$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft File: uw81vosh-3I_vNcbAXuVdCN-3IQ.mft (raw, json) Hash identifier: QC3dFAl88bYckNMUuQ4eycAYF2Vpm2qvUtULutWympo= Subject key identifier: A0:A5:8F:F2:20:F4:EE:33:0C:7B:11:3F:9F:DB:33:4C:4A:A7:F8:8B Authority key identifier: BB:0F:35:BE:8B:21:FB:72:3F:BC:D7:1B:01:7B:95:74:23:7E:DC:84 Certificate issuer: /CN=A917275D/serialNumber=BB0F35BE8B21FB723FBCD71B017B9574237EDC84 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft Manifest number: 0135 Signing time: Fri 05 Sep 2025 01:08:56 +0000 Manifest this update: Fri 05 Sep 2025 01:08:55 +0000 Manifest next update: Fri 12 Sep 2025 01:08:55 +0000 Files and hashes: 1: uw81vosh-3I_vNcbAXuVdCN-3IQ.crl (hash: u1fapAUXY5JAqIjIxHXvDWnCQilErtqLp6HEPnjOWDc=) 2: AD724872B78711EEA4D26186C4F9AE02.roa (hash: Mbgr3LjNvX2WDCIKJDLS2eEyzW0mEKwkOiuF61G3rOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.crl rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=BB0F35BE8B21FB723FBCD71B017B9574237EDC84 Validity Not Before: Sep 5 01:08:55 2025 GMT Not After : Sep 12 01:08:55 2025 GMT Subject: CN=68ba3828-ffd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:5d:48:a5:c9:9b:c3:a9:b6:a7:89:18:7a: 2c:bf:f6:e2:00:57:20:b3:7b:2a:a7:50:bb:b4:b9: 5f:c0:31:b4:1b:20:d3:f6:4a:04:17:c2:bc:7a:78: 10:8d:87:6f:6d:2c:94:49:89:3e:58:55:81:f6:b2: 0b:4a:4a:f0:56:97:05:d0:87:45:33:0b:43:6e:57: 90:c2:2c:b2:6f:16:95:ea:10:a6:cc:ff:ee:8c:9d: 17:d6:d4:1b:89:dc:c7:5f:d2:8a:9e:ce:b2:e1:5f: 57:83:76:a5:14:1b:7b:3d:25:94:9d:86:a0:bd:cb: 42:f9:01:57:fc:46:ec:d9:49:21:9d:5e:ed:a1:b4: e3:31:7b:ec:49:4c:c7:bb:00:3a:ff:a5:62:5a:ff: 4b:5a:eb:c3:99:2f:37:70:71:10:91:81:21:c6:46: 2c:b7:77:36:32:cb:90:c9:8b:68:e2:1b:a7:6c:c1: 82:b9:9a:27:47:fb:29:ae:55:60:e2:7a:5d:62:1c: 39:90:95:78:86:76:76:cc:13:13:9f:e4:60:56:cd: cc:57:e7:4a:bc:dc:85:da:c8:95:da:b5:cd:c5:7e: 98:90:6b:3e:a6:74:e0:5c:19:57:4b:4c:10:54:9f: aa:3f:1b:42:42:6e:16:05:21:9b:cf:bb:2f:ed:b0: 86:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A5:8F:F2:20:F4:EE:33:0C:7B:11:3F:9F:DB:33:4C:4A:A7:F8:8B X509v3 Authority Key Identifier: keyid:BB:0F:35:BE:8B:21:FB:72:3F:BC:D7:1B:01:7B:95:74:23:7E:DC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ce:7c:56:c0:66:35:c2:fb:bf:14:7f:31:b7:97:91:62:56: 