$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: CHPwV/WjTOebo4nYvhLLQKybB7HvyrrMr6qO1C1FMf4= Subject key identifier: 16:57:DF:73:2C:B0:0C:72:08:17:DE:BB:EB:1C:D0:3F:A9:97:3E:72 Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 09C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 09A9 Signing time: Fri 22 Aug 2025 20:12:21 +0000 Manifest this update: Fri 22 Aug 2025 20:12:21 +0000 Manifest next update: Fri 29 Aug 2025 20:12:21 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: Vyznka+Pdfk3wJu235Wz8gt2xzUoAlU+EwUsbxBT/lQ=) 2: 4B31BDC4B76911ED8A503224C4F9AE02.roa (hash: l0BRfiLqHQsOV1ADKIbKK5vOrt/xeo6mhndQAShwIN8=) 3: 40B06CCA7B9211F0A37F2569C4F9AE02.roa (hash: sDE+2l74VRTVEIFQRJ16IbeWMarcNcShVIDfelUZ7B8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Aug 22 20:12:21 2025 GMT Not After : Aug 29 20:12:21 2025 GMT Subject: CN=68a8cf25-6903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c3:12:b2:7a:64:b8:21:a2:18:25:7e:d0:96: 7e:78:00:ba:78:e5:c2:b8:6c:fe:f9:5b:ab:55:39: e2:87:6d:21:e4:e6:59:61:80:c0:b0:24:36:e9:96: 3d:e3:b9:02:21:26:cd:93:69:d0:55:da:91:8a:ce: 3c:b2:e4:d4:00:99:eb:1a:78:3d:34:45:d6:e4:2f: 91:e9:ba:7c:d4:f9:cb:3e:20:a1:70:ae:f9:85:f8: a2:99:fe:9a:e7:a8:be:6b:37:3e:9a:66:da:1b:1a: 8a:0f:55:32:84:15:a6:f2:fc:77:ec:d0:fe:6b:e2: 86:cd:14:f0:1e:60:56:e1:9e:95:25:d5:4d:1b:f3: 50:ea:5d:50:64:f4:ac:59:17:0a:10:a8:4f:b4:98: 2f:0c:d6:6b:79:c9:7d:86:ae:b5:73:71:95:49:a5: de:82:69:e5:11:a0:f0:6b:f2:f5:cd:6f:e9:7d:f6: 44:e6:61:fb:45:75:c9:79:ba:d0:b2:b4:57:bb:d4: 08:53:c0:a3:5a:ab:38:27:74:39:28:19:61:4c:53: 9d:ef:3f:5e:f3:f5:7e:fe:18:29:9c:9b:67:82:ed: f6:f3:ce:c3:92:98:7e:06:de:6d:76:53:2e:04:d6: 1b:d2:65:0e:f8:c5:11:36:ce:61:13:ba:4c:6f:60: 4f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:57:DF:73:2C:B0:0C:72:08:17:DE:BB:EB:1C:D0:3F:A9:97:3E:72 X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:8e:33:ff:6c:0c:6c:da:87:53:45:0a:d9:78:f8:83:88:d9: 60:f4:e2:2d:6c:62:cd:bd:a0:57:a8:07:06:fc:c4:0b:93:28: fd:fc:20:75:b6:cc:a4:b7:58:72:e1:88:9d:5b:7d:0d:a3:83: 03:1d:f6:c2:09:65:04:47:d8:7f:e9:e8:de:82:85:dc:fc:cf: ca:46:e0:93:a6:49:84:5a:9b:9e:5a:4c:b3:14:e1:e6:d9:1d: 1b:43:78:94:2a:0a:d6:6b:24:b7:22:48:54:02:c3:ab:96:16: 5b:64:07:68:ad:9a:9b:b5:5b:2e:c2:12:e3:ef:42:e4:db:a6: c1:38:8e:9e:56:3c:ce:e1:37:72:20:f6:a1:20:00:17:3f:a4: f6:51:51:8d:31:dd:c8:7b:3c:d8:be:81:72:3e:35:90:29:22: fc:0d:44:90:75:3d:88:5d:b3:01:c2:46:72:cc:87:eb:7a:02: 5c:05:08:3e:3d:36:69:13:86:41:d7:ef:38:1c:82:55:29:4e: 1d:13:e1:de:d5:b3:14:c0:dc:11:3b:12:58:87:be:96:9d:47: 71:0a:5d:0d:08:1d:58:ed:19:2b:c7:66:c2:82:d8:09:07:4a: 6d:8b:26:38:a5:a0:9f:4e:3f:46:83:c4:f9:a5:9a:3f:59:df: e6:d8:4e:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUwODIyMjAxMjIxWhcNMjUwODI5MjAxMjIxWjAYMRYwFAYD VQQDEw02OGE4Y2YyNS02OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38MSsnpkuCGiGCV+0JZ+eAC6eOXCuGz++VurVTnih20h5OZZYYDAsCQ26ZY9 47kCISbNk2nQVdqRis48suTUAJnrGng9NEXW5C+R6bp81PnLPiChcK75hfiimf6a 56i+azc+mmbaGxqKD1UyhBWm8vx37ND+a+KGzRTwHmBW4Z6VJdVNG/NQ6l1QZPSs WRcKEKhPtJgvDNZrecl9hq61c3GVSaXegmnlEaDwa/L1zW/pffZE5mH7RXXJebrQ srRXu9QIU8CjWqs4J3Q5KBlhTFOd7z9e8/V+/hgpnJtngu32887Dkph+Bt5tdlMu BNYb0mUO+MURNs5hE7pMb2BPKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZX33Ms sAxyCBfeu+sc0D+plz5yMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYjjP/bAxs2odTRQrZePiDiNlg9OItbGLNvaBXqAcG/MQLkyj9/CB1 tsykt1hy4YidW30No4MDHfbCCWUER9h/6ejegoXc/M/KRuCTpkmEWpueWkyzFOHm 2R0bQ3iUKgrWayS3IkhUAsOrlhZbZAdorZqbtVsuwhLj70Lk26bBOI6eVjzO4Tdy IPahIAAXP6T2UVGNMd3IezzYvoFyPjWQKSL8DUSQdT2IXbMBwkZyzIfregJcBQg+ PTZpE4ZB1+84HIJVKU4dE+He1bMUwNwROxJYh76WnUdxCl0NCB1Y7Rkrx2bCgtgJ B0ptiyY4paCfTj9Gg8T5pZo/Wd/m2E6t -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:30 2025 by rpki-client