$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft File: UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json) Hash identifier: P6+3sZFox6y1dubbRqbmDC2HFLSuppyPXW7KyEK89Wk= Subject key identifier: 48:3C:3D:AB:14:6E:ED:8A:C6:D2:45:C3:F5:DE:D3:8D:51:3D:83:54 Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 Certificate issuer: /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft Manifest number: 25 Signing time: Sat 23 Aug 2025 08:02:10 +0000 Manifest this update: Sat 23 Aug 2025 08:02:10 +0000 Manifest next update: Sat 30 Aug 2025 08:02:10 +0000 Files and hashes: 1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: xmcAQJM24dFAQQsQR2rVtoWTPXThqC8qDNEVN27dbr8=) 2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: aHkW6AI6M6GCpQTIMNKGhCjE+iAmC4ZK4etHz7DUzdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Validity Not Before: Aug 23 08:02:10 2025 GMT Not After : Aug 30 08:02:10 2025 GMT Subject: CN=68a97582-8635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:28:08:cb:ca:3d:28:87:00:92:0c:47:6d: f2:8a:37:eb:b1:87:f1:68:0b:dd:21:16:c1:a8:ae: 29:49:24:dd:52:f3:97:d8:ad:f8:f1:a6:15:e5:48: 6e:0b:05:49:e3:b4:5a:a3:c9:d5:d8:13:d3:80:fd: 9a:b0:a3:b4:e1:29:f4:91:d8:54:c8:a0:b5:a3:19: 69:69:33:09:5a:d5:58:1d:8a:24:c4:af:06:58:2a: 37:9e:2a:ff:2b:d0:68:18:e0:f4:7c:28:a0:d8:2a: b8:9a:39:57:13:0b:d9:e1:8b:0f:26:af:e7:d0:7f: ba:9d:7e:a3:d7:4a:a4:cb:65:73:09:55:6f:90:9f: 34:80:46:5f:8c:f5:ad:ee:de:76:a0:22:91:8e:3a: 05:16:b3:d4:1d:65:f1:b9:14:bc:7c:d6:a8:0c:64: cc:06:39:2d:98:e0:b8:e7:61:ea:e0:ba:f7:19:b4: 3f:42:41:75:af:c5:4e:af:3e:49:77:28:6f:bd:77: 4a:5f:d7:f0:15:02:43:27:40:0f:40:4a:5a:58:74: 8f:8c:2c:45:d1:5f:01:bc:05:c3:ab:e6:87:93:d0: 9c:bd:38:0f:4b:8b:0e:03:b7:1f:45:14:19:f7:f1: f8:a5:aa:c8:b6:4e:68:44:e1:e8:e7:85:6e:6f:8c: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3C:3D:AB:14:6E:ED:8A:C6:D2:45:C3:F5:DE:D3:8D:51:3D:83:54 X509v3 Authority Key Identifier: keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e2:f8:2a:33:3c:e4:14:00:57:8d:56:b2:98:4a:5e:41:4c: 81:c0:28:d7:5c:b7:70:ff:32:d2:24:65:aa:14:a2:75:7f:a4: d5:fd:d5:27:e7:bd:1d:40:ed:d4:42:66:3c:a1:fd:5f:fe:29: d2:41:31:ca:15:c1:72:d1:b7:ad:8c:56:e6:34:e9:ca:94:f4: 6c:68:1d:85:d7:5e:0b:af:1c:53:58:01:71:d6:1b:1c:e4:81: c3:26:82:98:bf:1c:de:66:d1:24:cb:0d:cb:7f:09:fa:88:15: 93:3c:24:9f:78:b9:6c:72:34:da:e3:94:ac:40:52:d4:2c:fc: 7b:92:e7:57:64:9e:fd:78:56:78:da:d1:33:0a:9e:3f:0f:04: a4:e0:79:72:08:c1:84:c1:f8:61:bf:9f:1a:7f:0d:4c:25:99: f3:9d:4c:61:77:65:61:34:72:75:5e:56:10:4e:6e:ff:e5:d0: d1:17:a7:c6:7e:eb:d2:a4:98:f1:99:b3:77:a6:21:2d:e7:48: 88:12:61:0d:27:30:fe:f1:7f:37:b9:4e:da:3e:34:6d:d5:3c: 38:c5:fc:a1:96:32:08:a6:5a:d9:9e:c7:2c:9e:44:17:75:e5: e0:90:67:8d:21:db:d2:89:ac:47:7d:6a:9f:bb:d0:60:16:08: 44:73:22:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDFDQzExMC8GA1UEBRMoNTIzMUM0NTc0MTNCOUM3OUNENUIzMDBEODRBNDNCMDAz OUJCNjgxMzAeFw0yNTA4MjMwODAyMTBaFw0yNTA4MzAwODAyMTBaMBgxFjAUBgNV BAMTDTY4YTk3NTgyLTg2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/EigIy8o9KIcAkgxHbfKKN+uxh/FoC90hFsGorilJJN1S85fYrfjxphXlSG4L BUnjtFqjydXYE9OA/Zqwo7ThKfSR2FTIoLWjGWlpMwla1VgdiiTErwZYKjeeKv8r 0GgY4PR8KKDYKriaOVcTC9nhiw8mr+fQf7qdfqPXSqTLZXMJVW+QnzSARl+M9a3u 3nagIpGOOgUWs9QdZfG5FLx81qgMZMwGOS2Y4LjnYerguvcZtD9CQXWvxU6vPkl3 KG+9d0pf1/AVAkMnQA9ASlpYdI+MLEXRXwG8BcOr5oeT0Jy9OA9Liw4Dtx9FFBn3 8filqsi2TmhE4ejnhW5vjKmlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSDw9qxRu 7YrG0kXD9d7TjVE9g1QwHwYDVR0jBBgwFoAUUjHEV0E7nHnNWzANhKQ7ADm7aBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMUNDLzczOTA2ODBFNEEz QTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhuTld6QU5oS1E3QURtN2FC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVWpIRVYwRTduSG5OV3pBTmhLUTdBRG03YUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MUNDLzczOTA2ODBFNEEzQTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhu Tld6QU5oS1E3QURtN2FCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABri+CozPOQUAFeNVrKYSl5BTIHAKNdct3D/MtIkZaoUonV/pNX91Sfn vR1A7dRCZjyh/V/+KdJBMcoVwXLRt62MVuY06cqU9GxoHYXXXguvHFNYAXHWGxzk gcMmgpi/HN5m0STLDct/CfqIFZM8JJ94uWxyNNrjlKxAUtQs/HuS51dknv14Vnja 0TMKnj8PBKTgeXIIwYTB+GG/nxp/DUwlmfOdTGF3ZWE0cnVeVhBObv/l0NEXp8Z+ 69KkmPGZs3emIS3nSIgSYQ0nMP7xfze5Tto+NG3VPDjF/KGWMgimWtmexyyeRBd1 5eCQZ40h29KJrEd9ap+70GAWCERzIvA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:29 2025 by rpki-client