$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft File: uLVa9atmqP-naRykPaKmtJuiRUA.mft (raw, json) Hash identifier: zHDGjePnrjIWQxOQBhiXgD/qk++GOxXRajCBgE/irAI= Subject key identifier: A9:AF:1F:0B:15:B1:53:F7:C1:A5:85:0D:0D:E4:75:A3:51:83:7F:F7 Authority key identifier: B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40 Certificate issuer: /CN=A91C5778/serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540 Certificate serial: 0C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft Manifest number: 0C1C Signing time: Fri 22 Aug 2025 18:49:38 +0000 Manifest this update: Fri 22 Aug 2025 18:49:37 +0000 Manifest next update: Fri 29 Aug 2025 18:49:37 +0000 Files and hashes: 1: uLVa9atmqP-naRykPaKmtJuiRUA.crl (hash: 3Y+TLvezazeb0fPOYXgRg+L0hDp6EBXd/aeMofLi0PY=) 2: B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa (hash: cmHL+jcXVZxk1ExKQVL6FlfnXQXFN7c8jdKbgylZ/70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5778, serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540 Validity Not Before: Aug 22 18:49:37 2025 GMT Not After : Aug 29 18:49:37 2025 GMT Subject: CN=68a8bbc2-9050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:8c:7c:1f:21:6e:68:a0:64:32:b3:65:63: d3:36:0d:ee:f8:96:67:bf:ca:f3:91:87:3f:91:5a: 1a:ad:27:bd:4f:ab:c9:90:94:36:e2:62:5a:50:d2: 55:cd:f5:4a:34:bb:8a:54:dc:ab:be:2c:cd:c2:bb: 38:fd:f1:48:b4:7a:23:b0:75:46:27:cb:18:c4:52: 9b:37:07:f1:ef:8a:db:ce:2e:a6:1d:9f:73:4c:25: 36:fa:0b:9c:90:9d:12:9d:f5:42:64:a9:06:5b:10: c6:c0:a1:11:0a:ee:10:a9:18:4a:e1:d2:bf:45:ba: 93:0f:46:08:7b:58:b9:d6:80:4c:e0:27:57:bb:5d: 4f:dc:5a:a2:a8:ad:95:97:8f:ce:04:5c:43:80:03: e6:f9:e3:d4:54:cd:48:82:25:48:36:d5:fe:c0:e4: f6:71:a1:53:17:2c:77:19:9e:8e:b2:cf:c8:83:fa: 0e:88:65:21:ba:8c:de:bf:da:02:ce:1e:70:18:d0: 30:bf:9e:07:ae:91:7b:69:28:5c:5f:cf:e2:5f:2f: 13:e0:03:33:8a:9a:1e:9d:67:66:f1:d3:ac:df:eb: 70:d7:ec:7b:58:79:2b:64:37:55:e8:d4:fa:22:c3: b1:9c:4d:48:50:a2:df:e9:f3:fc:9f:c9:89:07:fa: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AF:1F:0B:15:B1:53:F7:C1:A5:85:0D:0D:E4:75:A3:51:83:7F:F7 X509v3 Authority Key Identifier: keyid:B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fc:a9:e9:5e:fe:8d:ff:22:d9:b7:a1:f3:ef:2f:36:0a:6a: eb:1d:43:bf:39:20:f4:2d:4b:f2:c8:a7:85:15:05:ed:af:26: 4f:04:39:e9:f3:7d:52:28:00:29:bb:9d:12:f7:07:f0:3d:19: 6f:91:23:78:4d:08:cb:08:76:35:42:e9:f0:bd:ef:3a:f6:d0: 9f:e0:28:09:7e:dc:dc:2b:e5:88:65:d0:6d:3c:d6:f9:cb:ed: da:f1:42:d7:9c:b3:3a:d2:0b:34:a7:ac:9b:46:c4:40:29:e4: d1:2a:8e:f2:19:d8:92:ba:35:95:7d:7b:03:54:4c:7e:13:1b: d6:e5:30:e1:54:27:a4:ba:fe:f6:f0:a0:33:e4:d3:5b:b5:18: ff:6a:b0:cf:14:7d:c2:5b:4d:9b:89:66:17:d5:3e:67:8d:1c: c8:96:9c:b3:92:33:9d:d5:ab:93:54:74:3a:4d:ae:f6:e1:08: 09:31:0d:25:26:d0:ac:37:1f:e4:be:35:2f:b4:6a:7d:da:f8: a2:67:ea:20:cf:06:da:32:dd:37:f3:df:d5:a6:ec:1d:6b:26: 30:74:60:fa:cd:0d:11:86:8b:ad:82:cd:f8:7d:67:a7:a1:69: 3a:9a:78:51:74:7e:c9:6f:70:01:41:9e:0d:14:8d:05:cf:85: a3:a7:a5:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3NzgxMTAvBgNVBAUTKEI4QjU1QUY1QUI2NkE4RkZBNzY5MUNBNDNEQTJBNkI0 OUJBMjQ1NDAwHhcNMjUwODIyMTg0OTM3WhcNMjUwODI5MTg0OTM3WjAYMRYwFAYD VQQDEw02OGE4YmJjMi05MDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOGMfB8hbmigZDKzZWPTNg3u+JZnv8rzkYc/kVoarSe9T6vJkJQ24mJaUNJV zfVKNLuKVNyrvizNwrs4/fFItHojsHVGJ8sYxFKbNwfx74rbzi6mHZ9zTCU2+guc kJ0SnfVCZKkGWxDGwKERCu4QqRhK4dK/RbqTD0YIe1i51oBM4CdXu11P3FqiqK2V l4/OBFxDgAPm+ePUVM1IgiVINtX+wOT2caFTFyx3GZ6Oss/Ig/oOiGUhuozev9oC zh5wGNAwv54HrpF7aShcX8/iXy8T4AMzipoenWdm8dOs3+tw1+x7WHkrZDdV6NT6 IsOxnE1IUKLf6fP8n8mJB/rxvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmvHwsV sVP3waWFDQ3kdaNRg3/3MB8GA1UdIwQYMBaAFLi1WvWrZqj/p2kcpD2iprSbokVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTc3OC8zRERDMUFDMDE0 RUMxMUVBQThCQUFFNUFDNEY5QUUwMi91TFZhOWF0bXFQLW5hUnlrUGFLbXRKdWlS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMVmE5YXRtcVAtbmFSeWtQYUttdEp1aVJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTc3OC8zRERDMUFDMDE0RUMxMUVBQThCQUFFNUFDNEY5QUUwMi91TFZhOWF0bXFQ LW5hUnlrUGFLbXRKdWlSVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7/KnpXv6N/yLZt6Hz7y82CmrrHUO/OSD0LUvyyKeFFQXtryZPBDnp 831SKAApu50S9wfwPRlvkSN4TQjLCHY1Qunwve869tCf4CgJftzcK+WIZdBtPNb5 y+3a8ULXnLM60gs0p6ybRsRAKeTRKo7yGdiSujWVfXsDVEx+ExvW5TDhVCekuv72 8KAz5NNbtRj/arDPFH3CW02biWYX1T5njRzIlpyzkjOd1auTVHQ6Ta724QgJMQ0l JtCsNx/kvjUvtGp92viiZ+ogzwbaMt0389/VpuwdayYwdGD6zQ0Rhoutgs34fWen oWk6mnhRdH7Jb3ABQZ4NFI0Fz4Wjp6VT -----END CERTIFICATE-----Generated at Sun Aug 24 04:59:41 2025 by rpki-client