$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft File: uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json) Hash identifier: +ZJZkU1lrFIkqY/d+FHrbTDjUxW+v8qVV8fVPvUwACk= Subject key identifier: BF:34:78:21:64:79:8E:CF:F6:F1:BB:8A:C3:09:B5:40:72:00:93:ED Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft Manifest number: 0663 Signing time: Mon 08 Sep 2025 22:36:33 +0000 Manifest this update: Mon 08 Sep 2025 22:36:33 +0000 Manifest next update: Mon 15 Sep 2025 22:36:33 +0000 Files and hashes: 1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: MEn4+SduLxeP4kwNelJbAQ8rdJMIR/UOaafiGjPesUY=) 2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: Y2zv5qoN2STM8iOeHa24FYyQDvrtP06yfpXTjv2gJRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Validity Not Before: Sep 8 22:36:33 2025 GMT Not After : Sep 15 22:36:33 2025 GMT Subject: CN=68bf5a71-3958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:2c:0e:24:e6:b2:59:ad:58:6d:fe:cc:0b: c6:b9:55:9f:37:f4:a2:26:20:64:f9:f1:26:02:3e: fe:2f:90:82:9b:aa:a8:bc:c4:5c:7f:5d:b7:92:3a: 10:8d:78:c5:61:43:e8:cd:1d:70:16:0b:7b:74:e3: d7:4b:6e:87:ff:26:ce:a4:77:f8:d8:f6:29:97:8c: bd:e1:8f:4b:4a:f6:b5:2d:08:5b:2a:70:b0:c3:93: 78:be:a0:3d:b0:c3:ef:68:00:d1:37:b0:0a:71:a1: d5:7d:18:51:2a:9c:59:4e:0c:e2:27:0e:a1:f3:58: 2c:12:a6:c5:41:20:33:60:0b:aa:b5:ef:a4:b3:ba: 0d:cc:91:b1:ae:3c:77:5c:7e:4d:87:33:ae:e9:ce: b5:d2:25:fd:db:0f:5e:d3:0d:a7:d9:32:15:cb:f4: 32:ef:ee:35:c4:ad:a5:ce:e5:51:66:4f:f4:80:be: 62:e0:45:e0:6a:b5:ff:97:0a:39:9a:59:4f:af:04: 41:b2:30:15:9a:cf:54:f6:e5:97:10:39:c6:61:70: fd:e5:0b:c8:a2:51:6a:c3:dd:fb:18:2a:9d:2a:e2: da:e6:44:a9:87:58:a7:6a:7f:e2:8a:2a:22:37:f8: 12:01:68:4d:0b:a1:a6:28:35:b8:e6:3c:d1:05:43: f5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:34:78:21:64:79:8E:CF:F6:F1:BB:8A:C3:09:B5:40:72:00:93:ED X509v3 Authority Key Identifier: keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:aa:5d:04:b7:29:53:1c:ed:58:14:00:87:5f:34:63:bd:ed: 7c:07:4d:46:24:e5:85:70:cb:85:d8:c3:26:46:04:b5:88:ae: 98:47:56:37:96:fe:5b:2b:cc:c6:28:58:cf:20:1c:a0:40:24: 89:cc:6b:8c:e6:16:5c:b8:8e:7d:fe:d4:62:a9:e7:03:41:69: e0:0e:06:da:94:d3:8d:82:c7:b1:5e:31:6f:cd:68:aa:69:63: df:bc:dd:9d:35:05:7d:92:ea:96:10:3d:fa:09:88:6d:ff:f4: 22:8d:b6:7f:d8:52:db:f9:75:6e:ad:85:ae:f9:7f:f2:24:a3: 73:1e:1f:2e:b9:10:34:c1:3b:e8:f2:66:86:d4:1b:bc:4f:8e: 25:c1:ad:ee:80:d5:7e:0d:e7:b9:7c:5f:1d:b0:b5:c2:b6:77: 7f:fe:41:97:1a:13:56:35:a0:51:69:87:bb:62:53:c7:4b:0d: 91:11:fb:11:41:c9:8e:a8:5c:ba:ec:7c:91:d8:4e:2b:37:e9: 4f:00:75:b1:8f:63:02:df:8b:f5:9f:dd:87:e5:ed:6e:cc:81: a2:71:1f:d1:63:0b:03:71:79:3b:59:cb:33:02:4c:87:a6:f7: dd:df:81:1b:cd:85:89:11:80:27:85:d6:d5:63:2c:1a:f9:21: b5:f7:0a:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy NkEwMjE3RTYwHhcNMjUwOTA4MjIzNjMzWhcNMjUwOTE1MjIzNjMzWjAYMRYwFAYD VQQDEw02OGJmNWE3MS0zOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMUsDiTmslmtWG3+zAvGuVWfN/SiJiBk+fEmAj7+L5CCm6qovMRcf123kjoQ jXjFYUPozR1wFgt7dOPXS26H/ybOpHf42PYpl4y94Y9LSva1LQhbKnCww5N4vqA9 sMPvaADRN7AKcaHVfRhRKpxZTgziJw6h81gsEqbFQSAzYAuqte+ks7oNzJGxrjx3 XH5NhzOu6c610iX92w9e0w2n2TIVy/Qy7+41xK2lzuVRZk/0gL5i4EXgarX/lwo5 mllPrwRBsjAVms9U9uWXEDnGYXD95QvIolFqw937GCqdKuLa5kSph1inan/iiioi N/gSAWhNC6GmKDW45jzRBUP10wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL80eCFk eY7P9vG7isMJtUByAJPtMB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2 OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDcyRC85OEJBNDZCNDk2OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5X dzNhRjhLdmpTdTRtb0NGLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwql0EtylTHO1YFACHXzRjve18B01GJOWFcMuF2MMmRgS1iK6YR1Y3 lv5bK8zGKFjPIBygQCSJzGuM5hZcuI59/tRiqecDQWngDgbalNONgsexXjFvzWiq aWPfvN2dNQV9kuqWED36CYht//QijbZ/2FLb+XVurYWu+X/yJKNzHh8uuRA0wTvo 8maG1Bu8T44lwa3ugNV+Dee5fF8dsLXCtnd//kGXGhNWNaBRaYe7YlPHSw2REfsR QcmOqFy67HyR2E4rN+lPAHWxj2MC34v1n92H5e1uzIGicR/RYwsDcXk7WcszAkyH pvfd34EbzYWJEYAnhdbVYywa+SG19wrg -----END CERTIFICATE-----Generated at Tue Sep 9 14:10:47 2025 by rpki-client