$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json) Hash identifier: SF4K3h262tCyGixUnh087ZlXlz28wd4QXtBuJ1d1C/o= Subject key identifier: 72:3C:FE:FC:10:6F:8E:68:79:58:48:67:8D:41:EF:CF:43:2D:A5:75 Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft Manifest number: 0C3D Signing time: Fri 22 Aug 2025 18:44:15 +0000 Manifest this update: Fri 22 Aug 2025 18:44:14 +0000 Manifest next update: Fri 29 Aug 2025 18:44:14 +0000 Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: BMED7XXUbgo0UO/eXRuaXOnd11maKT2ZJsEksLdH8mA=) 2: C4391160305611EABE7DF272C4F9AE02.roa (hash: ShWNoWlK1A1y7tJIOL2NddDhqDzgH2F/9l1o2jwcmL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Validity Not Before: Aug 22 18:44:14 2025 GMT Not After : Aug 29 18:44:14 2025 GMT Subject: CN=68a8ba7e-e2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:a7:4b:3c:a6:3c:73:c1:7a:1c:4e:ed:36: f9:02:ab:e4:ed:63:0a:2c:84:2b:45:90:16:f0:dc: 0b:71:d6:93:52:a8:d4:f9:76:67:66:33:16:8a:3a: 80:5c:1e:fd:43:05:cc:97:5a:f4:aa:66:b5:12:ad: 15:43:9c:29:62:f2:ce:13:fd:6a:cb:4d:43:4b:cf: d3:d3:a5:60:88:fe:d7:cd:29:ce:14:1e:82:b6:7c: a4:77:3f:de:c0:99:30:b3:e3:04:f1:bf:49:00:83: df:44:80:5c:8a:90:5b:8b:53:36:e1:36:be:01:36: 11:04:11:af:8c:6d:cc:9f:89:c7:cc:2a:9e:54:bf: b1:a8:33:3e:79:6b:16:a9:e3:83:70:d5:c1:d5:10: 99:f0:d0:95:86:8a:4c:08:0f:40:b3:e0:f1:5a:95: 0a:8e:ce:58:b2:80:1c:99:f5:6d:b6:95:a5:15:82: fb:f2:29:c6:21:8e:9d:95:a5:a1:4a:e5:45:fe:e2: 95:ee:03:14:72:eb:19:be:27:67:59:d2:97:c2:d1: 6b:04:5f:bb:80:53:b8:92:d8:12:2a:4b:a0:0b:72: 82:5a:12:c0:93:13:5e:7e:21:69:b9:73:bf:af:d7: 3e:55:64:0f:0b:31:33:0a:96:c3:8e:a2:9a:13:46: 4b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3C:FE:FC:10:6F:8E:68:79:58:48:67:8D:41:EF:CF:43:2D:A5:75 X509v3 Authority Key Identifier: keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:5b:6c:41:14:9f:d9:19:1d:b2:69:fa:60:2d:cf:cc:45:6e: 4a:68:ff:aa:f5:65:b4:a1:cd:50:3d:27:48:86:65:8e:b2:7a: ae:8a:e5:25:85:c8:df:64:3c:2a:53:b6:43:15:52:a2:39:73: 17:61:d7:19:b0:b4:21:17:b1:67:0f:ee:ae:6f:ae:8a:73:86: 6a:5e:e1:6b:9b:ed:d3:b9:46:d8:cb:dd:9d:79:51:98:11:f1: 71:96:f8:4a:61:c7:26:0a:88:3c:21:2d:c6:e7:da:b8:64:0d: 02:60:e8:cd:3e:4e:6a:b2:5e:8e:8e:94:3c:42:19:0e:bf:68: d8:3d:70:32:b2:c0:bb:9e:11:06:b2:4e:fd:e0:e8:8e:ed:03: de:69:43:14:85:a4:df:47:ef:df:7b:a4:71:a6:c7:2e:4f:29: 5e:b9:e2:42:7f:c9:58:25:7b:84:0d:b3:88:ff:3f:41:c5:b7: ea:40:3b:8e:86:f0:45:ca:9b:db:3f:8f:8d:93:6c:e5:fb:89: 5c:ef:64:78:df:4f:77:85:f3:15:21:b6:d9:62:8f:9d:b0:e3: 39:25:72:87:96:15:0e:2f:e3:c2:16:dc:a2:de:2f:ab:29:e5: 13:2b:5f:9f:18:94:18:a8:09:7e:5e:c9:f7:fe:96:cb:bb:58: 0f:b1:3e:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE2NDkxMTAvBgNVBAUTKEI5RUIxNTQ4NjY3NzczN0RCMjczOUZENjU0NjJBRUU3 OTA2MTY4QzIwHhcNMjUwODIyMTg0NDE0WhcNMjUwODI5MTg0NDE0WjAYMRYwFAYD VQQDEw02OGE4YmE3ZS1lMmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp36nSzymPHPBehxO7Tb5Aqvk7WMKLIQrRZAW8NwLcdaTUqjU+XZnZjMWijqA XB79QwXMl1r0qma1Eq0VQ5wpYvLOE/1qy01DS8/T06VgiP7XzSnOFB6Ctnykdz/e wJkws+ME8b9JAIPfRIBcipBbi1M24Ta+ATYRBBGvjG3Mn4nHzCqeVL+xqDM+eWsW qeODcNXB1RCZ8NCVhopMCA9As+DxWpUKjs5YsoAcmfVttpWlFYL78inGIY6dlaWh SuVF/uKV7gMUcusZvidnWdKXwtFrBF+7gFO4ktgSKkugC3KCWhLAkxNefiFpuXO/ r9c+VWQPCzEzCpbDjqKaE0ZL8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHI8/vwQ b45oeVhIZ41B789DLaV1MB8GA1UdIwQYMBaAFLnrFUhmd3N9snOf1lRirueQYWjC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTY0OS81RDk3Nzc0QzBG NTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2MzMnljNV9XVkdLdTU1Qmhh TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vlc1ZTR1ozYzMyeWM1X1dWR0t1NTVCaGFNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTY0OS81RDk3Nzc0QzBGNTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2Mz MnljNV9XVkdLdTU1QmhhTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1W2xBFJ/ZGR2yafpgLc/MRW5KaP+q9WW0oc1QPSdIhmWOsnquiuUl hcjfZDwqU7ZDFVKiOXMXYdcZsLQhF7FnD+6ub66Kc4ZqXuFrm+3TuUbYy92deVGY EfFxlvhKYccmCog8IS3G59q4ZA0CYOjNPk5qsl6OjpQ8QhkOv2jYPXAyssC7nhEG sk794OiO7QPeaUMUhaTfR+/fe6RxpscuTyleueJCf8lYJXuEDbOI/z9BxbfqQDuO hvBFypvbP4+Nk2zl+4lc72R43093hfMVIbbZYo+dsOM5JXKHlhUOL+PCFtyi3i+r KeUTK1+fGJQYqAl+Xsn3/pbLu1gPsT4y -----END CERTIFICATE-----Generated at Sun Aug 24 03:07:18 2025 by rpki-client