8c:54:29:b6:90:a3:96:b1:66:6b:0c:c7:0b:c4:5c:58:bc:53: 46:70:5e:46:ba:e4:ed:62:3a:40:cc:7b:9d:1e:1d:2c:05:fc: 7d:03:67:c0:23:9a:cb:4f:12:c7:05:b8:39:0c:60:a1:4b:52: 8e:07:de:de:94:65:33:3b:47:23:92:7a:47:57:4a:b8:e4:54: 9e:bd:ce:79:9c:ad:1b:56:6d:f2:e3:a3:29:5e:bb:8a:7a:e6: 85:1b:b1:62:99:ad:3c:6c:f5:e7:ee:9c:3c:2f:9f:64:54:36: 47:68:f7:d8:0f:d0:40:40:ee:62:42:69:24:f1:99:87:13:83: 3f:73:f9:fd:98:37:df:04:54:e6:33:21:c2:6d:15:c6:a0:95: 32:ac:d5:d9:8d:8f:0a:95:67:4a:3b:68:a0:e7:da:c7:d2:7e: 29:a3:a6:f7:23:a9:d3:54:64:76:73:fc:75:0d:a7:c5:3e:37: 96:82:bf:66:ca:08:03:48:b9:e5:98:b2:74:08:0b:76:ce:cb: 25:ce:47:1f:bc:7d:27:33:4f:54:d6:c6:9e:5a:ed:b7:86:90: fc:ee:b7:d3:c5:ca:21:82:9a:20:70:24:b7:29:21:89:ce:12: f3:23:f8:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKEJCMEYzNUJFOEIyMUZCNzIzRkJDRDcxQjAxN0I5NTc0 MjM3RURDODQwHhcNMjUwOTA1MDEwODU1WhcNMjUwOTEyMDEwODU1WjAYMRYwFAYD VQQDEw02OGJhMzgyOC1mZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvVdSKXJm8OptqeJGHosv/biAFcgs3sqp1C7tLlfwDG0GyDT9koEF8K8engQ jYdvbSyUSYk+WFWB9rILSkrwVpcF0IdFMwtDbleQwiyybxaV6hCmzP/ujJ0X1tQb idzHX9KKns6y4V9Xg3alFBt7PSWUnYagvctC+QFX/Ebs2UkhnV7tobTjMXvsSUzH uwA6/6ViWv9LWuvDmS83cHEQkYEhxkYst3c2MsuQyYto4hunbMGCuZonR/sprlVg 4npdYhw5kJV4hnZ2zBMTn+RgVs3MV+dKvNyF2siV2rXNxX6YkGs+pnTgXBlXS0wQ VJ+qPxtCQm4WBSGbz7sv7bCGEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKClj/Ig 9O4zDHsRP5/bM0xKp/iLMB8GA1UdIwQYMBaAFLsPNb6LIftyP7zXGwF7lXQjftyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC8wMTlCOTZCNEI2 NkMxMUVFQTBEODhEMzNDNEY5QUUwMi91dzgxdm9zaC0zSV92TmNiQVh1VmRDTi0z SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3V3ODF2b3NoLTNJX3ZOY2JBWHVWZENOLTNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC8wMTlCOTZCNEI2NkMxMUVFQTBEODhEMzNDNEY5QUUwMi91dzgxdm9zaC0z SV92TmNiQVh1VmRDTi0zSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8znxWwGY1wvu/FH8xt5eRYlaMVCm2kKOWsWZrDMcLxFxYvFNGcF5G uuTtYjpAzHudHh0sBfx9A2fAI5rLTxLHBbg5DGChS1KOB97elGUzO0cjknpHV0q4 5FSevc55nK0bVm3y46MpXruKeuaFG7Fima08bPXn7pw8L59kVDZHaPfYD9BAQO5i Qmkk8ZmHE4M/c/n9mDffBFTmMyHCbRXGoJUyrNXZjY8KlWdKO2ig59rH0n4po6b3 I6nTVGR2c/x1DafFPjeWgr9myggDSLnlmLJ0CAt2zsslzkcfvH0nM09U1saeWu23 hpD87rfTxcohgpogcCS3KSGJzhLzI/h4 -----END CERTIFICATE-----Generated at Sat Sep 6 20:53:00 2025 by rpki-client