$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: MoYOVxFvD30HTNtQN4RKC8bofdA2yhDu465r0R4BHQQ= Subject key identifier: D1:55:2D:06:BD:D9:07:D1:7D:8D:44:96:2C:8C:44:56:1B:63:63:04 Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0CA0 Signing time: Fri 22 Aug 2025 18:20:10 +0000 Manifest this update: Fri 22 Aug 2025 18:20:10 +0000 Manifest next update: Fri 29 Aug 2025 18:20:10 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: y/CAZQmq383iIPIPCcVY8rRLbRDzJPVQVIs49Wm5TYQ=) 2: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: QC+kAoIXXpY6brDwehpJKK1cCBvEWnBsopkp3/fuZEY=) 3: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: w0i/ARt9lCVRkjFZbSD4igkj3UoeypjyUlDGFiTsJMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6, serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Validity Not Before: Aug 22 18:20:10 2025 GMT Not After : Aug 29 18:20:10 2025 GMT Subject: CN=68a8b4da-9b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:e9:0f:9d:7b:67:2b:91:c0:a7:20:d6:5b: e2:28:ed:54:e5:74:1c:95:fd:ae:d8:fe:a2:c4:03: 43:af:09:5e:28:7a:9e:1f:30:3d:f8:c5:1a:b2:3b: f6:58:99:2d:ea:36:bb:a3:08:c3:0f:00:ca:a2:63: d4:79:c3:ee:67:40:b7:d5:29:4d:3d:a7:06:70:30: 40:d8:81:f3:3c:7b:a4:34:76:99:f9:ca:70:ff:4f: a0:b0:59:45:81:3e:5f:8a:c6:31:7c:b3:74:89:75: e7:ba:cc:ce:84:15:d7:45:c1:05:8e:65:1d:ca:50: 1e:47:0b:ce:11:c7:08:16:2b:3d:7a:9a:a2:bd:dd: b0:5e:50:2e:8a:c4:6a:a7:36:ce:ae:5f:f4:42:56: 1c:6e:db:a3:cd:b7:6b:67:0f:d1:55:9f:dc:e3:12: 05:e6:2a:fc:8e:97:07:95:1a:4f:2b:be:d4:a5:31: c8:2e:bf:e5:af:18:98:bf:a5:42:2b:a2:da:2d:91: 35:8d:73:87:0a:1f:e2:68:2b:07:c5:d8:c8:07:63: 89:6f:e6:32:b3:74:5e:74:b5:08:29:1f:21:f2:cd: 19:25:8c:70:d4:31:0a:f0:6b:8f:2e:81:1b:a4:f2: 58:d3:b3:a2:24:18:74:48:70:1f:8d:cb:42:2d:df: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:55:2D:06:BD:D9:07:D1:7D:8D:44:96:2C:8C:44:56:1B:63:63:04 X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c2:34:34:41:e9:b5:c6:27:fa:99:11:c0:fd:7f:3d:a7:de: 4a:ab:96:b2:01:00:7f:b2:1b:80:25:8d:07:dd:a5:81:aa:88: 14:d9:ba:d8:f1:b0:69:d1:fc:64:a5:f1:cf:a0:ed:e2:c9:ce: 71:d8:02:6e:86:34:61:b0:9c:31:19:ac:32:0b:39:0f:c9:ce: 2e:e7:0b:2d:74:fd:7e:ea:59:7c:66:2e:b1:90:a5:17:8b:10: 65:de:a7:a1:f4:47:cc:9e:63:dc:08:c5:6f:c9:5c:e2:74:52: 5e:d0:57:3f:4c:68:bb:32:87:a4:a4:63:89:3a:da:8b:51:46: d8:cd:c2:85:7d:50:50:73:65:03:f4:71:49:a4:aa:b7:da:93: ee:19:68:c5:10:55:a2:a2:d9:62:3d:13:7c:cd:5e:da:a7:02: a1:dc:bd:ed:e1:c1:3c:84:cc:44:cb:85:a0:f1:be:6a:70:c7: c1:9e:b8:0d:55:06:a0:86:6d:73:e7:79:03:c0:56:66:17:14: e8:3a:72:74:7f:4c:1a:24:45:3f:27:9d:55:7e:24:d4:13:83: e8:77:da:bb:c1:65:46:86:f2:0d:13:1f:ec:2a:10:6d:5f:46: d0:f6:28:7b:5a:93:d1:66:b6:d5:c8:f4:3a:59:e6:5f:29:ce: c8:1c:83:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjUwODIyMTgyMDEwWhcNMjUwODI5MTgyMDEwWjAYMRYwFAYD VQQDEw02OGE4YjRkYS05YjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtfpD517ZyuRwKcg1lviKO1U5XQclf2u2P6ixANDrwleKHqeHzA9+MUasjv2 WJkt6ja7owjDDwDKomPUecPuZ0C31SlNPacGcDBA2IHzPHukNHaZ+cpw/0+gsFlF gT5fisYxfLN0iXXnuszOhBXXRcEFjmUdylAeRwvOEccIFis9epqivd2wXlAuisRq pzbOrl/0QlYcbtujzbdrZw/RVZ/c4xIF5ir8jpcHlRpPK77UpTHILr/lrxiYv6VC K6LaLZE1jXOHCh/iaCsHxdjIB2OJb+Yys3RedLUIKR8h8s0ZJYxw1DEK8GuPLoEb pPJY07OiJBh0SHAfjctCLd+QwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFVLQa9 2QfRfY1EliyMRFYbY2MEMB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARwjQ0Qem1xif6mRHA/X89p95Kq5ayAQB/shuAJY0H3aWBqogU2brY 8bBp0fxkpfHPoO3iyc5x2AJuhjRhsJwxGawyCzkPyc4u5wstdP1+6ll8Zi6xkKUX ixBl3qeh9EfMnmPcCMVvyVzidFJe0Fc/TGi7MoekpGOJOtqLUUbYzcKFfVBQc2UD 9HFJpKq32pPuGWjFEFWiotliPRN8zV7apwKh3L3t4cE8hMxEy4Wg8b5qcMfBnrgN VQaghm1z53kDwFZmFxToOnJ0f0waJEU/J51VfiTUE4Pod9q7wWVGhvINEx/sKhBt X0bQ9ih7WpPRZrbVyPQ6WeZfKc7IHIMm -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:39 2025 by rpki-client