$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: 29ulVrHgdVUiyMh7mH58gM0DcGo1KVXiNJPZNnAIbQE= Subject key identifier: 1B:57:88:72:EB:A2:54:FE:2E:6A:F3:A6:77:3E:96:59:57:32:8E:32 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: 013C Signing time: Fri 05 Sep 2025 04:52:41 +0000 Manifest this update: Fri 05 Sep 2025 04:52:40 +0000 Manifest next update: Fri 12 Sep 2025 04:52:40 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: LU7b1OAvf0BRkZaZJZROuVAxEt8XrwgW3Eri7aEHDks=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: PrkTvOXkxIIDm1NyNDWg8hQLP2IiT8tO2SVVH/dIBvI=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: s22fNuehfcR8cdi3cFR8Z1yPLk8LwMQLolDpdzgZgc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Sep 5 04:52:40 2025 GMT Not After : Sep 12 04:52:40 2025 GMT Subject: CN=68ba6c98-7283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:da:4e:b2:fe:55:e4:24:9d:f7:b9:e7:3c: 6a:b6:de:69:01:ee:b2:a9:f7:41:66:ec:c4:37:6e: 30:78:fb:05:ae:5d:4e:f7:70:e7:68:82:df:bb:23: 1e:2e:9c:a0:a4:21:d6:aa:c7:61:04:63:3c:63:0a: 5a:4e:ba:2f:a7:14:cb:57:6c:32:78:56:e9:cf:18: 3f:94:03:06:d9:41:d0:40:25:f4:a2:e8:06:95:d9: 39:ba:83:01:e3:ba:c9:50:72:f8:99:82:43:55:d6: 77:34:b5:99:f2:f4:98:75:d4:0f:38:de:94:10:76: ec:37:78:28:f2:46:fc:e2:ec:a8:0d:cc:55:b8:dd: 9b:84:d1:fb:c4:17:39:79:47:a1:43:37:d7:08:2e: 94:e6:4a:ee:8b:59:10:02:f5:3a:00:1c:de:df:f9: 5a:dc:d7:f0:da:15:68:f9:47:17:db:7e:bd:ba:2b: 43:f3:0f:a3:0d:a4:e8:52:b0:ea:80:87:9a:62:57: e1:64:6a:fe:e5:ae:16:5c:97:e5:56:e1:b8:91:c4: bc:f2:23:05:06:cf:5b:2e:62:4f:0a:0d:e4:b8:58: 71:e7:bb:e3:62:8a:63:0e:1b:66:e8:f3:c6:8e:07: 19:d6:22:eb:52:d0:3c:cd:87:2f:c2:dc:4c:6d:3d: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:57:88:72:EB:A2:54:FE:2E:6A:F3:A6:77:3E:96:59:57:32:8E:32 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c9:66:8d:7c:35:7f:04:90:7c:22:5e:fc:ee:da:60:02:55: bd:27:1d:56:ca:72:e5:e0:d3:42:7d:e8:d2:d0:b1:d6:3c:7d: f5:00:ea:c8:32:9b:fc:7b:65:a4:18:f0:85:c6:a1:b3:b9:df: 75:f5:0c:21:47:d4:f8:e0:1d:8a:d1:92:28:dd:06:c7:01:de: e6:7a:8a:63:ec:c8:98:53:8b:11:54:f5:40:bf:66:9e:0c:24: cf:1a:69:80:3e:cd:b9:58:a3:02:a4:61:b1:90:02:1b:82:20: 45:ec:15:f7:1a:a9:e2:89:97:95:45:6d:3a:a6:58:18:ea:07: e1:c1:35:a5:a6:38:f3:aa:ed:e1:8b:ee:d2:ab:d1:64:af:6b: 12:dd:f9:73:d1:0a:21:e8:38:d4:c1:02:fd:3f:47:6b:eb:9c: f6:26:ea:fb:19:70:35:d7:80:a2:6a:30:b8:fb:a3:01:af:e8: c4:1f:6f:15:8f:60:38:ee:32:47:e9:61:2f:bf:8b:44:cc:bd: 24:4c:c1:23:6f:a0:83:c8:ae:cc:09:b8:86:cc:15:3b:ed:f8: 2a:ef:35:30:02:6a:20:08:1c:60:05:5c:21:4f:02:e7:db:32: f5:0f:d8:1d:0d:3f:7b:c2:8f:9f:07:7d:c1:27:89:ba:d9:72: 32:e3:f3:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjUwOTA1MDQ1MjQwWhcNMjUwOTEyMDQ1MjQwWjAYMRYwFAYD VQQDEw02OGJhNmM5OC03MjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1TaTrL+VeQknfe55zxqtt5pAe6yqfdBZuzEN24wePsFrl1O93DnaILfuyMe LpygpCHWqsdhBGM8YwpaTrovpxTLV2wyeFbpzxg/lAMG2UHQQCX0ougGldk5uoMB 47rJUHL4mYJDVdZ3NLWZ8vSYddQPON6UEHbsN3go8kb84uyoDcxVuN2bhNH7xBc5 eUehQzfXCC6U5krui1kQAvU6ABze3/la3Nfw2hVo+UcX2369uitD8w+jDaToUrDq gIeaYlfhZGr+5a4WXJflVuG4kcS88iMFBs9bLmJPCg3kuFhx57vjYopjDhtm6PPG jgcZ1iLrUtA8zYcvwtxMbT00lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtXiHLr olT+Lmrzpnc+lllXMo4yMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZyWaNfDV/BJB8Il787tpgAlW9Jx1WynLl4NNCfejS0LHWPH31AOrI Mpv8e2WkGPCFxqGzud919QwhR9T44B2K0ZIo3QbHAd7meopj7MiYU4sRVPVAv2ae DCTPGmmAPs25WKMCpGGxkAIbgiBF7BX3GqniiZeVRW06plgY6gfhwTWlpjjzqu3h i+7Sq9Fkr2sS3flz0Qoh6DjUwQL9P0dr65z2Jur7GXA114CiajC4+6MBr+jEH28V j2A47jJH6WEvv4tEzL0kTMEjb6CDyK7MCbiGzBU77fgq7zUwAmogCBxgBVwhTwLn 2zL1D9gdDT97wo+fB33BJ4m62XIy4/P7 -----END CERTIFICATE-----Generated at Fri Sep 5 11:29:52 2025 by rpki-client