$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft File: Co-Ufpyg_6RUeOxip-utknsEGTA.mft (raw, json) Hash identifier: /IcW8+iYJHgREBs+sCA/liIWYAHsOGoLXIgQPyEtk/g= Subject key identifier: 34:EB:A6:20:83:9C:00:AA:D6:6B:B0:E5:A0:01:60:5A:5C:4F:D1:2D Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30 Certificate issuer: /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930 Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft Manifest number: 04C3 Signing time: Sat 23 Aug 2025 00:05:44 +0000 Manifest this update: Sat 23 Aug 2025 00:05:43 +0000 Manifest next update: Sat 30 Aug 2025 00:05:43 +0000 Files and hashes: 1: Co-Ufpyg_6RUeOxip-utknsEGTA.crl (hash: feMiFjxZS/chUug9CzNBSDdX3tYKXVwaIIWI38sKBIs=) 2: 836F1D0AE0FB11EEB861CD40C4F9AE02.roa (hash: TZrK0Feld/Y4/iPkyFu+uGFDuJj1OCyyDAt+MgPwxHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91160E4, serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930 Validity Not Before: Aug 23 00:05:43 2025 GMT Not After : Aug 30 00:05:43 2025 GMT Subject: CN=68a905d7-bd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f8:53:b4:b1:32:cf:7b:b4:bd:e9:55:5d:37: 45:d8:47:cd:c0:f8:8d:6d:96:47:7a:f6:85:ea:70: 4a:e2:34:21:08:02:05:d9:a5:d8:65:ac:33:a8:ce: bc:f1:b4:84:28:b4:45:76:e3:63:7e:36:ff:06:78: 05:a9:48:10:cd:6d:e2:3e:ab:77:8d:92:75:77:8a: 7d:77:fe:ac:b0:76:5f:08:ff:d8:85:9e:34:5e:93: df:82:9c:ae:5d:9c:3a:77:00:42:63:45:46:00:d1: cd:b6:6c:81:22:66:11:fb:90:ad:b7:6d:7a:e9:47: ce:c5:df:bb:6b:30:c4:b7:51:20:a8:3e:b4:1b:4d: 51:d7:ee:b8:1c:3f:f0:21:12:09:af:5d:b6:3f:d5: bb:65:dc:0e:a1:d1:ae:8b:a9:82:43:ef:2a:19:2e: cb:f2:97:41:6b:5b:e8:31:cd:a3:ff:f2:ca:de:3a: ab:41:ef:bf:83:c7:69:b3:e9:45:9b:e1:44:ce:41: 5f:63:f8:19:13:74:2c:04:80:80:84:ca:31:97:81: 15:e4:d3:24:59:e0:89:1e:63:32:c1:32:18:e2:b8: c6:94:18:33:00:df:34:d4:7c:4a:8f:f8:ad:9e:74: 61:6c:59:03:82:ef:8b:3b:30:ac:60:bd:b6:c9:64: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EB:A6:20:83:9C:00:AA:D6:6B:B0:E5:A0:01:60:5A:5C:4F:D1:2D X509v3 Authority Key Identifier: keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:78:68:04:d6:1f:4d:81:65:e5:c7:f8:7f:f9:ad:5b:9d:c4: c6:54:54:46:d6:a5:3a:ad:31:88:b4:20:c5:c1:2c:44:f3:a6: 86:2c:f1:57:f5:b4:0a:56:da:89:96:c8:c2:55:d3:6d:88:7e: 94:5c:16:13:89:25:50:85:2e:ad:af:07:98:5b:a5:14:f6:9f: 5a:24:51:6f:84:ae:cf:88:85:6b:eb:e4:e0:4a:4d:e0:83:11: 8a:e8:ed:46:6e:2e:5b:12:36:7a:3f:32:91:76:13:71:ca:40: 7d:1f:1c:bb:ec:4c:69:1c:e5:88:be:fa:5a:b6:53:df:4c:98: 14:b8:20:d8:9d:9e:b9:87:41:f6:66:c5:8e:ce:3c:c3:d7:ed: ea:a6:30:d7:57:b2:36:33:76:13:9d:92:72:33:b6:d9:c4:f8: 14:1f:97:b4:b1:d6:00:13:89:42:70:a8:82:c0:7e:d9:0d:7e: 36:ac:55:93:16:13:05:2e:25:6f:d4:6a:50:87:4b:4f:2d:6b: a7:fd:22:27:89:22:15:7e:ac:56:9b:cc:f8:fc:a2:8f:a3:1a: 7d:c1:80:43:5d:50:6a:7b:42:5b:69:2c:38:16:8c:d3:f0:b4: 60:d8:47:63:dc:0e:2e:dc:54:6d:4f:33:c6:f5:1c:3f:12:93: 80:5f:ec:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwRTQxMTAvBgNVBAUTKDBBOEY5NDdFOUNBMEZGQTQ1NDc4RUM2MkE3RUJBRDky N0IwNDE5MzAwHhcNMjUwODIzMDAwNTQzWhcNMjUwODMwMDAwNTQzWjAYMRYwFAYD VQQDEw02OGE5MDVkNy1iZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vhTtLEyz3u0velVXTdF2EfNwPiNbZZHevaF6nBK4jQhCAIF2aXYZawzqM68 8bSEKLRFduNjfjb/BngFqUgQzW3iPqt3jZJ1d4p9d/6ssHZfCP/YhZ40XpPfgpyu XZw6dwBCY0VGANHNtmyBImYR+5Ctt2166UfOxd+7azDEt1EgqD60G01R1+64HD/w IRIJr122P9W7ZdwOodGui6mCQ+8qGS7L8pdBa1voMc2j//LK3jqrQe+/g8dps+lF m+FEzkFfY/gZE3QsBICAhMoxl4EV5NMkWeCJHmMywTIY4rjGlBgzAN801HxKj/it nnRhbFkDgu+LOzCsYL22yWTckwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTrpiCD nACq1muw5aABYFpcT9EtMB8GA1UdIwQYMBaAFAqPlH6coP+kVHjsYqfrrZJ7BBkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjBFNC82MkQ0OENDRTNC QUQxMUVDOUIzQ0VDMUNDNEY5QUUwMi9Dby1VZnB5Z182UlVlT3hpcC11dGtuc0VH VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvLVVmcHlnXzZSVWVPeGlwLXV0a25zRUdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjBFNC82MkQ0OENDRTNCQUQxMUVDOUIzQ0VDMUNDNEY5QUUwMi9Dby1VZnB5Z182 UlVlT3hpcC11dGtuc0VHVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPeGgE1h9NgWXlx/h/+a1bncTGVFRG1qU6rTGItCDFwSxE86aGLPFX 9bQKVtqJlsjCVdNtiH6UXBYTiSVQhS6trweYW6UU9p9aJFFvhK7PiIVr6+TgSk3g gxGK6O1Gbi5bEjZ6PzKRdhNxykB9Hxy77ExpHOWIvvpatlPfTJgUuCDYnZ65h0H2 ZsWOzjzD1+3qpjDXV7I2M3YTnZJyM7bZxPgUH5e0sdYAE4lCcKiCwH7ZDX42rFWT FhMFLiVv1GpQh0tPLWun/SIniSIVfqxWm8z4/KKPoxp9wYBDXVBqe0JbaSw4FozT 8LRg2Edj3A4u3FRtTzPG9Rw/EpOAX+zC -----END CERTIFICATE-----Generated at Sat Aug 23 21:22:57 2025 by rpki-client