$ rpki-client -vvf rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft File: uD4K6Pgr-gYejEvHvnPpuANUDWM.mft (raw, json) Hash identifier: TuEDqfX0951ZZitIsdGnk9DtzUMgNJxd+vmuS0ycG0c= Subject key identifier: 29:68:E2:B1:95:F3:CE:E0:8A:27:BB:91:FD:50:C1:84:87:70:D7:17 Authority key identifier: B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63 Certificate issuer: /CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft Manifest number: 035A Signing time: Wed 17 Sep 2025 01:27:07 +0000 Manifest this update: Wed 17 Sep 2025 01:27:07 +0000 Manifest next update: Wed 24 Sep 2025 01:27:07 +0000 Files and hashes: 1: uD4K6Pgr-gYejEvHvnPpuANUDWM.crl (hash: o4d1ewgArYH2EIo7klTfsVGmsOpuPAV1NNVcUHj55qA=) 2: 2EBCD6C6CCF311EC86719729C4F9AE02.roa (hash: Nwjf8L58YdE8iA7As2NWQ7lGFW1+qSeB07BRTpmwkf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180386, serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63 Validity Not Before: Sep 17 01:27:07 2025 GMT Not After : Sep 24 01:27:07 2025 GMT Subject: CN=68ca0e6b-3494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:96:a2:04:ca:e5:5c:bd:21:84:e9:81:d5: 29:d4:de:5e:2d:dc:a6:f5:e1:26:37:42:52:b8:09: aa:ce:9d:aa:bb:09:66:af:c1:b6:e0:51:3f:f3:a7: ae:54:82:49:f9:f0:ed:18:a5:36:aa:99:0b:b5:2d: 83:1f:c8:0a:f8:8b:3d:0f:61:92:cf:a1:e1:7a:f7: 2a:f9:fe:38:89:c6:6e:f7:b3:98:d7:3f:29:f9:47: 76:1d:e1:04:9d:4f:cd:33:b7:54:f0:78:90:e0:f7: 86:a2:ce:d2:c8:5e:d8:c2:54:62:9f:04:5d:6c:fd: dd:00:bf:6d:f4:01:14:b3:46:f8:31:01:fa:83:9e: a5:6d:67:24:b2:af:4e:e7:6d:0b:87:af:fc:87:2a: 05:ab:51:a1:0b:fa:53:55:a8:b1:c7:71:55:b7:4f: 75:a1:74:7d:1f:4a:f4:85:b6:af:c3:e8:c3:bd:05: ba:67:e2:a6:76:09:11:6c:b0:0e:7f:f0:cb:68:eb: a6:ea:a8:99:4b:c1:45:c8:2e:62:8a:09:4e:14:f6: 67:6d:72:35:2f:03:b9:07:cc:dc:02:eb:f9:f9:10: e7:83:32:35:7c:4e:75:3d:a6:de:ae:d4:3e:a2:3b: 73:cf:0e:5b:6a:e9:02:a6:de:95:5c:f4:9c:4f:12: 80:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:68:E2:B1:95:F3:CE:E0:8A:27:BB:91:FD:50:C1:84:87:70:D7:17 X509v3 Authority Key Identifier: keyid:B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:c4:db:82:47:69:e4:68:f2:1e:63:03:68:24:56:0f:c7:25: 72:8f:4e:e0:4b:f4:12:d3:7d:b7:24:45:e7:a6:64:cc:53:e6: 56:24:1f:7a:24:32:63:1e:7f:26:01:10:ac:e7:da:e2:a8:86: f4:47:bb:38:4c:d2:14:3b:31:0e:8d:73:64:82:22:e7:14:ab: 24:7f:48:59:7e:0e:96:31:8a:4f:56:0e:2e:f8:c9:8f:61:5e: b9:88:2b:7d:d3:2a:26:36:12:67:12:60:f4:3a:00:66:83:2b: 08:1a:6e:38:33:7a:66:02:86:9e:b6:e5:61:cf:07:9d:f3:36: 7e:90:79:10:6a:b3:f3:a6:a1:7b:a0:6c:3a:b4:b2:f5:a4:57: 2a:08:f1:69:e7:53:10:ed:32:a2:5b:49:91:c2:0a:ea:99:e6: 0a:9e:e9:18:13:73:9b:5f:8a:81:c2:fc:1e:92:c8:4f:eb:bc: 82:e1:ad:2c:8a:7e:15:d3:45:4b:eb:94:ae:ba:64:8a:79:03: d5:4a:af:c1:a3:5b:c1:5e:85:ea:0b:c9:fd:03:1e:2f:05:f2: e0:3a:88:67:61:26:4f:8a:e6:4a:2d:7f:a4:e2:b1:24:f3:4f: 89:9c:57:ee:9f:8d:f8:4b:2f:74:53:20:0b:7b:3e:60:95:a2: c7:99:4e:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzODYxMTAvBgNVBAUTKEI4M0UwQUU4RjgyQkZBMDYxRThDNEJDN0JFNzNFOUI4 MDM1NDBENjMwHhcNMjUwOTE3MDEyNzA3WhcNMjUwOTI0MDEyNzA3WjAYMRYwFAYD VQQDEw02OGNhMGU2Yi0zNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoaWogTK5Vy9IYTpgdUp1N5eLdym9eEmN0JSuAmqzp2quwlmr8G24FE/86eu VIJJ+fDtGKU2qpkLtS2DH8gK+Is9D2GSz6Hhevcq+f44icZu97OY1z8p+Ud2HeEE nU/NM7dU8HiQ4PeGos7SyF7YwlRinwRdbP3dAL9t9AEUs0b4MQH6g56lbWcksq9O 520Lh6/8hyoFq1GhC/pTVaixx3FVt091oXR9H0r0hbavw+jDvQW6Z+KmdgkRbLAO f/DLaOum6qiZS8FFyC5iiglOFPZnbXI1LwO5B8zcAuv5+RDngzI1fE51PabertQ+ ojtzzw5baukCpt6VXPScTxKA0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClo4rGV 887giie7kf1QwYSHcNcXMB8GA1UdIwQYMBaAFLg+Cuj4K/oGHoxLx75z6bgDVA1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDM4Ni8wNkY4NDA4Q0ND RjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1nWWVqRXZIdm5QcHVBTlVE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VENEs2UGdyLWdZZWpFdkh2blBwdUFOVURXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDM4Ni8wNkY4NDA4Q0NDRjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1n WWVqRXZIdm5QcHVBTlVEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDxNuCR2nkaPIeYwNoJFYPxyVyj07gS/QS0323JEXnpmTMU+ZWJB96 JDJjHn8mARCs59riqIb0R7s4TNIUOzEOjXNkgiLnFKskf0hZfg6WMYpPVg4u+MmP YV65iCt90yomNhJnEmD0OgBmgysIGm44M3pmAoaetuVhzwed8zZ+kHkQarPzpqF7 oGw6tLL1pFcqCPFp51MQ7TKiW0mRwgrqmeYKnukYE3ObX4qBwvwekshP67yC4a0s in4V00VL65SuumSKeQPVSq/Bo1vBXoXqC8n9Ax4vBfLgOohnYSZPiuZKLX+k4rEk 80+JnFfun434Sy90UyALez5glaLHmU4h -----END CERTIFICATE-----Generated at Thu Sep 18 23:29:10 2025 by rpki-client