$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json) Hash identifier: 30ovngmRetB3EBICF1MPAT7YX5EsAVlkGVeh/cJplB8= Subject key identifier: DE:EA:46:2B:75:96:CF:A2:62:93:7C:C5:61:B7:12:A2:82:1E:89:57 Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft Manifest number: 0183 Signing time: Thu 21 Aug 2025 03:47:14 +0000 Manifest this update: Thu 21 Aug 2025 03:47:14 +0000 Manifest next update: Thu 28 Aug 2025 03:47:14 +0000 Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: z+tOuykyupezqxPJKtCZE7Xuu+7grBUpKYx5wA595fs=) 2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: XriNyYQKMZeCx4DyUlQQcZMbwakRSuvthukZKTR7zuU=) 3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: foSc151i9Iw1FdFYIvaUCOjJLGeEf5CPJvtL9xEjyMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Validity Not Before: Aug 21 03:47:14 2025 GMT Not After : Aug 28 03:47:14 2025 GMT Subject: CN=68a696c2-1d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:99:1b:fd:d9:ed:ad:a9:e7:14:42:21:32: c5:a0:43:f3:ce:ff:7a:f6:97:d4:5f:82:b5:c9:46: 7a:76:b6:88:e0:bb:57:3d:b3:11:d6:a0:63:d5:ee: 46:ec:51:ad:f7:c3:c2:a6:34:81:fc:c3:b2:b1:87: f7:5a:4c:aa:71:8e:0e:6e:13:ef:dc:64:1e:bb:ec: 2e:54:dc:b3:7a:c6:8d:f6:4e:65:20:50:57:8c:2f: 84:8f:65:25:aa:ef:fa:79:4d:6f:16:61:ca:99:ce: 71:0b:3b:a5:f3:0f:c9:04:ca:a2:43:f3:f1:39:90: cb:01:13:ad:42:8f:27:4b:e7:04:05:2c:4b:36:ea: 6d:44:9a:02:ef:93:54:34:a6:f6:c3:fd:3c:bd:bf: ce:e7:71:4a:6c:6e:bf:c2:49:14:f7:ac:ae:a6:3a: 09:20:2d:61:3f:a8:bf:ae:e0:a2:cc:a6:74:b5:5f: d9:e5:a8:d8:ec:6c:d8:0c:ac:94:2b:da:3e:d6:29: 1c:74:eb:fb:95:59:80:03:bb:3b:c9:fd:74:49:d5: 98:71:31:51:93:c3:5c:88:b8:53:33:cd:ab:37:33: 5f:f5:0e:a2:b0:ed:ea:86:a9:bb:ed:32:d2:5c:d9: 3e:be:66:92:af:1e:36:e0:78:b5:ba:4a:0c:87:e0: ae:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EA:46:2B:75:96:CF:A2:62:93:7C:C5:61:B7:12:A2:82:1E:89:57 X509v3 Authority Key Identifier: keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2a:57:d2:6f:aa:ed:eb:63:e3:20:7d:b0:03:77:d5:2d:35: 1a:c8:3e:68:2a:c6:43:c5:07:4f:23:58:2a:cd:51:6d:30:a7: 87:0a:38:a2:60:35:61:67:88:52:4c:d6:7d:44:79:b5:8c:96: 8a:6e:6f:fc:c3:d6:1d:c7:6b:cd:65:8b:c0:fa:4c:f8:c8:64: 74:6e:9e:ad:32:9a:d4:1f:61:e5:f5:13:92:1c:a1:f0:74:54: fb:aa:ce:11:f0:46:85:52:4c:42:7b:51:fd:46:4b:db:73:8c: 8b:99:a9:43:94:4b:9a:29:49:a9:ea:df:4c:f4:39:d5:85:9f: 0a:d9:65:cd:68:72:24:07:63:76:23:15:8c:78:3a:a7:ab:ad: b5:a4:de:e0:7f:6f:ff:85:e9:56:3c:f8:43:6e:b8:4c:44:f6: 95:e2:a9:d5:21:b4:c8:3e:2d:31:bd:5b:37:35:e3:fd:9d:f2: 9a:48:3b:c8:b0:02:3f:2f:57:89:2d:01:13:41:73:50:b2:b3: cc:c2:15:25:6f:ed:e8:5e:8f:86:29:ca:33:21:94:2b:5c:d7: b2:d8:2a:9c:f3:06:bc:1f:79:a7:5a:51:c1:02:30:95:4d:56: ad:7a:42:88:4f:23:d6:f5:31:ed:52:7a:31:99:16:0e:ff:22: 5a:ca:2f:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD NjZFMTJDOUYwHhcNMjUwODIxMDM0NzE0WhcNMjUwODI4MDM0NzE0WjAYMRYwFAYD VQQDEw02OGE2OTZjMi0xZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKeZG/3Z7a2p5xRCITLFoEPzzv969pfUX4K1yUZ6draI4LtXPbMR1qBj1e5G 7FGt98PCpjSB/MOysYf3WkyqcY4ObhPv3GQeu+wuVNyzesaN9k5lIFBXjC+Ej2Ul qu/6eU1vFmHKmc5xCzul8w/JBMqiQ/PxOZDLAROtQo8nS+cEBSxLNuptRJoC75NU NKb2w/08vb/O53FKbG6/wkkU96yupjoJIC1hP6i/ruCizKZ0tV/Z5ajY7GzYDKyU K9o+1ikcdOv7lVmAA7s7yf10SdWYcTFRk8NciLhTM82rNzNf9Q6isO3qhqm77TLS XNk+vmaSrx424Hi1ukoMh+CuIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7qRit1 ls+iYpN8xWG3EqKCHolXMB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0 RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjBGQS8yMDZERkM1MDM0RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3 cnR4WkhfeU56YW5HYmhMSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLKlfSb6rt62PjIH2wA3fVLTUayD5oKsZDxQdPI1gqzVFtMKeHCjii YDVhZ4hSTNZ9RHm1jJaKbm/8w9Ydx2vNZYvA+kz4yGR0bp6tMprUH2Hl9ROSHKHw dFT7qs4R8EaFUkxCe1H9Rkvbc4yLmalDlEuaKUmp6t9M9DnVhZ8K2WXNaHIkB2N2 IxWMeDqnq621pN7gf2//helWPPhDbrhMRPaV4qnVIbTIPi0xvVs3NeP9nfKaSDvI sAI/L1eJLQETQXNQsrPMwhUlb+3oXo+GKcozIZQrXNey2Cqc8wa8H3mnWlHBAjCV TVatekKITyPW9THtUnoxmRYO/yJayi+U -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:01 2025 by rpki-client