$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: W9rZJdipMV6/ktKcC4O+FPFXeQw/ZXViuIXUaxP+qnM= Subject key identifier: 69:E7:0A:20:A3:FF:E2:04:55:C4:5C:4A:60:BC:E7:0A:AF:17:B1:39 Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 195B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 195B Signing time: Sat 06 Sep 2025 16:28:29 +0000 Manifest this update: Sat 06 Sep 2025 16:28:28 +0000 Manifest next update: Sat 13 Sep 2025 16:28:28 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: iKWgkRZaJXzJEBIKnTR9CCLR0oQketjRWmiLPVQ0M0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6491 (0x195b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Validity Not Before: Sep 6 16:28:28 2025 GMT Not After : Sep 13 16:28:28 2025 GMT Subject: CN=68bc612d-d5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:14:68:b1:36:ac:68:d7:7e:88:5f:b9:e3: 98:79:ea:91:ea:2a:23:04:69:b5:90:b6:55:d4:81: 55:1d:ec:ab:fc:b9:b7:59:8f:2a:8e:1f:d0:05:87: 6f:7f:3c:72:49:e3:78:d8:af:fc:54:ad:75:25:ae: 0c:70:4b:e4:65:df:59:bc:2b:42:63:fa:17:6a:22: 18:f9:44:48:91:8f:c5:97:75:6e:f2:6e:23:64:f0: f7:79:e1:db:25:70:83:a2:d8:78:8c:5f:64:a9:8f: 1d:11:0f:8d:51:b0:06:b1:f2:89:c5:5e:aa:ae:06: 83:8e:9a:16:76:51:1e:c1:cf:d1:72:1c:8b:44:dd: 38:cd:f4:6b:2d:e4:12:38:dc:2b:e6:33:b1:bb:2d: 7b:8d:f8:2a:d4:14:70:90:8b:df:a1:15:07:74:45: 39:16:f3:67:1f:59:8d:27:6b:e6:70:a8:ab:c8:ad: c4:e4:77:40:bb:5c:77:6a:61:a4:22:7e:f1:52:5d: 97:e1:ad:8f:27:8a:34:8b:28:db:94:9f:be:7c:8c: ca:c3:16:45:43:bd:ec:b0:72:be:08:13:48:28:c5: 07:46:e0:16:11:1f:0d:41:55:f9:a2:8f:94:bf:83: 88:8f:8e:29:b2:cc:d9:ce:45:85:6d:87:44:bc:20: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E7:0A:20:A3:FF:E2:04:55:C4:5C:4A:60:BC:E7:0A:AF:17:B1:39 X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:38:6e:9d:12:89:91:b9:98:bc:02:7a:85:07:d5:38:55:5d: 9a:36:f4:2a:08:32:96:c4:54:d7:eb:03:88:90:2d:90:55:ee: 4e:a0:09:ae:5f:b1:d5:39:3e:99:64:5d:22:17:b9:ae:13:95: f1:b8:0d:c0:21:03:f5:be:26:c7:19:0d:20:af:56:04:c4:94: e4:64:01:07:f5:68:28:f2:0e:01:ba:f1:14:8b:ed:d4:d9:c7: 4d:76:30:64:53:d5:0f:17:8e:bf:64:84:c0:ca:61:e4:b8:73: 32:8e:0f:b6:a0:ea:3a:6c:94:51:42:44:52:f7:95:11:79:89: 88:d9:e1:69:7e:5c:24:e6:9e:95:14:27:7f:f5:55:fc:42:63: 34:52:48:83:3b:29:9f:99:4c:27:aa:98:31:3b:dd:41:4d:37: a0:fe:22:3e:28:99:b7:83:8e:77:45:83:ac:d6:b8:fc:fd:d9: 4b:7e:09:d7:9f:6a:c5:5b:ee:2e:4f:40:4c:27:cc:dc:20:dc: ab:1a:2e:49:41:23:68:1b:0c:ad:ed:b6:01:cf:c8:f0:e9:7c: 25:67:4a:f2:7e:63:f2:b4:3f:54:d0:8b:48:de:b8:1b:fe:52: 3a:2b:46:b0:2b:52:41:2c:4e:91:c9:88:cf:78:7d:a4:86:de: c6:68:4a:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjUwOTA2MTYyODI4WhcNMjUwOTEzMTYyODI4WjAYMRYwFAYD VQQDEw02OGJjNjEyZC1kNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5cUaLE2rGjXfohfueOYeeqR6iojBGm1kLZV1IFVHeyr/Lm3WY8qjh/QBYdv fzxySeN42K/8VK11Ja4McEvkZd9ZvCtCY/oXaiIY+URIkY/Fl3Vu8m4jZPD3eeHb JXCDoth4jF9kqY8dEQ+NUbAGsfKJxV6qrgaDjpoWdlEewc/RchyLRN04zfRrLeQS ONwr5jOxuy17jfgq1BRwkIvfoRUHdEU5FvNnH1mNJ2vmcKiryK3E5HdAu1x3amGk In7xUl2X4a2PJ4o0iyjblJ++fIzKwxZFQ73ssHK+CBNIKMUHRuAWER8NQVX5oo+U v4OIj44psszZzkWFbYdEvCCTrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnnCiCj /+IEVcRcSmC85wqvF7E5MB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5OG6dEomRuZi8AnqFB9U4VV2aNvQqCDKWxFTX6wOIkC2QVe5OoAmu X7HVOT6ZZF0iF7muE5XxuA3AIQP1vibHGQ0gr1YExJTkZAEH9Wgo8g4BuvEUi+3U 2cdNdjBkU9UPF46/ZITAymHkuHMyjg+2oOo6bJRRQkRS95UReYmI2eFpflwk5p6V FCd/9VX8QmM0UkiDOymfmUwnqpgxO91BTTeg/iI+KJm3g453RYOs1rj8/dlLfgnX n2rFW+4uT0BMJ8zcINyrGi5JQSNoGwyt7bYBz8jw6XwlZ0ryfmPytD9U0ItI3rgb /lI6K0awK1JBLE6RyYjPeH2kht7GaEqR -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:19 2025 by rpki-client