$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft File: -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json) Hash identifier: gjLs8JKiZPovdg2izl0R55FR8ASBsyUS5xxM8ur4IYw= Subject key identifier: AE:26:13:ED:E5:9C:13:97:CA:83:B5:6C:1A:BB:3B:D8:37:BC:87:62 Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft Manifest number: 01AC Signing time: Sat 23 Aug 2025 03:18:54 +0000 Manifest this update: Sat 23 Aug 2025 03:18:53 +0000 Manifest next update: Sat 30 Aug 2025 03:18:53 +0000 Files and hashes: 1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: EhZ9X+DwXPgUzhijMQFNHwCW3aaREpwLHGVi8ZznDzw=) 2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: RiSzecgrf2L+I7okqYMacDikMwDpRb3b5jlgRjgQGAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Validity Not Before: Aug 23 03:18:53 2025 GMT Not After : Aug 30 03:18:53 2025 GMT Subject: CN=68a9331d-3e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:dd:75:12:b3:db:76:d5:84:11:4b:ec:77: 31:54:00:23:20:00:29:f9:48:73:10:a3:72:e9:12: 36:14:55:6c:59:fc:37:d9:d7:69:bb:5f:b2:9e:99: 9a:b0:04:a2:a2:2a:e0:27:0c:10:9c:31:38:25:c0: be:7c:36:30:ef:64:cd:10:6b:07:97:8e:a6:b9:9a: 47:24:a7:55:0b:57:be:73:e7:d9:99:ec:5d:ae:92: 62:31:f2:16:de:37:c8:48:3a:74:75:23:72:96:60: a4:96:b9:e2:25:c2:aa:67:ca:8d:34:15:3b:8d:2b: 85:a7:94:42:5b:f9:76:7f:82:35:08:73:d0:86:42: d5:dc:b7:20:e8:83:99:9a:95:d5:81:00:d6:5c:29: 2f:31:e3:10:51:c6:81:d6:4c:cb:d3:4d:08:c6:2a: f5:28:d8:a0:96:63:9f:7d:24:1a:99:1a:a9:03:0b: 0e:8d:8d:ea:19:e1:fc:00:21:21:5f:af:1d:12:15: 0b:49:93:10:c7:ba:90:6a:11:26:c1:31:4a:b6:20: a1:10:28:d7:31:52:ec:6a:67:09:5a:7c:4c:db:be: 24:2d:15:99:fe:41:11:bf:e0:13:61:8c:1b:ed:d2: f3:89:a4:29:58:3a:16:0d:69:ce:19:93:d1:31:88: 07:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:26:13:ED:E5:9C:13:97:CA:83:B5:6C:1A:BB:3B:D8:37:BC:87:62 X509v3 Authority Key Identifier: keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:95:6f:2f:19:4d:83:57:2e:95:61:13:5b:42:22:90:9b:b1: f8:bd:e3:5c:43:41:b1:40:91:14:67:52:d6:ae:4b:16:7c:92: 0d:89:47:0b:8d:fd:f9:d8:df:5f:f1:30:67:97:56:c3:e4:81: 46:11:e0:b3:60:3f:2a:52:bb:23:d0:02:d3:82:e9:4f:e8:04: 2e:3d:c4:84:05:f1:19:ae:01:c5:99:12:60:fc:69:49:4f:25: 62:3d:85:62:a0:63:83:c7:73:fe:d7:bf:6c:6a:6d:c4:98:a7: df:9f:19:7b:0a:89:76:13:72:17:1a:2b:3d:da:a3:42:49:d2: d8:b6:7c:3c:20:c9:11:3c:7b:40:f8:1b:9f:5d:ec:0e:c7:dd: 3f:7c:a2:56:e9:f2:17:61:f8:6c:05:25:c9:94:e1:de:f7:4e: d1:b8:5d:79:18:47:c5:02:85:1e:41:d5:ca:31:9c:2d:5e:41: 7d:2c:35:bb:58:ba:ed:8f:a1:49:b1:52:25:ff:c1:52:54:a0: 56:1c:69:31:90:ba:1f:a4:fd:e1:fb:19:4d:da:f1:56:ac:36: 3b:e0:31:95:6c:28:15:ce:a1:00:67:71:d9:8c:5e:c3:e6:68: c4:0d:78:54:89:49:ee:b5:f1:69:52:4c:cc:30:79:03:cc:d4: f3:7c:2e:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMkExMTAvBgNVBAUTKEZBRTIxNDE0RDExM0RCNzhENTRGRUFCQTFCNjA2Rjg1 NEEyNDBCRDEwHhcNMjUwODIzMDMxODUzWhcNMjUwODMwMDMxODUzWjAYMRYwFAYD VQQDEw02OGE5MzMxZC0zZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7PddRKz23bVhBFL7HcxVAAjIAAp+UhzEKNy6RI2FFVsWfw32ddpu1+ynpma sASioirgJwwQnDE4JcC+fDYw72TNEGsHl46muZpHJKdVC1e+c+fZmexdrpJiMfIW 3jfISDp0dSNylmCklrniJcKqZ8qNNBU7jSuFp5RCW/l2f4I1CHPQhkLV3Lcg6IOZ mpXVgQDWXCkvMeMQUcaB1kzL000Ixir1KNiglmOffSQamRqpAwsOjY3qGeH8ACEh X68dEhULSZMQx7qQahEmwTFKtiChECjXMVLsamcJWnxM274kLRWZ/kERv+ATYYwb 7dLziaQpWDoWDWnOGZPRMYgHBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4mE+3l nBOXyoO1bBq7O9g3vIdiMB8GA1UdIwQYMBaAFPriFBTRE9t41U/quhtgb4VKJAvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEyQS8xNDc3MTFCMkYz QkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIzalZULXE2RzJCdmhVb2tD OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11SVVGTkVUMjNqVlQtcTZHMkJ2aFVva0M5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEyQS8xNDc3MTFCMkYzQkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIz alZULXE2RzJCdmhVb2tDOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMlW8vGU2DVy6VYRNbQiKQm7H4veNcQ0GxQJEUZ1LWrksWfJINiUcL jf352N9f8TBnl1bD5IFGEeCzYD8qUrsj0ALTgulP6AQuPcSEBfEZrgHFmRJg/GlJ TyViPYVioGODx3P+179sam3EmKffnxl7Col2E3IXGis92qNCSdLYtnw8IMkRPHtA +BufXewOx90/fKJW6fIXYfhsBSXJlOHe907RuF15GEfFAoUeQdXKMZwtXkF9LDW7 WLrtj6FJsVIl/8FSVKBWHGkxkLofpP3h+xlN2vFWrDY74DGVbCgVzqEAZ3HZjF7D 5mjEDXhUiUnutfFpUkzMMHkDzNTzfC59 -----END CERTIFICATE-----Generated at Sat Aug 23 16:43:43 2025 by rpki-client