$ rpki-client -vvf rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft File: cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft (raw, json) Hash identifier: Ts4e3aP9LPo4NLjdcGIucM+C5j1uulnHdN/zANXjl3k= Subject key identifier: E3:90:9F:68:E8:AB:8D:98:CA:00:2F:22:95:0C:4C:DE:1D:8A:DB:7F Authority key identifier: 71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0 Certificate issuer: /CN=A91238D6/serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0 Certificate serial: 2293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft Manifest number: 2261 Signing time: Fri 22 Aug 2025 15:54:58 +0000 Manifest this update: Fri 22 Aug 2025 15:54:57 +0000 Manifest next update: Fri 29 Aug 2025 15:54:57 +0000 Files and hashes: 1: cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl (hash: MaywmtOoX41PdY1o2tkSk1465zc28ydi1Gp6SrzZvbo=) 2: BB62FBD82AEC11EA972CB627C4F9AE02.roa (hash: KdmEZEpKoLyIMn6+XZO0IZiKVzRjxKxZXmexqgggUFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8851 (0x2293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91238D6, serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0 Validity Not Before: Aug 22 15:54:57 2025 GMT Not After : Aug 29 15:54:57 2025 GMT Subject: CN=68a892d2-f60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:20:8b:b3:7d:c9:6c:e7:56:4e:d1:1b:a9:a6: 6e:62:c3:6f:c4:1d:81:f9:9f:ea:73:3d:91:d7:3f: 8e:65:9d:95:63:ea:18:0a:21:e0:40:f0:50:6f:93: 5a:44:81:a3:fa:03:9b:ce:ba:ce:1b:82:b6:24:44: 80:08:8e:da:ce:eb:0c:ae:11:1a:73:60:6d:16:f6: e3:48:36:3a:a6:ae:3c:12:54:3f:6c:48:5b:86:f3: 54:9b:0b:79:12:c1:1b:f3:b8:84:4b:3c:52:c3:30: d9:e6:fd:ab:dd:e4:d6:5e:cf:d5:9f:17:5b:5a:4a: 47:9c:45:e4:47:13:d6:b7:82:25:64:8c:bb:67:98: 0e:7e:e4:fa:0b:75:ad:38:59:2f:2c:df:a8:89:e6: 49:a7:be:ef:15:7a:75:d5:65:19:69:4b:8f:d8:7f: 72:c0:93:fc:5e:c9:7b:c7:70:9f:56:0f:ed:bf:76: c6:ca:d1:24:7d:8a:26:25:6d:bf:fc:1a:23:97:32: 19:b7:da:dc:24:2d:d6:d0:55:80:fc:4b:38:a1:73: 33:7c:97:c3:8e:86:9a:7c:d1:43:9e:f8:b4:32:bd: 20:8b:2d:dd:89:6f:01:91:12:e0:4a:c8:15:fa:68: f9:10:1d:ba:12:90:17:5e:0d:74:7c:a8:a3:8f:63: 78:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:90:9F:68:E8:AB:8D:98:CA:00:2F:22:95:0C:4C:DE:1D:8A:DB:7F X509v3 Authority Key Identifier: keyid:71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:14:44:b6:ab:fa:b7:f0:52:b2:62:b6:a2:6a:7a:73:a9:04: 7e:36:89:a2:e7:69:13:05:21:eb:da:95:bc:ed:5d:75:aa:f1: 22:26:06:3e:76:fe:e4:88:47:20:f1:f9:b2:c3:eb:e7:1e:65: 45:34:c6:9c:c6:a2:fc:16:31:be:13:91:80:ee:b5:b8:38:54: 38:d1:e2:dd:bd:ce:03:08:39:84:d2:74:af:77:26:82:b4:a9: f6:06:e4:56:48:2b:e4:8a:00:61:39:70:bd:f4:35:65:ed:79: e1:bc:01:8e:a7:2c:18:27:1d:b9:56:d2:96:38:29:d4:1e:d3: c0:0e:e6:71:ef:c7:45:e9:81:38:aa:db:fc:e1:76:36:fd:d5: cf:af:43:2c:f0:75:61:ee:c2:0d:f1:53:4c:4c:43:5f:02:f7: 38:77:00:e2:7e:d9:f4:67:fe:bb:88:17:8b:2c:d6:c6:39:d6: a8:27:9f:9c:9d:ba:f8:b9:43:b0:98:99:4f:42:83:81:fc:99: 0f:4e:32:2e:da:2d:b4:24:82:15:62:b6:fa:e6:cc:fe:8d:97: 69:86:b4:5b:dc:50:00:ee:aa:c5:f5:01:60:d8:a8:c4:ea:0b: 80:c0:ca:9b:75:16:42:d6:04:de:ae:01:ec:f0:d4:f3:fd:31: 3b:9c:8a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4RDYxMTAvBgNVBAUTKDcxNEJBMjhERDgzNUE3RDQxOTcwMUZBRDM3MkEzNEI3 QzY2Q0ZBQTAwHhcNMjUwODIyMTU1NDU3WhcNMjUwODI5MTU1NDU3WjAYMRYwFAYD VQQDEw02OGE4OTJkMi1mNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmiCLs33JbOdWTtEbqaZuYsNvxB2B+Z/qcz2R1z+OZZ2VY+oYCiHgQPBQb5Na RIGj+gObzrrOG4K2JESACI7azusMrhEac2BtFvbjSDY6pq48ElQ/bEhbhvNUmwt5 EsEb87iESzxSwzDZ5v2r3eTWXs/VnxdbWkpHnEXkRxPWt4IlZIy7Z5gOfuT6C3Wt OFkvLN+oieZJp77vFXp11WUZaUuP2H9ywJP8Xsl7x3CfVg/tv3bGytEkfYomJW2/ /BojlzIZt9rcJC3W0FWA/Es4oXMzfJfDjoaafNFDnvi0Mr0giy3diW8BkRLgSsgV +mj5EB26EpAXXg10fKijj2N4KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOQn2jo q42YygAvIpUMTN4ditt/MB8GA1UdIwQYMBaAFHFLoo3YNafUGXAfrTcqNLfGbPqg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzhENi8yODk5MDUzMEJF NTQxMUU1OERDQzQzNTdDNEY5QUUwMi9jVXVpamRnMXA5UVpjQi10TnlvMHQ4WnMt cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVdWlqZGcxcDlRWmNCLXROeW8wdDhacy1xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzhENi8yODk5MDUzMEJFNTQxMUU1OERDQzQzNTdDNEY5QUUwMi9jVXVpamRnMXA5 UVpjQi10TnlvMHQ4WnMtcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChFES2q/q38FKyYraianpzqQR+Nomi52kTBSHr2pW87V11qvEiJgY+ dv7kiEcg8fmyw+vnHmVFNMacxqL8FjG+E5GA7rW4OFQ40eLdvc4DCDmE0nSvdyaC tKn2BuRWSCvkigBhOXC99DVl7XnhvAGOpywYJx25VtKWOCnUHtPADuZx78dF6YE4 qtv84XY2/dXPr0Ms8HVh7sIN8VNMTENfAvc4dwDiftn0Z/67iBeLLNbGOdaoJ5+c nbr4uUOwmJlPQoOB/JkPTjIu2i20JIIVYrb65sz+jZdphrRb3FAA7qrF9QFg2KjE 6guAwMqbdRZC1gTergHs8NTz/TE7nIo0 -----END CERTIFICATE-----Generated at Sat Aug 23 22:41:33 2025 by rpki-client