$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: uCXSJ7QBmGEPh19TkgG0vZ3HUDOLorgBICLSe9boeCU= Subject key identifier: 9B:72:AC:CE:41:D0:46:9F:4E:94:42:0B:3F:D1:09:9D:6E:A6:0E:0F Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 060F Signing time: Fri 22 Aug 2025 23:06:13 +0000 Manifest this update: Fri 22 Aug 2025 23:06:13 +0000 Manifest next update: Fri 29 Aug 2025 23:06:13 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: Gm93JV9JuB7dfUelS4Qg2Mj96H1+z29/5JP8A414ur0=) 2: C9BA671C3A2611F0908A2B20C4F9AE02.roa (hash: hAsOFqLGhlXPlJQqq8o+TJ1lqU96PHU1fRQ8ll9kM1c=) 3: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: RAzhHtW1VH/eUjgZQiEsm0Ej6j+0F6PlwpjTpjOi8Jo=) 4: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: EkzwfsPvhq1FP6pm5CT4LDCnqWr4szU6ESASOp0o6DU=) 5: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: RB6HB76Hd37I1Qyua/UNLhe473Y5QaFhWKPCNvGT+Jc=) 6: DBF856463A3011F0B0C6F437C4F9AE02.roa (hash: 3y3NqdGA4Yb7KDxIbZnutCZORNmNgdB027E2G7UT98A=) 7: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: 1YFs0Zqq59OdTTfQ9TRBhg+ye+627iyYVeuBlex3Kfk=) 8: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: ehyJGIeBDK390bSFLx2HamOEcgKmw6zu6VhcLaVRD/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Validity Not Before: Aug 22 23:06:13 2025 GMT Not After : Aug 29 23:06:13 2025 GMT Subject: CN=68a8f7e5-0366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:51:d8:c1:f2:52:09:30:e0:88:1d:79:6e: b0:e5:90:f9:0b:6d:70:90:81:f3:58:dc:9c:b3:04: 8d:92:b1:f4:78:ec:59:3b:84:bc:0b:71:26:75:89: 8e:cf:c2:b5:75:eb:37:e4:39:51:df:fd:68:8a:1b: fc:7d:d4:eb:48:86:c3:da:e7:0c:b0:1c:b0:2f:89: 49:19:1c:18:68:06:73:cd:81:c2:76:6f:81:cd:d8: 04:e2:56:2b:df:7b:e5:6a:50:0b:85:f1:e5:60:34: 22:ac:2b:e6:01:e6:5b:6d:c0:66:cb:4d:11:10:b6: a3:ac:e6:e6:bd:a7:ee:ac:2c:6d:5f:72:ae:5a:e8: 28:0a:d6:bf:e9:31:b2:42:bb:1c:c5:09:fc:d3:fb: 87:8b:f6:18:8f:58:45:dc:54:95:bb:2f:8b:3f:70: f9:79:93:6f:d8:ac:2e:e5:23:d0:db:03:3c:4d:28: bb:18:72:5c:c3:ef:02:d2:51:f9:e3:7d:3b:50:f0: 84:8c:41:65:b1:79:cb:2a:2e:71:55:64:78:89:ae: 54:25:d6:52:3d:02:13:10:34:e8:bf:50:b5:06:bc: af:ee:ec:50:fa:4e:e1:db:4b:ad:13:c3:aa:cf:ae: 75:9e:b1:71:47:c4:c5:43:e8:77:6a:8d:cd:fc:2e: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:72:AC:CE:41:D0:46:9F:4E:94:42:0B:3F:D1:09:9D:6E:A6:0E:0F X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7c:70:8e:ab:ed:33:b8:fd:25:75:ea:47:9f:dc:0e:98:ab: 8b:24:01:7c:a1:81:b8:03:5c:57:1d:c1:73:93:4f:c9:e7:43: b4:01:1b:7b:c7:ce:d4:78:43:33:04:3a:fc:47:5a:e3:71:6d: 75:fb:49:b3:75:b5:40:3e:42:0c:06:b6:ac:cc:f9:ed:31:3e: 11:de:d6:cc:d9:40:ca:9e:20:c4:2b:f3:b0:8e:66:dd:a5:4e: df:71:0d:0f:4c:39:62:f7:47:4d:7e:85:61:4a:03:85:7b:c5: d3:08:e6:a8:b2:7c:e6:20:64:01:84:b5:73:4f:05:05:cc:cb: b7:f5:3d:70:38:c7:be:d3:7d:52:b4:01:06:97:21:32:54:8c: 4d:6a:79:52:b9:58:45:b8:d3:74:7f:c0:ff:28:0d:e3:86:b8: e0:98:25:1b:29:e6:10:2b:07:49:4f:92:ae:e6:b0:4c:45:67: 78:fb:66:f3:be:80:51:0a:2f:1e:b8:f5:43:c4:50:eb:eb:4d: c9:ef:52:50:54:2f:5e:d8:cc:04:3a:0d:f5:80:13:ac:af:c2: 97:66:20:6b:c7:6d:2d:58:46:64:4b:4a:4e:eb:ce:81:64:94: f1:17:16:62:fd:c9:34:0c:b4:e4:27:bb:e5:d1:de:ea:a9:17: cb:06:23:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUwODIyMjMwNjEzWhcNMjUwODI5MjMwNjEzWjAYMRYwFAYD VQQDEw02OGE4ZjdlNS0wMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhtR2MHyUgkw4IgdeW6w5ZD5C21wkIHzWNycswSNkrH0eOxZO4S8C3EmdYmO z8K1des35DlR3/1oihv8fdTrSIbD2ucMsBywL4lJGRwYaAZzzYHCdm+BzdgE4lYr 33vlalALhfHlYDQirCvmAeZbbcBmy00RELajrObmvafurCxtX3KuWugoCta/6TGy QrscxQn80/uHi/YYj1hF3FSVuy+LP3D5eZNv2Kwu5SPQ2wM8TSi7GHJcw+8C0lH5 4307UPCEjEFlsXnLKi5xVWR4ia5UJdZSPQITEDTov1C1Bryv7uxQ+k7h20utE8Oq z651nrFxR8TFQ+h3ao3N/C6KkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtyrM5B 0EafTpRCCz/RCZ1upg4PMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCufHCOq+0zuP0ldepHn9wOmKuLJAF8oYG4A1xXHcFzk0/J50O0ARt7 x87UeEMzBDr8R1rjcW11+0mzdbVAPkIMBraszPntMT4R3tbM2UDKniDEK/Owjmbd pU7fcQ0PTDli90dNfoVhSgOFe8XTCOaosnzmIGQBhLVzTwUFzMu39T1wOMe+031S tAEGlyEyVIxNanlSuVhFuNN0f8D/KA3jhrjgmCUbKeYQKwdJT5Ku5rBMRWd4+2bz voBRCi8euPVDxFDr603J71JQVC9e2MwEOg31gBOsr8KXZiBrx20tWEZkS0pO686B ZJTxFxZi/ck0DLTkJ7vl0d7qqRfLBiOH -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:30 2025 by rpki-client