$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft File: c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json) Hash identifier: vEk1oc9vVAwCtBEKLqiVAI9o96laN+YpHsprNunYVV0= Subject key identifier: A2:C1:61:C4:BF:61:A8:94:F7:71:C5:6B:1E:77:7F:76:A3:A6:EB:15 Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 Certificate issuer: /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft Manifest number: B3 Signing time: Sat 23 Aug 2025 06:16:12 +0000 Manifest this update: Sat 23 Aug 2025 06:16:12 +0000 Manifest next update: Sat 30 Aug 2025 06:16:12 +0000 Files and hashes: 1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: TOxFGR6QIk/Wh7WY+ifa0AZ1lw3eiYtuxGuelF6zq94=) 2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: tWu30mK1rtW914jLoVkC7fN3rjLvGIdCamq6YbBhF8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Validity Not Before: Aug 23 06:16:12 2025 GMT Not After : Aug 30 06:16:12 2025 GMT Subject: CN=68a95cac-6b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:58:8f:1a:c7:ff:1a:e0:65:57:27:ed:87: 63:f1:66:d7:bb:a0:6a:46:e8:83:f7:8d:5c:e1:1d: dc:61:69:ea:98:ed:77:8e:99:57:3a:84:47:d0:c1: 91:ac:7f:fc:33:4d:40:0b:14:ef:ac:da:d3:8f:64: e4:1e:c8:98:92:9b:92:61:aa:59:0a:39:5d:01:f5: 4b:41:dc:59:e0:97:80:6b:e4:29:a3:54:f7:c7:f1: 7f:de:23:f4:83:82:d4:8b:96:5c:29:9a:33:da:b7: a7:d2:1a:40:ed:72:f4:88:65:45:a0:ba:bd:e3:38: 3e:00:45:46:3f:b8:f3:8e:10:8b:95:1e:93:eb:0c: 73:1b:b4:63:c4:19:bc:5d:07:21:82:c3:dd:25:6a: d5:77:18:1c:68:a7:ed:29:e9:38:a8:8a:b6:90:27: 9f:e6:9b:59:04:99:dd:c4:4e:c7:d2:06:f2:f2:6a: 16:70:6c:de:7f:9a:87:5e:f8:f3:47:91:35:82:02: f1:5f:5e:da:04:e8:24:6f:9f:6b:fa:a9:f6:b3:17: 89:da:98:f6:29:1d:14:e6:eb:c4:07:79:7b:33:7b: 28:47:ba:40:cb:e1:72:17:15:1f:1c:ce:75:bb:7e: a3:a7:7c:f5:e2:b9:aa:a0:8e:94:74:f0:f7:16:e9: de:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C1:61:C4:BF:61:A8:94:F7:71:C5:6B:1E:77:7F:76:A3:A6:EB:15 X509v3 Authority Key Identifier: keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:48:ba:b6:d0:40:b8:c8:b6:2c:0c:c4:5a:56:d3:c3:82:c5: a9:9b:cc:c4:e9:41:df:81:d4:b7:96:3e:6e:19:a0:c6:87:de: cd:17:bd:f7:1f:5f:14:12:00:64:6f:78:50:52:df:f4:c6:b2: 9f:b5:0a:7e:e1:96:6c:d6:07:68:72:ef:e6:3d:b1:17:c4:0b: ee:92:44:bf:6e:f1:b2:78:53:f8:87:1d:05:01:18:14:7a:0f: 85:64:84:1c:e0:dc:a4:9e:8e:44:92:40:27:cf:00:5e:2e:db: 48:e7:62:78:a0:48:c3:3f:58:e0:a2:ae:91:f6:50:18:e2:98: f2:65:1e:16:49:a6:6d:b7:37:6e:6e:0a:d5:3d:b7:f1:c2:ab: 21:6f:48:ab:a8:58:f2:97:20:64:b3:86:44:8a:58:9b:4b:14: 1b:f0:1b:3a:d7:d4:d0:15:bd:65:77:c4:49:7c:ab:b0:a6:ba: 22:9c:eb:18:91:69:bb:17:88:67:d8:87:67:a4:fa:7d:1b:00: fa:12:2d:57:7c:fe:a8:e9:f4:c7:5d:63:1a:00:38:be:88:69: 1b:29:4a:b3:79:ad:58:39:b7:64:ec:a0:ed:83:bc:bb:cd:d0: 3d:42:bf:16:95:a1:2a:d9:c9:02:a5:ff:46:07:19:f0:d8:aa: dd:41:6f:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQyQUExMTAvBgNVBAUTKDczRUI4QUQyQTNBNUYzOEFCRkUxQUUyODA3NEYyODMx QzI3MzFCQTkwHhcNMjUwODIzMDYxNjEyWhcNMjUwODMwMDYxNjEyWjAYMRYwFAYD VQQDEw02OGE5NWNhYy02YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNBYjxrH/xrgZVcn7Ydj8WbXu6BqRuiD941c4R3cYWnqmO13jplXOoRH0MGR rH/8M01ACxTvrNrTj2TkHsiYkpuSYapZCjldAfVLQdxZ4JeAa+Qpo1T3x/F/3iP0 g4LUi5ZcKZoz2ren0hpA7XL0iGVFoLq94zg+AEVGP7jzjhCLlR6T6wxzG7RjxBm8 XQchgsPdJWrVdxgcaKftKek4qIq2kCef5ptZBJndxE7H0gby8moWcGzef5qHXvjz R5E1ggLxX17aBOgkb59r+qn2sxeJ2pj2KR0U5uvEB3l7M3soR7pAy+FyFxUfHM51 u36jp3z14rmqoI6UdPD3FunenQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLBYcS/ YaiU93HFax53f3ajpusVMB8GA1UdIwQYMBaAFHPritKjpfOKv+GuKAdPKDHCcxup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDJBQS9FNDA3QjMzMDcw MDExMUVGQkJFOEExNThDNEY5QUUwMi9jLXVLMHFPbDg0cV80YTRvQjA4b01jSnpH NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MtdUswcU9sODRxXzRhNG9CMDhvTWNKekc2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDJBQS9FNDA3QjMzMDcwMDExMUVGQkJFOEExNThDNEY5QUUwMi9jLXVLMHFPbDg0 cV80YTRvQjA4b01jSnpHNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiSLq20EC4yLYsDMRaVtPDgsWpm8zE6UHfgdS3lj5uGaDGh97NF733 H18UEgBkb3hQUt/0xrKftQp+4ZZs1gdocu/mPbEXxAvukkS/bvGyeFP4hx0FARgU eg+FZIQc4Nykno5EkkAnzwBeLttI52J4oEjDP1jgoq6R9lAY4pjyZR4WSaZttzdu bgrVPbfxwqshb0irqFjylyBks4ZEilibSxQb8Bs619TQFb1ld8RJfKuwproinOsY kWm7F4hn2IdnpPp9GwD6Ei1XfP6o6fTHXWMaADi+iGkbKUqzea1YObdk7KDtg7y7 zdA9Qr8WlaEq2ckCpf9GBxnw2KrdQW+a -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:29 2025 by rpki-client