$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: ZJdyshKY4wyfWHl1WJP4SYLp5JDFpdq0b54/I5keKjw= Subject key identifier: 6B:B3:FD:FF:B6:2B:71:E0:96:E6:9B:79:AE:F0:42:32:68:B7:D3:D6 Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0B13 Signing time: Fri 22 Aug 2025 19:29:09 +0000 Manifest this update: Fri 22 Aug 2025 19:29:09 +0000 Manifest next update: Fri 29 Aug 2025 19:29:09 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: ZLqKPV7qYb/pmBewtfdOlmtxOlv0E0zt0NzUd2171yU=) 2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: YSanlXPMFGlUc59onSU43QiRooXV0uHeNRhQl6sQvzs=) 3: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: EMIkCzah8q7OcQkgGcb8CJSovHyJ1MV1+D6g6V84DdU=) 4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: neskcJ2ryIraX5yGhHnDKoHimVr5nfZfeUgF/8p7xpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Aug 22 19:29:09 2025 GMT Not After : Aug 29 19:29:09 2025 GMT Subject: CN=68a8c505-18df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:89:0c:39:e7:04:67:ea:43:8e:e2:e0:8c: 69:da:67:8d:37:a7:9f:4d:d5:b8:ae:db:7a:8c:f2: 05:54:a6:dd:b6:a4:f8:d3:e8:62:d2:4b:cb:59:14: ad:80:58:da:a1:fb:5c:e5:16:6c:11:0a:f1:42:82: 05:6c:14:28:11:ff:84:1d:e1:59:9e:a2:73:65:85: cc:ed:f7:95:69:87:09:ea:a3:13:10:c4:b3:00:dc: 47:fa:bc:2a:8d:1a:83:cc:69:3a:bf:dd:5a:20:cb: ba:f9:5c:70:84:57:87:4b:4d:29:ba:c5:07:65:c3: 7c:06:b3:e8:15:1a:e2:80:15:6d:77:6b:d0:38:aa: 0a:ce:65:76:af:58:c7:3c:89:61:82:5c:13:94:08: b3:8f:f1:0b:bf:71:ba:c1:03:10:a5:85:9d:ac:a5: f6:68:5f:b8:11:70:dc:80:e7:cd:56:44:82:26:69: c6:83:46:3f:60:76:83:e0:cf:00:b9:29:16:87:e5: d4:1d:8d:f8:33:97:b3:2a:10:4a:c4:ed:4e:2e:3f: 92:16:5d:14:b3:32:22:e8:12:ab:2d:c2:db:5f:0d: 3a:c3:f7:0d:69:25:5f:d1:12:e7:20:ae:46:28:7b: e9:9f:6e:71:87:ad:7e:99:54:ea:c9:f1:9f:a1:a3: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B3:FD:FF:B6:2B:71:E0:96:E6:9B:79:AE:F0:42:32:68:B7:D3:D6 X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:43:40:5d:66:d9:94:f0:ca:fe:15:d3:bb:60:c8:da:6d:df: da:bc:e1:17:bf:90:87:13:de:6e:f4:9d:44:10:9e:26:15:6b: cd:00:e0:25:25:7c:95:77:32:cd:b6:dc:04:9e:38:db:1d:68: c4:26:8c:4a:4e:50:77:f6:0d:a4:48:98:10:38:0b:9b:1e:0f: 1c:90:9a:16:81:98:b7:5d:f2:7c:c2:19:c9:66:8e:d7:33:d7: 92:d8:b5:31:65:95:bb:f6:e6:1b:19:ac:8d:85:7e:cc:31:ed: b8:f1:41:23:dd:b8:e2:15:14:9f:99:f2:d6:da:88:b4:a8:47: 58:94:0e:c3:f2:84:4f:60:95:1d:d6:3e:d8:ad:02:3d:5e:61: 08:af:24:a4:fb:49:70:ed:05:99:3d:0d:41:c1:2b:ba:46:53: 6c:0c:25:43:87:3a:6c:b2:8e:f3:de:57:d2:82:62:f8:73:cc: e5:2f:3d:de:3e:e8:b0:55:63:0f:aa:06:b2:4b:e7:81:05:13: 6f:ee:ca:37:7c:6d:ad:8c:9d:e2:78:bd:69:8e:30:dc:d9:90: d8:0b:5b:14:db:e7:0f:21:fe:33:86:e8:ce:da:b9:86:f1:8c: 98:c8:5c:dc:45:27:ef:26:fb:80:a1:fd:8f:bc:d7:dc:11:46: 85:dd:8f:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjUwODIyMTkyOTA5WhcNMjUwODI5MTkyOTA5WjAYMRYwFAYD VQQDEw02OGE4YzUwNS0xOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQCJDDnnBGfqQ47i4Ixp2meNN6efTdW4rtt6jPIFVKbdtqT40+hi0kvLWRSt gFjaoftc5RZsEQrxQoIFbBQoEf+EHeFZnqJzZYXM7feVaYcJ6qMTEMSzANxH+rwq jRqDzGk6v91aIMu6+VxwhFeHS00pusUHZcN8BrPoFRrigBVtd2vQOKoKzmV2r1jH PIlhglwTlAizj/ELv3G6wQMQpYWdrKX2aF+4EXDcgOfNVkSCJmnGg0Y/YHaD4M8A uSkWh+XUHY34M5ezKhBKxO1OLj+SFl0UszIi6BKrLcLbXw06w/cNaSVf0RLnIK5G KHvpn25xh61+mVTqyfGfoaNBkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuz/f+2 K3Hgluabea7wQjJot9PWMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCQ0BdZtmU8Mr+FdO7YMjabd/avOEXv5CHE95u9J1EEJ4mFWvNAOAl JXyVdzLNttwEnjjbHWjEJoxKTlB39g2kSJgQOAubHg8ckJoWgZi3XfJ8whnJZo7X M9eS2LUxZZW79uYbGayNhX7MMe248UEj3bjiFRSfmfLW2oi0qEdYlA7D8oRPYJUd 1j7YrQI9XmEIrySk+0lw7QWZPQ1BwSu6RlNsDCVDhzpsso7z3lfSgmL4c8zlLz3e PuiwVWMPqgayS+eBBRNv7so3fG2tjJ3ieL1pjjDc2ZDYC1sU2+cPIf4zhujO2rmG 8YyYyFzcRSfvJvuAof2PvNfcEUaF3Y8Z -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:19 2025 by rpki-client