$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft File: rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json) Hash identifier: tcgUEobFf37mCe1sJclg9JAq5iy+U6sIjb6exan3RZ8= Subject key identifier: 86:D7:7E:81:26:9A:AB:EE:45:6E:4B:3F:8D:6B:AD:FF:CB:34:E8:31 Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 Certificate issuer: /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft Manifest number: D2 Signing time: Sat 23 Aug 2025 05:50:01 +0000 Manifest this update: Sat 23 Aug 2025 05:50:01 +0000 Manifest next update: Sat 30 Aug 2025 05:50:01 +0000 Files and hashes: 1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: YskidEXqWhJX4yZ+GWHx0l3jjAVjG8YDIDoed1QXouA=) 2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: JKn9arrhKIKLCkrCm7PBh/6X6a8i3r2H/xvsTIl/UOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Validity Not Before: Aug 23 05:50:01 2025 GMT Not After : Aug 30 05:50:01 2025 GMT Subject: CN=68a95689-6d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:d8:d1:71:15:bb:d9:e0:4c:11:39:bb:6e: 42:7f:08:b6:e7:9e:2d:ce:fb:d8:fa:ec:de:98:32: d6:ad:a9:c8:02:2e:a0:d0:6d:a7:f9:43:c9:17:ac: c2:ae:f6:06:be:f7:d3:4e:2f:8a:5e:52:b6:fb:3f: 7f:ee:b9:63:79:2c:72:a7:d3:44:ee:ee:9f:2e:5b: f5:88:d9:82:f5:c3:f8:ee:44:ec:66:c0:58:03:e7: d7:b5:ac:23:e1:bf:13:fb:15:04:ac:05:d1:91:0e: b4:14:ef:ff:d0:4c:9c:e0:25:6f:7a:aa:5d:a4:5f: ed:59:ed:c4:d7:5f:21:ca:43:47:ad:db:9e:ea:ec: 9d:99:3f:6f:00:2d:16:a8:dc:ca:a6:ee:ba:90:0a: e4:36:99:75:3a:70:d4:1b:2a:96:2c:0f:1d:6c:57: e7:95:d3:c1:b2:25:28:62:0e:0f:86:af:9a:74:a7: 5b:6b:d1:0e:27:3e:4a:da:1a:11:af:1c:ff:cd:f9: 79:5b:3d:16:a9:72:a2:22:04:55:d4:7f:83:48:6e: 1c:e2:42:bf:f4:03:9e:90:60:9f:f9:63:1e:6c:d1: 11:57:be:4a:bb:32:52:a5:dc:e0:48:38:31:d1:fc: d5:fe:10:2d:f1:f4:39:dc:b7:10:36:d4:b0:0e:c0: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D7:7E:81:26:9A:AB:EE:45:6E:4B:3F:8D:6B:AD:FF:CB:34:E8:31 X509v3 Authority Key Identifier: keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:8f:77:bc:42:a3:c8:df:f8:4b:8c:d7:ea:6b:45:b9:3b:09: df:09:bc:f8:41:63:77:a9:49:5c:e0:00:61:5f:b6:b9:b9:c2: 7c:b8:d4:9a:63:1e:23:ba:1b:84:aa:19:5b:11:1c:6a:ce:c1: 5a:57:0f:02:c6:22:76:b0:2a:2b:dd:36:e0:a7:2e:36:e6:28: 59:5d:c2:39:d5:9e:6d:5d:93:6a:84:85:41:90:03:d4:b1:d9: 2d:d0:68:25:b2:f8:41:82:0b:64:24:e7:d8:09:e9:8c:c2:67: f2:09:7d:c1:3e:95:c5:cf:34:a9:47:10:5a:36:63:f8:fe:9d: a0:62:75:9b:d9:d7:16:94:5b:17:d8:88:7c:0e:e0:8e:0c:99: b9:87:95:82:6f:cf:52:b5:5a:c8:95:b8:55:45:50:71:eb:78: e6:f4:18:ad:62:32:fb:4d:2b:97:96:7c:54:d0:02:74:74:7c: 0e:81:24:ad:87:2f:dc:f0:33:74:c7:b0:9e:da:da:fe:51:fe: 84:e7:9f:06:13:a3:bc:b3:96:27:5c:0e:f8:d8:b7:52:9b:ce: d9:a0:bf:e5:61:e1:53:b2:73:40:3c:1c:4f:56:10:6c:4b:c4: b0:9f:64:55:31:d4:28:50:a9:a0:59:0b:8f:f2:f3:85:79:f0: eb:da:7d:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YwNjQxMTAvBgNVBAUTKEFENDMzMjAzODI3MkMyREIzMjE1RERBM0FERkIwMTUz NTQxNTY5MTMwHhcNMjUwODIzMDU1MDAxWhcNMjUwODMwMDU1MDAxWjAYMRYwFAYD VQQDEw02OGE5NTY4OS02ZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbDY0XEVu9ngTBE5u25Cfwi2554tzvvY+uzemDLWranIAi6g0G2n+UPJF6zC rvYGvvfTTi+KXlK2+z9/7rljeSxyp9NE7u6fLlv1iNmC9cP47kTsZsBYA+fXtawj 4b8T+xUErAXRkQ60FO//0Eyc4CVveqpdpF/tWe3E118hykNHrdue6uydmT9vAC0W qNzKpu66kArkNpl1OnDUGyqWLA8dbFfnldPBsiUoYg4Phq+adKdba9EOJz5K2hoR rxz/zfl5Wz0WqXKiIgRV1H+DSG4c4kK/9AOekGCf+WMebNERV75KuzJSpdzgSDgx 0fzV/hAt8fQ53LcQNtSwDsDKdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbXfoEm mqvuRW5LP41rrf/LNOgxMB8GA1UdIwQYMBaAFK1DMgOCcsLbMhXdo637AVNUFWkT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjA2NC9GM0NBNjE3MjQ0 RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi9yVU15QTRKeXd0c3lGZDJqcmZzQlUxUVZh Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JVTXlBNEp5d3RzeUZkMmpyZnNCVTFRVmFSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjA2NC9GM0NBNjE3MjQ0RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi9yVU15QTRKeXd0 c3lGZDJqcmZzQlUxUVZhUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPj3e8QqPI3/hLjNfqa0W5OwnfCbz4QWN3qUlc4ABhX7a5ucJ8uNSa Yx4juhuEqhlbERxqzsFaVw8CxiJ2sCor3Tbgpy425ihZXcI51Z5tXZNqhIVBkAPU sdkt0GglsvhBggtkJOfYCemMwmfyCX3BPpXFzzSpRxBaNmP4/p2gYnWb2dcWlFsX 2Ih8DuCODJm5h5WCb89StVrIlbhVRVBx63jm9BitYjL7TSuXlnxU0AJ0dHwOgSSt hy/c8DN0x7Ce2tr+Uf6E558GE6O8s5YnXA742LdSm87ZoL/lYeFTsnNAPBxPVhBs S8Swn2RVMdQoUKmgWQuP8vOFefDr2n2A -----END CERTIFICATE-----Generated at Sat Aug 23 12:50:24 2025 by rpki-client