$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json) Hash identifier: Gw/RUoiPbf+58zaa3o+Z2QEoaIUxRT4lIyp9hc6FqFw= Subject key identifier: 3A:AD:ED:28:2D:E4:F2:D0:CC:FB:FF:B0:6F:B0:39:91:CC:8A:6A:FF Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Certificate serial: 0F5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft Manifest number: 0F4F Signing time: Fri 22 Aug 2025 17:42:58 +0000 Manifest this update: Fri 22 Aug 2025 17:42:57 +0000 Manifest next update: Fri 29 Aug 2025 17:42:57 +0000 Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: zpjtt2AoDa81wtOF8TyBADdfKLjc0YzLIOTjtwRvZO8=) 2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: tn6ujwfx2fxOjVcWSqeXpg3bHl3JICdgt6OHucuWivU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3930 (0xf5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Validity Not Before: Aug 22 17:42:57 2025 GMT Not After : Aug 29 17:42:57 2025 GMT Subject: CN=68a8ac21-bbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c6:72:b9:f4:b2:94:39:b1:18:d7:0b:77:5e: 68:79:31:a4:49:5e:3c:9a:35:85:5b:e9:2c:e0:ad: 4b:54:1f:27:39:c3:23:41:f1:ae:86:60:30:53:74: 3b:91:c1:5e:5a:cb:96:b2:1f:16:5f:bf:b9:9e:ce: 0d:52:5e:a0:f1:d8:eb:93:f8:e1:2f:03:3e:8c:86: a7:e1:55:68:18:cf:df:ac:36:fd:7f:90:81:8a:f9: d6:5c:0d:f4:15:21:f1:5b:70:49:87:a5:26:97:71: 8f:11:bb:5b:86:9a:c2:c8:b1:2a:c4:b7:2c:e1:53: 83:1a:96:fe:26:d4:8a:71:d5:c5:ee:5b:63:28:2d: b3:a6:00:57:fb:7e:73:68:4b:c6:29:50:13:ba:7b: 58:80:c9:5b:b8:15:d8:98:e3:70:a2:b0:70:cf:2a: ae:f4:39:d4:d9:1c:58:30:2d:79:89:e7:54:9d:7e: 59:43:0c:5f:17:fb:8c:78:6e:d4:ea:b8:fe:b7:f1: 94:bc:ab:fa:22:51:0c:99:26:78:76:09:ee:3b:88: 30:f3:2d:63:52:a3:4c:9b:9f:48:75:3e:cc:e1:f7: b0:8c:38:21:82:21:f5:cd:8d:ca:87:cf:48:58:03: 6c:45:c8:1d:b3:5a:f2:91:9c:fb:c3:68:27:78:84: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AD:ED:28:2D:E4:F2:D0:CC:FB:FF:B0:6F:B0:39:91:CC:8A:6A:FF X509v3 Authority Key Identifier: keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:44:ee:9d:30:23:9b:42:62:2b:c9:79:f5:0a:bc:be:ff:7c: 41:d3:93:6e:18:18:2a:67:57:06:12:10:0a:eb:3e:d6:7c:bb: 95:6f:6c:76:85:67:ba:e6:8f:aa:78:4f:6d:1c:30:51:f8:69: 38:19:b5:ba:c2:60:ad:6b:d3:48:6a:60:98:c2:52:2a:47:a9: e9:d2:75:66:f4:51:95:42:f9:05:02:0a:dc:f8:b7:c7:87:66: 82:71:a3:c1:7e:0f:b6:f0:c2:35:73:8e:f6:1d:f5:3f:f6:27: cb:2d:2d:28:c0:dd:a5:dc:bd:fd:b0:bb:fe:da:1a:8e:e5:07: 45:a3:a8:37:b8:6d:af:9b:ec:bd:61:6c:62:47:55:ae:6c:90: 99:94:55:54:01:f1:c7:4b:42:ee:b2:87:b4:f9:04:bc:28:61: d1:8a:ee:2c:cd:f7:7a:fb:71:47:10:08:8f:7f:17:42:03:61: 6f:4f:b7:c5:91:0e:5f:ae:8c:87:18:69:f0:05:0a:a0:4b:3c: 28:ba:9b:8e:ad:ac:f3:5d:96:90:e5:c7:ce:6f:9f:73:4b:bf: 0a:28:68:8a:d2:79:34:b8:5a:2d:2a:d0:fb:14:ce:17:4b:5c: 18:33:57:a8:c6:62:1c:5e:88:80:01:a9:43:ad:a8:11:7a:95: 11:6f:d6:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4 ODYxRkRDRTAwHhcNMjUwODIyMTc0MjU3WhcNMjUwODI5MTc0MjU3WjAYMRYwFAYD VQQDEw02OGE4YWMyMS1iYmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08ZyufSylDmxGNcLd15oeTGkSV48mjWFW+ks4K1LVB8nOcMjQfGuhmAwU3Q7 kcFeWsuWsh8WX7+5ns4NUl6g8djrk/jhLwM+jIan4VVoGM/frDb9f5CBivnWXA30 FSHxW3BJh6Uml3GPEbtbhprCyLEqxLcs4VODGpb+JtSKcdXF7ltjKC2zpgBX+35z aEvGKVATuntYgMlbuBXYmONworBwzyqu9DnU2RxYMC15iedUnX5ZQwxfF/uMeG7U 6rj+t/GUvKv6IlEMmSZ4dgnuO4gw8y1jUqNMm59IdT7M4fewjDghgiH1zY3Kh89I WANsRcgds1rykZz7w2gneITgRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqt7Sgt 5PLQzPv/sG+wOZHMimr/MB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2 NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dG T1pzLUdxWllfQVdJWWYzT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQRO6dMCObQmIryXn1Cry+/3xB05NuGBgqZ1cGEhAK6z7WfLuVb2x2 hWe65o+qeE9tHDBR+Gk4GbW6wmCta9NIamCYwlIqR6np0nVm9FGVQvkFAgrc+LfH h2aCcaPBfg+28MI1c472HfU/9ifLLS0owN2l3L39sLv+2hqO5QdFo6g3uG2vm+y9 YWxiR1WubJCZlFVUAfHHS0Lusoe0+QS8KGHRiu4szfd6+3FHEAiPfxdCA2FvT7fF kQ5froyHGGnwBQqgSzwoupuOrazzXZaQ5cfOb59zS78KKGiK0nk0uFotKtD7FM4X S1wYM1eoxmIcXoiAAalDragRepURb9bJ -----END CERTIFICATE-----Generated at Sat Aug 23 13:45:01 2025 by rpki-client