$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft File: uw81vosh-3I_vNcbAXuVdCN-3IQ.mft (raw, json) Hash identifier: 8MwPAmEfbk2L21lnwbqJloHREjQQ7s/EG2D8Eb86eeg= Subject key identifier: CE:82:F2:8D:91:04:08:23:AC:0D:2F:1B:F4:34:7A:17:F2:44:E7:ED Authority key identifier: BB:0F:35:BE:8B:21:FB:72:3F:BC:D7:1B:01:7B:95:74:23:7E:DC:84 Certificate issuer: /CN=A917275D/serialNumber=BB0F35BE8B21FB723FBCD71B017B9574237EDC84 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft Manifest number: 011D Signing time: Mon 21 Jul 2025 01:09:57 +0000 Manifest this update: Mon 21 Jul 2025 01:09:57 +0000 Manifest next update: Mon 28 Jul 2025 01:09:57 +0000 Files and hashes: 1: uw81vosh-3I_vNcbAXuVdCN-3IQ.crl (hash: WvVFDXzKNiejVoN4oEIors0BlzOkRzC6kK/e3G97xTU=) 2: AD724872B78711EEA4D26186C4F9AE02.roa (hash: Mbgr3LjNvX2WDCIKJDLS2eEyzW0mEKwkOiuF61G3rOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.crl rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=BB0F35BE8B21FB723FBCD71B017B9574237EDC84 Validity Not Before: Jul 21 01:09:57 2025 GMT Not After : Jul 28 01:09:57 2025 GMT Subject: CN=687d9365-9925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:7c:37:63:29:19:9a:a3:d9:da:4d:db:e1: a9:9e:4a:08:47:8c:e7:6c:8e:91:30:c9:80:4e:04: f6:01:79:63:c1:37:b3:b2:c7:a1:ae:f7:f1:ad:86: 28:08:26:c1:99:b1:3b:e7:ae:44:df:62:9a:03:c6: a8:2f:a3:b8:17:92:7b:e3:d2:d9:f4:88:30:23:94: 00:05:5f:c1:d4:d6:9f:97:65:70:64:e1:d7:4e:b1: 85:07:37:d1:55:a6:8d:9f:ae:23:5c:24:4a:cf:6b: f7:6e:be:f3:ed:f3:ee:aa:39:d0:9a:b8:18:22:4b: 5d:c4:ac:9f:ca:81:4c:9b:81:70:7a:98:8d:97:fe: 0d:f7:c8:e4:de:94:2b:41:83:68:a2:8f:ac:f6:f1: f1:53:c6:90:18:d7:94:de:fe:3a:5c:36:c7:be:01: f8:67:9c:3c:d7:12:d9:af:53:29:06:9c:d5:32:ae: e2:a1:c4:b9:c9:1f:12:6f:ba:44:6d:69:6c:8e:f8: 7e:a6:25:22:2d:37:0b:37:e8:06:a6:46:e4:f5:2c: fc:f9:b4:2d:07:58:68:ef:a0:58:0e:52:26:95:a7: 87:0d:bb:f0:fd:a1:86:af:37:ca:ab:c4:92:64:f5: 62:c6:9c:1b:b7:f9:06:da:fc:0b:4d:6f:cc:9a:1b: 99:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:82:F2:8D:91:04:08:23:AC:0D:2F:1B:F4:34:7A:17:F2:44:E7:ED X509v3 Authority Key Identifier: keyid:BB:0F:35:BE:8B:21:FB:72:3F:BC:D7:1B:01:7B:95:74:23:7E:DC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:7f:a4:ae:0a:ea:24:06:f8:a3:66:78:f5:ca:d1:c5:06:fc: