$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: mnZNis11vqVGhIWcgA5GLTIDIqYr7Bx1huYpFSDAuRQ= Subject key identifier: 20:71:4C:E7:06:09:4C:C3:91:B9:7C:75:49:A8:E6:E7:B6:25:33:7C Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 18BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 18B6 Signing time: Fri 22 Aug 2025 15:51:18 +0000 Manifest this update: Fri 22 Aug 2025 15:51:18 +0000 Manifest next update: Fri 29 Aug 2025 15:51:18 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: k2aO8t7Hy7ax32+uA/8zQ2W6rsU25cqrHyajIeqFyWM=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: 7SxWILLdTrzJpYEt8Y/6XTCMP3sdZqZUyA4GDfqu88g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6332 (0x18bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Aug 22 15:51:18 2025 GMT Not After : Aug 29 15:51:18 2025 GMT Subject: CN=68a891f6-b28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:e4:7a:47:a2:1f:81:25:76:90:5c:ef:8a: 9a:ce:e0:80:f4:fa:86:79:2d:cf:81:e5:57:31:51: 0e:8a:8f:5a:c6:10:43:49:a1:10:dd:3c:de:d5:d3: f6:06:3a:bb:7c:38:78:fe:2e:f4:6d:51:3d:0d:99: 80:34:11:10:00:f8:02:b9:da:e7:58:74:44:68:a4: 4d:b5:a6:ad:38:52:df:9a:00:6a:fc:85:a8:d4:97: 52:a4:4d:1b:71:ae:f8:f4:f2:0c:a5:45:2d:cc:84: 9b:f1:17:b1:0b:fc:02:36:98:6f:b4:2c:15:1e:4a: aa:16:0b:f7:0d:d1:40:02:23:98:74:c7:0c:c1:ad: 78:76:69:f9:e1:86:75:15:00:ac:a9:ad:6f:c7:3c: 3d:78:3c:fa:70:f5:85:82:3f:4b:e1:b3:aa:2f:24: 47:5e:ba:91:f0:fb:db:55:c6:d1:19:a9:a1:ac:ed: 59:c7:57:67:be:a6:fa:98:5a:31:44:da:6c:94:62: 50:a5:c6:5e:fc:bc:7d:6d:56:c2:2f:49:ed:1f:aa: 1c:70:ae:d6:42:3f:a6:a2:4b:be:57:ea:23:7c:e8: 3a:51:cc:bc:65:92:02:b3:64:40:d4:12:00:b1:5d: ea:64:8e:81:d7:7f:ca:57:64:8c:48:97:27:5f:8a: 54:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:71:4C:E7:06:09:4C:C3:91:B9:7C:75:49:A8:E6:E7:B6:25:33:7C X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:17:80:e1:71:fd:ff:ee:18:03:59:ed:99:81:71:4d:38:61: dc:cf:3a:3d:ca:58:5e:5c:12:8d:63:ea:a1:70:15:cd:b0:03: a3:21:f1:a6:d5:33:f8:bf:c4:7e:12:49:98:69:e6:66:58:f4: 9d:ae:c1:2a:de:78:4a:64:bf:a9:70:cc:f2:64:78:b6:48:48: c7:4b:f0:bd:47:f6:33:bd:b0:7c:6d:89:56:7c:4b:f0:6c:69: 73:95:3e:db:94:62:9d:7c:6a:b9:50:7a:d6:2a:96:a0:82:ad: c0:bd:9d:24:cd:be:80:80:84:68:68:b9:f7:13:a7:6b:62:8c: 50:b7:1e:d5:b2:b2:ec:a9:15:a9:7a:89:84:3c:58:9a:75:dd: dc:6e:b4:bb:69:30:33:57:fb:6a:b3:82:e0:a4:41:bd:a4:fe: c3:4e:dd:ad:34:f2:f9:b5:6e:38:e1:e1:57:7e:ef:c6:0b:62: 53:18:4b:80:a8:cd:08:50:43:de:50:1b:d0:61:6e:e6:f5:00: fa:3e:32:37:72:c5:ea:81:52:f9:fe:16:3c:f5:07:14:1b:a4: 9d:8d:bc:58:ef:d4:71:ad:51:d0:4c:38:11:21:c9:47:94:f5: 15:0b:8b:a4:1e:22:82:ec:a2:a4:3b:92:42:c9:77:08:2f:bc: d0:ad:32:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUwODIyMTU1MTE4WhcNMjUwODI5MTU1MTE4WjAYMRYwFAYD VQQDEw02OGE4OTFmNi1iMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaPkekeiH4EldpBc74qazuCA9PqGeS3PgeVXMVEOio9axhBDSaEQ3Tze1dP2 Bjq7fDh4/i70bVE9DZmANBEQAPgCudrnWHREaKRNtaatOFLfmgBq/IWo1JdSpE0b ca749PIMpUUtzISb8RexC/wCNphvtCwVHkqqFgv3DdFAAiOYdMcMwa14dmn54YZ1 FQCsqa1vxzw9eDz6cPWFgj9L4bOqLyRHXrqR8PvbVcbRGamhrO1Zx1dnvqb6mFox RNpslGJQpcZe/Lx9bVbCL0ntH6occK7WQj+moku+V+ojfOg6Ucy8ZZICs2RA1BIA sV3qZI6B13/KV2SMSJcnX4pUzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBxTOcG CUzDkbl8dUmo5ue2JTN8MB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdF4Dhcf3/7hgDWe2ZgXFNOGHczzo9ylheXBKNY+qhcBXNsAOjIfGm 1TP4v8R+EkmYaeZmWPSdrsEq3nhKZL+pcMzyZHi2SEjHS/C9R/YzvbB8bYlWfEvw bGlzlT7blGKdfGq5UHrWKpaggq3AvZ0kzb6AgIRoaLn3E6drYoxQtx7VsrLsqRWp eomEPFiadd3cbrS7aTAzV/tqs4LgpEG9pP7DTt2tNPL5tW444eFXfu/GC2JTGEuA qM0IUEPeUBvQYW7m9QD6PjI3csXqgVL5/hY89QcUG6SdjbxY79RxrVHQTDgRIclH lPUVC4ukHiKC7KKkO5JCyXcIL7zQrTK7 -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:13 2025 by rpki-client