wtmzSO65CB5UE32glzxnzcj0MvpbLCGU0gvjrGzseaSWQ /WHVzOXmO3CgHrICOpLXWfGDqNSRUfnsQV1Kq1WzhA6yxSDNgyL294k6V1QOSL71 vrfuGH+otTPDYTXX/EDGWA32wTDkju+GXPNqXQL8lbMZ4pvyBZQHjSBTaa5Lre0k 9xeR1++j7jBWIzNvmAlt6270JDt6CYPLzFWVSAytMjHu+zYi+n706bz5VGfJFuyI vV7n/5AHfJZU+MIMQplAvlUiEIP3p7WR -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:34 2025 by rpki-client