$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft File: UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft (raw, json) Hash identifier: RheX5NooI3nCqJjLNZr7bHAz+tF6ca7zopGtPbISBdY= Subject key identifier: 6E:55:CB:F1:7F:1D:BB:1A:FA:BC:DF:1B:58:A6:CB:33:B8:7A:BB:38 Authority key identifier: 51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5 Certificate issuer: /CN=A91BA8F5/serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5 Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft Manifest number: 0398 Signing time: Sat 05 Jul 2025 01:20:14 +0000 Manifest this update: Sat 05 Jul 2025 01:20:14 +0000 Manifest next update: Sat 12 Jul 2025 01:20:14 +0000 Files and hashes: 1: UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl (hash: LrRTRjYpDKdloEPFvl/GpfFwuC2iItJWL6oh95noswQ=) 2: 713001A0A35811EC88C42869C4F9AE02.roa (hash: DNm/cKBnOwMLtVf8PNiul90A2LNN5D/9x28AaUpSyDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA8F5, serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5 Validity Not Before: Jul 5 01:20:14 2025 GMT Not After : Jul 12 01:20:14 2025 GMT Subject: CN=68687dce-5414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:9b:56:ba:60:ad:62:8a:ff:43:cf:18:09: 92:d3:a3:69:87:58:85:22:58:61:6a:7b:75:69:69: c7:84:7b:49:9f:63:e9:9e:f3:05:88:7a:a2:e4:70: 12:b7:1e:89:0d:a9:fe:43:ee:3f:4b:cc:0a:e6:89: f0:36:12:21:2a:92:b8:0b:5c:ea:ad:e6:07:4f:14: bf:06:d3:55:72:17:3c:ff:63:a9:10:e7:34:1a:e8: 76:1f:3c:11:3c:bb:33:e2:c4:07:d0:19:e3:fe:64: 39:89:48:21:11:c6:f7:7d:08:d8:c0:2b:89:fb:c9: 4e:1f:49:12:d9:28:99:e0:24:bb:8b:2f:6d:d2:28: 75:50:1f:f0:b2:84:8a:67:af:d5:d0:8d:d5:0b:44: 96:f9:1d:c6:de:0d:3b:cd:fe:ed:ed:91:0a:3a:b8: 41:e8:b6:a5:6b:e7:b9:56:b6:a4:42:18:d8:26:07: 80:fb:39:72:4a:a2:75:f3:2b:7b:c0:50:01:de:f5: a2:06:a4:cf:4b:ed:be:bd:0d:4a:ec:da:02:b8:ae: 06:e5:e2:cd:13:3f:2d:e1:84:88:7a:b1:5e:07:40: 7e:83:19:a5:8e:8c:8d:f3:3d:01:37:b1:15:b5:6d: 4d:4f:b4:af:bf:58:bd:e6:c0:9c:de:ac:63:18:3b: 97:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:55:CB:F1:7F:1D:BB:1A:FA:BC:DF:1B:58:A6:CB:33:B8:7A:BB:38 X509v3 Authority Key Identifier: keyid:51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:41:ff:78:8e:07:51:f2:c1:27:a9:ef:3e:a7:d6:a3:bd:65: 31:75:12:55:f2:93:35:ee:40:6e:be:47:5e:ea:9b:df:15:0a: 3f:45:75:9f:c1:34:df:ce:02:a8:5e:db:48:71:a6:14:c0:d8: c6:c5:87:08:2e:a0:17:70:4c:20:7a:58:d4:6b:42:86:e5:79: ce:c3:6c:af:56:94:4b:aa:a0:cb:55:5f:28:e5:5e:c6:f3:d9: 04:5c:1e:dc:fa:01:f9:21:aa:c2:c2:a6:35:5d:b4:89:ab:b6: 86:65:82:bd:56:0a:70:4b:7d:8b:5c:b6:64:00:f7:1b:d4:c7: 15:a9:8c:b9:2b:57:11:cb:ea:44:d4:2a:17:63:fc:35:4f:06: 3e:9e:dc:d4:6e:c2:55:3b:b3:6a:b2:f1:d0:68:c6:14:1e:fd: 1d:c9:e6:d8:14:38:05:26:ce:14:26:e0:f7:bc:1c:2c:44:bb: 95:c8:d8:62:2e:ab:34:fc:97:ef:72:99:2b:8c:7b:29:cf:1f: 51:b5:15:a6:8c:4d:5a:ac:34:cd:0a:26:35:97:79:01:b5:49: ad:ca:1c:f8:80:44:34:4d:43:1c:41:48:21:e9:15:d9:9f:82: 5d:56:64:29:1f:d0:df:df:34:7a:9a:c3:af:46:3f:a2:b9:6a: cf:de:4c:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE4RjUxMTAvBgNVBAUTKDUxRTA5NEMwNTdCRURBNzBBNEMyQjIwMDkxOTI4REU3 MjY0QjQ2QzUwHhcNMjUwNzA1MDEyMDE0WhcNMjUwNzEyMDEyMDE0WjAYMRYwFAYD VQQDEw02ODY4N2RjZS01NDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+WbVrpgrWKK/0PPGAmS06Nph1iFIlhhant1aWnHhHtJn2PpnvMFiHqi5HAS tx6JDan+Q+4/S8wK5onwNhIhKpK4C1zqreYHTxS/BtNVchc8/2OpEOc0Guh2HzwR PLsz4sQH0Bnj/mQ5iUghEcb3fQjYwCuJ+8lOH0kS2SiZ4CS7iy9t0ih1UB/wsoSK Z6/V0I3VC0SW+R3G3g07zf7t7ZEKOrhB6Lala+e5VrakQhjYJgeA+zlySqJ18yt7 wFAB3vWiBqTPS+2+vQ1K7NoCuK4G5eLNEz8t4YSIerFeB0B+gxmljoyN8z0BN7EV tW1NT7Svv1i95sCc3qxjGDuX4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5Vy/F/ Hbsa+rzfG1imyzO4ers4MB8GA1UdIwQYMBaAFFHglMBXvtpwpMKyAJGSjecmS0bF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQThGNS85NUFBMUVFQ0Ez NTUxMUVDODYxRkUxNjZDNEY5QUUwMi9VZUNVd0ZlLTJuQ2t3cklBa1pLTjV5WkxS c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VlQ1V3RmUtMm5Da3dySUFrWktONXlaTFJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QThGNS85NUFBMUVFQ0EzNTUxMUVDODYxRkUxNjZDNEY5QUUwMi9VZUNVd0ZlLTJu Q2t3cklBa1pLTjV5WkxSc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPQf94jgdR8sEnqe8+p9ajvWUxdRJV8pM17kBuvkde6pvfFQo/RXWf wTTfzgKoXttIcaYUwNjGxYcILqAXcEwgeljUa0KG5XnOw2yvVpRLqqDLVV8o5V7G 89kEXB7c+gH5IarCwqY1XbSJq7aGZYK9VgpwS32LXLZkAPcb1McVqYy5K1cRy+pE 1CoXY/w1TwY+ntzUbsJVO7NqsvHQaMYUHv0dyebYFDgFJs4UJuD3vBwsRLuVyNhi Lqs0/JfvcpkrjHspzx9RtRWmjE1arDTNCiY1l3kBtUmtyhz4gEQ0TUMcQUgh6RXZ n4JdVmQpH9Df3zR6msOvRj+iuWrP3kz9 -----END CERTIFICATE-----Generated at Sat Jul 5 11:02:11 2025 by rpki-client