$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json) Hash identifier: FaMqPNpywixOueYDtwdlWrNN4y8wWjTJefHzhn4Cj/s= Subject key identifier: 9E:BD:74:9B:73:B2:4A:6D:C7:46:14:5F:45:8B:35:7E:6A:E8:35:A4 Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0AF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft Manifest number: 0AF1 Signing time: Fri 22 Aug 2025 19:30:37 +0000 Manifest this update: Fri 22 Aug 2025 19:30:37 +0000 Manifest next update: Fri 29 Aug 2025 19:30:37 +0000 Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: i6YHWHYEPe104pQzxgpP2hGix1neH8VTTHZQAZJIU+4=) 2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QAE/MC+xtHDwjDC4We28f6uqNECigc7G6Vc7+DGOZ34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2809 (0xaf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: Aug 22 19:30:37 2025 GMT Not After : Aug 29 19:30:37 2025 GMT Subject: CN=68a8c55d-2ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:aa:61:3a:73:7c:ab:16:10:09:8d:88:63:8c: 9c:7f:41:78:dd:4a:88:32:61:4b:fd:f6:10:e9:23: 43:98:22:80:4b:d1:2a:02:87:66:e9:bb:3a:5e:98: d3:90:cc:ad:09:20:87:17:d7:28:47:a7:d3:c7:3b: f1:f4:e4:73:17:c8:84:01:7e:42:f4:5b:d0:26:ce: 16:a3:4f:fd:41:f2:13:0b:f1:ae:a2:fc:b1:76:4c: 80:80:eb:ec:f6:81:3f:53:e4:21:8a:28:4e:d5:4d: 4c:89:80:cd:85:f9:a0:0f:3b:4e:84:00:43:d4:cc: 01:98:21:d7:65:5d:28:49:07:10:44:29:af:05:5c: 63:76:50:24:6a:62:d6:cd:9e:2e:56:9f:5f:d1:16: 2a:86:e5:4b:20:63:28:96:c7:46:4e:93:cf:34:63: 31:a9:b5:81:b8:06:f6:52:68:92:a3:ae:b5:4d:19: 26:10:7f:6d:1d:46:87:c1:b9:5f:75:74:be:6d:e5: 4d:d1:4d:43:a5:09:4d:9f:b6:83:9b:8d:d5:e9:f4: 45:5c:3d:cd:12:df:13:f4:dc:83:a5:35:b7:0c:ac: 95:87:00:4d:e5:f1:3c:13:48:c4:cb:84:93:c8:ae: a8:aa:af:64:39:86:28:83:b6:44:55:da:13:5c:9b: 73:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BD:74:9B:73:B2:4A:6D:C7:46:14:5F:45:8B:35:7E:6A:E8:35:A4 X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:7f:ef:e7:4d:db:4e:89:39:c2:40:0e:1b:38:38:95:d2:46: 13:f1:c6:c4:be:b7:86:1e:ee:8a:b9:77:a2:6a:5c:dc:b0:77: c4:0f:d0:bc:52:d5:c3:d8:2d:b0:80:4e:f6:c1:19:69:a6:94: 4b:75:73:e9:1e:3a:ad:e9:b4:43:1f:d8:1a:90:c1:9d:bc:33: f3:58:b7:5a:40:ea:bc:3f:9f:a7:06:09:b9:50:da:eb:3c:d8: 26:79:e2:4a:f9:40:a2:df:8e:74:34:ff:e4:e8:2f:8c:1d:80: 56:94:bd:e9:80:d3:8d:a7:ab:7c:bc:c5:5b:60:71:3e:fc:19: eb:52:ff:51:dd:88:71:ab:55:bc:19:d1:ad:b5:11:78:48:aa: 80:d0:a5:37:f3:93:90:dc:27:6b:3c:17:56:79:e3:82:0d:0e: b2:4c:e8:e5:84:dd:9e:88:5f:a8:82:20:ea:b8:29:0e:ff:84: c3:04:b4:a3:5b:85:9c:40:cc:a7:2f:57:15:d4:23:fb:eb:71: d5:61:3f:c7:b8:02:35:d0:2b:a2:27:bc:57:7d:fe:2b:d4:01: 6d:49:2b:7d:37:8b:b5:58:f4:68:7f:21:c0:2f:68:c5:56:96: 2f:8a:65:74:25:68:af:e6:fb:0e:f6:a3:6f:6f:73:7b:43:09: 02:5b:b4:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjUwODIyMTkzMDM3WhcNMjUwODI5MTkzMDM3WjAYMRYwFAYD VQQDEw02OGE4YzU1ZC0yZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KphOnN8qxYQCY2IY4ycf0F43UqIMmFL/fYQ6SNDmCKAS9EqAodm6bs6XpjT kMytCSCHF9coR6fTxzvx9ORzF8iEAX5C9FvQJs4Wo0/9QfITC/GuovyxdkyAgOvs 9oE/U+QhiihO1U1MiYDNhfmgDztOhABD1MwBmCHXZV0oSQcQRCmvBVxjdlAkamLW zZ4uVp9f0RYqhuVLIGMolsdGTpPPNGMxqbWBuAb2UmiSo661TRkmEH9tHUaHwblf dXS+beVN0U1DpQlNn7aDm43V6fRFXD3NEt8T9NyDpTW3DKyVhwBN5fE8E0jEy4ST yK6oqq9kOYYog7ZEVdoTXJtzNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ69dJtz skptx0YUX0WLNX5q6DWkMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU UUh5VkIwNXJWclFBQTRFdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZf+/nTdtOiTnCQA4bODiV0kYT8cbEvreGHu6KuXeialzcsHfED9C8 UtXD2C2wgE72wRlpppRLdXPpHjqt6bRDH9gakMGdvDPzWLdaQOq8P5+nBgm5UNrr PNgmeeJK+UCi3450NP/k6C+MHYBWlL3pgNONp6t8vMVbYHE+/BnrUv9R3Yhxq1W8 GdGttRF4SKqA0KU385OQ3CdrPBdWeeOCDQ6yTOjlhN2eiF+ogiDquCkO/4TDBLSj W4WcQMynL1cV1CP763HVYT/HuAI10CuiJ7xXff4r1AFtSSt9N4u1WPRofyHAL2jF VpYvimV0JWiv5vsO9qNvb3N7QwkCW7Se -----END CERTIFICATE-----Generated at Sat Aug 23 22:20:11 2025 by rpki-client