$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json) Hash identifier: +5MfHOZslMfQ+8v2YDJDi00o2tzg7oOFCzP6wscQ7Uw= Subject key identifier: CE:26:06:E6:29:82:B6:53:B1:04:39:01:C7:21:5E:D0:9C:91:74:3F Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0E83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft Manifest number: 0E79 Signing time: Fri 22 Aug 2025 17:50:16 +0000 Manifest this update: Fri 22 Aug 2025 17:50:15 +0000 Manifest next update: Fri 29 Aug 2025 17:50:15 +0000 Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: kbClXdciRW2EMZs13R5s5PjnJqc54AhnVcHcLuU6YkI=) 2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: Gdmjy4eOm23bZo0u+QNI+KYIouesOlIiUyP5E+hvG08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3715 (0xe83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: Aug 22 17:50:15 2025 GMT Not After : Aug 29 17:50:15 2025 GMT Subject: CN=68a8add8-b031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5f:6b:17:40:b5:50:0d:cc:56:af:fc:54:2a: 98:2f:04:8c:5e:8c:1d:d5:6c:1e:67:f7:59:7b:dd: 42:ae:0a:f3:62:c6:b8:56:97:0a:d5:b6:3a:34:94: 13:5d:49:a6:13:a4:ac:e8:ec:c2:a3:73:47:75:dc: e0:7b:e5:23:ea:24:f1:be:9c:16:92:e9:3e:18:e7: c1:e9:0d:0d:9b:8c:6f:8a:b7:9c:b1:11:63:97:d2: 6d:8c:cf:eb:34:e1:b8:d4:ef:b9:19:0b:50:b7:b1: b3:90:1f:77:e5:bf:3b:84:e4:1c:0d:56:db:c4:fe: d0:a4:7e:98:50:82:c9:e5:19:af:e0:5c:49:da:1e: 96:ac:ea:16:7e:c4:1e:a7:64:7f:22:36:c4:55:19: df:8d:30:c9:80:fc:dd:67:d4:a2:01:66:21:4d:ed: bd:d7:43:ae:4b:5e:c5:56:0d:9e:64:87:e0:f0:89: 32:4f:96:f0:7a:fd:b9:82:0a:5a:4a:8f:4d:79:71: 01:26:7f:a0:31:62:da:c2:7d:5c:e0:fb:64:4b:58: 49:1d:89:c7:6e:c7:4d:2c:9d:52:89:d1:0e:66:d7: d9:bc:63:04:43:be:3b:d1:ac:9a:17:e4:8d:c4:0c: 86:66:84:03:c5:10:51:85:72:02:17:3f:c5:8c:a3: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:26:06:E6:29:82:B6:53:B1:04:39:01:C7:21:5E:D0:9C:91:74:3F X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:11:99:10:4f:ca:46:b7:79:22:cc:ac:73:d1:69:ab:16:f5: 08:46:40:a4:8f:2d:47:d4:24:3b:58:a4:71:18:3f:fc:ee:4a: d1:7a:f5:87:e3:c2:10:f3:68:73:c4:fa:85:51:42:c6:5c:0e: 64:28:c5:53:45:32:25:13:73:36:8f:ba:63:cd:b1:8a:1c:c7: c3:b5:2f:83:5a:ef:be:09:c4:8a:db:7c:74:b4:b1:0e:97:5a: df:85:7d:40:06:64:f3:cf:88:32:7a:fc:65:27:ba:86:32:01: 65:95:f6:d3:cb:d9:5d:72:fe:f4:9e:7a:67:dc:e7:f4:ac:d5: 83:5c:25:bf:b2:b8:2a:0e:02:b7:61:d2:62:47:49:ed:c1:ef: 38:70:bd:e8:cb:f2:05:1a:4b:7c:31:3b:a7:2b:a6:e4:45:ff: 48:3d:c0:7f:31:fc:82:d1:1d:2c:0e:43:f6:e5:ee:2e:56:ae: f4:a6:f7:cc:7a:20:f8:16:88:81:1f:c9:8e:47:86:38:45:09: 68:1a:08:bf:e1:fb:ff:4b:98:0c:82:96:6d:a0:f4:f0:f6:87: 56:c6:2e:d9:2a:4b:d7:89:b4:4c:b3:c1:9e:1c:5b:10:b5:c9: e7:0b:d8:59:78:45:64:39:c9:0c:ca:33:66:3b:f5:f9:91:b1: e0:de:95:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjUwODIyMTc1MDE1WhcNMjUwODI5MTc1MDE1WjAYMRYwFAYD VQQDEw02OGE4YWRkOC1iMDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3l9rF0C1UA3MVq/8VCqYLwSMXowd1WweZ/dZe91CrgrzYsa4VpcK1bY6NJQT XUmmE6Ss6OzCo3NHddzge+Uj6iTxvpwWkuk+GOfB6Q0Nm4xvirecsRFjl9JtjM/r NOG41O+5GQtQt7GzkB935b87hOQcDVbbxP7QpH6YUILJ5Rmv4FxJ2h6WrOoWfsQe p2R/IjbEVRnfjTDJgPzdZ9SiAWYhTe2910OuS17FVg2eZIfg8IkyT5bwev25ggpa So9NeXEBJn+gMWLawn1c4PtkS1hJHYnHbsdNLJ1SidEOZtfZvGMEQ7470ayaF+SN xAyGZoQDxRBRhXICFz/FjKN8PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4mBuYp grZTsQQ5AcchXtCckXQ/MB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTE0OS8yNEJCMjRDRTlFNDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQ dFNfYUQtdlVvQ3Q3SE9KMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTEZkQT8pGt3kizKxz0WmrFvUIRkCkjy1H1CQ7WKRxGD/87krRevWH 48IQ82hzxPqFUULGXA5kKMVTRTIlE3M2j7pjzbGKHMfDtS+DWu++CcSK23x0tLEO l1rfhX1ABmTzz4gyevxlJ7qGMgFllfbTy9ldcv70nnpn3Of0rNWDXCW/srgqDgK3 YdJiR0ntwe84cL3oy/IFGkt8MTunK6bkRf9IPcB/MfyC0R0sDkP25e4uVq70pvfM eiD4FoiBH8mOR4Y4RQloGgi/4fv/S5gMgpZtoPTw9odWxi7ZKkvXibRMs8GeHFsQ tcnnC9hZeEVkOckMyjNmO/X5kbHg3pVe -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:11 2025 by rpki-client