$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft File: uHDS4OMcipEO37p2W7fPBMPBDL4.mft (raw, json) Hash identifier: Mgp+Rqns+m+EoVjAMJ+osfpR/dClqmfR3CmYFviQkKQ= Subject key identifier: 7F:16:31:20:74:F5:A1:14:66:33:57:49:D3:C0:20:0A:8A:4C:48:C6 Authority key identifier: B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE Certificate issuer: /CN=A91731AD/serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft Manifest number: 21 Signing time: Sat 23 Aug 2025 08:04:49 +0000 Manifest this update: Sat 23 Aug 2025 08:04:48 +0000 Manifest next update: Sat 30 Aug 2025 08:04:48 +0000 Files and hashes: 1: uHDS4OMcipEO37p2W7fPBMPBDL4.crl (hash: UKZ0QxrTTi9YmdsmdC4L4dSkRIAVIv7Tq91AYVy9Zns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731AD, serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE Validity Not Before: Aug 23 08:04:48 2025 GMT Not After : Aug 30 08:04:48 2025 GMT Subject: CN=68a97621-fd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:8a:f0:ac:8b:3a:11:8f:2f:0a:ea:e1:4f: 71:63:b1:09:5f:7b:24:ce:16:9e:6c:4f:a3:be:94: 78:5c:98:72:1e:24:95:dd:f0:53:0f:57:4b:a1:76: 27:c8:fe:cf:8c:4d:a5:4b:a1:47:6c:05:40:6f:3f: ee:20:34:cd:85:b5:0f:ad:97:87:cd:f8:ce:03:17: 75:e0:3e:7b:c3:41:cf:0e:07:09:26:dd:52:fd:6f: b8:da:d6:0c:4e:a8:95:a6:ca:ad:14:e6:44:a5:74: d7:d1:79:eb:a9:01:5b:5d:2b:bf:7a:e0:e0:2f:7f: dc:cb:3e:65:eb:e9:ef:91:e5:bf:d8:cb:c9:5b:41: bc:85:b9:6a:17:21:79:30:3e:2e:c4:04:a4:ea:b1: 55:70:5e:48:5d:38:0f:0d:b3:b8:35:cb:bd:bd:23: 19:56:67:20:b2:2a:de:12:19:fc:37:8a:43:8e:65: d5:7f:d7:6a:9c:df:b4:e8:a1:af:1a:03:83:e7:3f: de:68:da:f8:9f:f6:87:f4:f8:5a:d3:4e:fb:95:f2: 9d:98:45:24:e5:dc:98:25:37:1b:9f:db:a1:41:57: b2:43:e7:f1:b5:1a:3b:2c:23:1d:e6:88:f3:ae:cb: d4:ed:86:40:5d:67:de:57:32:5f:15:07:4f:15:7a: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:16:31:20:74:F5:A1:14:66:33:57:49:D3:C0:20:0A:8A:4C:48:C6 X509v3 Authority Key Identifier: keyid:B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8b:7f:1f:96:49:c1:38:b1:ab:e5:c7:fa:f9:ed:5f:b7:f0: 98:4e:15:f7:f0:6a:3e:b4:86:f8:4c:c3:55:0c:39:34:ee:f8: 39:8c:4b:76:ce:a8:94:2d:11:35:e5:23:5d:0f:09:73:17:91: 03:41:c6:20:c2:00:c4:4a:51:18:38:64:5b:c5:2f:27:04:cc: 58:7b:ba:4b:12:9b:c5:17:09:55:34:7b:90:05:6d:a1:de:eb: 5b:23:fe:77:d6:9e:07:fc:59:c2:97:be:44:82:66:3e:f0:3c: b4:fa:b3:c0:3f:cd:48:4d:f3:4d:59:51:9f:97:30:ac:15:d7: 79:00:20:20:33:a7:07:6d:60:32:51:46:06:f8:9e:19:b3:02: e1:22:f9:ef:91:b4:45:86:40:98:c5:2b:83:5f:84:00:c7:15: 56:e4:14:4f:d6:3f:bd:97:94:12:a4:16:86:2f:47:87:80:10: 08:d8:f4:05:50:62:19:29:00:78:c6:da:24:31:3e:b8:2b:61: ef:97:fe:a7:09:6e:95:ff:23:f9:e3:f9:79:38:ba:24:89:ca: c7:fb:54:a1:f3:84:8c:6c:87:8c:e6:bd:b3:8b:fc:21:81:33: 28:4d:e7:bf:66:26:ef:a2:d7:f8:c2:bf:2f:9e:5b:2b:b9:ab: 38:16:bd:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzFBRDExMC8GA1UEBRMoQjg3MEQyRTBFMzFDOEE5MTBFREZCQTc2NUJCN0NGMDRD M0MxMENCRTAeFw0yNTA4MjMwODA0NDhaFw0yNTA4MzAwODA0NDhaMBgxFjAUBgNV BAMTDTY4YTk3NjIxLWZkMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB/4rwrIs6EY8vCurhT3FjsQlfeyTOFp5sT6O+lHhcmHIeJJXd8FMPV0uhdifI /s+MTaVLoUdsBUBvP+4gNM2FtQ+tl4fN+M4DF3XgPnvDQc8OBwkm3VL9b7ja1gxO qJWmyq0U5kSldNfReeupAVtdK7964OAvf9zLPmXr6e+R5b/Yy8lbQbyFuWoXIXkw Pi7EBKTqsVVwXkhdOA8Ns7g1y729IxlWZyCyKt4SGfw3ikOOZdV/12qc37Tooa8a A4PnP95o2vif9of0+FrTTvuV8p2YRSTl3JglNxuf26FBV7JD5/G1GjssIx3miPOu y9TthkBdZ95XMl8VB08VesRpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfxYxIHT1 oRRmM1dJ08AgCopMSMYwHwYDVR0jBBgwFoAUuHDS4OMcipEO37p2W7fPBMPBDL4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUFEL0M0RTI2OTU2NTA5 QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3VIRFM0T01jaXBFTzM3cDJXN2ZQQk1QQkRM NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdUhEUzRPTWNpcEVPMzdwMlc3ZlBCTVBCREw0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MUFEL0M0RTI2OTU2NTA5QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3VIRFM0T01jaXBF TzM3cDJXN2ZQQk1QQkRMNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+Lfx+WScE4savlx/r57V+38JhOFffwaj60hvhMw1UMOTTu+DmMS3bO qJQtETXlI10PCXMXkQNBxiDCAMRKURg4ZFvFLycEzFh7uksSm8UXCVU0e5AFbaHe 61sj/nfWngf8WcKXvkSCZj7wPLT6s8A/zUhN801ZUZ+XMKwV13kAICAzpwdtYDJR Rgb4nhmzAuEi+e+RtEWGQJjFK4NfhADHFVbkFE/WP72XlBKkFoYvR4eAEAjY9AVQ YhkpAHjG2iQxPrgrYe+X/qcJbpX/I/nj+Xk4uiSJysf7VKHzhIxsh4zmvbOL/CGB MyhN579mJu+i1/jCvy+eWyu5qzgWvX4= -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:12 2025 by rpki-client