$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft File: uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json) Hash identifier: 1FmqM0lirsBDFDhPTvfCkmAqHipDaRnZuJDEAXqr4+w= Subject key identifier: 24:32:C3:DE:F0:C4:20:FD:90:51:34:46:43:94:F8:24:04:72:4A:03 Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 Certificate issuer: /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft Manifest number: B3 Signing time: Fri 19 Sep 2025 06:42:31 +0000 Manifest this update: Fri 19 Sep 2025 06:42:31 +0000 Manifest next update: Fri 26 Sep 2025 06:42:31 +0000 Files and hashes: 1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: U952KViCpP5RPl+mfvo6JRhqi/S7mP0He7N25F3GYo0=) 2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: ZCgG7FYX4Z+FrZu/NpwbDBG7rLXKjEvv9WpnC42UALI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 06:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Validity Not Before: Sep 19 06:42:31 2025 GMT Not After : Sep 26 06:42:31 2025 GMT Subject: CN=68ccfb57-cc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:c8:d2:35:fb:c8:f8:d1:49:1c:cf:a9:ae: 4c:be:b6:26:7d:70:f6:44:48:54:48:8a:ee:05:8c: 5c:fb:c9:67:c9:3b:04:2f:45:8c:ab:fd:33:4b:91: f9:fa:f6:e4:d2:f9:e8:fd:f8:4f:0d:d6:33:4c:8f: cf:65:73:04:b0:98:1d:33:a6:42:09:ec:af:ce:f7: 8a:e9:4b:3f:57:37:5d:2e:18:f3:3d:b8:be:df:82: fc:40:3b:b5:4e:83:ef:ba:7c:ac:c4:f0:8b:03:2b: 70:01:5e:bf:75:20:57:12:17:ec:c9:04:47:e3:f2: 59:56:f0:33:52:aa:f9:20:7d:22:2a:00:3a:92:ea: d0:9c:32:72:f9:f8:70:01:27:3b:9b:2d:49:ce:07: 13:85:d1:94:f5:e2:0b:e1:9a:97:f4:b9:0e:6b:52: 30:d2:08:70:9c:98:6c:bd:e7:62:91:81:f3:c0:37: da:87:fd:25:ce:43:64:4a:56:a7:b3:9f:45:2a:ab: fe:b8:cf:1c:5f:49:19:10:b5:e7:b0:f1:4b:df:ab: 8e:97:8d:18:cd:f3:30:93:79:f9:7f:26:98:e1:ca: 6b:54:5b:33:89:e0:0d:19:a6:ec:5c:53:4e:0c:32: 18:53:f0:60:23:35:38:12:ae:f9:c0:9d:53:02:0b: bf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:32:C3:DE:F0:C4:20:FD:90:51:34:46:43:94:F8:24:04:72:4A:03 X509v3 Authority Key Identifier: keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:0d:e1:17:21:22:e2:11:5d:42:26:dd:2f:b6:37:36:9b:1b: 4e:b9:9a:e6:fa:b1:1d:75:29:12:73:02:a7:dc:ab:c8:37:8d: 1a:b2:a6:53:87:40:fe:fd:ba:bf:c6:36:29:59:42:46:ac:e5: a0:51:a9:dd:23:20:7e:d2:dd:71:ba:0a:cd:2b:7e:62:22:cc: ab:a9:6a:e4:56:90:99:a9:3b:9e:b5:9a:37:82:7b:df:e1:fb: 82:40:b4:6e:63:8d:2f:3a:bf:b6:21:e9:e8:7b:5f:1b:5f:a9: 63:04:3a:50:f7:39:b9:81:e3:9d:20:c0:76:b7:91:d4:be:1d: 0d:da:93:40:dd:aa:1f:eb:b2:95:b2:6d:a8:5b:0b:d4:1a:ab: 60:5d:16:bf:53:06:e2:d9:e0:7b:d4:8b:c7:a7:5d:78:37:f2: b6:b6:ea:f1:62:b6:fa:26:b9:d5:9a:37:e2:35:c2:32:14:4f: df:16:2e:d6:13:4a:6d:e0:38:ca:4c:58:af:cf:08:cf:6f:30: 22:89:61:b0:89:b1:e6:a1:53:b2:cb:0e:a8:1a:68:de:ab:ff: f8:53:e7:a7:cf:6b:1c:74:00:78:d9:47:06:63:80:a0:53:69: bc:eb:83:60:fe:69:d2:1c:34:fd:11:bc:b1:8f:77:6f:16:a1: a3:7d:39:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3OEUxMTAvBgNVBAUTKEI4QzE5ODUyQUVDN0RBNTFBNDUwQkU3REE3RDk1ODcz QkVERTM3MzQwHhcNMjUwOTE5MDY0MjMxWhcNMjUwOTI2MDY0MjMxWjAYMRYwFAYD VQQDEw02OGNjZmI1Ny1jYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOLI0jX7yPjRSRzPqa5MvrYmfXD2REhUSIruBYxc+8lnyTsEL0WMq/0zS5H5 +vbk0vno/fhPDdYzTI/PZXMEsJgdM6ZCCeyvzveK6Us/VzddLhjzPbi+34L8QDu1 ToPvunysxPCLAytwAV6/dSBXEhfsyQRH4/JZVvAzUqr5IH0iKgA6kurQnDJy+fhw ASc7my1JzgcThdGU9eIL4ZqX9LkOa1Iw0ghwnJhsvedikYHzwDfah/0lzkNkSlan s59FKqv+uM8cX0kZELXnsPFL36uOl40YzfMwk3n5fyaY4cprVFszieANGabsXFNO DDIYU/BgIzU4Eq75wJ1TAgu/0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQyw97w xCD9kFE0RkOU+CQEckoDMB8GA1UdIwQYMBaAFLjBmFKux9pRpFC+fafZWHO+3jc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Qzc4RS9BMDIwMUIyMDg2 REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJsR2tVTDU5cDlsWWM3N2VO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VNR1lVcTdIMmxHa1VMNTlwOWxZYzc3ZU56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Qzc4RS9BMDIwMUIyMDg2REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJs R2tVTDU5cDlsWWM3N2VOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkDeEXISLiEV1CJt0vtjc2mxtOuZrm+rEddSkScwKn3KvIN40asqZT h0D+/bq/xjYpWUJGrOWgUandIyB+0t1xugrNK35iIsyrqWrkVpCZqTuetZo3gnvf 4fuCQLRuY40vOr+2Ienoe18bX6ljBDpQ9zm5geOdIMB2t5HUvh0N2pNA3aof67KV sm2oWwvUGqtgXRa/Uwbi2eB71IvHp114N/K2turxYrb6JrnVmjfiNcIyFE/fFi7W E0pt4DjKTFivzwjPbzAiiWGwibHmoVOyyw6oGmjeq//4U+enz2scdAB42UcGY4Cg U2m864Ng/mnSHDT9Ebyxj3dvFqGjfTnp -----END CERTIFICATE-----Generated at Fri Sep 19 16:47:04 2025 by rpki-client