$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft File: Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft (raw, json) Hash identifier: qUGI6LU4f6V31wn5VVTtfTJexevLqQApfFdw42kQB4A= Subject key identifier: 85:3E:5A:12:41:3D:BF:62:C3:D3:92:69:CF:1D:B8:93:26:3E:69:3E Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 Certificate issuer: /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft Manifest number: 0679 Signing time: Mon 08 Sep 2025 22:32:48 +0000 Manifest this update: Mon 08 Sep 2025 22:32:47 +0000 Manifest next update: Mon 15 Sep 2025 22:32:47 +0000 Files and hashes: 1: Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl (hash: +7Q7KetV5DuvFcz7bWCuPfvLam5XfDYmKKrTDsL0pHY=) 2: 59018DEE340611ED9C72786AC4F9AE02.roa (hash: rP6Pu7EfL4ZTfd4hkNZXRMND1x04kCFhfmQKKfFcDnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798 Validity Not Before: Sep 8 22:32:47 2025 GMT Not After : Sep 15 22:32:47 2025 GMT Subject: CN=68bf5990-96cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:08:d8:3e:9d:0e:0b:19:77:47:95:8b:b1: 3f:62:56:c9:91:ee:41:a9:eb:d0:12:82:f4:64:83: 7d:d7:f3:af:2b:e9:e4:36:c6:a9:aa:42:9e:ff:56: 80:33:24:ae:52:a0:e9:de:18:0f:2e:3b:62:f4:68: 6d:d1:f5:5c:87:6a:61:be:6b:bb:82:0b:7a:9b:79: 3e:58:bd:c1:6c:29:e5:12:a4:6d:d0:83:2f:73:2f: 14:87:5e:a4:e5:56:ea:99:33:6f:26:ea:aa:2a:cf: d6:0d:36:a1:77:b1:96:87:c4:10:27:d2:11:cd:de: c2:c3:90:b0:7e:2e:dc:ad:c4:07:4c:14:c3:59:92: 44:d4:3a:15:7f:8b:d7:b1:56:72:6b:dc:29:b4:c6: c5:b2:b2:0d:7d:c3:cb:7f:99:d5:f9:d1:00:13:10: f3:f2:21:16:6a:92:f6:7c:44:fb:95:e8:fc:a3:8e: 10:90:e5:11:e9:4c:17:bd:48:f5:a1:d8:f6:a6:e5: f5:cf:bf:69:b6:ab:f7:4d:ae:d8:8f:bd:4b:e8:45: f0:68:46:85:89:2a:47:f6:9a:80:41:43:75:77:dd: 91:c9:fc:db:ec:db:9d:54:4e:af:44:ec:9f:d7:6f: 60:a3:9a:95:e2:b4:24:7b:0c:ff:a9:ea:ca:9b:31: aa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:5A:12:41:3D:BF:62:C3:D3:92:69:CF:1D:B8:93:26:3E:69:3E X509v3 Authority Key Identifier: keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:00:f8:c0:a9:be:7a:0a:f1:d6:8b:97:60:7c:09:22:42:21: 6e:ab:06:64:c0:dd:a6:ed:b1:d3:88:fc:a6:f3:b1:74:5e:86: 84:af:87:8d:3d:82:4d:0b:d3:d5:9a:bd:d4:72:d5:82:77:64: ed:4d:58:84:45:00:7a:14:4b:26:f3:07:a1:d6:e7:db:d4:ef: af:8e:09:bd:e2:e9:d2:f9:26:35:7f:6f:fe:2e:0a:e2:10:b9: 8f:55:68:fe:b9:be:56:07:7d:5b:08:1b:91:49:51:dd:6b:5f: 1d:17:22:56:ee:d1:61:27:68:8b:24:4e:cb:2b:b3:87:b2:48: 77:98:a3:17:1d:87:dd:ee:f2:b2:97:5f:b0:fa:21:bf:00:a7: 22:c4:32:c8:f8:2f:6d:3c:9b:e4:6c:e3:09:14:16:b9:01:4b: ac:71:60:72:66:b5:7c:dc:1e:8f:83:2e:f0:22:12:26:d5:57: 7f:a4:fe:0b:8a:ed:b6:8c:a6:42:76:01:38:b1:43:92:52:44: 1f:6a:be:f9:a1:b8:71:b5:da:e0:fd:28:c3:8d:a4:4c:8b:cf: e1:6e:39:df:8e:76:2a:4b:a3:83:d8:cf:c1:ce:0a:28:72:2d: c3:61:59:72:e3:e5:c3:42:c2:c9:ac:2b:0b:8b:37:6e:b5:6f: 50:05:52:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCMzMxMTAvBgNVBAUTKDUxQUVCQTIzRkI3NDVBNTUzQTVFNDk5NkRGMUM4MTcz NDczRjE3OTgwHhcNMjUwOTA4MjIzMjQ3WhcNMjUwOTE1MjIzMjQ3WjAYMRYwFAYD VQQDEw02OGJmNTk5MC05NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoEI2D6dDgsZd0eVi7E/YlbJke5BqevQEoL0ZIN91/OvK+nkNsapqkKe/1aA MySuUqDp3hgPLjti9Ght0fVch2phvmu7ggt6m3k+WL3BbCnlEqRt0IMvcy8Uh16k 5VbqmTNvJuqqKs/WDTahd7GWh8QQJ9IRzd7Cw5Cwfi7crcQHTBTDWZJE1DoVf4vX sVZya9wptMbFsrINfcPLf5nV+dEAExDz8iEWapL2fET7lej8o44QkOUR6UwXvUj1 odj2puX1z79ptqv3Ta7Yj71L6EXwaEaFiSpH9pqAQUN1d92Ryfzb7NudVE6vROyf 129go5qV4rQkewz/qerKmzGqewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU+WhJB Pb9iw9OSac8duJMmPmk+MB8GA1UdIwQYMBaAFFGuuiP7dFpVOl5Jlt8cgXNHPxeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9DRDM1REIxQTkx MjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFdsVTZYa21XM3h5QmMwY19G NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VhNjZJX3QwV2xVNlhrbVczeHlCYzBjX0Y1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0IzMy9DRDM1REIxQTkxMjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFds VTZYa21XM3h5QmMwY19GNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9APjAqb56CvHWi5dgfAkiQiFuqwZkwN2m7bHTiPym87F0XoaEr4eN PYJNC9PVmr3UctWCd2TtTViERQB6FEsm8weh1ufb1O+vjgm94unS+SY1f2/+Lgri ELmPVWj+ub5WB31bCBuRSVHda18dFyJW7tFhJ2iLJE7LK7OHskh3mKMXHYfd7vKy l1+w+iG/AKcixDLI+C9tPJvkbOMJFBa5AUuscWByZrV83B6Pgy7wIhIm1Vd/pP4L iu22jKZCdgE4sUOSUkQfar75obhxtdrg/SjDjaRMi8/hbjnfjnYqS6OD2M/Bzgoo ci3DYVly4+XDQsLJrCsLizdutW9QBVK9 -----END CERTIFICATE-----Generated at Tue Sep 9 16:42:30 2025 by rpki-client