$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json) Hash identifier: i/6ubcUDG9S6YdGQiM49e8cT8faqG/yI4GsrPWUSrHg= Subject key identifier: A4:7C:4D:95:71:EC:20:54:59:B3:A4:6B:C9:83:0D:F2:41:FB:A1:51 Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft Manifest number: 0108 Signing time: Sat 23 Aug 2025 05:11:46 +0000 Manifest this update: Sat 23 Aug 2025 05:11:45 +0000 Manifest next update: Sat 30 Aug 2025 05:11:45 +0000 Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: +s2K0tSg4Lqyl2dIs6RBUFUwzBdhMW2vG1skPylHwiQ=) 2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: ryfpBDCWcmiRZYqeao/rsVyXOOOGDWQajzrZGBcgq+0=) 3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: NecAjd+CZeOPqXXjjBIs9rEIjFJr1slo8jl+q1zHuq8=) 4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: x08O0LKYaX3hn9bkCscla0qFn3NKZcPh8LO75bK0AIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: Aug 23 05:11:45 2025 GMT Not After : Aug 30 05:11:45 2025 GMT Subject: CN=68a94d92-5117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5a:1c:94:be:de:a6:fb:f9:c5:d2:d4:ff:c8: 21:92:55:3c:f8:b5:6b:cf:db:5d:b3:ab:5f:f7:e6: 21:58:db:0a:a0:95:db:73:d1:4b:3a:56:f1:7c:6d: af:51:fa:8f:78:7f:89:a2:94:85:ae:83:d8:ef:08: 0f:81:e6:0d:62:09:91:93:be:91:a0:fa:77:43:ae: cc:c4:cf:60:29:83:88:e9:28:7e:89:62:f4:e3:bd: ea:86:db:a2:ac:a1:88:b5:e9:c4:85:3b:fc:79:26: d4:9a:42:41:67:74:99:32:0c:a6:6a:af:ee:22:8c: dc:47:9a:81:b7:e3:c8:4b:ec:7d:42:bf:ef:2a:96: 90:20:77:63:ab:0f:7a:92:c9:71:8e:53:25:7e:8a: 1b:27:67:8f:4d:59:d7:4c:fb:8d:d1:2e:cc:17:db: 2b:a9:da:f4:03:cd:07:75:83:06:d0:08:87:4d:b9: 16:86:44:3f:f6:1e:9e:35:97:55:26:98:22:bd:1d: 1f:08:5e:d8:40:6a:63:1c:09:0e:8e:c6:98:db:6d: 52:9d:09:03:ee:0a:98:50:f7:ed:de:54:50:c4:b2: 5e:45:8a:45:28:fd:89:12:3e:61:01:a2:91:78:56: 96:f5:f2:81:5a:c8:37:07:6b:84:67:9c:cc:fe:61: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7C:4D:95:71:EC:20:54:59:B3:A4:6B:C9:83:0D:F2:41:FB:A1:51 X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:9c:a3:0a:e6:56:e5:a5:e2:3c:f9:1d:df:02:d3:e2:c0:91: 13:07:2b:75:e7:2c:e9:80:d1:17:94:f1:8e:3f:28:9d:f0:3f: f0:0b:4c:9d:30:54:a9:91:fc:4b:47:d8:fe:69:a5:73:8e:9b: 2a:de:57:ff:db:fe:e1:e2:a1:86:ca:52:06:57:82:32:83:21: 71:7e:0f:53:00:93:4f:19:74:e4:30:f5:f7:97:87:c5:ec:dc: ee:e3:a1:06:80:b9:d4:67:62:a9:a7:d8:dd:90:e1:32:90:83: 04:b4:e9:0a:cf:2b:0f:8e:9b:5c:77:28:1c:1c:df:99:03:e7: 50:a4:bf:7f:9e:dd:c5:7f:2a:2f:bb:8f:64:91:5e:a9:9a:c2: 53:6e:f5:78:a6:da:bb:df:51:8b:1a:15:19:a2:12:fd:fb:65: c2:b5:c5:68:64:00:dd:b7:4a:f7:15:ad:63:c0:95:1e:29:ea: 93:10:93:11:07:68:9e:f8:db:86:95:28:66:86:1f:85:21:75: af:e0:e2:32:22:70:50:e7:6a:da:8f:1b:53:d9:c7:90:0e:9c: 08:a6:ea:f7:99:b4:2a:a6:d8:9b:54:ad:af:9e:67:bd:3a:ab: 77:af:1d:a5:70:52:bd:18:fe:ef:7f:fb:51:13:f9:ef:f3:f4: 11:f5:57:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy RDExMDg4RjIwHhcNMjUwODIzMDUxMTQ1WhcNMjUwODMwMDUxMTQ1WjAYMRYwFAYD VQQDEw02OGE5NGQ5Mi01MTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FoclL7epvv5xdLU/8ghklU8+LVrz9tds6tf9+YhWNsKoJXbc9FLOlbxfG2v UfqPeH+JopSFroPY7wgPgeYNYgmRk76RoPp3Q67MxM9gKYOI6Sh+iWL0473qhtui rKGItenEhTv8eSbUmkJBZ3SZMgymaq/uIozcR5qBt+PIS+x9Qr/vKpaQIHdjqw96 kslxjlMlfoobJ2ePTVnXTPuN0S7MF9srqdr0A80HdYMG0AiHTbkWhkQ/9h6eNZdV JpgivR0fCF7YQGpjHAkOjsaY221SnQkD7gqYUPft3lRQxLJeRYpFKP2JEj5hAaKR eFaW9fKBWsg3B2uEZ5zM/mErswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKR8TZVx 7CBUWbOka8mDDfJB+6FRMB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk1OS9BQTRDNzdFQ0VENzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBx cVZXWmRIQW5uR1l0RVFpUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqnKMK5lblpeI8+R3fAtPiwJETByt15yzpgNEXlPGOPyid8D/wC0yd MFSpkfxLR9j+aaVzjpsq3lf/2/7h4qGGylIGV4IygyFxfg9TAJNPGXTkMPX3l4fF 7Nzu46EGgLnUZ2Kpp9jdkOEykIMEtOkKzysPjptcdygcHN+ZA+dQpL9/nt3Ffyov u49kkV6pmsJTbvV4ptq731GLGhUZohL9+2XCtcVoZADdt0r3Fa1jwJUeKeqTEJMR B2ie+NuGlShmhh+FIXWv4OIyInBQ52rajxtT2ceQDpwIpur3mbQqptibVK2vnme9 Oqt3rx2lcFK9GP7vf/tRE/nv8/QR9VfU -----END CERTIFICATE-----Generated at Sun Aug 24 00:02:33 2025 by rpki-client