$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json) Hash identifier: V1CMAm7hAWZgT8smcpZlzZHub9ytZMspNBQFaLUtigo= Subject key identifier: 8A:53:C3:FC:FE:56:6A:57:85:0D:87:61:5E:96:9D:A5:F8:81:12:C6 Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Certificate serial: 0936 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft Manifest number: 0936 Signing time: Fri 22 Aug 2025 20:20:47 +0000 Manifest this update: Fri 22 Aug 2025 20:20:47 +0000 Manifest next update: Fri 29 Aug 2025 20:20:47 +0000 Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: 33vFqyGKSIFVIqN+6W2w82piQfUg/p7W/o6ndLXaSp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2358 (0x936) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Validity Not Before: Aug 22 20:20:47 2025 GMT Not After : Aug 29 20:20:47 2025 GMT Subject: CN=68a8d11f-5384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:5c:9f:dd:36:28:c0:77:43:8c:37:3d:b2: 07:83:2b:b2:6e:81:ad:a6:ee:16:8c:8b:f0:99:21: 7a:54:cc:ce:7a:fa:30:1d:9f:d2:57:0b:56:95:8b: 68:3f:99:d3:28:e6:22:f2:8a:f0:16:73:66:70:99: 87:ae:8f:d3:13:2b:33:f2:fc:71:d2:94:f7:7b:b9: be:ce:c7:23:b2:5e:ad:c4:78:c1:bd:fa:39:f1:c4: 3d:eb:5f:a2:30:0c:33:04:5a:cc:aa:05:9e:bb:54: 1b:4b:4a:6a:69:33:76:a4:c8:7a:a0:f2:4d:50:4a: 7d:f3:e5:1c:6d:56:4d:71:e8:fe:04:9d:eb:89:98: 90:8a:81:7b:63:99:e9:8a:d9:d2:59:5f:33:93:5a: df:6e:2b:9a:99:bb:53:9f:cd:b2:6c:89:07:f7:38: 8e:7a:6d:5a:17:82:d4:86:97:65:67:58:d4:68:a1: 46:51:c6:c5:ba:10:de:12:63:a1:2f:dc:55:07:cd: 99:b5:e2:fa:dc:af:6d:4b:2d:f8:fa:56:22:5a:18: 93:c4:ea:4b:59:0c:82:de:a7:ef:0c:1a:19:54:4b: b8:df:96:89:d1:33:5a:de:2f:e4:d9:d4:4b:4e:0d: cf:4b:2a:1f:5a:74:d9:8b:dd:5d:63:22:26:2b:da: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:53:C3:FC:FE:56:6A:57:85:0D:87:61:5E:96:9D:A5:F8:81:12:C6 X509v3 Authority Key Identifier: keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b6:52:ce:06:ff:1e:39:f1:8b:9f:9e:4c:31:0b:c2:77:9c: dc:58:2b:fb:7f:40:11:6b:94:ed:f0:ac:e8:33:20:fe:1c:18: a9:58:84:ea:b0:cb:05:bc:bb:dc:e5:8b:08:1a:e8:79:99:e4: 6c:a4:52:56:65:72:02:47:96:6e:db:13:8d:8a:1d:be:e9:fb: e8:19:4e:35:ce:87:66:69:8a:4c:48:40:c3:65:c6:a3:f8:94: 12:69:39:a0:10:d5:46:69:0a:84:e9:b5:f8:42:8f:23:1b:77: 0d:d7:1f:9e:83:79:ec:10:7c:50:db:77:86:d8:0e:6d:0f:4e: e3:28:a3:e8:43:a4:27:78:90:ff:26:7c:7b:5d:92:c3:53:67: 29:37:5d:62:b2:dc:36:e7:00:8d:3e:c9:27:76:2f:20:39:14: 66:86:58:76:ba:bd:60:4e:96:6d:71:e4:3a:b9:8b:ab:dc:8e: e1:54:16:24:5d:cf:5b:b1:dd:58:2e:6c:72:06:fe:db:0d:f3: a0:f0:2f:95:f4:aa:d9:65:50:7c:c6:ac:e9:5b:df:8d:b3:30: be:9d:32:86:09:c4:9c:72:1d:7e:0b:b6:37:f4:20:98:eb:0d: 87:8c:74:61:0a:d3:5a:ad:33:52:30:7f:6a:ab:43:15:29:44: 49:da:78:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE QTUyOUU3QzcwHhcNMjUwODIyMjAyMDQ3WhcNMjUwODI5MjAyMDQ3WjAYMRYwFAYD VQQDEw02OGE4ZDExZi01Mzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssFcn902KMB3Q4w3PbIHgyuyboGtpu4WjIvwmSF6VMzOevowHZ/SVwtWlYto P5nTKOYi8orwFnNmcJmHro/TEysz8vxx0pT3e7m+zscjsl6txHjBvfo58cQ961+i MAwzBFrMqgWeu1QbS0pqaTN2pMh6oPJNUEp98+UcbVZNcej+BJ3riZiQioF7Y5np itnSWV8zk1rfbiuambtTn82ybIkH9ziOem1aF4LUhpdlZ1jUaKFGUcbFuhDeEmOh L9xVB82ZteL63K9tSy34+lYiWhiTxOpLWQyC3qfvDBoZVEu435aJ0TNa3i/k2dRL Tg3PSyofWnTZi91dYyImK9rzAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpTw/z+ VmpXhQ2HYV6WnaX4gRLGMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1 MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1 OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO cmVXczNJTDAxWkxhVXA1OGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAstlLOBv8eOfGLn55MMQvCd5zcWCv7f0ARa5Tt8KzoMyD+HBipWITq sMsFvLvc5YsIGuh5meRspFJWZXICR5Zu2xONih2+6fvoGU41zodmaYpMSEDDZcaj +JQSaTmgENVGaQqE6bX4Qo8jG3cN1x+eg3nsEHxQ23eG2A5tD07jKKPoQ6QneJD/ Jnx7XZLDU2cpN11istw25wCNPskndi8gORRmhlh2ur1gTpZtceQ6uYur3I7hVBYk Xc9bsd1YLmxyBv7bDfOg8C+V9KrZZVB8xqzpW9+NszC+nTKGCcScch1+C7Y39CCY 6w2HjHRhCtNarTNSMH9qq0MVKURJ2nhT -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:36 2025 by rpki-client