$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft File: uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json) Hash identifier: p9Sc2z95t2F/6MmL85IOKyKL0/OYK3VUCR9e7kMSHaU= Subject key identifier: D8:D7:1B:F4:04:EE:2B:D9:E8:D9:4D:60:1C:10:AE:62:7A:69:95:72 Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737 Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft Manifest number: 03F3 Signing time: Tue 09 Sep 2025 00:35:49 +0000 Manifest this update: Tue 09 Sep 2025 00:35:49 +0000 Manifest next update: Tue 16 Sep 2025 00:35:49 +0000 Files and hashes: 1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: Wbz1hac0FQ74qOl5ASOFUcOTW8MRpDSPgg14gLQYwaM=) 2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: 93z4oqW7DQ1yUII6DWRvY7Xrtn4iF7Cp5BMrU5CKBhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737 Validity Not Before: Sep 9 00:35:49 2025 GMT Not After : Sep 16 00:35:49 2025 GMT Subject: CN=68bf7665-c783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:55:5f:60:89:9f:ed:97:6d:b0:09:64:26: 9f:52:3b:95:a7:26:c2:71:97:f0:a6:38:f2:ef:68: 1f:dd:7d:73:60:1c:b7:7a:fd:79:ee:5d:ec:c8:63: 72:8e:ce:53:7e:2a:a9:ca:1c:c1:8b:51:29:77:4d: 16:8a:9f:78:c0:c9:72:0d:72:93:69:48:56:0b:05: 68:95:67:22:9c:a0:90:dd:84:d0:f5:d7:66:7d:a8: ea:45:a3:2c:a2:46:72:fb:13:aa:d0:6b:3b:75:79: 6f:e0:7a:b7:e0:7f:24:9c:ec:e0:68:ee:1b:b1:23: 5a:c5:f0:c5:3f:7e:16:8f:09:43:00:5d:fd:83:78: f4:31:e7:99:20:80:69:1c:e8:25:46:ac:d9:bf:ca: 60:3b:54:77:e6:5e:7a:82:16:4c:2d:4f:dc:20:67: 64:b3:eb:47:88:b8:29:88:32:bb:3d:fe:0f:74:83: 3e:85:39:26:d8:50:48:8d:2f:20:dc:0b:a7:3f:4e: 73:82:7d:ca:3c:b7:4e:69:48:18:df:a0:54:4e:f7: 05:e4:97:28:78:a0:fe:cf:f4:91:4e:5a:3e:81:7c: 85:cb:5f:01:74:e7:ea:c2:9e:6a:ca:0c:6d:31:41: 8e:e5:3f:3f:59:96:41:8a:6c:15:d5:f0:eb:22:6b: 05:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:1B:F4:04:EE:2B:D9:E8:D9:4D:60:1C:10:AE:62:7A:69:95:72 X509v3 Authority Key Identifier: keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5d:b3:14:85:1d:1e:52:33:15:ea:25:55:6b:65:24:83:57: 3d:43:60:93:c3:5d:4d:cf:4d:23:22:39:65:05:ab:d3:44:c0: b8:45:69:00:21:e2:d9:c9:4e:f9:4a:4b:f8:7b:8d:2d:48:9f: 6c:d0:56:17:c5:b3:71:56:74:4f:5d:16:4b:e4:f9:81:05:32: 96:d1:c9:74:0f:7d:60:7a:95:5f:c9:07:e4:27:b9:e2:b4:ac: 38:3b:e6:6e:1d:af:b9:5b:32:69:60:5c:78:16:7b:a4:4e:6e: 0a:10:cf:da:fd:03:25:6e:6f:49:2c:ed:35:28:fe:23:7a:f2: 7b:36:09:7f:73:bb:94:86:b0:f8:98:b5:0f:81:40:09:58:fb: 8b:19:89:12:e1:37:e6:fc:7a:7a:d0:95:fb:d4:8e:e4:88:55: 3b:31:11:12:21:e4:4c:7c:7d:4d:8d:9f:6e:e2:df:47:91:a5: 33:5e:01:37:2b:84:51:fb:e5:99:aa:f2:fa:8c:f5:ab:63:e5: 00:e3:b6:44:de:96:26:56:b3:30:7b:2c:6f:5e:30:47:b7:76: 55:10:f7:16:c9:fc:93:c2:02:41:20:b7:ec:94:0d:99:81:a8: 1e:61:c3:be:8d:a4:5f:64:07:bb:e4:44:b1:39:d6:50:70:eb: 85:7c:0c:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MDYxMTAvBgNVBAUTKEI4NzJGMzRENTUyNTFGQTc3MEVDQzM5M0QyNjcxMjEw M0Q1NTA3MzcwHhcNMjUwOTA5MDAzNTQ5WhcNMjUwOTE2MDAzNTQ5WjAYMRYwFAYD VQQDEw02OGJmNzY2NS1jNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8tVX2CJn+2XbbAJZCafUjuVpybCcZfwpjjy72gf3X1zYBy3ev157l3syGNy js5TfiqpyhzBi1Epd00Wip94wMlyDXKTaUhWCwVolWcinKCQ3YTQ9ddmfajqRaMs okZy+xOq0Gs7dXlv4Hq34H8knOzgaO4bsSNaxfDFP34WjwlDAF39g3j0MeeZIIBp HOglRqzZv8pgO1R35l56ghZMLU/cIGdks+tHiLgpiDK7Pf4PdIM+hTkm2FBIjS8g 3AunP05zgn3KPLdOaUgY36BUTvcF5JcoeKD+z/SRTlo+gXyFy18BdOfqwp5qygxt MUGO5T8/WZZBimwV1fDrImsFnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjXG/QE 7ivZ6NlNYBwQrmJ6aZVyMB8GA1UdIwQYMBaAFLhy801VJR+ncOzDk9JnEhA9VQc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYwNi83QzhCMTM3QThG QzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2ZHc3TU9UMG1jU0VEMVZC emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VITHpUVlVsSDZkdzdNT1QwbWNTRUQxVkJ6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzYwNi83QzhCMTM3QThGQzkxMUVDODE1NURCNjFDNEY5QUUwMi91SEx6VFZVbEg2 ZHc3TU9UMG1jU0VEMVZCemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANXbMUhR0eUjMV6iVVa2Ukg1c9Q2CTw11Nz00jIjllBavTRMC4RWkA IeLZyU75Skv4e40tSJ9s0FYXxbNxVnRPXRZL5PmBBTKW0cl0D31gepVfyQfkJ7ni tKw4O+ZuHa+5WzJpYFx4FnukTm4KEM/a/QMlbm9JLO01KP4jevJ7Ngl/c7uUhrD4 mLUPgUAJWPuLGYkS4Tfm/Hp60JX71I7kiFU7MRESIeRMfH1NjZ9u4t9HkaUzXgE3 K4RR++WZqvL6jPWrY+UA47ZE3pYmVrMweyxvXjBHt3ZVEPcWyfyTwgJBILfslA2Z gageYcO+jaRfZAe75ESxOdZQcOuFfAwh -----END CERTIFICATE-----Generated at Tue Sep 9 03:40:17 2025 by rpki-client