$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft File: UyaKJzal_1VLlAcD83T8NXkijDA.mft (raw, json) Hash identifier: xU+F4+EChTVdVWcXAIIOV8LsAcO5/WmJ3qzmQ4bHBoc= Subject key identifier: EA:2A:4E:71:D1:87:B4:3E:E1:CE:DB:44:E3:E7:2A:D3:06:7D:A3:C1 Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 Certificate issuer: /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft Manifest number: 0A52 Signing time: Fri 22 Aug 2025 19:50:48 +0000 Manifest this update: Fri 22 Aug 2025 19:50:47 +0000 Manifest next update: Fri 29 Aug 2025 19:50:47 +0000 Files and hashes: 1: UyaKJzal_1VLlAcD83T8NXkijDA.crl (hash: gbi0ClSSCQaPxmwQhGLLzP8s+oabLc2hgP2JcSyC0ro=) 2: CF072592709211EAB1D2FA0FC4F9AE02.roa (hash: qgPwBHuJNODFhkIhrJVb9VAEuenY+/fH1u9JlBx0mT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Validity Not Before: Aug 22 19:50:47 2025 GMT Not After : Aug 29 19:50:47 2025 GMT Subject: CN=68a8ca17-7b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9d:1b:f1:14:5b:a9:61:12:44:64:7c:bd:0e: 80:90:3d:28:7f:a4:5d:b0:aa:ce:5e:8b:a9:2f:3e: 84:03:d2:9c:2d:ee:1f:72:7a:5a:5e:66:d0:ff:90: 3a:1a:0c:27:9c:0f:c1:78:7f:30:5c:3e:a0:68:e2: 49:17:80:b0:9d:c3:5f:5d:45:e6:02:56:4d:14:24: 5e:09:26:88:be:bc:5a:de:02:a2:af:c1:7b:14:3f: ec:bd:ab:86:6d:bc:16:83:5c:7e:ff:cd:64:d4:52: 89:fb:2f:1c:1b:f4:1a:27:59:38:1d:a6:08:bb:c3: d2:d4:23:d5:e9:05:39:dd:9b:55:70:59:b7:2e:98: eb:6a:be:bd:17:8a:58:c0:95:0a:c5:2d:30:af:03: eb:14:3e:38:19:24:aa:e7:f3:2c:eb:91:7f:1c:1e: 1e:5b:09:41:5d:4a:6a:d2:45:88:46:a2:5d:2c:50: 30:9a:d2:f5:c2:73:e8:ae:c7:19:74:12:1e:4c:b4: ec:dd:a3:c5:8f:e8:08:71:55:81:74:7d:70:1f:fd: 4c:77:79:88:c9:cb:20:a8:ac:f3:31:bc:ce:94:5d: fe:4b:b4:2b:31:12:2e:b2:55:d1:3f:a4:05:7f:e3: f8:fd:2d:b7:f0:58:ba:10:79:4a:a6:94:02:31:96: 83:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2A:4E:71:D1:87:B4:3E:E1:CE:DB:44:E3:E7:2A:D3:06:7D:A3:C1 X509v3 Authority Key Identifier: keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:66:78:a0:f8:ee:35:4d:5b:2f:ae:d6:6f:b3:2b:75:cb:28: 98:4d:54:ef:04:e4:4f:94:8d:fb:29:54:2b:b8:45:57:eb:74: 44:aa:f2:2e:13:ab:69:f4:76:fa:2f:cf:e4:3d:86:7e:10:d6: f3:51:35:ea:7a:5d:ec:e8:63:f6:df:d9:02:00:9d:24:5c:f3: de:6a:8b:51:46:f5:65:7b:c3:7a:af:6f:3e:bc:0f:74:49:84: 5f:3e:bf:c4:ac:10:6f:01:dd:8c:73:fe:c8:57:1a:82:42:29: ec:44:08:2e:fb:7d:95:47:07:36:0c:34:13:39:39:ea:90:e7: 8f:70:89:91:ed:ed:69:2f:31:6a:b9:97:c7:11:db:96:f4:4a: 5b:ca:ae:8f:ec:2c:81:9c:26:58:68:32:79:75:28:5d:42:02: db:23:51:ec:fa:36:7c:88:40:c1:50:22:a1:33:a3:80:ba:eb: df:d1:b4:74:07:9c:fe:59:df:71:e3:e6:12:05:7a:f2:ae:01: 04:34:e6:2f:0b:81:c5:b9:de:b0:b0:7d:58:d1:9b:2d:3a:25: 6e:61:ff:8d:bd:0f:81:64:03:23:4f:8f:32:3d:23:da:80:15: bf:75:27:b1:03:dd:50:8e:99:43:fe:c1:61:ba:5e:d1:e0:0d: 59:ec:7d:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCQUQxMTAvBgNVBAUTKDUzMjY4QTI3MzZBNUZGNTU0Qjk0MDcwM0YzNzRGQzM1 NzkyMjhDMzAwHhcNMjUwODIyMTk1MDQ3WhcNMjUwODI5MTk1MDQ3WjAYMRYwFAYD VQQDEw02OGE4Y2ExNy03YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3p0b8RRbqWESRGR8vQ6AkD0of6RdsKrOXoupLz6EA9KcLe4fcnpaXmbQ/5A6 GgwnnA/BeH8wXD6gaOJJF4CwncNfXUXmAlZNFCReCSaIvrxa3gKir8F7FD/svauG bbwWg1x+/81k1FKJ+y8cG/QaJ1k4HaYIu8PS1CPV6QU53ZtVcFm3Lpjrar69F4pY wJUKxS0wrwPrFD44GSSq5/Ms65F/HB4eWwlBXUpq0kWIRqJdLFAwmtL1wnPorscZ dBIeTLTs3aPFj+gIcVWBdH1wH/1Md3mIycsgqKzzMbzOlF3+S7QrMRIuslXRP6QF f+P4/S238Fi6EHlKppQCMZaD/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoqTnHR h7Q+4c7bROPnKtMGfaPBMB8GA1UdIwQYMBaAFFMmiic2pf9VS5QHA/N0/DV5Ioww MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0JBRC8zNjU5RTdBRTcw OTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8xVkxsQWNEODNUOE5Ya2lq REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5YUtKemFsXzFWTGxBY0Q4M1Q4TlhraWpEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0JBRC8zNjU5RTdBRTcwOTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8x VkxsQWNEODNUOE5Ya2lqREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcZnig+O41TVsvrtZvsyt1yyiYTVTvBORPlI37KVQruEVX63REqvIu E6tp9Hb6L8/kPYZ+ENbzUTXqel3s6GP239kCAJ0kXPPeaotRRvVle8N6r28+vA90 SYRfPr/ErBBvAd2Mc/7IVxqCQinsRAgu+32VRwc2DDQTOTnqkOePcImR7e1pLzFq uZfHEduW9Epbyq6P7CyBnCZYaDJ5dShdQgLbI1Hs+jZ8iEDBUCKhM6OAuuvf0bR0 B5z+Wd9x4+YSBXryrgEENOYvC4HFud6wsH1Y0ZstOiVuYf+NvQ+BZAMjT48yPSPa gBW/dSexA91QjplD/sFhul7R4A1Z7H13 -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:50 2025 by rpki-client