c2:50:80:8a:4c:7e:76:0a:d4:db:a8:15:e0:c1:31:6d:d7:b9: 0f:f1:86:ad:48:38:a7:2d:22:8b:04:82:01:c2:96:bc:c7:1a: c4:bb:83:27:7d:7c:fe:b8:68:f9:08:fe:5f:12:86:d4:01:b0: 0c:a5:42:fe:1a:af:e7:6d:74:72:40:8a:1c:2a:7f:a0:80:34: ba:e5:ea:29:30:4a:9c:10:3a:bb:aa:9b:5e:9c:79:bf:18:fd: 8a:e4:05:78:90:33:15:b8:2c:5e:3b:c4:ef:b9:72:5e:30:0d: cf:3c:5b:be:3f:f1:2a:24:6b:2f:77:62:03:45:01:17:ae:cc: 25:7e:da:8d:66:d9:cf:07:c9:41:cd:82:e6:64:37:bd:18:6b: 49:94:d0:bc:88:9c:9e:53:07:e7:dd:51:39:eb:01:73:58:8a: 85:10:f9:fa:05:f5:ae:e5:b9:40:a9:c8:38:0d:c0:03:f6:84: d8:43:35:61:e6:a3:ef:db:0c:81:18:97:89:81:fd:62:bf:a4: 9d:36:58:ce:89:d9:56:49:a9:bf:df:24:7e:62:b4:ed:3e:17: 07:88:f3:c0:0e:84:56:b3:64:ee:31:1f:51:c3:9c:91:78:70: 76:cb:8f:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKEJCMEYzNUJFOEIyMUZCNzIzRkJDRDcxQjAxN0I5NTc0 MjM3RURDODQwHhcNMjUwNzIxMDEwOTU3WhcNMjUwNzI4MDEwOTU3WjAYMRYwFAYD VQQDEw02ODdkOTM2NS05OTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Nl8N2MpGZqj2dpN2+GpnkoIR4znbI6RMMmATgT2AXljwTezssehrvfxrYYo CCbBmbE7565E32KaA8aoL6O4F5J749LZ9IgwI5QABV/B1Nafl2VwZOHXTrGFBzfR VaaNn64jXCRKz2v3br7z7fPuqjnQmrgYIktdxKyfyoFMm4FwepiNl/4N98jk3pQr QYNooo+s9vHxU8aQGNeU3v46XDbHvgH4Z5w81xLZr1MpBpzVMq7iocS5yR8Sb7pE bWlsjvh+piUiLTcLN+gGpkbk9Sz8+bQtB1ho76BYDlImlaeHDbvw/aGGrzfKq8SS ZPVixpwbt/kG2vwLTW/MmhuZgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6C8o2R BAgjrA0vG/Q0ehfyROftMB8GA1UdIwQYMBaAFLsPNb6LIftyP7zXGwF7lXQjftyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC8wMTlCOTZCNEI2 NkMxMUVFQTBEODhEMzNDNEY5QUUwMi91dzgxdm9zaC0zSV92TmNiQVh1VmRDTi0z SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3V3ODF2b3NoLTNJX3ZOY2JBWHVWZENOLTNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC8wMTlCOTZCNEI2NkMxMUVFQTBEODhEMzNDNEY5QUUwMi91dzgxdm9zaC0z SV92TmNiQVh1VmRDTi0zSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIf6SuCuokBvijZnj1ytHFBvzCUICKTH52CtTbqBXgwTFt17kP8Yat SDinLSKLBIIBwpa8xxrEu4MnfXz+uGj5CP5fEobUAbAMpUL+Gq/nbXRyQIocKn+g gDS65eopMEqcEDq7qptenHm/GP2K5AV4kDMVuCxeO8TvuXJeMA3PPFu+P/EqJGsv d2IDRQEXrswlftqNZtnPB8lBzYLmZDe9GGtJlNC8iJyeUwfn3VE56wFzWIqFEPn6 BfWu5blAqcg4DcAD9oTYQzVh5qPv2wyBGJeJgf1iv6SdNljOidlWSam/3yR+YrTt PhcHiPPADoRWs2TuMR9Rw5yReHB2y48e -----END CERTIFICATE-----Generated at Wed Jul 23 02:29:25 2025 by rpki-client