$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft File: uHDS4OMcipEO37p2W7fPBMPBDL4.mft (raw, json) Hash identifier: FWuLEv9tXAqQkI4hxmFW0m5TeEZJgrG1Za8yebkY7VU= Subject key identifier: 22:6B:D8:74:BE:B0:99:2C:80:B4:A4:F6:DB:66:23:FC:E4:1C:30:34 Authority key identifier: B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE Certificate issuer: /CN=A91731AD/serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft Manifest number: 08 Signing time: Sat 05 Jul 2025 08:29:21 +0000 Manifest this update: Sat 05 Jul 2025 08:29:21 +0000 Manifest next update: Sat 12 Jul 2025 08:29:21 +0000 Files and hashes: 1: uHDS4OMcipEO37p2W7fPBMPBDL4.crl (hash: 9z0XT0k5PhXx3C0R3FdnG/iLeOqSaHWfo2iFiCc9/Mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 08:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731AD, serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE Validity Not Before: Jul 5 08:29:21 2025 GMT Not After : Jul 12 08:29:21 2025 GMT Subject: CN=6868e261-cbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:32:01:43:00:77:55:7b:29:d6:e8:33:47:1e: e8:a8:71:af:68:9f:57:f8:b1:8c:c7:7e:86:19:c0: 0f:dd:17:78:a3:9b:f0:d9:3f:48:4a:57:33:63:02: 95:b1:04:87:5e:6a:c3:ca:d9:b9:91:dd:89:ab:27: 2c:f9:a1:df:f8:5d:d2:ed:83:f0:28:45:de:95:0f: 49:db:10:a0:c7:3a:3a:5e:82:93:80:c9:0b:84:7f: 4b:4f:6a:07:dd:75:2f:15:7e:cb:2f:00:02:a5:7b: 96:78:32:8f:c3:fe:2b:8b:ea:ec:02:d6:bd:c1:9a: 00:3a:0e:c2:26:3d:e0:28:b9:af:07:e6:88:c1:72: 40:ab:54:29:d9:01:6f:91:43:68:ce:1d:3a:19:59: e2:3e:67:91:a9:3c:4c:1a:76:dd:39:ad:82:10:58: 73:9b:f5:3e:48:cc:74:8a:38:9c:a3:78:ca:02:0d: ba:8c:5b:dc:e2:1e:95:59:44:7b:01:95:48:d5:fd: df:b0:79:7c:06:12:6a:50:38:79:a9:e6:32:dd:ce: f3:14:47:b2:a8:e2:85:f7:9d:9a:7b:9a:e5:ce:77: 7a:30:a7:54:f1:0a:34:2c:fe:0d:2b:3c:16:68:b3: c0:11:9f:1f:95:4c:e4:3e:b2:57:da:71:6d:7c:a3: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6B:D8:74:BE:B0:99:2C:80:B4:A4:F6:DB:66:23:FC:E4:1C:30:34 X509v3 Authority Key Identifier: keyid:B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:7d:28:21:68:fb:c5:aa:08:06:ea:e9:90:ef:8a:61:34:45: 66:9e:02:14:55:39:3a:ba:58:63:f3:44:04:a8:7c:37:08:36: b5:8e:72:a5:10:9b:81:00:77:0c:28:6d:ec:27:18:a1:24:3e: c0:e6:74:20:df:e4:00:93:54:e1:97:4c:07:dc:83:69:a8:cb: 5e:42:2c:e8:e4:21:df:0e:9f:65:46:72:05:d4:4a:b4:36:64: 96:fb:4a:94:2e:53:08:92:2c:6c:e0:89:bd:87:6b:7b:9a:bb: 6c:e2:83:f4:92:7b:e9:1c:ea:30:96:45:74:20:3b:db:1e:f3: d1:61:b0:27:83:57:7c:3e:da:dc:fa:4d:42:13:c6:90:6f:48: 70:88:1f:16:a7:a6:ed:35:4e:cb:27:7c:25:d6:07:42:b0:aa: b7:29:e4:12:5b:98:e0:b2:08:b8:f7:83:c4:0c:0f:79:7a:62: ee:fc:ed:c1:fa:96:03:89:58:85:54:ba:32:e2:4c:61:3c:be: 16:0b:91:f9:c5:29:97:1b:ef:67:7c:1f:ed:7e:c6:c6:35:fa: 07:23:22:79:30:5e:71:a3:45:35:fa:cb:6d:8c:23:a1:ef:ea: 03:60:8b:99:0b:6d:85:31:53:99:1e:f1:40:58:81:66:58:a1: b2:05:79:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzFBRDExMC8GA1UEBRMoQjg3MEQyRTBFMzFDOEE5MTBFREZCQTc2NUJCN0NGMDRD M0MxMENCRTAeFw0yNTA3MDUwODI5MjFaFw0yNTA3MTIwODI5MjFaMBgxFjAUBgNV BAMTDTY4NjhlMjYxLWNiZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbMgFDAHdVeynW6DNHHuioca9on1f4sYzHfoYZwA/dF3ijm/DZP0hKVzNjApWx BIdeasPK2bmR3YmrJyz5od/4XdLtg/AoRd6VD0nbEKDHOjpegpOAyQuEf0tPagfd dS8VfssvAAKle5Z4Mo/D/iuL6uwC1r3BmgA6DsImPeAoua8H5ojBckCrVCnZAW+R Q2jOHToZWeI+Z5GpPEwadt05rYIQWHOb9T5IzHSKOJyjeMoCDbqMW9ziHpVZRHsB lUjV/d+weXwGEmpQOHmp5jLdzvMUR7Ko4oX3nZp7muXOd3owp1TxCjQs/g0rPBZo s8ARnx+VTOQ+slfacW18o99bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUImvYdL6w mSyAtKT222Yj/OQcMDQwHwYDVR0jBBgwFoAUuHDS4OMcipEO37p2W7fPBMPBDL4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUFEL0M0RTI2OTU2NTA5 QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3VIRFM0T01jaXBFTzM3cDJXN2ZQQk1QQkRM NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdUhEUzRPTWNpcEVPMzdwMlc3ZlBCTVBCREw0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MUFEL0M0RTI2OTU2NTA5QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3VIRFM0T01jaXBF TzM3cDJXN2ZQQk1QQkRMNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABN9KCFo+8WqCAbq6ZDvimE0RWaeAhRVOTq6WGPzRASofDcINrWOcqUQ m4EAdwwobewnGKEkPsDmdCDf5ACTVOGXTAfcg2moy15CLOjkId8On2VGcgXUSrQ2 ZJb7SpQuUwiSLGzgib2Ha3uau2zig/SSe+kc6jCWRXQgO9se89FhsCeDV3w+2tz6 TUITxpBvSHCIHxanpu01TssnfCXWB0Kwqrcp5BJbmOCyCLj3g8QMD3l6Yu787cH6 lgOJWIVUujLiTGE8vhYLkfnFKZcb72d8H+1+xsY1+gcjInkwXnGjRTX6y22MI6Hv 6gNgi5kLbYUxU5ke8UBYgWZYobIFedU= -----END CERTIFICATE-----Generated at Mon Jul 7 09:24:37 2025 by rpki-client