$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft File: uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json) Hash identifier: 0RxySmzhpk9qrBskugt+mXDo1r4ZjAKuXBdcWJUen0w= Subject key identifier: 05:0B:E4:A6:AA:6D:6C:79:E2:68:6E:EA:AA:9B:92:BC:D5:0E:B3:92 Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 Certificate issuer: /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft Manifest number: 012A Signing time: Sat 23 Aug 2025 04:49:19 +0000 Manifest this update: Sat 23 Aug 2025 04:49:19 +0000 Manifest next update: Sat 30 Aug 2025 04:49:19 +0000 Files and hashes: 1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: 8kWcF1hDB0S+TCPuIBSXBTK2DXFxrtIBXD11GEjb02k=) 2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: rOfi7pLc2YXhQ9Pw2aUr9rz0+D/rY6Ijcu5KC1k/f/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91320D4, serialNumber=B97A7F015A736074DF38445C98074378219D2995 Validity Not Before: Aug 23 04:49:19 2025 GMT Not After : Aug 30 04:49:19 2025 GMT Subject: CN=68a9484f-171f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:36:e5:b7:49:e1:26:57:6d:f0:41:df:86: c3:77:58:a1:c3:d7:da:d2:62:ec:fb:2e:0f:3c:9d: d9:86:4f:d1:48:95:da:57:4a:92:45:50:0d:51:83: 53:25:82:4c:98:b7:db:50:ea:1d:93:90:73:94:36: 68:3d:35:34:d4:03:95:14:83:58:ce:c0:f5:fc:e5: 4f:eb:b0:43:24:91:07:fc:c9:d3:d8:4e:6e:77:ac: e9:79:7d:03:99:eb:5b:6b:9d:bf:11:15:11:61:ee: 61:45:40:ca:5a:a9:4c:c7:3e:33:1f:cf:fa:51:ab: b3:dc:25:74:d0:13:7c:22:dd:87:d1:2d:f4:63:3a: ea:af:b4:81:d1:2e:17:3e:61:a8:af:6a:d9:ea:0b: 48:db:49:9d:70:7d:29:0f:fe:f6:27:a8:33:6f:e7: 10:13:6f:f1:e1:05:96:36:3e:b8:4d:d6:c0:35:c5: f6:05:90:fc:24:57:4d:7e:03:77:02:03:51:df:5c: 79:e9:24:72:30:53:75:20:dd:81:6d:8e:3c:c1:6b: 34:e2:68:65:14:9e:2a:4d:d5:24:7b:b7:0e:7a:cc: 2d:80:78:1f:ee:4c:b7:07:2d:fe:69:04:cb:e1:ed: e2:4f:a8:78:e6:87:d1:63:95:1f:fc:84:79:96:a1: 43:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0B:E4:A6:AA:6D:6C:79:E2:68:6E:EA:AA:9B:92:BC:D5:0E:B3:92 X509v3 Authority Key Identifier: keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:7b:36:72:dd:cd:f7:5a:15:54:70:2a:b8:cf:a2:a2:6b:82: 26:80:ac:e4:f2:fb:5c:f2:d1:f4:ad:9f:89:28:8b:44:65:3f: e7:36:f8:99:1e:9c:7e:90:b1:ba:1d:f4:69:e7:2e:88:78:10: c8:6d:0a:45:10:89:2a:71:73:86:60:5a:6b:4c:40:7d:e7:bc: 1d:b0:e7:3e:9f:1e:b4:49:08:6d:2b:83:c3:c4:32:ab:ac:db: f2:46:ba:98:2a:42:70:25:d3:4f:14:80:6f:e3:64:6a:d8:81: de:9d:b3:c8:7c:5e:a7:4b:0e:00:f8:cf:63:d3:5d:f5:18:ce: ca:ce:50:7a:d7:07:b2:d4:5d:88:1f:b8:4a:90:79:25:d9:a4: 04:d2:17:fd:ea:6c:33:9d:57:50:ce:9b:22:3f:ff:87:c4:43: cc:0e:ee:cf:e5:7b:24:73:a8:96:52:ef:ba:88:e1:eb:b6:63: 40:96:91:be:82:9e:01:ed:6b:54:fe:22:15:e3:54:4f:1b:bf: b8:f4:1a:f1:f0:66:28:bd:b5:a4:39:97:ec:f3:ef:24:05:6f: 51:5d:f1:b5:5f:3e:8b:b6:83:d6:47:5e:3f:32:fa:78:55:36: 26:8e:8a:89:48:3b:f4:8d:68:05:b4:8c:26:94:b2:ce:00:76: 71:ba:11:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIwRDQxMTAvBgNVBAUTKEI5N0E3RjAxNUE3MzYwNzRERjM4NDQ1Qzk4MDc0Mzc4 MjE5RDI5OTUwHhcNMjUwODIzMDQ0OTE5WhcNMjUwODMwMDQ0OTE5WjAYMRYwFAYD VQQDEw02OGE5NDg0Zi0xNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmQ25bdJ4SZXbfBB34bDd1ihw9fa0mLs+y4PPJ3Zhk/RSJXaV0qSRVANUYNT JYJMmLfbUOodk5BzlDZoPTU01AOVFINYzsD1/OVP67BDJJEH/MnT2E5ud6zpeX0D metba52/ERURYe5hRUDKWqlMxz4zH8/6Uauz3CV00BN8It2H0S30Yzrqr7SB0S4X PmGor2rZ6gtI20mdcH0pD/72J6gzb+cQE2/x4QWWNj64TdbANcX2BZD8JFdNfgN3 AgNR31x56SRyMFN1IN2BbY48wWs04mhlFJ4qTdUke7cOeswtgHgf7ky3By3+aQTL 4e3iT6h45ofRY5Uf/IR5lqFDcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUL5Kaq bWx54mhu6qqbkrzVDrOSMB8GA1UdIwQYMBaAFLl6fwFac2B03zhEXJgHQ3ghnSmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjBENC8wRTNGMEM2NkJD MTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellIVGZPRVJjbUFkRGVDR2RL WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYcF9BVnB6WUhUZk9FUmNtQWREZUNHZEtaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjBENC8wRTNGMEM2NkJDMTYxMUVFQjkwNTlDODZDNEY5QUUwMi91WHBfQVZwellI VGZPRVJjbUFkRGVDR2RLWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4ezZy3c33WhVUcCq4z6Kia4ImgKzk8vtc8tH0rZ+JKItEZT/nNviZ Hpx+kLG6HfRp5y6IeBDIbQpFEIkqcXOGYFprTEB957wdsOc+nx60SQhtK4PDxDKr rNvyRrqYKkJwJdNPFIBv42Rq2IHenbPIfF6nSw4A+M9j0131GM7KzlB61wey1F2I H7hKkHkl2aQE0hf96mwznVdQzpsiP/+HxEPMDu7P5Xskc6iWUu+6iOHrtmNAlpG+ gp4B7WtU/iIV41RPG7+49Brx8GYovbWkOZfs8+8kBW9RXfG1Xz6LtoPWR14/Mvp4 VTYmjoqJSDv0jWgFtIwmlLLOAHZxuhGl -----END CERTIFICATE-----Generated at Sat Aug 23 17:10:51 2025 by rpki-client