$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: PaUyU665j48+Ye4937+WznByDTpTp1GU7oIG6rNFH20= Subject key identifier: 3D:30:B6:F5:35:6A:61:90:2B:AB:5E:31:55:97:6C:AE:E5:3F:FF:2D Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 09B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 09AA Signing time: Wed 20 Aug 2025 20:06:26 +0000 Manifest this update: Wed 20 Aug 2025 20:06:25 +0000 Manifest next update: Wed 27 Aug 2025 20:06:25 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: 4GOXL7d9+w2ZDt9apnLj01kzdFAh+M05AKGMnTou9eU=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: KzsEqYZi4RymBpkz6QVCB3ieArM+VhARkW/2ksmdU8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2480 (0x9b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Validity Not Before: Aug 20 20:06:25 2025 GMT Not After : Aug 27 20:06:25 2025 GMT Subject: CN=68a62ac1-ca54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:5e:06:4b:f6:be:d7:5e:2d:73:ef:97:8b: 12:53:91:08:fa:bc:52:7c:3a:22:fd:a7:7b:08:d0: 5b:9f:2a:f1:95:33:6e:7f:4a:7d:c3:79:ad:b3:1b: 48:e1:b6:67:e2:e2:9c:7c:65:0b:43:4a:03:0f:bd: 1c:16:69:05:2f:5a:6c:19:07:88:32:51:e0:37:86: d5:a7:78:5a:70:56:08:3d:30:d2:92:ce:f9:46:ca: 6e:bb:31:03:d0:9a:ec:86:1d:08:5d:0e:f8:fe:df: 22:70:78:48:69:e2:89:12:a7:cc:2b:f0:e9:99:83: 5a:a5:54:ce:37:0a:60:a4:48:96:46:9c:7d:ff:b0: c3:c1:cb:60:d9:0e:e2:fe:b8:e9:56:0d:d7:1a:6a: b1:c9:f2:55:04:92:a8:ae:33:59:2b:2e:2c:c0:32: 33:c6:cd:0c:6c:e3:bf:15:8c:7e:a0:2c:f3:d8:ea: f8:d0:62:71:a3:6d:4e:49:26:88:db:42:ea:81:f2: 70:0a:03:02:88:ce:53:42:0b:cd:34:18:fe:18:23: 7c:c4:b3:63:3d:6c:5f:fc:53:f4:7f:46:9b:31:96: 6d:e5:a4:bf:1a:fa:46:3a:c9:ed:c7:3a:7e:d4:86: 21:2e:10:ea:00:9b:61:3e:93:d4:30:6a:52:ab:fd: f0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:30:B6:F5:35:6A:61:90:2B:AB:5E:31:55:97:6C:AE:E5:3F:FF:2D X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d7:cb:82:fe:20:cb:46:c2:47:5c:d9:db:1f:91:67:45:2a: c7:1d:c5:d5:ca:fc:a7:3b:d1:41:44:21:12:19:04:3c:8e:6f: b0:8b:b4:1a:dd:0f:66:e4:07:66:93:ee:e1:68:e6:e3:14:07: 29:8b:7a:a1:87:1d:25:98:a7:ae:85:3c:77:c1:34:c7:7e:f4: 09:67:2f:83:ba:62:1b:ff:1b:a9:7b:59:f5:ba:e4:a0:c7:56: fa:cc:74:ad:49:41:0e:fd:c2:52:f6:f6:d7:ba:25:aa:ce:dc: 6b:73:d5:43:5a:ef:c1:d8:86:14:c7:45:16:0b:80:34:f0:ef: 24:f3:91:49:14:94:71:0a:65:1f:24:ad:3c:43:c0:e9:e0:4d: 6f:7d:68:ec:16:d9:e3:ca:ed:a2:c0:69:1d:9d:cf:26:f6:e0: a8:d7:c7:00:39:bf:ac:a2:bc:51:d9:15:0b:70:1e:02:74:17: 1a:76:9b:40:6e:d6:ea:5c:b7:48:32:4d:7a:83:7c:eb:b8:33: 00:71:23:72:bf:32:b6:ee:51:90:b0:ee:e4:75:c0:23:c8:01: 9a:33:92:07:de:6f:f3:5b:b2:e5:96:20:c9:d7:aa:d1:22:f8: a4:84:95:f0:98:e7:b8:88:c3:76:4d:99:aa:bd:04:b2:5e:ce: f4:b9:ba:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjUwODIwMjAwNjI1WhcNMjUwODI3MjAwNjI1WjAYMRYwFAYD VQQDEw02OGE2MmFjMS1jYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/9eBkv2vtdeLXPvl4sSU5EI+rxSfDoi/ad7CNBbnyrxlTNuf0p9w3mtsxtI 4bZn4uKcfGULQ0oDD70cFmkFL1psGQeIMlHgN4bVp3hacFYIPTDSks75RspuuzED 0Jrshh0IXQ74/t8icHhIaeKJEqfMK/DpmYNapVTONwpgpEiWRpx9/7DDwctg2Q7i /rjpVg3XGmqxyfJVBJKorjNZKy4swDIzxs0MbOO/FYx+oCzz2Or40GJxo21OSSaI 20LqgfJwCgMCiM5TQgvNNBj+GCN8xLNjPWxf/FP0f0abMZZt5aS/GvpGOsntxzp+ 1IYhLhDqAJthPpPUMGpSq/3wBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0wtvU1 amGQK6teMVWXbK7lP/8tMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy18uC/iDLRsJHXNnbH5FnRSrHHcXVyvynO9FBRCESGQQ8jm+wi7Qa 3Q9m5Admk+7haObjFAcpi3qhhx0lmKeuhTx3wTTHfvQJZy+DumIb/xupe1n1uuSg x1b6zHStSUEO/cJS9vbXuiWqztxrc9VDWu/B2IYUx0UWC4A08O8k85FJFJRxCmUf JK08Q8Dp4E1vfWjsFtnjyu2iwGkdnc8m9uCo18cAOb+sorxR2RULcB4CdBcadptA btbqXLdIMk16g3zruDMAcSNyvzK27lGQsO7kdcAjyAGaM5IH3m/zW7LlliDJ16rR IvikhJXwmOe4iMN2TZmqvQSyXs70ubqM -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:03 2025 by rpki-client