$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: 0hCk9S45JNLHQDfzxkiF3e2gHbCkAPuEUvEDK1skQTU= Subject key identifier: 55:79:37:9F:E5:98:2E:B5:E8:62:31:8D:8B:F4:60:0D:44:62:2B:95 Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 08F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 08E5 Signing time: Mon 18 Aug 2025 20:43:43 +0000 Manifest this update: Mon 18 Aug 2025 20:43:42 +0000 Manifest next update: Mon 25 Aug 2025 20:43:42 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: AAb/1pYeP9WmHRbZgSa5FvzrG4E7xYc+SljlNBAJaL8=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: Aug 18 20:43:42 2025 GMT Not After : Aug 25 20:43:42 2025 GMT Subject: CN=68a3907e-e64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:d0:94:49:57:10:d4:1c:22:46:24:b9:38: 8c:2d:a8:f2:24:6e:e2:4d:d4:cf:eb:2b:54:71:5b: 9b:30:66:f0:0d:65:af:1b:f0:74:61:47:0b:22:ea: 84:43:e4:4f:0d:63:ad:be:06:88:d0:93:fd:f2:69: 23:2a:cd:a1:fc:3d:a4:52:f1:de:6d:b3:b3:bf:b9: 1b:ce:a8:df:9e:a6:8e:52:9a:db:99:61:be:39:df: 28:d6:ca:6f:45:ac:7c:71:85:d6:ce:d9:aa:89:de: 3e:b7:0c:5c:d6:75:73:0b:1b:c4:12:21:64:b3:02: 10:83:cd:ea:3f:a2:3d:bc:ca:2a:eb:d0:a6:63:54: b7:c8:48:a0:b0:12:b7:1a:27:20:68:93:46:e8:62: 99:5e:9a:1f:a8:56:45:26:d3:26:4e:56:27:8e:04: f6:56:f5:ce:52:83:b5:2d:88:9b:b3:6b:26:d7:13: 36:6e:4f:ad:7d:79:d5:5c:36:e5:4c:23:a3:e7:73: df:68:de:92:17:80:8d:ec:c8:72:73:19:37:ee:b5: 70:e0:54:ce:8a:51:48:8d:dc:76:42:f5:f8:4a:73: 9b:7b:5c:59:ab:8f:2a:80:ee:0a:67:d8:37:ba:d6: b0:6c:f4:b2:09:04:0f:d4:c1:37:cb:23:a5:cd:f8: 02:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:79:37:9F:E5:98:2E:B5:E8:62:31:8D:8B:F4:60:0D:44:62:2B:95 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c1:0d:f2:99:25:ab:80:2f:f2:ef:25:7f:16:ca:68:5b:5f: 48:ee:21:4b:e8:be:14:1a:0d:23:51:3e:0e:f3:56:26:ed:b4: 39:0b:1b:19:5f:8d:dd:79:10:8b:64:ee:b2:5f:e0:44:d0:78: 6e:68:43:f5:c0:ed:53:9a:68:50:ae:ec:14:5c:e9:7a:5d:06: 86:98:14:f4:9a:02:86:0f:97:f7:61:65:2b:b6:42:4a:0c:69: 47:9d:b2:0c:a4:f1:d4:54:1a:5b:9d:78:5a:ef:7a:ad:d4:8c: 3b:12:62:bd:77:95:ed:f0:2c:4d:1c:7e:d1:7e:15:a4:32:6f: ce:45:11:fd:0e:bd:eb:4e:cb:c2:2d:c7:72:78:04:48:7c:2d: 56:bf:80:6e:1f:c5:c2:03:22:0a:8b:4a:2b:03:21:42:b9:3d: 4d:71:be:e5:23:dc:ce:8e:69:a3:25:99:cf:bd:fb:29:a0:65: fe:10:26:17:61:46:7c:cd:62:f4:0e:7e:51:76:62:0c:87:fc: e0:7e:cb:e8:fc:4e:15:c3:f9:06:01:ca:79:c9:b2:cd:ee:e6: e2:33:c7:48:42:25:2d:a4:b2:00:1b:48:36:34:93:02:93:74: b3:62:cf:75:e7:e5:c5:f5:72:f5:af:b0:17:fc:61:73:40:d7: 2c:ae:e6:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjUwODE4MjA0MzQyWhcNMjUwODI1MjA0MzQyWjAYMRYwFAYD VQQDEw02OGEzOTA3ZS1lNjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4DQlElXENQcIkYkuTiMLajyJG7iTdTP6ytUcVubMGbwDWWvG/B0YUcLIuqE Q+RPDWOtvgaI0JP98mkjKs2h/D2kUvHebbOzv7kbzqjfnqaOUprbmWG+Od8o1spv Rax8cYXWztmqid4+twxc1nVzCxvEEiFkswIQg83qP6I9vMoq69CmY1S3yEigsBK3 GicgaJNG6GKZXpofqFZFJtMmTlYnjgT2VvXOUoO1LYibs2sm1xM2bk+tfXnVXDbl TCOj53PfaN6SF4CN7Mhycxk37rVw4FTOilFIjdx2QvX4SnObe1xZq48qgO4KZ9g3 utawbPSyCQQP1ME3yyOlzfgCHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFV5N5/l mC616GIxjYv0YA1EYiuVMB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdwQ3ymSWrgC/y7yV/FspoW19I7iFL6L4UGg0jUT4O81Ym7bQ5CxsZ X43deRCLZO6yX+BE0HhuaEP1wO1TmmhQruwUXOl6XQaGmBT0mgKGD5f3YWUrtkJK DGlHnbIMpPHUVBpbnXha73qt1Iw7EmK9d5Xt8CxNHH7RfhWkMm/ORRH9Dr3rTsvC LcdyeARIfC1Wv4BuH8XCAyIKi0orAyFCuT1Ncb7lI9zOjmmjJZnPvfspoGX+ECYX YUZ8zWL0Dn5RdmIMh/zgfsvo/E4Vw/kGAcp5ybLN7ubiM8dIQiUtpLIAG0g2NJMC k3SzYs915+XF9XL1r7AX/GFzQNcsruaD -----END CERTIFICATE-----Generated at Wed Aug 20 15:38:59 2025 by rpki-client